DX NetOps

 View Only

NFA upgrades Disable McAfee before upgrading

  • 1.  NFA upgrades Disable McAfee before upgrading

    Broadcom Employee
    Posted Aug 16, 2019 11:40 AM
    Edited by Christopher Walsh Aug 16, 2019 11:41 AM
    We have been seeing a number of NFA upgrade failures, specifically during the mysql_upgrade portion of the upgrades which updates the version of msyql running on NFA. 

    If this doesn't complete, the migrator will not run. 
    The migrator is what updates the database schema for each version of NFA, so if that doesn't update you will see your version of NFA in the About page will still show the old version.

    We are finding that McAfee Endpoint Protection and potentially some other Antivirus softwares are blocking the mysql_upgrade from completing.

    You will see a message during the upgrade like "Mysql_upgrade failed" and the \CA\NFA\Mysql_Upgrade*.log will have a message like below:


    The MySql_Upgrade logs in the \CA\NFA directory have a message like below:


    Error on rename of '.\mysql\#sql-9ac_4.frm' to '.\mysql\proxies_priv.frm' (Errcode: 13 - Permission denied)


    This is either due to permissions on the temp directory of the User's temp director or CA directory or a Virus scan blocking mysql.

    Once the virus scanning software is disabled you can follow the steps in the KB article below to continue on with the upgrade.

    To avoid this problem we recommend disabling any antivirus software before starting any NFA upgrade.

    https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=135969