HPE Storage Users Group
https://3parug.com/

Certificate expired on 3PAR 8200 - cannot renew...
https://3parug.com/viewtopic.php?f=18&t=3314
Page 1 of 1

Author:  staun [ Wed Nov 20, 2019 2:47 am ]
Post subject:  Certificate expired on 3PAR 8200 - cannot renew...

Just found out that our self-signed certificate has expired and now trying to renew it but I get a Permission denied and not sure why.

I followed this article to : viewtopic.php?f=18&t=2578

But get this error

3PAR01 cli% createcert unified-server -selfsigned -CN "HP_3PAR 8200-XXXXXXXX"
createcert : Permission denied
3PAR01 cli%

Even when I just type createcert I get a Permission denied.??

Anyone know why I cannot renew my certificate or create a new?

Author:  markinnz [ Wed Nov 20, 2019 4:09 am ]
Post subject:  Re: Certificate expired on 3PAR 8200 - cannot renew...

You need to be "super"

run "showuser" and see what your user is.

Author:  staun [ Wed Nov 20, 2019 4:16 am ]
Post subject:  Re: Certificate expired on 3PAR 8200 - cannot renew...

I am logged in as standard user 3parcust - seems that there are some other users (with super permissions), but I do not have login for those (system has been configured by consultant house....) - Looks like I have to contact them about this..

Author:  markinnz [ Wed Nov 20, 2019 4:34 am ]
Post subject:  Re: Certificate expired on 3PAR 8200 - cannot renew...

Yup! Someone else has the keys to your array .. might want to correct that :-)

Author:  MammaGutt [ Wed Nov 20, 2019 8:55 am ]
Post subject:  Re: Certificate expired on 3PAR 8200 - cannot renew...

3parcust is the default user on the Service Processor which doesn't have access to run all commands when connecting to the 3PAR via the Service Processor. You should have a 3paradm user directly on the 3PAR which will allow you to run the required commands.

Author:  staun [ Thu Nov 21, 2019 1:30 am ]
Post subject:  Re: Certificate expired on 3PAR 8200 - cannot renew...

Problem solved - Stupid me connected to my Service processor and not my storage system.... :oops:

After SSH to the right IP I was able to use the createcert command.

Page 1 of 1 All times are UTC - 5 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/