Cisco UCS Manager certificate expired and we had to re-generate it. See my ‘HOW TO: Regenerate expired UCS Manager certificate‘ blog post for details.
How to replace UCS certificate that was imported into UIM/P?
Well, in UIM/P 3.2 it is dead easy:
cd /opt/ionix-uim/tools ./importUcsCertificate.pl
enter UCS IP address and UIM/P will do the rest. See full output on the “Install and configure EMC UIM/P” blog post, step 8.4.2.
As one of my UIM/P’s is still on 3.1.1, I had to upload new UCSM certificate and install it again:
Upload new UCM certificate to ‘/opt/ionix-uim/conf/CA’ folder and run the following command:
vim001:/opt/ionix-uim/conf/CA # openssl x509 -inform DER -in DC1-VFC01.der -out DC1-VFC01.crt vim001:/opt/ionix-uim/conf/CA # ./cert_hash.pl Installing:DC1-VFC01.crt.... Installing:UCSM.crt.... Installing:voyenceca.crt.... You must now restart device services to reload the certificate cache. Please make sure there are no provisioning or other tasks running and then issue this command: service uim-device-services restart vim001:/opt/ionix-uim/conf/CA # service uim-device-services restart Stopping uim-device-services done Starting uim-device-services Device Master Service started Device Service started done
I tried to discover Vblock in UIM/P but it failed:
I noticed that two things were not just right. First, UCS software version was not correct. Since this Vblock was discovered, we upgraded USC Manager to 2.0(4b) in line with VCE Support Matrix 3.0.8. and the second is that both, old and new certificates were imported:
vim001:/opt/ionix-uim/conf/CA # ./cert_hash.pl Installing:DC1-VFC01.crt.... - new certificate Installing:UCSM.crt.... - old certificate
Here is the content of ‘/opt/ionix-uim/conf/CA’ folder – both certificates are still there:
The solution is simple – delete old certificate from ‘/opt/ionix-uim/conf/CA’ and run ‘./cert_hash.pl’ again:
UPDATE courtesy of Ziggy: Sometimes it might be necessary to delete *.0 files as well.
pdc1vim001:/opt/ionix-uim/conf/CA # ./cert_hash.pl Installing:DC1-VFC01.crt.... Installing:voyenceca.crt.... You must now restart device services to reload the certificate cache. Please make sure there are no provisioning or other tasks running and then issue this command: service uim-device-services restart pdc1vim001:/opt/ionix-uim/conf/CA # service uim-device-services restart Stopping uim-device-services done Starting uim-device-services Device Master Service started Device Service started done
Vblock discovery was successful and the UCS OS version is correct as well:
Hope this will help.
Hi Mark, sometimes it might be necessary to delete *.0 as well.
Regards
Ziggy
Hi Ziggy,
Thank you for your comment. I will update the post.
Regards,
Mark
Hi, Do you know how to stop Master Device Service (only)?
I mean just Device Master Serivce..because when I am running service uim-device-services restart it failed saying following
Device Master Service is already started, stop the other process first before starting the services: Address already in use
startproc: exit status of parent of /opt/ionix-uim/bin/voyenced: 2
Hi Amy,
You might have zombie services.
Try do
service uim-service-wrapper stop
to stop all services
then do
ps -ef | grep uim
and if you still have any service running kill it
then just start wrapper
regards
Ziggy
I did as per you suggested. The only process running after stopping wrapper service were root (ssh). Any other suggestion?
Hi Mark
It really worked for me, Thanks for this great blog