StoreEasy Storage

HPE StoreEasy 1660

 
SOLVED
Go to solution
Chiefbibb
Regular Visitor

HPE StoreEasy 1660

Working on a US Army classified system/network, trying to upgrade NAS 1660 StoreEasy Management Console from 1.2.2.66 to 1.2.6.25. A vulnerability scan identified the need to upgrade.

We are getting an error "The wizard was interrupted before HPE StoreEasy management console could be complely installed" We have tried installing older versions and getting same error.

We looked in \nas\logs\HPE StoreEasy Telentry Service error.logs and application.logs and saw an error pointing to a file missing "SemcServiceCertificate.pem missing" location: C:\\Program Files\HPE\Apache\cong\ssl\SemcServiceCertificate.pem. Looked in that directory and that file is in fact missing. 

Could this file have anything to do with the failed upgrade of the management console? 

6 REPLIES 6
ArunKKR
HPE Pro
Solution

Re: HPE StoreEasy 1660

HI,

 

Have you tried uninstalling SEMC version 1.2.2 , restarting the server and installing latest version after downloading it from below web link?

 

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_4c340aa5ac3c44cc80ec445598

 

I have seen update failure while trying to use the update option with in SEMC.

 

The file SemcServiceCertificate.pem is indeed present in the location listed below in one of the servers I checked.

 

C:\Program Files\HPE\Apache24\conf\ssl

 

My guess is this is an auto created file during the installation and should not cause update failure.

 

 

While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the company

Accept or Kudo

ArunKKR
HPE Pro

Re: HPE StoreEasy 1660

Hi,

 

May I know whether reinstallation helped?

While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the company

Accept or Kudo

Chiefbibb
Regular Visitor

Re: HPE StoreEasy 1660

Hi,

I unistalled the version 1.2.2.66 management console as you sugested, rebooted the server. I downloaded the install file version 1.2.6.25 you provided and ran the installation, Same issue, The installation failed.

I reinstalled the 1.2.2.66 version with no issuses. After the install completed I logged into the Management console with no issues. I then tried again to install the version 1.2.6.25, this time it worked great. Not sure why, but looks like removing and re-installing the old version and then upgrading to 1.2.6.25 worked. Thank you for your assistance. 

Another Question, How to upgrade the Apache web server? The Apache "http.exe" file is getting tagged by our ACAS vulnerability scanner as a critical upgrade. The ACAS scanner recomends to upgrade Apache from 2.4.39.0 to 2.4.46. 

Thank you,

Mike

ArunKKR
HPE Pro

Re: HPE StoreEasy 1660

Hi,

 

I dont see storeasy servers as impacted by the last Apache vulnerability that I could find on HPE security bulletins page: 

 

https://www.hpe.com/us/en/services/security-vulnerability.html

 

https://techhub.hpe.com/eginfolib/securityalerts/Struts-CVE-2018-11776/Struts-CVE-2018-11776.html

 

All the latest firmware/driver updates for the server could be installed using SPP disk.

 

Latest SPP download link:

 

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_03b559aa36b84e2b9d345692cb#tab-history

 

However, I dont see apache in the list of updates as part of SPP

 

Probably you could try using update from Apache web site if its indeed critical:

 

https://downloads.apache.org/httpd/Announcement2.4.html

 

While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the company

Accept or Kudo

Chiefbibb
Regular Visitor

Re: HPE StoreEasy 1660

I downloaded the Apache install and replaced the apache httpd.exe file, We rescanned with ACAS and now good to go.

FYI, Here is the link to the tenable website that discussed the Apache httpd.exe vulnerability.

https://www.tenable.com/plugins/nessus/139574

Thank you for your assistance,

Mike

 

ArunKKR
HPE Pro

Re: HPE StoreEasy 1660

Hi Mike,

 

I had an internal check and we should not be ideally using updates from external sites.

The future release of SEMC 1.3.1 should come along with newer version Apache.

 

While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the company

Accept or Kudo