Replacing SSL certificate for HPSMH

This is for replacing the SSL certificate used in HP SMH aka "System Management Homepage", especially after a few round of SSL issues coming from openssl to SSLv3.

The steps are as follows

Step 1
- Logon to HPSMH
- Click from the menu, "Settings" -> "Security" -> "Local Server Certificate"
- Fill up the necessary fields. (Alternative Names should be FQDN)

Step 2
- Logon to the server
- copy the content in req_cr.pem file. (should be in C:\hp\sslshare by default i think)

Step 3
- Register the CSR with your CA to obtain the final X509 certificate (Base 64 encoded in PEM format)

Step 4
- Replace the new certificate over the existing cert.pem (if any).
- Restart HPSMH service.


reference: http://www.admin-enclave.com/en/solutions/windows/47-replace-the-ssl-certificate-for-hp-system-management-homepage-with-a-ca-generated-one.html

How to Check the Product ID / Serial Number of the HP blade

This is similar to the sneep command in solaris.

To Check on the Product ID
root@myserver:~>#dmidecode |grep 'Product ID'
String 1: Product ID: 347957-B21

To Check on the Serial Number
root@myserver:~>#dmidecode |grep 'Serial Number'
Serial Number: XXXXXXXXXX (For the Blade Server)
Serial Number: YYYYYYYYYY (For the Blade Chasis/Enclosure)
Or

root@myserver:~>#hpasmcli -s "show server" | grep 'Serial'
Serial No. : XXXXXXXXXX

If not listed, then have to check the blade label physically... :)

How to start HP Insight Diagnostics

Using HP Offline Insight Diagnostics using the SmartStart CD

Click on http://h18023.www1.hp.com/support/files/server/us/download/24733.html

Download the file to a temporary directory and extract the ISO image to that directory. To create a CD from this ISO image, you must use a software utility capable of writing an ISO file to a recordable media such as CD-R.

Note: Simply copying the ISO file to a CD-R will NOT result in a usable CD.

Then boot off the server using the SmartStart CD and then Click On Maintain Server
Then click on Diagnose Server
The Insight Diagnostics Window Opens Up
Change the 'view level' from the default 'Overview' to 'Advanced'.
Under 'categories' drop down box, select 'All'
Save the file as default on a floppy disk

Recently, i have encountered a few of the BL25p blades that cant even boot up. Then we won't be able to use this tool at all.

Do beware that HP support may insist that you patch, the firmwares, iLO, etc, which i think is a waste of time. Insist on a on-site engineer if you have the contract else likely its hardware issue. In my case, was a faulty mainboard.

How to Display IML logs without going to iLO

while logged into the blade, fire up your favourite terminal and try the following.

# /sbin/cpqimlview
# /sbin/hplog -v
# /sbin/hplog -V = view the entire log starting at entrynum

How to Access HP C-Class Blades iLO2 and C-Class Enclosure OA using SSH

Just to share here are some of the commands you can use to check on the HP blades other than using iLO2/OA through HTTP.

For Blade Servers

Logging in
> ssh @

- Displaying information in iLO2

In iLO2 CLI, information is organised in folders, therefore 'cd' is used to navigate around.

In the below example, there are 2 folders "system1" and "map1".
"system1" has all the hardware information for the blade you are in.
"map1" has all the iLO2 configuration for the blade you are in.

e.g.
hpiLO-> show
status=0
status_tag=COMMAND COMPLETED


/
Targets
system1
map1
Properties
Verbs
cd version exit show set

Basically, use the 'cd' command to navigate and "show" command to display the information.

You will know that you are at the end of the tree branch when you see nothing in the "Targets" listing.

when you "show", the information will be display under the "Properties".

e.g.
hpiLO-> cd /system1/fan1
status=0
status_tag=COMMAND COMPLETED


/system1/fan1


hpiLO-> show
status=0
status_tag=COMMAND COMPLETED


/system1/fan1
Targets
Properties
DeviceID=Virtual Fan
ElementName=System
OperationalStatus=Ok
VariableSpeed=Yes
DesiredSpeed=37
HealthState=Ok
Verbs
cd version exit show set

if you know the direct path, you can do the following as well.

e.g.
hpiLO-> show /system1/cpu1/logical_processor1
status=0
status_tag=COMMAND COMPLETED


/system1/cpu1/logical_processor1
Targets
Properties
current_pstate=1
pstate0_avg=0.0
pstate1_avg=100.0
pstate2_avg=0.0
pstate3_avg=0.0
pstate4_avg=0.0
pstate5_avg=0.0
pstate6_avg=0.0
pstate7_avg=0.0
Verbs
cd version exit show set

If you want to show everything to that you can pipe to somewhere else for further processing, try this.

e.g.

hpiLO-> show -l all system1

Reset the system
This will reboot the blade

hpiLO-> reset system1

Power off the system gracefully.
This will shutdown the blade gracefully.

hpiLO-> stop

Power off the system forcefully.
This will shutdown the blade forcefully without going through the OS levels.

hpiLO-> stop -f

Power up the system.
This will power up the blade

hpiLO-> start system1

Reset iLO2.
This will reset iLO2.

hpiLO-> reset map1

*tip* to backspace when you typo, use shirt+backspace.

Reference:

For Blade Enclosure OA

Logging in
> ssh @

The OA CLI is different from iLO2 CLI. There is no need to "navigate".
The command set is as follows,

e.g.
OA-00237D382975> help

ADD ASSIGN CLEAR CONNECT DISABLE DOWNLOAD ENABLE EXIT FORCE GENERATE HELP
HISTORY HPONCFG LOGOUT PING POWEROFF POWERON QUIT REBOOT REMOVE RESTART SET SHOW
SLEEP TEST UNASSIGN UPDATE UPLOAD

OA-00237D382975> help show

SHOW { ALL | CA | CONFIG | DATE | DEVICE | DISPLAY EVENT(S) | EBIPA | ENCLOSURE
| FRU | HPSIM INFO | INTERCONNECT | LDAP | NETWORK | OA | PASSWORD SETTINGS |
POWER | RACK NAME | SERVER | SESSION TIMEOUT | SNMP | SSHFINGERPRINT | SSHKEY |
SYSLOG | TOPOLOGY | TWOFACTOR | UPDATE | USBKEY | USER | VCMODE }



Showing the c7000 enclosure information.

e.g.
OA-00237D382975> show enclosure info

Enclosure Information:
Enclosure Name: Your Enclosure Name
Enclosure Type: BladeSystem c7000 Enclosure
Part Number: 412152-B21
Serial Number: Your Serial Number
UUID: Your UUID
Asset Tag:
Midplane Spare Part Number: 414050-001
Power Distribution Unit:
PDU Type: HP AC Module, Single Phase
PDU Spare Part Number: 413494-001
Onboard Administrator Tray Information:
Type: HP BladeSystem c7000 Onboard Administrator Tray
Spare Part Number: 416000-001
Serial Number: Your OA Serial Number

Shown here for OA CLI are the "show" commands only since changing parameter in the OA may cause impact to the other blade systems.
Please refer to attached if you need to set parameters.

HP Utilities for C-Class BL460c G1

Here is a little summary of the commands you can script it up or cron it to check the health of the blades.

I'm doing them on ProLiant Support Pack 8.12 in Linux

- Raid Health Check
This will list the logical drive in the blade.
If there is any replacement of disk, you will see the resyncing of the disk here.
If there is fault on the array, the error will be displayed here as well.

# hpacucli ctrl slot=0 logicaldrive all show


- Health Check for array controller, cache and battery
This list the health of the a/m.

# hpacucli ctrl all show status


- Detailed Information on the Smart Array
This display the serial number of the array controller as well as the cache.
Hardware revision and firmware version as well as other disk settings are also displayed.

# hpacucli ctrl slot=0 show


- Enable/Disable drive cache
Some controllers and drives support physical drive write cache, but since this is not backed by battery, it is recommended to disable the disk write cache or use a backup power supply.

# hpacucli ctrl slot=0 modify dwc= [forced]


- Display the list of arrays and the physical drives belonging to the array
This will display the logical mapping of the physical disk to the array.

# hpacucli controller all show config


- Display the list of arrays and the physical drives belonging to the array with more details
Includes the previous command with mount point, disk name, disk information and its firmware revision and serial number.

# hpacucli controller all show config detail


- Display a variety of health and information status of the blade
ASR, BOOT, DIMM, F1, FANS, HT, IML, IPL, NAME, PORTMAP, POWERSUPPLY,
PXE, SERIAL , SERVER, TEMP UID, WOL

# hpasmcli -s "show "

How to Check warranty for HP blades

You can use the following link to check if the blade is under warranty.

http://h10025.www1.hp.com/ewfrf/wc/weInput?lc=en

Do note that HP database must be updated by 3rd party vendors if any support is purchased from 3rd party vendor in order for this to return meaningful results.

Also, the product number can be queried from either iLO2 page or from the label on the server. Serial number can be queried using hpasmcli -> show server.

Choose your Country, Serial and Product Number and you are good to go.