25 Posts
0
1570
VNX 5300 Certificate has invalid Date???
Hello, trying to access a VNX5300, Looks like certificate expired? How can I get in?
What a Bear, just getting a Windows 8 server and the right version of Java and now this, what a Nightmare.
25 Posts
0
1570
Hello, trying to access a VNX5300, Looks like certificate expired? How can I get in?
What a Bear, just getting a Windows 8 server and the right version of Java and now this, what a Nightmare.
Top
jerryroy1
25 Posts
0
June 23rd, 2023 08:00
This article is permission based. Find another article.
jerryroy1
25 Posts
0
June 23rd, 2023 09:00
I cannot get the command naviseccli to run, how can I tell if it is even on the system?
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 23rd, 2023 09:00
NaviSECCli.exe -address -User root -Password *** -Scope 0 security -SPcertificate -generate
and /nas/sbin/nas_ca_certificate –generate
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 23rd, 2023 09:00
You can download it from https://dell.to/3pdywwH;
jerryroy1
25 Posts
0
June 23rd, 2023 09:00
Do you have the command to generate and install a self signed Cert from the cli?
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 23rd, 2023 12:00
Yes, that should work.
jerryroy1
25 Posts
0
June 23rd, 2023 12:00
So, since it is not on the system, I need to install the client software into the NAS. Can I install the windows client on the management computer and point it at the NAS?
NaviSECCli.exe -address -User root -Password ***
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 23rd, 2023 13:00
Try using cli. https://dell.to/44i7uDg Page 240
jerryroy1
25 Posts
0
June 23rd, 2023 17:00
Getting the ip information using naviseccli.exe fails on two of the three devices. Sheesh, what a nightmare with this old crud
C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.
C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 networkadmin -get
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.
C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1
C:\Users\Administrator>
I have the ability to create accounts. What is the HIGHEST authority account that will give me the ability to modify IP settings? I created a "network" account with network administrator Privs and still can't modify network unless I am in the totally wrong place.
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 26th, 2023 06:00
Try this command naviseccli -address SP_IP getagent or naviseccli -h SP_IP -User -Scope 0 getagent and see if that tells you the security issue.
jerryroy1
25 Posts
0
June 26th, 2023 12:00
Nope, Neither work. This one spits back nothing.
C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent
C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent
C:\Users\Administrator>naviseccli -h 192.168.50.60 -Scope 0 getagent
This one errors:
C:\Users\Administrator>naviseccli -h 192.168.50.60 -User nasadmin -Scope 0 getagent
Enter password:
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.
C:\Users\Administrator>naviseccli -h 192.168.50.62 -User nasadmin -Scope 0 getagent
Enter password:
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.
C:\Users\Administrator>naviseccli -h 192.168.50.63 -User nasadmin -Scope 0 getagent
Enter password:
Error returned from the Management Server on 192.168.50.63
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.
C:\Users\Administrator>
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 26th, 2023 13:00
Try adding security to the account.
# naviseccli -AddUserSecurity -user xxxx-password xxxxx-scope 0
jerryroy1
25 Posts
0
June 26th, 2023 17:00
OK, I can see the details with the "network" account for both SP's but how do I change password on the controller before I change on the SP's? I am concerned there will be an issue if I cannot change all three
C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1
C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP A
Storage Processor Network Name: SPA
Storage Processor IP Address: 192.168.50.62
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1
C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 -user network -password network -scope 0 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.
C:\Users\Administrator>
jerryroy1
25 Posts
0
June 26th, 2023 18:00
C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -set -subnetmask 255.255.254.0
Changing the IPv4 Subnet Mask on SP B, Port 0, Virtual Port 0 from 255.255.255.0 to 255.255.254.0
This operation will cause a management server restart!
WARNING: If you change these settings, you may lose management access to this storage system. See release notes for information about properly changin
g the management port settings on VNX File or VNX Unified systems.
Do you wish to continue? (y/n)
So it looks like I can change the mask on the SP(a and b), but how do I change the mask on the Management server?
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
June 27th, 2023 06:00
Try going to https://dell.to/3CPbxuN and run the procedure for the 5300 and the service lan procedure.