HP 3Par Lost SP connectivity with the StoreServ

[lapz_anry]

Hello,

I have a problem on HP 3par where I have created a self-signed certificate using CLI on 2 of the device.

I have susccessfully add the new certificate in the administrative console of the device, and it shows in the status as connected.

Now, when I access the Service processor, in the Storage Systems, I see the following

Lost SP connectivity with the StoreServ

Description: Certificate acceptance needed

I have only managed to successfully update the new certificate in the SSMC administrative console, and im lost on how to do it in the SP.

can anyone help? 

Thank you in advance.

[sbhat09 · Accepted solution]

Hello @lapz_anry 

You can remove the 3PAR system from SP and add it back. You can find this option in the Main menu -> Storage systems -> select the 3PAR and remove. And then add it back the same way.

Or check if the procedure in page no 26 of this document helps you - https://support.hpe.com/hpesc/public/docDisplay?docId=a00006416en_us

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of the company.

[support_s]

System recommended content:

1. HPE 3PAR StoreServ Management Console 3.3 - Certificates in SSMC

2. HPE StoreServ Management Console 3.7 - Security Settings

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[lapz_anry]

I was afraid to remove the old connection in the storage system,, but got to do it as your solution was very helpful.

Thank you so much.

[sbhat09]

Hello @lapz_anry,

That is great. Thanks for the update.!

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of the company.

[Juliano_Flores]

Hi, there!

The certificate of 3PAR 7400 has expired and is needed to renew (and reatach again).

This device is out of contract of support.

In the past, for "new model" of 3PAR (ex: 8450), the proccess it was the following:

1. Login to the array CLI and run "showcert". Take note on the Common Name value string.
cli% showcert

2. Recreate the self-signed certificate using the the below CLI command:
cli% createcert unified-server -selfsigned -keysize 2048 -days 1095 -CN "CN string from showcert"

3. Remove and re-add the array in SSMC Administrator Console.
4. Remove and re-add the array into your Service Processor(SP).

For 1 to 3 steps no problem, its simple and "possible".

In the step 4 we have a situation: the SP is an old version, 4.4, with Adobe Flash buttons no more supported.

The question is: follow the first 3 steps are enough to manage it? No problem "ignore" the re-certificate on the (old) SP 4.4?

Best Regards,
Juliano Flores

[Sunitha_Mod]

Hello Juliano,

Thank you for posting! Since you have posted in an old topic and there is no response yet, I would recommend you create a new topic using the create "New Discussion" button, so the experts can check and assist you further. 

[Juliano_Flores]

Ok, thanks!