NFA MySQL 8.4 migrator problem

Products

• Network Observability
• Network Flow Analysis

Issue/Introduction

While upgrading to Dx NetOps Network Flow Analysis 25.4.4+ from a version 25.4.3 or prior, you are also upgrading our embedded MySQL Server 8.0.x to 8.4.x. Issues can arrise with the change to the password plugin option.

 

The first issue you would see is during the upgrade process and migrator failure.

 

In the D:/CA/NFA/migrator/migrator.log if you see this EXACT error at the very bottom of the log:

 

2026-07-30 13:50:04.321 INFO [main] [com.ca.im.migrator.business.SqlPropInspector.exists(Unknown Source)] - dbConnInfo.getHost: null dbConnInfo.getName: reporter dbConnInfo.getPort: 3308 dbConnInfo.getUser: root selectExistsSql: select 1

2026-07-30 13:50:04.767 WARN [main] [com.ca.im.migrator.business.SqlPropInspector.exists(Unknown Source)] - Exception: java.sql.SQLException: Plugin 'mysql_native_password' is not loaded message: Plugin 'mysql_native_password' is not loaded

2026-07-30 13:50:04.768 FATAL [main] [com.ca.im.migrator.TheSet.migrate(Unknown Source)] - Unhandled exception

com.ca.im.migrator.exceptions.MigratorException: Cannot determine whether prop exists

at com.ca.im.migrator.business.SqlPropInspector.exists(Unknown Source)

at com.ca.im.migrator.TheSet.makeMovie(Unknown Source)

at com.ca.im.migrator.TheSet.migrate(Unknown Source)

at com.ca.im.migrator.MigratorApp.main(Unknown Source)

Caused by: java.sql.SQLException: Plugin 'mysql_native_password' is not loaded

at com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:121)

at com.mysql.cj.jdbc.exceptions.SQLExceptionsMapping.translateException(SQLExceptionsMapping.java:114)

at com.mysql.cj.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:840)

at com.mysql.cj.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:416)

at com.mysql.cj.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:237)

at com.mysql.cj.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:180)

at java.sql/java.sql.DriverManager.getConnection(Unknown Source)

at java.sql/java.sql.DriverManager.getConnection(Unknown Source)

at org.springframework.jdbc.datasource.DriverManagerDataSource.getConnectionFromDriverManager(DriverManagerDataSource.java:155)

at org.springframework.jdbc.datasource.DriverManagerDataSource.getConnectionFromDriver(DriverManagerDataSource.java:146)

at org.springframework.jdbc.datasource.AbstractDriverBasedDataSource.getConnectionFromDriver(AbstractDriverBasedDataSource.java:205)

at org.springframework.jdbc.datasource.AbstractDriverBasedDataSource.getConnection(AbstractDriverBasedDataSource.java:179)

at com.ca.im.migrator.data.ConnectionPool.getConnection(Unknown Source)

at com.ca.im.migrator.data.BaseDao.executeScalar(Unknown Source)

... 4 more

2026-07-30 13:50:04.771 INFO [main] [com.ca.im.migrator.MigratorApp.main(Unknown Source)] - Exiting with code 1

 

Environment

NFA 25.4.4+

Resolution

1. Edit  D:/CA/NFA/MySql/my.ini in notepad ran as administrator.
2. Find the line: authentication_policy=caching_sha2_password
3. Add this right under it: mysql_native_password=ON
4. Save the file and restart or start CA MySQL Service
5. Now we need to fix the users which did not get converted properly during the upgrade (if you already had configured custom passwords use those values after the BY.. ' ') :
   1. Console:
      
      • ALTER USER 'harvest'@'%' IDENTIFIED WITH caching_sha2_password BY 'harvest';
        ALTER USER 'netqos'@'%' IDENTIFIED WITH caching_sha2_password BY 'netqos';
        ALTER USER 'nqconnector'@'%' IDENTIFIED WITH caching_sha2_password BY 'nqconnector';
        ALTER USER 'nqflow'@'%' IDENTIFIED WITH caching_sha2_password BY 'nqflow';
        ALTER USER 'nsas'@'%' IDENTIFIED WITH caching_sha2_password BY 'nsas';
        ALTER USER 'harvest'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'harvest';
        ALTER USER 'netqos'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'netqos';
        ALTER USER 'nqconnector'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'nqconnector';
        ALTER USER 'nqflow'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'nqflow';
        ALTER USER 'nsas'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'nsas';
        ALTER USER 'root'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'root@123';
        FLUSH PRIVILEGES;
   2. Harvester:
      • ALTER USER 'harvest'@'%' IDENTIFIED WITH caching_sha2_password BY 'harvest';
        ALTER USER 'netqos'@'%' IDENTIFIED WITH caching_sha2_password BY 'netqos';
        ALTER USER 'archive'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'archive';
        ALTER USER 'harvest'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'harvest';
        ALTER USER 'root'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'root@123';
        FLUSH PRIVILEGES;
        
        
6. From a CMD prompt with admin privleges run:
   1. cd D:\CA\NFA\migrator
   2. runMigrator.vbs (or .sh if linux)
7. Confirm D:\CA\NFA\migrator\migrator.log shows at the very bottom that it exited with a code 0 (succesful).
8. Rename D:\CA\NFA\console_movie.xml to console_movie<todaysDate>.xml and copy it to D:\CA\NFA\migrator.
9. Confirm all services are started. A reboot and waiting 10 minutes to confirm all delayed start services start is recomended. 
10. Confirm everything works as expected. Contact Broadcom Support with any further issues.