# Upgrade Chef Server 11.0.8-1 to 12.0.8

**URL:** <https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647>\
**Category:** Chef Infra (archive)\
**Created:** [June 10, 2015, 5:37pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647 "2015-06-10T17:37:17Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mohammad\_Fattahian](https://avatars.discourse-cdn.com/v4/letter/m/c0e974/32.png) [@Mohammad\_Fattahian](https://discourse.chef.io/u/Mohammad_Fattahian)\
**Post date:** [June 10, 2015, 5:37pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/1 "2015-06-10T17:37:17Z")

</div>

Hi,

I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
that I have to upgrade to 11.1 first and then go to 12.0.8

I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
got this error:

root@chef-server-test:~# chef-server-ctl upgrade

Open source Chef 11 server detected.

Would you like to upgrade? [yN]

y

Upgrading the open source Chef 11 server.

……

ERROR: /environments failed to children: HTTP error retrieving children:  
401 “Unauthorized”

ERROR: /clients failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /users failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /roles failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /nodes failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
/etc/chef-server/admin.pem

Response: Invalid signature for user or client ‘admin’

ERROR: /data\_bags failed to children: HTTP error getting children: 401  
"Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![Tyler\_Cloke](https://avatars.discourse-cdn.com/v4/letter/t/2acd7d/32.png) [@Tyler\_Cloke](https://discourse.chef.io/u/Tyler_Cloke)\
**Post date:** [June 12, 2015, 8:13pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/2 "2015-06-12T20:13:20Z")

</div>

Hmmm I wonder if you are hitting this because Chef Client 12 turns SSL  
verification mode on by default and the server now ships with Chef Client  
12.

Since your logs indicate that you are just going over localhost (i.e.  
everything is installed on the same server), you don't need to worry about  
ssl for requests to localhost, try the following:

1. $ find / -name open\_source\_chef12\_upgrade.rb
2. $ (nano|emacs|vi) 
3. At line 344 (right above EOH) add: ssl\_verify\_mode :verify\_none
4. Re-run migration (but if you re-install the Chef Server 12 package, you  
will have to repeat step 3 since it will overwrite your file edit)

Let me know if that works for you or at least changes the error up!

Tyler

On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian \<  
[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)\> wrote:

> Hi,
> 
> I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
> that I have to upgrade to 11.1 first and then go to 12.0.8
> 
> I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
> got this error:
> 
> root@chef-server-test:~# chef-server-ctl upgrade
> 
> Open source Chef 11 server detected.
> 
> Would you like to upgrade? [yN]
> 
> y
> 
> Upgrading the open source Chef 11 server.
> 
> ……
> 
> ERROR: /environments failed to children: HTTP error retrieving children:  
> 401 "Unauthorized"
> 
> ERROR: /clients failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /users failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /roles failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /nodes failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
> /etc/chef-server/admin.pem
> 
> Response: Invalid signature for user or client 'admin'
> 
> ERROR: /data\_bags failed to children: HTTP error getting children: 401  
> "Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![Mohammad\_Fattahian](https://avatars.discourse-cdn.com/v4/letter/m/c0e974/32.png) [@Mohammad\_Fattahian](https://discourse.chef.io/u/Mohammad_Fattahian)\
**Post date:** [June 16, 2015, 5:11pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/3 "2015-06-16T17:11:40Z")

</div>

Thanks Tyler,

I’ll try that. I figured it out by removing (uninstall Chef Server 11) and  
installing 12. Is there any way to upgrade from 11 to 12 directly?

Mohammad

_From:_ Tyler Cloke [[mailto:tyler@chef.io](mailto:tyler@chef.io)]  
_Sent:_ Friday, June 12, 2015 4:13 PM  
_To:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
_Subject:_ [chef] Re: Upgrade Chef Server 11.0.8-1 to 12.0.8

Hmmm I wonder if you are hitting this because Chef Client 12 turns SSL  
verification mode on by default and the server now ships with Chef Client  
12.

Since your logs indicate that you are just going over localhost (i.e.  
everything is installed on the same server), you don’t need to worry about  
ssl for requests to localhost, try the following:

1. $ find / -name open\_source\_chef12\_upgrade.rb

2. $ (nano|emacs|vi) 

3. At line 344 (right above EOH) add: ssl\_verify\_mode :verify\_none

4. Re-run migration (but if you re-install the Chef Server 12 package, you  
will have to repeat step 3 since it will overwrite your file edit)

Let me know if that works for you or at least changes the error up!

Tyler

On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian \<  
[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)\> wrote:

Hi,

I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
that I have to upgrade to 11.1 first and then go to 12.0.8

I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
got this error:

root@chef-server-test:~# chef-server-ctl upgrade

Open source Chef 11 server detected.

Would you like to upgrade? [yN]

y

Upgrading the open source Chef 11 server.

……

ERROR: /environments failed to children: HTTP error retrieving children:  
401 “Unauthorized”

ERROR: /clients failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /users failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /roles failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /nodes failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
/etc/chef-server/admin.pem

Response: Invalid signature for user or client ‘admin’

ERROR: /data\_bags failed to children: HTTP error getting children: 401  
"Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![sdelano](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/sdelano/32/35_2.png) [@sdelano](https://discourse.chef.io/u/sdelano)\
**Post date:** [June 16, 2015, 6:51pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/4 "2015-06-16T18:51:54Z")

</div>

Hi Mohammad,

Chef Server 12 supports upgrades from Chef Server 11.1.0 and greater. For instructions and guidance on the upgrade process, please follow along at [Upgrade Chef Infra Server](http://docs.chef.io/upgrade_server.html#from-chef-server-osc)

Cheers!

—  
Stephen Delano - Engineering Lead, Chef

On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian  
[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com) wrote:

> Hi,  
> I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
> that I have to upgrade to 11.1 first and then go to 12.0.8  
> I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
> got this error:  
> root@chef-server-test:~# chef-server-ctl upgrade  
> Open source Chef 11 server detected.  
> Would you like to upgrade? [yN]  
> y  
> Upgrading the open source Chef 11 server.  
> ……  
> ERROR: /environments failed to children: HTTP error retrieving children:  
> 401 "Unauthorized"  
> ERROR: /clients failed to children: HTTP error retrieving children: 401  
> "Unauthorized"  
> ERROR: /users failed to children: HTTP error retrieving children: 401  
> "Unauthorized"  
> ERROR: /roles failed to children: HTTP error retrieving children: 401  
> "Unauthorized"  
> ERROR: /nodes failed to children: HTTP error retrieving children: 401  
> "Unauthorized"  
> ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
> /etc/chef-server/admin.pem  
> Response: Invalid signature for user or client 'admin'  
> ERROR: /data\_bags failed to children: HTTP error getting children: 401  
> "Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![Mohammad\_Fattahian](https://avatars.discourse-cdn.com/v4/letter/m/c0e974/32.png) [@Mohammad\_Fattahian](https://discourse.chef.io/u/Mohammad_Fattahian)\
**Post date:** [June 17, 2015, 8:57pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/5 "2015-06-17T20:57:09Z")

</div>

Tyler,

It didn’t work. Same error.

Mohammad

_From:_ Tyler Cloke [[mailto:tyler@chef.io](mailto:tyler@chef.io)]  
_Sent:_ Friday, June 12, 2015 4:13 PM  
_To:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
_Subject:_ [chef] Re: Upgrade Chef Server 11.0.8-1 to 12.0.8

Hmmm I wonder if you are hitting this because Chef Client 12 turns SSL  
verification mode on by default and the server now ships with Chef Client  
12.

Since your logs indicate that you are just going over localhost (i.e.  
everything is installed on the same server), you don’t need to worry about  
ssl for requests to localhost, try the following:

1. $ find / -name open\_source\_chef12\_upgrade.rb

2. $ (nano|emacs|vi) 

3. At line 344 (right above EOH) add: ssl\_verify\_mode :verify\_none

4. Re-run migration (but if you re-install the Chef Server 12 package, you  
will have to repeat step 3 since it will overwrite your file edit)

Let me know if that works for you or at least changes the error up!

Tyler

On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian \<  
[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)\> wrote:

Hi,

I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
that I have to upgrade to 11.1 first and then go to 12.0.8

I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
got this error:

root@chef-server-test:~# chef-server-ctl upgrade

Open source Chef 11 server detected.

Would you like to upgrade? [yN]

y

Upgrading the open source Chef 11 server.

……

ERROR: /environments failed to children: HTTP error retrieving children:  
401 “Unauthorized”

ERROR: /clients failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /users failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /roles failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /nodes failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
/etc/chef-server/admin.pem

Response: Invalid signature for user or client ‘admin’

ERROR: /data\_bags failed to children: HTTP error getting children: 401  
"Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![Mohammad\_Fattahian](https://avatars.discourse-cdn.com/v4/letter/m/c0e974/32.png) [@Mohammad\_Fattahian](https://discourse.chef.io/u/Mohammad_Fattahian)\
**Post date:** [June 17, 2015, 8:59pm UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/6 "2015-06-17T20:59:18Z")

</div>

Stephen,

I’ve upgrade 11.0.8 to 11.1 and the tried to upgrade to 12 using this  
article but no success.

I got these errors:

ERROR: /environments failed to children: HTTP error retrieving children:  
401 “Unauthorized”

ERROR: /clients failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /users failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /roles failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /nodes failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
/etc/chef-server/admin.pem

Response: Invalid signature for user or client ‘admin’

ERROR: /data\_bags failed to children: HTTP error getting children: 401  
"Unauthorized"knife download failed with pid 16102 exit 100

_From:_ Stephen Delano [[mailto:stephen@opscode.com](mailto:stephen@opscode.com)]  
_Sent:_ Tuesday, June 16, 2015 2:52 PM  
_To:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
_Cc:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
_Subject:_ [chef] Re: Upgrade Chef Server 11.0.8-1 to 12.0.8

Hi Mohammad,

Chef Server 12 supports upgrades from Chef Server 11.1.0 and greater. For  
instructions and guidance on the upgrade process, please follow along at  
[http://docs.chef.io/upgrade\_server.html#from-chef-server-osc](http://docs.chef.io/upgrade_server.html#from-chef-server-osc)

Cheers!

—  
Stephen Delano - Engineering Lead, Chef

On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian \<  
[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)\> wrote:

Hi,

I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an article  
that I have to upgrade to 11.1 first and then go to 12.0.8

I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8 I  
got this error:

root@chef-server-test:~# chef-server-ctl upgrade

Open source Chef 11 server detected.

Would you like to upgrade? [yN]

y

Upgrading the open source Chef 11 server.

……

ERROR: /environments failed to children: HTTP error retrieving children:  
401 “Unauthorized”

ERROR: /clients failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /users failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /roles failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: /nodes failed to children: HTTP error retrieving children: 401  
"Unauthorized"

ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
/etc/chef-server/admin.pem

Response: Invalid signature for user or client ‘admin’

ERROR: /data\_bags failed to children: HTTP error getting children: 401  
"Unauthorized"knife download failed with pid 16102 exit 100

---

<div class="post-metadata">

**Author:** ![mmzyk](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/mmzyk/32/1039_2.png) [@mmzyk](https://discourse.chef.io/u/mmzyk)\
**Post date:** [June 18, 2015, 1:02am UTC](https://discourse.chef.io/t/upgrade-chef-server-11-0-8-1-to-12-0-8/6647/7 "2015-06-18T01:02:40Z")

</div>

Mohammad,

Is it possible the admin user that it tries to use by default isn't  
actually an admin user on your system? While the upgrade command tries  
to use sensible defaults, it can't guess everything in all situations  
and if you changed the default admin user it might fail in this way.

If you have a user that you know is an admin user, you can tell the  
upgrade command to use that user with the --user option. You'll also  
need to supply that user's key with the --key command.

The upgrade command has an extensive help menu that you can access with  
chef-server-ctl upgrade --help that explains all the possible options.  
That said, I'd recommend just specifying the user and key and trying again.

Thanks,

Mark Mzyk

> Mohammad Fattahian [mailto:mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)  
> June 17, 2015 at 4:59 PM
> 
> Stephen,
> 
> I’ve upgrade 11.0.8 to 11.1 and the tried to upgrade to 12 using this  
> article but no success.
> 
> I got these errors:
> 
> ERROR: /environments failed to children: HTTP error retrieving  
> children: 401 "Unauthorized"
> 
> ERROR: /clients failed to children: HTTP error retrieving children:  
> 401 "Unauthorized"
> 
> ERROR: /users failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /roles failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /nodes failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
> /etc/chef-server/admin.pem
> 
> Response: Invalid signature for user or client 'admin'
> 
> ERROR: /data\_bags failed to children: HTTP error getting children: 401  
> "Unauthorized"knife download failed with pid 16102 exit 100
> 
> \*From:\*Stephen Delano [[mailto:stephen@opscode.com](mailto:stephen@opscode.com)  
> [mailto:stephen@opscode.com](mailto:stephen@opscode.com)]  
> _Sent:_ Tuesday, June 16, 2015 2:52 PM  
> _To:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com) [mailto:chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
> _Cc:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com) [mailto:chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
> _Subject:_ [chef] Re: Upgrade Chef Server 11.0.8-1 to 12.0.8
> 
> Hi Mohammad,
> 
> Chef Server 12 supports upgrades from Chef Server 11.1.0 and greater.  
> For instructions and guidance on the upgrade process, please follow  
> along at [Upgrade Chef Infra Server](http://docs.chef.io/upgrade_server.html#from-chef-server-osc)
> 
> Cheers!
> 
> —  
> Stephen Delano - Engineering Lead, Chef
> 
> On Wed, Jun 10, 2015 at 10:37 AM, Mohammad Fattahian  
> \<[mfattahian@masterfile.com](mailto:mfattahian@masterfile.com) [mailto:mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)\> wrote:
> 
> Stephen Delano [mailto:stephen@opscode.com](mailto:stephen@opscode.com)  
> June 16, 2015 at 2:51 PM  
> Hi Mohammad,
> 
> Chef Server 12 supports upgrades from Chef Server 11.1.0 and greater.  
> For instructions and guidance on the upgrade process, please follow  
> along at [Upgrade Chef Infra Server](http://docs.chef.io/upgrade_server.html#from-chef-server-osc)
> 
> Cheers!
> 
> —  
> Stephen Delano - Engineering Lead, Chef
> 
> Mohammad Fattahian [mailto:mfattahian@masterfile.com](mailto:mfattahian@masterfile.com)  
> June 10, 2015 at 1:37 PM
> 
> Hi,
> 
> I wanted to upgrade my Chef Server 11.0.8-1 to 12.0.8. I found an  
> article that I have to upgrade to 11.1 first and then go to 12.0.8
> 
> I upgraded to 11.1 completely but when I try to upgrade 11.1 to 12.0.8  
> I got this error:
> 
> root@chef-server-test:~# chef-server-ctl upgrade
> 
> Open source Chef 11 server detected.
> 
> Would you like to upgrade? [yN]
> 
> y
> 
> Upgrading the open source Chef 11 server.
> 
> ……
> 
> ERROR: /environments failed to children: HTTP error retrieving  
> children: 401 "Unauthorized"
> 
> ERROR: /clients failed to children: HTTP error retrieving children:  
> 401 "Unauthorized"
> 
> ERROR: /users failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /roles failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: /nodes failed to children: HTTP error retrieving children: 401  
> "Unauthorized"
> 
> ERROR: Failed to authenticate to [https://localhost](https://localhost) as admin with key  
> /etc/chef-server/admin.pem
> 
> Response: Invalid signature for user or client 'admin'
> 
> ERROR: /data\_bags failed to children: HTTP error getting children: 401  
> "Unauthorized"knife download failed with pid 16102 exit 100