CSAT Pro Installation Error: "Failed to import the CSAT admin user"

Owned by Allan Cornwell, created
Last updated: Apr 24, 2024 by Amanda McGown
3 min read

Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

v1.15.0+

Date

Apr 24, 2024

Problem

During a CSAT Pro installation on a Windows host, the following error may be displayed during the Neo4j database setup part of the deployment:

csat_import_fail.png
“Failed to import the CSAT admin user”

Following this error, the neo4j database service is not present as expected in services.msc.

Solution

This issue can occur if an incorrect Java path environmental variable is set, such as from a partial uninstallation of a standalone JDK/JRE or another application’s Java instance that has since been removed. Neo4j will attempt to use this system path over the JRE included with CSAT Pro, and consequently fail to start.

To verify that this is the case:

1

In an administrative cmd.exe or PowerShell prompt, navigate to the current CSAT Pro installation directory’s neo4j\bin folder. This directory will exist even if the above error is encountered.

Using the default installation path:

cd "C:\Program Files\CSAT_Pro\neo4j\bin"
2

Run the following command:
neo4j install-service
The example output below indicates that the default system path points to a nonexistent Java binary:

C:\Program Files\CSAT_Pro\neo4j\bin>neo4j install-service Invoke-Neo4j : Could not find java at "c:\Program Files\Java\jre1.8.0_202\bin\java.exe"

A reliable resolution method is installing a system-wide Java 11 JRE, which will update the path to a new valid & CSAT Pro-compatible Java instance.

1

Uninstall any existing JRE/JDK on the system.

Before carrying out this step, please verify that no other applications or services on this system are dependent on the presence of a specific Java version.

2

Download and deploy the free Eclipse Temurin Java 11 JRE using the .msi Installer:
https://adoptium.net/temurin/releases/?os=windows&arch=x64&package=jre&version=11=

temurin_jre.png

During the installation, enable the "Add to PATH" and "Set JAVA_HOME variable" options:

3

Uninstall the first failed CSAT Pro deployment using the following steps:
https://csat-pro.docs.cisecurity.org/en/stable/source/CSAT%20Pro%20Deployment/#uninstalling-cis-csat-pro

Skip the removal of the neo4j service (as it will not be present), and do not delete the newly set JAVA_HOME environment variable applied by the Eclipse Temurin setup.

4

Re-run the CSAT Pro installer to begin a new deployment. The previously encountered error should now no longer occur, and the Neo4j database setup & user creation will then complete successfully.

If you continue experiencing issues installing CSAT Pro, create a ticket with our CIS Product Support team at:
https://cisecurity.atlassian.net/servicedesk/customer/portal/15/group/35/create/144

Please include the following log files:

  • From your CSAT Pro installation directory (C:\Program Files\CSAT_Pro\ by default):

    • The \logs\csatlogs\csat.log file

    • The \conf\csat-config.yml file

Keywords; csat pro admin user java path neo4j

Content by Label

Copyright © 2024

Center for Internet Security®