- Current Log Insight Version 4.6.0-8080673 with TLS 1.0 and 1.1 disabled (LINK to disable TLS v1.0 and v1.1 in vRealize Log Insight (2146305) )
- Try to upgrade to 4.7 with VMware-vRealize-Log-Insight-4.7.0-9983377.pak
- Error:
Upgrade Unconfirmed
There was a problem confirming the upgrade. The Log Insight service cannot be reached. Please refresh the page to see if the Log Insight service is running. If not, you will need to restart the Virtual Appliance.
If the Log Insight service still does not resume after restart, generate a support bundle and contact VMware support, or restore from a snapshot.
- Followed Changing internal configuration options in VMware vRealize Log Insight (2123058)
- on internal/config/
click Show all settings
Search for upgrade-prevalidation-enabled value
Replace true with false. Click save. - Restart Log Insight via the /admin/cluster page.
- Try the upgrade again. Success!
- /internal/config/ will still be set to <upgrade-prevalidation-enabled value=”false” />
- I had to disable TLS 1.0 1.1 again. The file was reset (the date is Sept 7th)
li:~ # cat /usr/java/default/lib/security/java.security | grep jdk.tls.disabledAlgorithms
# jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, - to
li:~ # cat /usr/java/default/lib/security/java.security | grep jdk.tls.disabledAlgorithms
# jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
jdk.tls.disabledAlgorithms=TLSv1, TLSv1.1, SSLv3, RC4, MD5withRSA, DH keySize < 768,