Dell Unity: uemcli command fails with error code 0x1000100. (User Correctable)
概要: This KB describes the cause of error code 0x1000100 and its solution.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
現象
- When running the uemcli command with the "-silent" option, an error is generated instead of the command being ran.
- When run without the "-silent" option, a Certificate-related menu is displayed.
Selecting "[2] Reject the certificate" here generate an error message.
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show Unable to validate the specified certificate. (Error Code:0x1000100)
- When run without the "-silent" option, a Certificate-related menu is displayed.
Selecting "[2] Reject the certificate" here generate an error message.
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show Remote certificate: Issuer: CN=CKM00xxxxxxxxx Subject: CN=CKM00xxxxxxxxx Valid from: 20xx:mm:dd:hh:mm:ss Valid to: 20xx:mm:dd:hh:mm:ss Serial: 00xxxxxxxxxxxxxxxxx Id: xxxxxxxxxx Would you like to: [1] Accept the certificate for this session [2] Reject the certificate [3] Accept and store Please input your selection (The default selection is [1]): 2 Operation failed. Error code: 0x1000100 Unable to validate the specified certificate. (Error Code:0x1000100)
原因
Once the Certificate is Accept and Store when the uemcli command is ran, the information is stored in the lockbox of the Local System where the command was ran.
In that case, while the certificate is valid, the next time uemcli command is ran, it will not ask for confirmation of the certificate's response.
However, using the "-silent" option results in an error if a situation requires confirmation regarding the correspondence of the certificate when the uemcli command is ran.
These occur in the following situations.
(1) If the information corresponding to the current certificate is not stored in the lockbox of the system on which the uemcli command was ran.
(2) When a Certificate on Unity is updated to a new certificate or expires.
- Command to check the information stored in the lockbox of the system on which the uemcli command was ran.
(If unisphere client is running on windows or linux, run it on that client, if uemcli command is running on Unity SP, check it on SP.)
# uemcli -certList
In that case, while the certificate is valid, the next time uemcli command is ran, it will not ask for confirmation of the certificate's response.
However, using the "-silent" option results in an error if a situation requires confirmation regarding the correspondence of the certificate when the uemcli command is ran.
These occur in the following situations.
(1) If the information corresponding to the current certificate is not stored in the lockbox of the system on which the uemcli command was ran.
(2) When a Certificate on Unity is updated to a new certificate or expires.
- Command to check the information stored in the lockbox of the system on which the uemcli command was ran.
(If unisphere client is running on windows or linux, run it on that client, if uemcli command is running on Unity SP, check it on SP.)
# uemcli -certList
解決方法
If the situation matches the above, the following actions are expected to improve the situation.
[Option 1:]
Manually run the uemcli command without the "-silent" option and select "[3] Accept and store" when asked about how would you like the Certificate to be.
# uemcli /sys/general show
.....
Would you like to:
[1] Accept the certificate for this session
[2] Reject the certificate
[3] Accept and store <<< select this.
.....
Consider:
If the certificate has expired, the menu in [3] does not appear. Update the certificate by following the KB below.
https://www.dell.com/support/kbdoc/en-us/000022509/dell-emc-unity-how-to-manually-renew-a-unity-management-ssl-certificate-user-corretable
Once a Certificate is accepted and store, the selection screen is not displayed for each command execution while the Certificate is valid.
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show
1: System name = CKM00xxxxxxxxx
Model = Unity 300
Product serial number = CKM00xxxxxxxxx
Auto failback = on
Health state = OK (5)
[Option 2:]
Add the "-sslPolicy accept" option to the uemcli command.
This option automatically accepted the certificate when the uemcli command is ran.
Before:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show
Unable to validate the specified certificate. (Error Code:0x1000100)
After:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent -sslPolicy accept /sys/general show
1: System name = CKM00xxxxxxxxx
Model = Unity 300
Product serial number = CKM00xxxxxxxxx
Auto failback = on
Health state = OK (5)
[Option 1:]
Manually run the uemcli command without the "-silent" option and select "[3] Accept and store" when asked about how would you like the Certificate to be.
# uemcli /sys/general show
.....
Would you like to:
[1] Accept the certificate for this session
[2] Reject the certificate
[3] Accept and store <<< select this.
.....
Consider:
If the certificate has expired, the menu in [3] does not appear. Update the certificate by following the KB below.
https://www.dell.com/support/kbdoc/en-us/000022509/dell-emc-unity-how-to-manually-renew-a-unity-management-ssl-certificate-user-corretable
Once a Certificate is accepted and store, the selection screen is not displayed for each command execution while the Certificate is valid.
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show
1: System name = CKM00xxxxxxxxx
Model = Unity 300
Product serial number = CKM00xxxxxxxxx
Auto failback = on
Health state = OK (5)
[Option 2:]
Add the "-sslPolicy accept" option to the uemcli command.
This option automatically accepted the certificate when the uemcli command is ran.
Before:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show
Unable to validate the specified certificate. (Error Code:0x1000100)
After:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent -sslPolicy accept /sys/general show
1: System name = CKM00xxxxxxxxx
Model = Unity 300
Product serial number = CKM00xxxxxxxxx
Auto failback = on
Health state = OK (5)
その他の情報
See the following for a description of the "-sslPolicy" and "-certList" options of the uemcli command.
対象製品
Dell Unity 300, Dell EMC Unity 300F, Dell EMC Unity 350F, Dell EMC Unity 400, Dell EMC Unity 400F, Dell EMC Unity 450F, Dell EMC Unity 500, Dell EMC Unity 500F, Dell EMC Unity 550F, Dell EMC Unity 600製品
Dell EMC Unity XT 380, Dell EMC Unity XT 380F, Dell EMC Unity XT 480, Dell EMC Unity XT 480F, Dell EMC Unity 600F, Dell EMC Unity 650F, Dell EMC Unity XT 680, Dell EMC Unity XT 680F, Dell EMC Unity XT 880, Dell EMC Unity XT 880F
, Dell EMC Unity Family |Dell EMC Unity All Flash, Dell EMC Unity Family, Dell EMC Unity Hybrid, Dell EMC UnityVSA Professional Edition/Unity Cloud Edition
...
文書のプロパティ
文書番号: 000206174
文書の種類: Solution
最終更新: 21 3月 2023
バージョン: 3
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。