Dell Unity: uemcli command fails with error code 0x1000100. (User Correctable)

- When running the uemcli command with the "-silent" option, an error is generated instead of the command being ran.

# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show
Unable to validate the specified certificate. (Error Code:0x1000100)

- When run without the "-silent" option, a Certificate-related menu is displayed.
Selecting "[2] Reject the certificate" here generate an error message.

# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show
Remote certificate:
Issuer:     CN=CKM00xxxxxxxxx
Subject:    CN=CKM00xxxxxxxxx
Valid from: 20xx:mm:dd:hh:mm:ss
Valid to:   20xx:mm:dd:hh:mm:ss
Serial:     00xxxxxxxxxxxxxxxxx
Id:         xxxxxxxxxx
Would you like to:
  [1] Accept the certificate for this session
  [2] Reject the certificate
  [3] Accept and store
Please input your selection (The default selection is [1]): 2
Operation failed. Error code: 0x1000100
Unable to validate the specified certificate. (Error Code:0x1000100)

Once the Certificate is Accept and Store when the uemcli command is ran, the information is stored in the lockbox of the Local System where the command was ran.
In that case, while the certificate is valid, the next time uemcli command is ran, it will not ask for confirmation of the certificate's response.

However, using the "-silent" option results in an error if a situation requires confirmation regarding the correspondence of the certificate when the uemcli command is ran.

These occur in the following situations.
(1) If the information corresponding to the current certificate is not stored in the lockbox of the system on which the uemcli command was ran.
(2) When a Certificate on Unity is updated to a new certificate or expires.

- Command to check the information stored in the lockbox of the system on which the uemcli command was ran. 
(If unisphere client is running on windows or linux, run it on that client, if uemcli command is running on Unity SP, check it on SP.)
# uemcli -certList

If the situation matches the above, the following actions are expected to improve the situation.

[Option 1:]
Manually run the uemcli command without the "-silent" option and select "[3] Accept and store" when asked about how would you like the Certificate to be.

# uemcli /sys/general show
.....
Would you like to:
  [1] Accept the certificate for this session
  [2] Reject the certificate
  [3] Accept and store <<< select this.
.....

Consider:
If the certificate has expired, the menu in [3] does not appear. Update the certificate by following the KB below.
https://www.dell.com/support/kbdoc/en-us/000022509/dell-emc-unity-how-to-manually-renew-a-unity-management-ssl-certificate-user-corretable

Once a Certificate is accepted and store, the selection screen is not displayed for each command execution while the Certificate is valid.

# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show
1:    System name           = CKM00xxxxxxxxx
      Model                 = Unity 300
      Product serial number = CKM00xxxxxxxxx
      Auto failback         = on
      Health state          =  OK (5)

[Option 2:]
Add the "-sslPolicy accept" option to the uemcli command.
This option automatically accepted the certificate when the uemcli command is ran.

Before:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show
Unable to validate the specified certificate. (Error Code:0x1000100)

After:
# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent -sslPolicy accept /sys/general show
1:    System name           = CKM00xxxxxxxxx
      Model                 = Unity 300
      Product serial number = CKM00xxxxxxxxx
      Auto failback         = on
      Health state          =  OK (5)

See the following for a description of the "-sslPolicy" and "-certList" options of the uemcli command.

Dell EMC Unity XT 380, Dell EMC Unity XT 380F, Dell EMC Unity XT 480, Dell EMC Unity XT 480F, Dell EMC Unity 600F, Dell EMC Unity 650F, Dell EMC Unity XT 680, Dell EMC Unity XT 680F, Dell EMC Unity XT 880, Dell EMC Unity XT 880F , Dell EMC Unity Family |Dell EMC Unity All Flash, Dell EMC Unity Family, Dell EMC Unity Hybrid, Dell EMC UnityVSA Professional Edition/Unity Cloud Edition ... Visualizar mais Visualizar menos