SMARTS runcmd_env.sh is overwritten on upgrade

Products

• Network Observability
• VMware Smart Assurance

Issue/Introduction

After upgrading to NetOps SMARTS 25.4.4 or above it was noticed that services were not starting and the Broker name was set to localhost.

Cause

In 25.4.4 and above support for TLS1.1 was removed in SMARTS forcing adherence to TLS1.3.  There was an error in the code so that the customized settings were not merged with the updates need for this configuration change.

Resolution

This is tentatively scheduled to be fixed in NetOps version 25.4.12 and above.

For upgrades to 25.4.4, 25.4.5, 25.4.6, 25.4.7, 25.4.8, 25.4.9, 25.4.10, or 25.4.11 review each of the runcmd_env.sh for each domain.  They will need to be manually modified to set your custom parameters as they were before the upgrade.  If you have multiple domain on a server you will need to reconfigure the file for each domain.

The file will contain your previous settings, all commented out with the default out of box settings uncommented.

For example you will see this:

SM_BROKER_DEFAULT=localhost:426
SM_LICENSE=null
SM_SNMP_BUG_COMPATIBLE=TRUE
SM_INCOMING_PROTOCOL=1,0
SM_OUTGOING_PROTOCOL=1,0
SM_IP_VERSIONS=v6v4
SM_LOCALE=en_US
SM_ENCODING_OUTPUT=UTF-8
SM_GUI_DISPLAYNAME_CLASSES=CORE_Collection
SM_DEFHOME=/dev/null
SM_FIPS140=FALSE
SM_LOG_ROLL_SIZE=200M
SM_BACKUP_FILE_LIMIT=5
SM_ALLOW_LEGACY_CRYPTO=TRUE
SM_TLS_MIN_VERSION=1.2
SM_TLS_MAX_VERSION=1.3
#============================= Contents of the 25.4.7.0(commented) for reference =================
#SM_BROKER_DEFAULT=<hostname>:426
#SM_LICENSE=null
#SM_SNMP_BUG_COMPATIBLE=TRUE
#SM_INCOMING_PROTOCOL=1,0
#SM_OUTGOING_PROTOCOL=1,0
#SM_IP_VERSIONS=v4
#SM_IP_VERSIONS=v4
#SM_LOCALE=en_US
#SM_ENCODING_OUTPUT=UTF-8
#SM_GUI_DISPLAYNAME_CLASSES=CORE_Collection
#SM_DEFHOME=/dev/null
#SM_FIPS140=FALSE
#SM_LOG_ROLL_SIZE=200M
#SM_BACKUP_FILE_LIMIT=5
#SM_ALLOW_LEGACY_CRYPTO=TRUE
#SM_TLS_MIN_VERSION=1.2
#SM_TLS_MAX_VERSION=1.3

You will need to edit the top section that is uncommented and change the parameters as needed and add any that were there but are no longer enabled.

Once completed, restart services:

/etc/init.d/ic-serviced start