Dell EMC Networking HiveManager site cloud.aerohive.com certificate expiration How to Manually Upgrade HiveAgent on Dell N Series Switches

Summary: How to connect Dell switches to HiveManager after cloud.aerohive.com certificate expiration / How to Manually Upgrade HiveAgent on Dell N Series switches

Article Content


Symptoms

Summary

 

 

Firmware Release 6.6.0.13 that includes the latest Hive Agent was released Dec 3, 2019. If customer can upgrade this is the easiest path to resolution. The 6.6.0.13 image files can be downloaded from the specific switch page on https://www.dell.com/support/

 

The HTTPS SSL certificate on https://cloud.aerohive.com SLN319098_en_US__1iC_External_Link_BD_v1 expires on October 23, 2019. This SSL cert was issued by "Comodo RSA Certification Authority".
 

SLN319098_en_US__2AE

 

Users will see the following message on their Dell HiveManager Appliance.

 SLN319098_en_US__3Important Message

The CA Branding has changed from Comodo and new certificate is available from Re-branded CA.
HiveAgent in Dell N Series switches has the Comodo root certificate hard coded into the devices and will need the new certificate chain to be installed.
HiveAgent Version 1.1.29 contains new CA certificate chain.
As mentioned in the message, switches connected to HiveManager before 10/21/2019 will automatically Upgrade to 1.1.29 HiveAgent. 

Until new version of OS 6 is released, which will include the new CA trust chain, any switches not connected to HiveManager before 10/21/2019 will need to manually update HiveAgent in order to connect to HiveManager after 10/23/2019. 

 

Software Fix


Following is the process of upgrading HiveAgent on Dell N Series switches Manually.

 
  • Use the following CLI to check and confirm the running HiveAgent Version.
     
    • show hiveagent status 
      • Note: If the  HiveAgent Version is not 1.1.29.0 or later, then HiveAgent needs to be upgraded.
      • Accept the EULA to get output from the below command "N3048(config)#eula-consent hiveagent accept"
                        N3048#show hiveagent status 

                        HiveAgent: Enabled
                        EULA: Accepted
                        
                        HiveManager Server Name: HiveManagerNG
                        HiveManager NG (enabled):
                        HiveAgent Version.............................. 0.2.68
                        HiveAgent Status............................... TRYING TO FETCH HMNG ADDRESS
                        HiveAgent AssociationUrl....................... -
                        HiveAgent AssociationMethod.................... IP_DHCP
                        HiveAgent PollUrl.............................. -


HiveAgent upgrade files for Dell switches are available on the Dell Aerohive SFTP Portal.
 

 

You must choose the file matching the switch version you are upgrading.

 

 

Refer to your original Hivemanager License email that you received at time of Hivemanger purchase for the login credentials for the sftp site.


Use a SFTP client to connect to the secure site like WINSCP.


SLN319098_en_US__4image(12682)


Download the HiveAgent 1.1.29 upgrade files from the Dell Aerohive SFTP portal (sftp://dellsupport.aerohive.com)
Unzip and upload the files to a ftp or tftp server

 
  • Use the following CLI commands to upgrade the HiveAgent on the switch.
    • enable
    • application stop hiveagent
    • delete user-apps/hiveagent
    • delete user-apps/hiveagent_pr
    • delete user-apps/hiveagent_pr_s
    • delete user-apps/ah_ha.conf
    • delete user-apps/ah_ha.conf_s
    • copy tftp://x.x.x.x/HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr_s
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent application hiveagent
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf
    • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf_s
    • configure
    • application install hiveagent start-on-boot
    • exit
    • copy running-config startup-config
    • application start hiveagent

       
  • Wait for about 30 seconds and then use the following CLI to check and confirm that HiveAgent Version reads 1.1.29.0
    • show hiveagent status
                        N3048#show hiveagent status 
                        
                        HiveAgent: Enabled
                        EULA: Accepted
                        
                        HiveManager Server Name: HiveManagerNG
                        HiveManager NG (enabled):
                        
                        ............................................... .......................................
                        HiveAgent Status............................... FAILED TO CONNECT TO REDIRECTOR/HIVEMANAGER, WAITING BEFORE TRYING AGAIN
                        HiveAgent Version.............................. 1.1.29.0
                        HiveAgent Debug................................ OFF
                        ............................................... .......................................
                        HiveAgent Association Method................... -
                        HiveAgent Association Url...................... -
                        HiveAgent Poll URL............................. -
                        ............................................... .......................................

                Once HiveAgent is upgraded, Switch will be able to connect to HiveManager with the New Certificate if it is on boarded on to the HiveManager. 

Article Properties


Affected Product

Aerohive Wireless Networking

Last Published Date

21 Feb 2021

Version

3

Article Type

Solution

Rate This Article


Accurate
Useful
Easy to Understand
Was this article helpful?

0/3000 characters