IBM Support

QRadar Gateway Add Failed With Error "Token Is Not a Recognized Format"

Troubleshooting


Problem

During the installation of a QRadar on Cloud Gateway 7.3.1, the error "Token is not a recognized format" is received. Verification of the token indicates that it is correct, but the same error is received.

Symptom

tail /var/log/setup-VERSION/qradar_netsetup.log

Where VERSION is the number corresponding to the latest folder. If you are not sure what is the latest folder, run the following command to display the latest:

ls -lt /var/log/ | grep setup | head -n 1

If you see the following errors, your token is not valid:

date qradar_netsetup.py[pid]: ibm_qradar_setup_ui fun_7000_console_Screen_validate [DEBUG] check_7000_console_Screen: Token 'console_id' is not a recognized format
date qradar_netsetup.py[pid]: ibm_qradar_setup_ui fun_7000_console_Screen_validate [ERROR] Token is not a recognized format.

Cause

The Gateway is able to communicate with the Console but the token is not valid, or already in use for that Console.

Resolving The Problem

  1. Complete the installation while you wait for a valid token. If you have access to the Console, generate a new token in the Self Serv App.
    1. Mount the ISO with the following command: 
      mount -o loop QRADAR.iso /media/cdrom

      Where QRADAR.iso is the path to the same version ISO that is installed on the gateway.
       
    2. Start the Gateway installation by running the following command: 
      /media/cdrom/setup
    3. In the Gateway Setup window of the installation wizard, select "configure later" to skip the token screen.
  2. Once you receive a valid token:
    1. Run the following command on the Gateway: 
      /opt/qradar/bin/setup_qradar_host.py mh_setup interactive -p
    2. Enter the valid token when prompted.
    3. Verify the script returns that it made a successful connection to your Console, and that it downloaded the VPN, and loaded all parts.
    4. In the Web User Interface, admin tab, select Deploy Changes button.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSKMKU","label":"IBM QRadar on Cloud"},"ARM Category":[{"code":"a8m0z000000GneaAAC","label":"QRadar->Install->Cloud"}],"ARM Case Number":"TS001897925","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
09 June 2020

UID

ibm10872450

Page Feedback