Errors on the pages of watchlists, queries, or triage alerts when SOLR FIPS enabled on 7.8.1 EDR Server

Products

• Carbon Black EDR

Issue/Introduction

• The console will display error messages for watchlists, triage alerts, and when running queries because SOLR is not working correctly after enabling FIPS configuration in cb.conf.
• SOLR startup.log has the following error:

  Debug information:
  JAVA_HOME: N/A
  Active Path:
  /sbin:/usr/sbin:/bin:/usr/bin
  Executing SolrCorePropertiesFixer
  Failed to query server: Connection timed out
  Java not found, or an error was encountered when running java.
  A working Java 8 JRE is required to run Solr!
  Please install latest version of Java 8 or set JAVA_HOME properly.
  Command that we tried: '/usr/lib/jvm/jre-17//bin/java -version', with response:
  /usr/share/cb/solr/bin/solr: line 144: /usr/lib/jvm/jre-17//bin/java: No such file or directory

Environment

• Carbon Black EDR Server: 7.8.0 and Higher
• SOLR FIPS enabled

Cause

The OpenJDK 17 for SOLR is missing or was removed and need to be reinstalled on the EDR server.

Resolution

Follow the steps from the Server Cluster Management Guide to installing Java OpenJDK 17, which is a hardcoded version requirement when enabling SOLR FIPS.