IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

QRadar CE 7.3.3 - Issue : "Cannot protect secrets at this time. Try again later."} - When installing App

  • 1.  QRadar CE 7.3.3 - Issue : "Cannot protect secrets at this time. Try again later."} - When installing App

    Posted Fri April 07, 2023 09:06 AM

    Hello,

    We have an issue when trying to install an application to QRadar CE 7.3.3

    We got the errors :

    Apr  6 10:39:37 console-qradar-lab tomcat[61293]: 2023-04-06 10:39:37,511 [QRADAR] [admin@10.20.30.3] org.apache.commons.httpclient.HttpMethodBase: [WARN] Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.
    Apr  6 10:39:39 ::ffff:10.10.210.2 [hostcontext.hostcontext] [pool-1-thread-2] com.ibm.si.hostcontext.app.tasks.workloads.PlatformCreateAppTask: [ERROR] [NOT:0000003000][10.10.210.2/- -] [-/- -]An error occurred while attempting to execute task to create app [1302].
    Apr  6 10:39:39 ::ffff:10.10.210.2 [hostcontext.hostcontext] [pool-1-thread-2] com.ibm.si.application.platform.exception.ApplicationPlatformServiceException: Unable to create app with id [qapp-1302] on host [https://fc815fc2349c579527d9.localdeployment:9000/v1/api/], responseCode [500], responseBody [{"code":500,"message":"Cannot protect secrets at this time. Try again later."}

    Can you help me ?

    Thank you in advance.



    ------------------------------
    Julien B.
    ------------------------------


  • 2.  RE: QRadar CE 7.3.3 - Issue : "Cannot protect secrets at this time. Try again later."} - When installing App

    Posted Fri April 07, 2023 05:33 PM

    It sounds to me like the vault (vault-qrd) service did not initialize properly. There was a known issue that was fixed in QRadar 7.4.2 on this issue, but unfortunately, QRadar CE can still experience the issue. If you want to drop me a quick email, I can send you some steps to try. I'm not sure if this procedure should be public facing, so send me a note @Jonathan Pechta (jonathan.pechta1@ibm.com) and I can provide you some steps to try. 

    Questions

    1. Is this a new CE install and is this the first app you install or did this just start occurring after you installed multiple apps?
    2. Did you by chance try to set the date of the appliance or is this a fresh install? 


    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------



  • 3.  RE: QRadar CE 7.3.3 - Issue : "Cannot protect secrets at this time. Try again later."} - When installing App

    Posted Fri April 14, 2023 06:14 AM

    Hello,

    Thank you for your reply, it helps me so much. I verified the vault-qrd service, and it failed to start, I tried a lot of different things to fix the issue, but that didn't work, so we re-installed QRadar-CE from scratch.

    Thank you again.



    ------------------------------
    Julien Bastin
    ------------------------------