Primera cannot connect to DSCC

[sfrsdrf]

I am trying to connect Primera A630 and C630 to DSCC via the same proxy, C630 connects fine but A630 says "device certificate not found to connect to Data Services Cloud Console". Please contact support." message appears and I am unable to connect.
When I contacted support, they assumed it was a problem with our network.

(I think I am able to communicate externally, as I was able to access Primera remotely from support and delete the certificate, etc.)

Only "https://device.cloud.hpe.com:443" and "https://common.cloud.hpe.com:443" seem to be unable to connect for some reason.
Again, C630 is able to connect.
Thanks in advance.

[Satish04]

Hi sfrsdrf,

The error message is saying that "Device certificate not found to connect to Data Services Cloud Console". So please try to follow the below steps to resolve the issue.

1. Firstly, the error message indicates a problem with the device certificate. Make sure that the device certificate on the HPE Primera A630 is correctly configured and matches the requirements of the HPE DSCC. Ensure that the certificate is not expired and that it is trusted by the HPE DSCC. You might want to double-check the certificate settings and, if necessary, regenerate or reconfigure the certificate.

2. If the certificate is installed and valid, please check the below settings:

       A. Verify that the DNS settings and time settings on the HPE Primera A630 are correct. Incorrect DNS settings can prevent the system from resolving the hostname of the HPE DSCC, while incorrect time settings can cause certificate validation issues.

       B. Ensure that no firewall rules or proxy settings are blocking the communication between the HPE Primera A630 and the HPE DSCC. Check if the proxy settings on the HPE Primera A630 are correctly configured to allow communication with the HPE DSCC.

      C. Check the console logs on the HPE Primera A630 for any error messages or warnings related to the connection attempt. This might provide more detailed information about what is causing the issue.

3. Ensure that the HPE Primera A630 is running the latest firmware version and any necessary software updates. Sometimes, compatibility issues or bugs can be resolved by updating the firmware.

Since the error message specifically mentioned that the device certificate was not found, it is worth focusing on verifying the certificate configuration and ensuring that the HPE Primera A630 can communicate securely with the HPE DSCC.

If you have already contacted HPE Tech support and they have suggested that the issue might be related to the network, consider involving your network team to review the network configuration, firewall rules, and proxy settings to ensure they are properly configured to allow communication between the HPE Primera A630 and the HPE DSCC.

If the issue persists, It is recommended to contact HPE Tech support or raise a support case to resolve the issue.

Hope this helps.

Regards,
Satish

[sfrsdrf]

Thanks for the reply.
I have checked all of your suggestions.
We are using a proxy app called Squid and the following access logs are output, so communication between Primera and the proxy server is fine.

TCP_TUNNEL/200 39 CONNECT device.cloud.hpe.com:443 - HIER_DIRECT/35.80.107.159 -

[Satish04]

Hi sfrsdrf,

Since you have confirmed that communication between the HPE Primera A630 and the proxy server is functioning correctly.
So, the issue might be with the related certificate and the error message also saying the same " Device certificate not found to connect to Data Services Cloud Console". I am suggesting to verify the certificate is installed properly and valid on both HPE Primera A630 and HPE DSCC.

If the issue persists, It is highly recommended contact HPE Tach support or raise a support case to resolve the issue.

Hope this helps.

Regards,
Satish

[ehubbard]

Is the normal call home working? 

[Cali]

To be sure, I would create a new Cert and Try again:

createcert unified-server -selfsigned -keysize 2048 -days 3650

Cali

[Sunitha_Mod]

Hello @sfrsdrf, 

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.

[sfrsdrf]

We are currently contacting your support, but have yet to receive a solution.

[chihiro15]

Hi  Satish04,

You mentioned that  we could recreate ssl certificates if they were expired.

How do you recreate ssl certificates on Primera OS?    createcert cmd? 

And Primera has 3 ssl certificates related to "service:dscc".     Do we have to recreate all of them if they were expired?

[Cali]

>> How do you recreate ssl certificates on Primera OS? 
If have already written, see my Post here: ‎11-08-2023 01:05 PM

Cali