Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

v1.15.0+

Date



Problem

During a CSAT Pro installation on a Windows host, the following error may be displayed during the Neo4j database setup part of the deployment:

csat_import_fail.png

Following this error, the neo4j database service is not present as expected in services.msc.

Solution

This issue can occur if an incorrect Java path environmental variable is set, such as from a partial uninstallation of a standalone JDK/JRE or another application’s Java instance that has since been removed. Neo4j will attempt to use this system path over the JRE included with CSAT Pro, and consequently fail to start.

To verify that this is the case:

1

In an administrative cmd.exe or PowerShell prompt, navigate to the current CSAT Pro installation directory’s neo4j\bin folder. This directory will exist even if the above error is encountered.

Using the default installation path:

Code Block
cd "C:\Program Files\CSAT_Pro\neo4j\bin"
2

Run the following command:
neo4j install-service
The example output below indicates that the default system path points to a nonexistent Java binary:

Code Block
C:\Program Files\CSAT_Pro\neo4j\bin>neo4j install-service
Invoke-Neo4j : Could not find java at "c:\Program Files\Java\jre1.8.0_202\bin\java.exe"

A reliable resolution method is installing a system-wide Java 11 Runtime Environment ( JRE), which will update the path to a new valid & CSAT Pro-compatible Java instance.

1

Uninstall any existing JRE/JDK on the system.

Note

Before carrying out this step, please verify that no other applications or services on this system are dependent on the presence of a specific Java version.

2

Download and deploy the free Eclipse Temurin Java 11 JRE using the .msi Installer:
https://adoptium.net/temurin/releases/?os=windows&arch=x64&package=jre&version=11=

temurin_jre.png

During the installation, enable the "Add to PATH" and "Set JAVA_HOME variable" options:

temurin.png
3

Uninstall the first failed CSAT Pro deployment using the following steps:
https://csat-pro.docs.cisecurity.org/en/stable/source/CSAT%20Pro%20Deployment/#uninstalling-cis-csat-pro

Skip the removal of the neo4j service (as it will not be present), and do not delete the newly set JAVA_HOME environment variable applied by the Eclipse Temurin setup.

4

Re-run the CSAT Pro installer to begin a new deployment. The previously encountered error should now no longer occur, and the Neo4j database setup & user creation will then complete successfully.

If you continue experiencing issues installing CSAT Pro, create a ticket with our CIS Product Support team at:
https://cisecurity.atlassian.net/servicedesk/customer/portal/15/group/35/create/144

Please include the following log files:

  • From your CSAT Pro installation directory (C:\Program Files\CSAT_Pro\ by default):

    • The \logs\csatlogs\csat.log file

    • The \conf\csat-config.yml file

Keywords; csat pro admin user java path neo4j

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2024

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Jira Legacy
serverSystem Jira
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-33719

Created by

Allan Cornwell

Reviewed by

Approved by

Remove by