Dell EMC Networking HiveManager site cloud.aerohive.com certificate expiration How to Manually Upgrade HiveAgent on Dell N Series Switches

Dell EMC Networking HiveManager site cloud.aerohive.com certificate expiration How to Manually Upgrade HiveAgent on Dell N Series Switches


Summary

Firmware Release 6.6.0.13 that includes the latest Hive Agent was released Dec 3, 2019. If customer can upgrade this is the easiest path to resolution. The 6.6.0.13 image files can be downloaded from the specific switch page on https://www.dell.com/support/

The HTTPS SSL certificate on https://cloud.aerohive.com expires on October 23, 2019. This SSL cert was issued by "Comodo RSA Certification Authority".

Users will see the following message on their Dell HiveManager Appliance.



The CA Branding has changed from Comodo and new certificate is available from Re-branded CA.
HiveAgent in Dell N Series switches has the Comodo root certificate hard coded into the devices and will need the new certificate chain to be installed.
HiveAgent Version 1.1.29 contains new CA certificate chain.
As mentioned in the message, switches connected to HiveManager before 10/21/2019 will automatically Upgrade to 1.1.29 HiveAgent.

Until new version of OS 6 is released, which will include the new CA trust chain, any switches not connected to HiveManager before 10/21/2019 will need to manually update HiveAgent in order to connect to HiveManager after 10/23/2019.

Software Fix


Following is the process of upgrading HiveAgent on Dell N Series switches Manually.

  • Use the following CLI to check and confirm the running HiveAgent Version.
    • show hiveagent status
      • Note: If the HiveAgent Version is not 1.1.29.0 or later, then HiveAgent needs to be upgraded.
      • Accept the EULA to get output from the below command "N3048(config)#eula-consent hiveagent accept"
N3048#show hiveagent status

HiveAgent: Enabled
EULA: Accepted

HiveManager Server Name: HiveManagerNG
HiveManager NG (enabled):
HiveAgent Version.............................. 0.2.68
HiveAgent Status............................... TRYING TO FETCH HMNG ADDRESS
HiveAgent AssociationUrl....................... -
HiveAgent AssociationMethod.................... IP_DHCP
HiveAgent PollUrl.............................. -


HiveAgent upgrade files for Dell switches are available on the Dell Aerohive SFTP Portal.

You must choose the file matching the switch version you are upgrading.

Refer to your original Hivemanager License email that you received at time of Hivemanger purchase for the login credentials for the sftp site.


Use a SFTP client to connect to the secure site like WINSCP.



Download the HiveAgent 1.1.29 upgrade files from the Dell Aerohive SFTP portal (sftp://dellsupport.aerohive.com)
Unzip and upload the files to a ftp or tftp server

  • Use the following CLI commands to upgrade the HiveAgent on the switch.
    • enable
    • application stop hiveagent
    • delete user-apps/hiveagent
    • delete user-apps/hiveagent_pr
    • delete user-apps/hiveagent_pr_s
    • delete user-apps/ah_ha.conf
    • delete user-apps/ah_ha.conf_s
    • copy tftp://x.x.x.x/HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr_s
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent application hiveagent
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf_s
    • configure
    • application install hiveagent start-on-boot
    • exit
    • copy running-config startup-config
    • application start hiveagent

  • Wait for about 30 seconds and then use the following CLI to check and confirm that HiveAgent Version reads 1.1.29.0
    • show hiveagent status
N3048#show hiveagent status

HiveAgent: Enabled
EULA: Accepted

HiveManager Server Name: HiveManagerNG
HiveManager NG (enabled):

............................................... .......................................
HiveAgent Status............................... FAILED TO CONNECT TO REDIRECTOR/HIVEMANAGER, WAITING BEFORE TRYING AGAIN
HiveAgent Version.............................. 1.1.29.0
HiveAgent Debug................................ OFF
............................................... .......................................
HiveAgent Association Method................... -
HiveAgent Association Url...................... -
HiveAgent Poll URL............................. -
............................................... .......................................

Once HiveAgent is upgraded, Switch will be able to connect to HiveManager with the New Certificate if it is on boarded on to the HiveManager.




Quick Tips content is self-published by the Dell Support Professionals who resolve issues daily. In order to achieve a speedy publication, Quick Tips may represent only partial solutions or work-arounds that are still in development or pending further proof of successfully resolving an issue. As such Quick Tips have not been reviewed, validated or approved by Dell and should be used with appropriate caution. Dell shall not be liable for any loss, including but not limited to loss of data, loss of profit or loss of revenue, which customers may incur by following any procedure or advice set out in the Quick Tips.

Article ID: SLN319098

Last Date Modified: 02/03/2020 12:04 PM


Rate this article

Accurate
Useful
Easy to understand
Was this article helpful?
Yes No
Send us feedback
Comments cannot contain these special characters: <>()\
Sorry, our feedback system is currently down. Please try again later.

Thank you for your feedback.