Dell Networking OS10 How to Run Certificate Update from Windows with Python

Summary: How to update the OS10 certificate using Python from Windows.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Table of Contents


1.  Requirements to be Met
2.  Steps to Run Script from Windows
3.  Command Summary
4.  Items to Take Note


Requirements to be Met

 
  • Python 3.x and pip3 must be installed
  • Must Install paramiko & scp for python3
  • The switch is reachable from the windows system
  • Switch Sysadmin role user
  • Must not have “system-cli disable” configured
  • Ensure use python3/pip3 if both python2 & 3 are installed
 

Steps to Run Script from Windows


1.  Download and Install the latest 3.x python and pip3

https://www.python.org/downloads/  image.png

image.png

image.png

ALERT:  Ensure to check “Add Python 3.9 to PATH”

2.  Download and unzip cert.zip to a temporary directory

https://www.dell.com/support/software/us/en/04



 
3.  Admin Open command prompt to a temporary directory
 

cd c:\Users\cert\Downloads\cert_upgrade_script-4\cert_upgrade_script-4

 
4.  PIP install paramiko & scp
 
pip install paramiko scp



5.  Run file to each switch IP or with host file per readme.

python cert.py -u "admin" -p "admin" -h "<IP>" -c
python cert.py -u "admin" -p "admin" -h "<IP>"
python cert.py -u "admin" -p "admin" -h "<IP>" -c


 

6.  After executing the script check the LKB article (Dell Networking OS10 Certificate Expiration and Solution) for the next steps.

ALERT: Flap the VLTi or reload switch based upon KB steps for cert to take effect.
 

Command Summary:

 
Command Explanation
cd c:\Users\cert\Downloads\cert_upgrade_script-4\cert_upgrade_script-4 Move into the extracted cert directory
pip install paramiko scp Install required python modules
python cert.py -u "admin" -p "admin" -h "<IP>" -c check the switch is vulnerable.
python cert.py -u "admin" -p "admin" -h "<IP>" Run script to change the cert
python cert.py -u "admin" -p "admin" -h "<IP>" -c Check to see if the switch was updated
 

Items to Take Note

  • The script does version checks if running lower than 10.4.3.x
    • If running lower than this version will create the message “running a version less than 10.4.3.x, please upgrade to newer version”
  • The script does version check for greater than 10.5.1.0. (in script version v4)
    • the system not vulnerable if other switches in the cluster are also running 10.5.1.0 or later
    • Newer firmware may have affected cert however it is not in use as such can be ignored or upgraded without concern
  • Ensure to use “ (double quotes) if special characters are in username or password on windows.

Affected Products

PowerSwitch S3048-ON, PowerSwitch S4048-ON, Dell EMC Networking MX5108n, Dell EMC Networking MX9116n, Dell EMC Networking N3200-ON, PowerSwitch S4048T-ON, PowerSwitch S4148U-ON, PowerSwitch S5148F-ON, PowerSwitch S5212F-ON, PowerSwitch S5224F-ON

Products

PowerSwitch S4112F-ON/S4112T-ON, PowerSwitch S4128F-ON/S4128T-ON, PowerSwitch S4148F-ON/S4148T-ON/S4148FE-ON, PowerSwitch S4248FB-ON /S4248FBL-ON, PowerSwitch S5232F-ON, PowerSwitch S5248F-ON, PowerSwitch S5296F-ON, PowerSwitch S6010-ON , PowerSwitch S6100-ON, PowerSwitch Z9100-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON ...
Article Properties
Article Number: 000188441
Article Type: How To
Last Modified: 21 Jun 2021
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.