OnCommand Storage Management Software Discussions

Re: How to migrate OnCommand Core Package (DFM) servers?

Hi Mariko-san,

                 This looks like some issue with the encryption keys. I suggest you open a case with netapp support. You can also try what peter said, but that is more with respect to certificates and not keys.

also you can you paste the error message from error.log ?

Regards

adai

Re: How to migrate OnCommand Core Package (DFM) servers?

Thanks Peter and all.

Actually the command dfm ssl server setup ended up fail but I got a hint from your comment.

I checked and compared the files under /opt/xxx/conf/keys/  between Server_A and Server_B.

[E3][root@Server_A keys]# ls -la

drwxr-xr-x 5 root root 4096 Feb 28 02:21 .

drwxrwxr-x 3 root root 4096 Feb 28 02:21 ..

drwxr-xr-x 2 root root 4096 Feb 28 02:21 certs

-rw-r--r-- 1 root root  150 Feb 28 02:17 dfmenc.keys  <--- Permission 644

drwxr-xr-x 2 root root 4096 Feb 28 02:21 private_keys

drwxr-xr-x 2 root root 4096 Feb 28 02:21 truststore

[root@Server_B keys]# ls -la

drwxr-xr-x 5 root root 4096 Jul  2 07:52 .

drwxrwxr-x 3 root root 4096 Jul  3 01:11 ..

drwxr-xr-x 2 root root 4096 Jul  2 06:28 certs

-rw------- 1 root root  150 Jul  2 06:38 dfmenc.keys    <----- permission 600

drwxr-xr-x 2 root root 4096 Jul  2 06:28 private_keys

drwxr-xr-x 2 root root 4096 Jul  2 06:29 truststore

[root@Server_B keys]# chmod 644 dfmenc.keys

I changed permission of dfmenc.keys to 644. then I successfully login to the new server. Everything on the Server_A is migrated to Server_B.

Thank you so much for your help!

Mariko

Re: How to migrate OnCommand Core Package (DFM) servers?

Hi Mariko-san,

         Good to know that the issue got solved. But I would like to know how the permission of the dfm encyc key got changed ?

Do you have any idea how this could have happended ?

Regards

adai

Re: How to migrate OnCommand Core Package (DFM) servers?

Hi, Adai.

I'm not sure why the permission of dfmenc.keys was 600.

I found dfmenc.keys.0 file existing under /opt/xxx/conf/keys. The permission was 644 while dfmenc.key  was 600.

It may be a hint.

Mariko

Re: How to migrate OnCommand Core Package (DFM) servers?

When we restore there is no change in the permissions of the folders. If it was 600 before then even that server should have encountered that problem right ?

Regards

adai

Re: How to migrate OnCommand Core Package (DFM) servers?

Adai,

I thing you are right.   I just restored the DB in server_B right after installing OnCommand from the scratch. So I'm not sure what permission it had before restoring in server_B.

Mariko

Forums