Skip to main content

Change Tracker Agent Does Not Run on RHEL 8 or 9

Symptom​

Affected versions:

  • Netwrix Change Tracker NetCore Agent — version 7.0.1.9-255 and later

Error on agent service startup:

[1] INFO Message - Application core shutting down due to error, please restart service:
This license is invalid. Please see servicestack.net or contact team@servicestack.net for more details.
The id for this license is '<id>'

Cause​

The Change Tracker agent cannot run due to cryptographic policy changes that Red Hat Enterprise Linux (RHEL) 8 or 9 applies by default.

Resolution​

  1. On the RHEL server hosting the Change Tracker agent, open the terminal and navigate to the crypto policies modules directory:

    cd /usr/share/crypto-policies/policies/modules

  2. Create a new file called GEN7AGENT.pmod and open it:

    touch GEN7AGENT.pmod
    vi /usr/share/crypto-policies/policies/modules/GEN7AGENT.pmod

  3. Add the following lines to the file:

    # This subpolicy adds SHA1 hash and signature support

    hash = SHA1+

    sign = RSA-SHA1+

  4. Apply the updated crypto policy:

    update-crypto-policies --set DEFAULT:GEN7AGENT

  5. Reboot the RHEL system hosting the agent.

The Change Tracker agent should run after you apply the subpolicies.