天天看点:华为超融合故障处理一则 fusioncube6.5 证书已经过期 FS_MANAGER

来源:哔哩哔哩 2021-11-05 12:02

查看系统版本:FusionStorage Block V100R006C30SPH505

故障描述:


(资料图片仅供参考)

重要    证书已经过期    FS_MANAGER    Server    FusionStorage附加信息:    证书类型=OMM_Tomcat_Certificate流水号:    1743告警级别:    重要对象类型:    Server对象ID:    FS_MANAGER部件名称:    FusionStorage01告警ID:    51302告警名称:    证书已经过期告警对象:    FS_MANAGER部件类型:    FusionStorage

官方处理说明:https://support.huawei.com/enterprise/zh/doc/EDOC1100171940?idPath=7919749%7C251364444%7C21430817%7C251366260%7C21905727证书下载:https://support.huawei.com/enterprise/zh/software/252011923-ESW2000293854

处理过程:1、查看主节点登录FSM主节点,即fusioncube的主IP,也是FCC的主IP,通过ssh登录登陆用户名dsware用户默认密码为IaaS@OS-CLOUD9!登陆后切换到root用户

su - root

root用户默认密码为IaaS@OS-CLOUD8!查看节点状态,active为主节点,如果不是请确认IP是否正确

/opt/omm/oms/workspace/ha/module/hacom/script/get_harole.shactive

2、上传证书上传至/home/dsware/

3、执行一键替换脚本证书密码为Huawei@123,必须在root目录中执行

[root@FCC02 ~]# sh /home/dsware/One-click_replace_cert.sh------------------------------------------------------------------------STEP 1     Check the environment requirements.     Check Success! HA role is active.                            [done]     Check Success! The certificate in use is the default certific[done]     Check Success! New Certificate file has upload /home/dsware. [done]     Node Version is V100R006C30SPH505                            [done]------------------------------------------------------------------------STEP 2     Back up the certificate in use to the /home/dsware/ directory.     Backup the CRT in use to directory /home/backup_default_certi[done]------------------------------------------------------------------------STEP 3     Obtaining the Password of the New Certificate     Enter the protection key of the /home/dsware/tomcat_server.jks.Please Enter: Huawei@123     /home/dsware/tomcat_server.jks password check SUCCESS.       [done]------------------------------------------------------------------------STEP 4    Execute CLI to upload the script to the specified directory.-----------------------step 4.1 save tomcat_client.jks----------------     Execute dsware_tool save tomcat_client.jks SUCCESS.          [done]-----------------------step 4.2 save tomcat_server.jks----------------     Execute dsware_tool save tomcat_server.jks SUCCESS.          [done]------------------------------------------------------------------------STEP 5    Execute CLI to update TomcatCertificate.-----------------------step 5.1 update cert ----------------     Execute dsware_tool update crt tomcat_server.jks SUCCESS.    [done]------------------------------------------------------------------------STEP 6      Check whether the service is normal after the certificate is replaced.-----------------------Check whether dsware_tool is available.----------------     Check dswareTool FAIL 1/5 TIMES                              [fail]     Check dswareTool FAIL 2/5 TIMES                              [fail]     Check dswareTool FAIL 3/5 TIMES                              [fail]     Check dswareTool SUCCESS.!                                   [done]Congratulations. Certificate replaced successfully.

4、故障码清除咨询客服得知,故障码将在一段时间后自动清除

关键词: 一段时间 是否正确 故障处理

上一篇:
下一篇:
为你精选