DRAFT CSAT Pro Installation - "Failed to import the CSAT admin user"

Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

v1.15.0+

Date

Use /date to insert current date

Problem

During the CSAT Pro installation on a Windows host, the following error is displayed during the Neo4j database service setup:

Following this error, the neo4j service is not present as expected in services.msc.

This error can be caused by an incorrect Java path environmental variable, such as from a partial uninstallation of a standalone JDK/JRE.

To verify that this is the case:

In an administrative cmd.exe or PowerShell prompt, navigate to the current CSAT Pro installation directory’s neo4j\bin folder:
cd "C:\Program Files\CSAT_Pro\neo4j\bin"
Run the following command:
neo4j install-service
The example output below indicates that the default system path points to a nonexistent Java binary:

C:\Program Files\CSAT_Pro\neo4j\bin>neo4j install-service
Invoke-Neo4j : Could not find java at "c:\Program Files\Java\jre1.8.0_202\bin\java.exe"

A quick remediation is installing a system-wide Java 8 / 11 Runtime Environment (JRE), which will update the path to a valid instance.

Uninstall any existing JRE/JDK (if no other tools or applications rely on a specific version)
Download and deploy the free Eclipse Temurin Java 11 JRE:
https://adoptium.net/temurin/releases/?variant=openjdk11&os=windows&arch=x64
During the installation, check the “Add to PATH” and “Set JAVA_HOME variable” options:
This will ensure that a compatible system-wide JRE is present, in addition to the one bundled with CSAT Pro.
Uninstall the failed CSAT Pro deployment using the following steps:
https://csat-pro.docs.cisecurity.org/en/stable/source/CSAT%20Pro%20Deployment/#uninstalling-cis-csat-pro
Re-run the CSAT Pro installer to begin a new deployment.
The previously failed Neo4j database setup should now complete successfully.

If you continue experiencing issues in deploying CSAT Pro, please open a case with our Product Support team at:

Center for Internet Security®