HPE StoreEasy 1660

[Chiefbibb]

Working on a US Army classified system/network, trying to upgrade NAS 1660 StoreEasy Management Console from 1.2.2.66 to 1.2.6.25. A vulnerability scan identified the need to upgrade.

We are getting an error "The wizard was interrupted before HPE StoreEasy management console could be complely installed" We have tried installing older versions and getting same error.

We looked in \nas\logs\HPE StoreEasy Telentry Service error.logs and application.logs and saw an error pointing to a file missing "SemcServiceCertificate.pem missing" location: C:\\Program Files\HPE\Apache\cong\ssl\SemcServiceCertificate.pem. Looked in that directory and that file is in fact missing. 

Could this file have anything to do with the failed upgrade of the management console? 

[ArunKKR · Accepted solution]

HI,

Have you tried uninstalling SEMC version 1.2.2 , restarting the server and installing latest version after downloading it from below web link?

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_4c340aa5ac3c44cc80ec445598

I have seen update failure while trying to use the update option with in SEMC.

The file SemcServiceCertificate.pem is indeed present in the location listed below in one of the servers I checked.

C:\Program Files\HPE\Apache24\conf\ssl

My guess is this is an auto created file during the installation and should not cause update failure.

[ArunKKR]

Hi,

May I know whether reinstallation helped?

[Chiefbibb]

Hi,

I unistalled the version 1.2.2.66 management console as you sugested, rebooted the server. I downloaded the install file version 1.2.6.25 you provided and ran the installation, Same issue, The installation failed.

I reinstalled the 1.2.2.66 version with no issuses. After the install completed I logged into the Management console with no issues. I then tried again to install the version 1.2.6.25, this time it worked great. Not sure why, but looks like removing and re-installing the old version and then upgrading to 1.2.6.25 worked. Thank you for your assistance. 

Another Question, How to upgrade the Apache web server? The Apache "http.exe" file is getting tagged by our ACAS vulnerability scanner as a critical upgrade. The ACAS scanner recomends to upgrade Apache from 2.4.39.0 to 2.4.46. 

Thank you,

Mike

[ArunKKR]

Hi,

I dont see storeasy servers as impacted by the last Apache vulnerability that I could find on HPE security bulletins page: 

https://www.hpe.com/us/en/services/security-vulnerability.html

https://techhub.hpe.com/eginfolib/securityalerts/Struts-CVE-2018-11776/Struts-CVE-2018-11776.html

All the latest firmware/driver updates for the server could be installed using SPP disk.

Latest SPP download link:

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_03b559aa36b84e2b9d345692cb#tab-history

However, I dont see apache in the list of updates as part of SPP

Probably you could try using update from Apache web site if its indeed critical:

https://downloads.apache.org/httpd/Announcement2.4.html

[Chiefbibb]

I downloaded the Apache install and replaced the apache httpd.exe file, We rescanned with ACAS and now good to go.

FYI, Here is the link to the tenable website that discussed the Apache httpd.exe vulnerability.

https://www.tenable.com/plugins/nessus/139574

Thank you for your assistance,

Mike

[ArunKKR]

Hi Mike,

I had an internal check and we should not be ideally using updates from external sites.

The future release of SEMC 1.3.1 should come along with newer version Apache.