Dell Networking OS10 How to Run Certificate Update from Windows with Python

Shrnutí: How to update the OS10 certificate using Python from Windows.

Tento článek se vztahuje na Tento článek se nevztahuje na Tento článek není vázán na žádný konkrétní produkt. V tomto článku nejsou uvedeny všechny verze produktu.

Pokyny

Table of Contents


1.  Requirements to be Met
2.  Steps to Run Script from Windows
3.  Command Summary
4.  Items to Take Note


Requirements to be Met

 
  • Python 3.x and pip3 must be installed
  • Must Install paramiko & scp for python3
  • The switch is reachable from the windows system
  • Switch Sysadmin role user
  • Must not have “system-cli disable” configured
  • Ensure use python3/pip3 if both python2 & 3 are installed
 

Steps to Run Script from Windows


1.  Download and Install the latest 3.x python and pip3

https://www.python.org/downloads/  image.png

image.png

image.png

ALERT:  Ensure to check “Add Python 3.9 to PATH”

2.  Download and unzip cert.zip to a temporary directory

https://www.dell.com/support/software/us/en/04



 
3.  Admin Open command prompt to a temporary directory
 

cd c:\Users\cert\Downloads\cert_upgrade_script-4\cert_upgrade_script-4

 
4.  PIP install paramiko & scp
 
pip install paramiko scp



5.  Run file to each switch IP or with host file per readme.

python cert.py -u "admin" -p "admin" -h "<IP>" -c
python cert.py -u "admin" -p "admin" -h "<IP>"
python cert.py -u "admin" -p "admin" -h "<IP>" -c



 

6.  After executing the script check the LKB article (Dell Networking OS10 Certificate Expiration and Solution) for the next steps.

ALERT: Flap the VLTi or reload switch based upon KB steps for cert to take effect.
 

Command Summary:

 
Command Explanation
cd c:\Users\cert\Downloads\cert_upgrade_script-4\cert_upgrade_script-4 Move into the extracted cert directory
pip install paramiko scp Install required python modules
python cert.py -u "admin" -p "admin" -h "<IP>" -c check the switch is vulnerable.
python cert.py -u "admin" -p "admin" -h "<IP>" Run script to change the cert
python cert.py -u "admin" -p "admin" -h "<IP>" -c Check to see if the switch was updated
 

Items to Take Note

  • The script does version checks if running lower than 10.4.3.x
    • If running lower than this version will create the message “running a version less than 10.4.3.x, please upgrade to newer version”
  • The script does version check for greater than 10.5.1.0. (in script version v4)
    • the system not vulnerable if other switches in the cluster are also running 10.5.1.0 or later
    • Newer firmware may have affected cert however it is not in use as such can be ignored or upgraded without concern
  • Ensure to use “ (double quotes) if special characters are in username or password on windows.

Dotčené produkty

PowerSwitch S3048-ON, PowerSwitch S4048-ON, Dell EMC Networking MX5108n, Dell EMC Networking MX9116n, Dell EMC Networking N3200-ON, PowerSwitch S4048T-ON, PowerSwitch S4148U-ON, PowerSwitch S5148F-ON, PowerSwitch S5212F-ON, PowerSwitch S5224F-ON

Produkty

PowerSwitch S4112F-ON/S4112T-ON, PowerSwitch S4128F-ON/S4128T-ON, PowerSwitch S4148F-ON/S4148T-ON/S4148FE-ON, PowerSwitch S4248FB-ON /S4248FBL-ON, PowerSwitch S5232F-ON, PowerSwitch S5248F-ON, PowerSwitch S5296F-ON, PowerSwitch S6010-ON , PowerSwitch S6100-ON, PowerSwitch Z9100-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON ...
Vlastnosti článku
Číslo článku: 000188441
Typ článku: How To
Poslední úprava: 21 Jun 2021
Verze:  2
Najděte odpovědi na své otázky od ostatních uživatelů společnosti Dell
Služby podpory
Zkontrolujte, zda se na vaše zařízení vztahují služby podpory.