Start a Conversation

Solved!

Go to Solution

Closed

25 Posts

1452

June 21st, 2023 19:00

VNX 5300 Certificate has invalid Date???

Hello, trying to access a VNX5300, Looks like certificate expired? How can I get in?

What a Bear, just getting a Windows 8 server and the right version of Java and now this, what a Nightmare.

VNX-Cert.jpg



25 Posts

June 23rd, 2023 08:00

This article is permission based. Find another article.

25 Posts

June 23rd, 2023 09:00

I cannot get the command naviseccli to run, how can I tell if it is even on the system?

VNX-Cert11.jpg




Moderator

 • 

8.5K Posts

June 23rd, 2023 09:00

NaviSECCli.exe -address -User root -Password *** -Scope 0 security -SPcertificate -generate
and /nas/sbin/nas_ca_certificate –generate

Moderator

 • 

8.5K Posts

June 23rd, 2023 09:00

You can download it from https://dell.to/3pdywwH;

25 Posts

June 23rd, 2023 09:00

Do you have the command to generate and install a self signed Cert from the cli?

 

Moderator

 • 

8.5K Posts

June 23rd, 2023 12:00

Yes, that should work.

25 Posts

June 23rd, 2023 12:00

So, since it is not on the system, I need to install the client software into the NAS. Can I install the windows client on the management computer and point it at the NAS? 

NaviSECCli.exe -address -User root -Password *** 

Moderator

 • 

8.5K Posts

June 23rd, 2023 13:00

Try using cli. https://dell.to/44i7uDg Page 240

25 Posts

June 23rd, 2023 17:00

Getting the ip information using naviseccli.exe fails on two of the three devices. Sheesh, what a nightmare with this old crud

C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 networkadmin -get
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1


C:\Users\Administrator>

I have the ability to create accounts. What is the HIGHEST authority account that will give me the ability to modify IP settings? I created a "network" account with network administrator Privs and still can't modify network unless I am in the totally wrong place.



Moderator

 • 

8.5K Posts

June 26th, 2023 06:00

Try this command naviseccli -address SP_IP getagent or naviseccli -h SP_IP -User -Scope 0 getagent and see if that tells you the security issue.

25 Posts

June 26th, 2023 12:00

Nope, Neither work. This one spits back nothing.

C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent

C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent

C:\Users\Administrator>naviseccli -h 192.168.50.60 -Scope 0 getagent

This one errors:

C:\Users\Administrator>naviseccli -h 192.168.50.60 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>naviseccli -h 192.168.50.62 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>naviseccli -h 192.168.50.63 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the Management Server on 192.168.50.63
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>





Moderator

 • 

8.5K Posts

June 26th, 2023 13:00

Try adding security to the account. 
# naviseccli -AddUserSecurity -user xxxx-password xxxxx-scope 0

25 Posts

June 26th, 2023 17:00

OK, I can see the details with the "network" account for both SP's but how do I change password on the controller before I change on the SP's? I am concerned there will be an issue if I cannot change all three

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1


C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP A
Storage Processor Network Name: SPA
Storage Processor IP Address: 192.168.50.62
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1


C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 -user network -password network -scope 0 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>

 

25 Posts

June 26th, 2023 18:00

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -set -subnetmask 255.255.254.0
Changing the IPv4 Subnet Mask on SP B, Port 0, Virtual Port 0 from 255.255.255.0 to 255.255.254.0
This operation will cause a management server restart!

WARNING: If you change these settings, you may lose management access to this storage system. See release notes for information about properly changin
g the management port settings on VNX File or VNX Unified systems.

Do you wish to continue? (y/n)

So it looks like I can change the mask on the SP(a and b), but how do I change the mask on the Management server?

Moderator

 • 

8.5K Posts

June 27th, 2023 06:00

Try going to https://dell.to/3CPbxuN and run the procedure for the 5300 and the service lan procedure.

No Events found!

Top