CSAT Pro Installation Error: "Failed to import the CSAT admin user"

Owned by Allan Cornwell, created
Last updated: May 22, 2024
3 min read

Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

v1.15.0+

Date

Apr 24, 2024

Problem

During a CSAT Pro installation on a Windows host, the following error may be displayed during the Neo4j database setup part of the deployment:

csat_import_fail.png
“Failed to import the CSAT admin user”

Following this error, the neo4j database service is not present as expected in services.msc.

Solution

This issue can occur due to two common factors.

Missing PowerShell Path

Type the following command in to a cmd.exe prompt:
powershell

If you receive the following error:

'powershell' is not recognized as an internal or external command, operable program or batch file.

This may indicate that the PowerShell executable is not present in the system Path or PSModulePath environment variable. The correct PowerShell paths can be seen in the screenshot example below:

b30d0efc-da2e-4e40-a83f-475fece3cbfd.png

If this is the case, update your Environment Variables to include PowerShell.

Incorrect Java Path

An incorrect Java path environmental variable is set, such as from a partial uninstallation of a standalone JDK/JRE or another application’s Java instance that has since been removed. Neo4j will attempt to use this system path over the JRE included with CSAT Pro, and consequently fail to start.

To verify that this is the case:

1

In an administrative cmd.exe or PowerShell prompt, navigate to the current CSAT Pro installation directory’s neo4j\bin folder. This directory will exist even if the above error is encountered.

Using the default installation path:

cd "C:\Program Files\CSAT_Pro\neo4j\bin"
2

Run the following command:
neo4j install-service
The example output below indicates that the default system path points to a nonexistent Java binary:

C:\Program Files\CSAT_Pro\neo4j\bin>neo4j install-service Invoke-Neo4j : Could not find java at "c:\Program Files\Java\jre1.8.0_202\bin\java.exe"

A reliable resolution method is installing a system-wide Java 11 JRE, which will update the path to a new valid & CSAT Pro-compatible Java instance.

1

Uninstall any existing JRE/JDK on the system.

Before carrying out this step, please verify that no other applications or services on this system are dependent on the presence of a specific Java version.

2

Download and deploy the free Eclipse Temurin Java 11 JRE using the .msi Installer:
https://adoptium.net/temurin/releases/?os=windows&arch=x64&package=jre&version=11=

During the installation, enable the "Add to PATH" and "Set JAVA_HOME variable" options:

3

Uninstall the first failed CSAT Pro deployment using the following steps:
CSAT Pro Deployment Guide - CIS Controls Self Assessment Tool Document Library

Skip the removal of the neo4j service (as it will not be present), and do not delete the newly set JAVA_HOME environment variable applied by the Eclipse Temurin setup.

4

Re-run the CSAT Pro installer to begin a new deployment. The previously encountered error should now no longer occur, and the Neo4j database setup & user creation will then complete successfully.

If you continue experiencing issues installing CSAT Pro, create a ticket with our CIS Product Support team at:
https://cisecurity.atlassian.net/servicedesk/customer/portal/15/group/35/create/144

Please include the following log files:

  • From your CSAT Pro installation directory (C:\Program Files\CSAT_Pro\ by default):

    • The \logs\csatlogs\csat.log file

    • The \conf\csat-config.yml file

Keywords; csat pro admin user java path PowerShell neo4j

Content by Label

Copyright © 2024

Center for Internet Security®