Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

v1.15.0+

Date



Problem

During a CSAT Pro installation on a Windows host, the following error may be displayed during the Neo4j database setup part of the deployment:

csat_import_fail.png

Following this error, the neo4j database service is not present as expected in services.msc.

Solution

This issue can occur if an due to two common factors.

Missing PowerShell Path

Type the following command in to a cmd.exe prompt:
powershell

If you receive the following error:

Code Block
'powershell' is not recognized as an internal or external command, operable program or batch file.

This may indicate that the PowerShell executable is not present in the system Path or PSModulePath environment variable. The correct PowerShell paths can be seen in the screenshot example below:

b30d0efc-da2e-4e40-a83f-475fece3cbfd.pngImage Added

If this is the case, update your Environment Variables to include PowerShell.

Incorrect Java Path

An incorrect Java path environmental variable is set, such as from a partial uninstallation of a standalone JDK/JRE or another application’s Java instance that has since been removed. Neo4j will attempt to use this system path over the JRE included with CSAT Pro, and consequently fail to start.

To verify that this is the case:

1

In an administrative cmd.exe or PowerShell prompt, navigate to the current CSAT Pro installation directory’s neo4j\bin folder. This directory will exist even if the above error is encountered.

Using the default installation path:

Code Block
cd "C:\Program Files\CSAT_Pro\neo4j\bin"
2

Run the following command:
neo4j install-service
The example output below indicates that the default system path points to a nonexistent Java binary:

Code Block
C:\Program Files\CSAT_Pro\neo4j\bin>neo4j install-service
Invoke-Neo4j : Could not find java at "c:\Program Files\Java\jre1.8.0_202\bin\java.exe"

A reliable resolution method is installing a system-wide Java 11 Runtime Environment ( JRE), which will update the path to a new valid & CSAT Pro-compatible Java instance.

1

Uninstall any existing JRE/JDK on the system.

Note

Before carrying out this step, please verify that no other applications or services on this system are dependent on the presence of a specific Java version.

2

Download and deploy the free Eclipse Temurin Java 11 JRE using the .msi Installer:
https://adoptium.net/temurin/releases/?variant=openjdk11&os=windows&arch=x64

temurin_jre.pngImage Removed

&package=jre&version=11=

temurin_jre.pngImage Added

During the installation, enable the "Add to PATH" and "Set JAVA_HOME variable" options:

temurin.png
3

Uninstall the first failed CSAT Pro deployment using the following steps:
https://csat-pro.docs.cisecurity.org/en/stable/source/CSAT%20Pro%20Deployment/#uninstalling-cis-csat-pro

Skip the removal of the neo4j service (as it will not be present), and do not delete the newly set JAVA_HOME environment variable applied by the Eclipse Temurin setup.

4

Re-run the CSAT Pro installer to begin a new deployment. The previously encountered error should now no longer occur, and the Neo4j database setup & user creation will then complete successfully.

If you continue experiencing issues installing CSAT Pro, create a ticket with our CIS Product Support team at:
https://cisecurity.atlassian.net/servicedesk/customer/portal/15/group/35/create/144

Please include the following log files:

  • From your CSAT Pro installation directory (C:\Program Files\CSAT_Pro\ by default):

    • The \logs\csatlogs\csat.log file

    • The \conf\csat-config.yml file

Keywords; csat pro admin user java path PowerShell neo4j

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2024

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Jira Legacy
serverSystem Jira
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-33719

Created by

Allan Cornwell

Reviewed by

Approved by

Remove by