3PAR7400 with 3 nodes failures simultaneously

[CRD]

Good day

A client of mine is in the unfortunate situation of a Ransomware attack and need to power up their old decommisioned 3PAR7400 from 2021 to see if they can find any data on it.

The problem is the array had 3 failed nodes (node1, node2, node3) and even the 4th node (node0) seems dodgy. Upon replacing the nodes 1 by 1 the node rescue does not start at all which was expected.

NODE 0 = even though I was able to access the whack menu on bootup and update the serial and node nr to what it is supposed to be it still shows the wrong serial and node nr on login via serial. Cant login at all. 

NODE 1 = I was able to access the whack menu on bootup and update the serial and node nr to what it is supposed to be. Cant login at all.

NODE 2 = I was able to access the whack menu on bootup and update the serial and node nr to what it is supposed to be. Cant login at all.

NODE 3 = I was able to access the whack menu on bootup and update the serial and node nr to what it is supposed to be. Cant login at all.

All nodes just come to the below state and there is nothing you can do (serial number removed from screenshot)

From what I read even if 2 nodes are failed on a 4 node system it is a critical problem, but thought I should just ask here for any advice.

Thanks

[veeyarvi]

Hi CRD,

What I understand is that, the array has 3 failed nodes (except node 3) and we replaced the failed nodes with other nodes and tried to change the serail number of the nodes but they cannot join. Please correct me if I am wrong.

1. Node rescue cannot be done since there is only one node up. The cluster needs to be up for a succesul node rescue. The option here is to perform an SP-node rescue but it is not clear whether the SP still up and running.

2. The nodes from other arrays cannot join this cluster without node rescue. Serial number change can work if the old disk from the old array nodes are good and used with resepective new node. i.e. take the old and working node disk from original node 0 of the array and try using with new node in slot 0.

These are the general recommendations. You can check with HPE support (payable service) and try to get the array up as well.

Regards,

Veeyaarvi

[CRD]

Hi Veeyarvi

Thanks for the reponse.

3 failed nodes (node1, node2, node3) and even the 4th node (node0) seems dodgy.

Replaced the failed nodes and transferred the internal node disks but still did not help unfortunately.

The array management IP is not pingable at all so no connection to SP possible to try and execute a Node Rescue from the SP.

Your comment about HPE support (payable service) is noted thank you.

Regards