HPE 3PAR StoreServ Storage Drive Servicing Guide

Transcription

1 HPE 3PAR StoreServ Storage Drive Servicing Guide Abstract This Hewlett Packard Enterprise (HPE) guide provides authorized technicians information and instructions to replace drives for an HPE 3PAR StoreServ storage system. Part Number: QL Published: March 2017

2 2016, 2017 Hewlett Packard Enterprise Development LP Notices The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR and , Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website. Acknowledgments Intel, Itanium, Pentium, Intel Inside, and the Intel Inside logo are trademarks of Intel Corporation in the United States and other countries. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group.

3 Contents HPE 3PAR Service Processor... 5 Connection methods for the SP... 5 Connecting to the SP from a web browser...6 Connecting to the SP through an SSH...6 Connecting to the physical SP from a laptop... 6 Interfaces for the HPE 3PAR SP...7 Accessing the SP 5.x SC interface... 8 Accessing the SP 5.x TUI...8 Accessing the SP 4.x SPOCC interface...8 Accessing the SP 4.x SPMaint interface directly... 8 Accessing the CLI session from the SP 5.x SC interface... 8 Accessing the interactive CLI interface from the SP 5.x TUI... 9 Accessing the CLI session from the SP 4.x SPOCC interface...9 Accessing the interactive CLI interface from the SP 4.x SPMaint interface...9 Check health action from the SP... 9 Checking health from the SP 5.x SC interface...10 Checking health from the SP 4.x SPOCC interface Checking health from the SP 4.x SPMaint interface Maintenance mode action from the SP...12 Setting maintenance mode from the SP 5.x SC interface...12 Setting maintenance mode from the SP 4.x interactive CLI interface...12 Setting or modifying maintenance mode from the SP 4.x SPMaint interface...12 Locate action from the SP...13 Running the locate action from the SP 5.0 SC interface...13 Running the locate action from the SP 4.x SPOCC interface Alert notifications from the SP...14 Browser warnings...14 Clear Internet Explorer browser warning...15 Clear Google Chrome browser warning...15 Clear Mozilla Firefox browser warning Accounts and credentials for service and upgrade...18 HPE 3PAR Service Processor accounts for service and upgrade Setting time-based or encrypted-based password option from the SP 5.x SC Generating the encrypted-based ciphertext from the SP 5.x SC Setting time-based or encrypted-based password option from the SP 5.x TUI Generating the encrypted-based ciphertext from the SP 5.x TUI Storage system accounts for service and upgrade...23 Setting time-based or encrypted-based password option for a storage system account...24 Generating the encrypted-based ciphertext for a storage system account...24 Regenerating the encrypted-based ciphertext for a storage system account Time-based password (strong password) Encryption-based password (strong password)...25 HPE 3PAR StoreServ Management Console for the storage system...26 Contents 3

4 Connection method for the SSMC Connecting to the SSMC from a web browser Interfaces for the storage system from the SSMC Accessing the SSMC Main Console interface...27 Accessing the SSMC Administrator Console interface Checking health from the SSMC...27 Alert notifications from the SSMC Drive guidelines Replacing a drive Websites Support and other Resources...33 Support and other resources Accessing Hewlett Packard Enterprise Support...33 Accessing updates Customer self repair...33 Remote support...34 Warranty information Regulatory information Documentation feedback Contents

5 HPE 3PAR Service Processor The HPE 3PAR Service Processor (SP) is available as either a physical SP or a virtual SP. The HPE 3PAR SP software is designed to provide remote error detection and reporting and to support diagnostic and maintenance activities involving the storage systems. The HPE 3PAR SP is composed of a Linux OS and the HPE 3PAR SP software, and it exists as a single undivided entity. Physical SP: The physical SP is a hardware device mounted in the system rack. If the customer chooses a physical SP, each storage system installed at the operating site includes a physical SP installed in the same rack as the controller nodes. A physical SP uses two physical network connections: The left, Port 1 (Eth0/Mgmt) requires a connection from the customer network to communicate with the storage system. The right, Port 2 (Eth1/Service) is for maintenance purposes only and is not connected to the customer network. Virtual SP: The Virtual SP (VSP) software is provided in an Open Virtual Format (OVF) for VMware vsphere Hypervisor and self-extractable Virtual Hard Disk (VHD) package for Microsoft Hyper-V. The VSP is tested and supported on Microsoft Hyper-V (Windows Server 2012/2012 R2/2016) and the VMware vsphere hypervisor (VMware ESXi 5.5/6.0/6.5). The VSP has no physical connections. It runs on a customer-owned, customer-defined server and communicates with an HPE 3PAR StoreServ Storage system over its own Ethernet connections. HPE 3PAR SP documentation: For more information about the HPE 3PAR SP, see the HPE 3PAR Service Processor Software User Guide. The HPE 3PAR SP documents are available at the Hewlett Packard Enterprise Information Library Storage website. Connection methods for the SP Use one of the following methods to establish a connection to the HPE 3PAR Service Processor (SP). Web browser connection Use a standard web browser and browse to the HPE 3PAR SP IP address. Secure Shell (SSH) connection Use a terminal emulator application to establish a Secure Shell (SSH) session connection. Laptop connection Connect the laptop to the physical SP with an Ethernet connection (LAN). IMPORTANT: If firewall permissive mode for the HPE 3PAR SP is disabled, you must add firewall rules to allow access to port 8443 or add the hosts to the firewall. By default, permissive mode is enabled for the firewall. To add rules using the HPE 3PAR SC interface or HPE 3PAR SPOCC interface, you must first enable permissive mode through the HPE 3PAR TUI or HPE 3PAR SPMaint interface. After adding the rules, you can then use the interface to disable permissive mode again. Related tasks Connecting to the SP from a web browser on page 6 Connecting to the SP through an SSH on page 6 Connecting to the physical SP from a laptop on page 6 HPE 3PAR Service Processor 5

6 Connecting to the SP from a web browser 1. Browse to the HPE 3PAR Service Processor (SP) IP address 2. Enter the account credentials, and then click Login. Accounts and credentials for service and upgrade on page 18 Connecting to the SP through an SSH 1. Initiate a Secure Shell (SSH) session from a host, laptop, or other computer connected on the same network, and then connect to the HPE 3PAR Service Processor (SP) IP address or hostname. 2. Log in to the HPE 3PAR SP software. Accounts and credentials for service and upgrade on page 18 Connecting to the physical SP from a laptop 1. At the rear of the physical HPE 3PAR Service Processor (SP), connect a customer-supplied red crossover cable (or with a small switch in between if using a straight cable) between the MGMT port (Eth0/Port 1) on the physical SP and an Ethernet port of a laptop. IMPORTANT: Hewlett Packard Enterprise recommends using a small private switch between the physical SP and the laptop to ensure that the laptop does not lose its network connection during the build process. When the physical SP resets, the MGMT port (Eth0/Port 1) NIC port resets and drops the link. This connection loss can result in the failure of the software load process. Any personal switch with four to eight ports is supported, such as the HPE G Switch (J97982A), which is available as a noncatalog item from HPE SmartBuy. 2. Configure the LAN settings of the laptop with the same subnet as the network for the physical SP. 3. Log in to the HPE 3PAR SP software. Accounts and credentials for service and upgrade on page 18 6 Connecting to the SP from a web browser

7 Interfaces for the HPE 3PAR SP Interfaces with HPE 3PAR SP 5.x: HPE 3PAR Service Console (SC): The HPE 3PAR SC interface is accessed when you log in to the HPE 3PAR SP and is an appliance which collects data from the managed HPE 3PAR StoreServ Storage system in predefined intervals as well as an on-demand basis and sends the data to HPE 3PAR Remote Support, if configured. The HPE 3PAR SC also allows service functions to be performed by a company administrator, Hewlett Packard Enterprise Support, or an authorized service provider. The HPE 3PAR SC replaces the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface and the HPE 3PAR SC functionality is similar to HPE 3PAR SPOCC. HPE 3PAR Text-based User Interface (TUI): The HPE 3PAR TUI is a utility on the SP that enables limited configuration and management of the HPE 3PAR SP and access to an the HPE 3PAR CLI for the attached storage system. The intent of the HPE 3PAR TUI is not to duplicate the functionality of the HPE 3PAR SC GUI, but to allow a way to fix problems that may prevent you from using the HPE 3PAR SC GUI. The HPE 3PAR TUI appears the first time you log in to the Linux console opened from the VMware vsphere Client or through a terminal emulator using Secure Shell (SSH). Prior to the HPE 3PAR SP initialization, you can log in to the HPE 3PAR TUI with the admin user name and no password. To access the HPE 3PAR TUI after the HPE 3PAR SP has been initialized, log in to the console with the admin, hpepartner, and hpesupport accounts and credentials set during the initialization. Interfaces with HPE 3PAR SP 4.x: HPE 3PAR Service Processor Onsite Customer Care (SPOCC): The HPE 3PAR SPOCC interface is accessed when you log in to the HPE 3PAR SP and is a web-based graphical user interface (GUI) that is available for support of the HPE 3PAR StoreServ Storage system and its HPE 3PAR SP. HPE 3PAR SPOCC is the web-based alternative to accessing most of the features and functionality that are available through the HPE 3PAR SPMAINT. HPE 3PAR SPMAINT interface (SPMAINT): The HPE 3PAR SPMAINT interface is for the support (configuration and maintenance) of both the storage system and its HPE 3PAR SP. Use HPE 3PAR SPMAINT as a backup method for accessing the HPE 3PAR SP. The HPE 3PAR SPOCC is the preferred access method. An HPE 3PAR SPMAINT session can be started either from the menu option in HPE 3PAR SPOCC, through a connection to the HPE 3PAR SP through a Secure Shell (SSH), or logging in to the Linux console; however, only one HPE 3PAR SPMAINT session is allowed at a time. CAUTION: Many of the features and functions that are available through HPE 3PAR SPMAINT can adversely affect a running system. To prevent potential damage to the system and irrecoverable loss of data, do not attempt the procedures described in this manual until you have taken all necessary safeguards. HPE 3PAR CPMAINT interface (CPMAINT): The HPE 3PAR CPMAINT terminal user interface is the primary user interface for the support of the HPE 3PAR Secure Service Agent as well as a management interface for the HPE 3PAR Policy Server and Collector Server. Related tasks Accessing the SP 5.x SC interface on page 8 Accessing the SP 5.x TUI on page 8 Accessing the SP 4.x SPOCC interface on page 8 Accessing the SP 4.x SPMaint interface directly on page 8 Accessing the CLI session from the SP 5.x SC interface on page 8 Accessing the interactive CLI interface from the SP 5.x TUI on page 9 Accessing the CLI session from the SP 4.x SPOCC interface on page 9 Interfaces for the HPE 3PAR SP 7

8 Accessing the interactive CLI interface from the SP 4.x SPMaint interface on page 9 Accessing the SP 5.x SC interface 1. Connect to the HPE 3PAR Service Processor (SP) 5.x from a web browser. 2. Log in to gain access to the HPE 3PAR Service Console (SC) interface. Accessing the SP 5.x TUI 1. Connect to the HPE 3PAR Service Processor (SP) 5.x through an SSH session or log in to the Linux console opened from the VMware vsphere Client. 2. Log in to gain access to the HPE 3PAR Text-based User Interface (TUI). Accessing the SP 4.x SPOCC interface 1. Connect to the HPE 3PAR Service Processor (SP) 4.x from a web browser. 2. Log in to gain access to the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface. Accessing the SP 4.x SPMaint interface directly 1. Connect to the HPE 3PAR Service Processor (SP) 4.x through an SSH session or log in to the Linux console opened from the VMware vsphere Client. 2. Log in to gain access to the HPE 3PAR SPMaint main menu, HPE 3PAR Service Processor Menu. Accessing the CLI session from the SP 5.x SC interface The HPE 3PAR Service Console (SC) interface of the HPE 3PAR Service Processor (SP) 5.x provides a CLI session only for issuing noninteractive HPE 3PAR CLI commands. 1. Connect and log in to the HPE 3PAR SP 5.x. 2. On the HPE 3PAR SC main menu, select Systems. 3. On the Actions menu, select Start CLI session. 8 Accessing the SP 5.x SC interface

9 Accessing the interactive CLI interface from the SP 5.x TUI The HPE 3PAR Text-based User Interface (TUI) of the HPE 3PAR Service Processor (SP) 5.x provides an interactive CLI interface for issuing HPE 3PAR CLI commands. 1. Connect to the HPE 3PAR SP 5.x either by initiating an SSH session or logging in to the Linux console opened from the VMware vsphere Client. 2. Log in to gain access to the HPE 3PAR TUI. 3. From the HPE 3PAR TUI main menu, enter 7 for Interactive CLI for a StoreServ. Accessing the CLI session from the SP 4.x SPOCC interface The HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface of the HPE 3PAR Service Processor (SP) 4.x provides a CLI session only for issuing noninteractive HPE 3PAR CLI commands. 1. Connect and log in to the HPE 3PAR SP 4.x. 2. From the left side of the HPE 3PAR SPOCC home page, click Support. 3. From the Service Processor - Support page, under Service Processor, click SPMAINT on the Web in the Action column. 4. From the 3PAR Service Processor Menu, enter 7 for Execute a CLI command, and then select the system. Accessing the interactive CLI interface from the SP 4.x SPMaint interface The HPE 3PAR SPMaint interface of the HPE 3PAR Service Processor (SP) 4.x provides an HPE 3PAR interactive CLI interface for issuing HPE 3PAR CLI commands. 1. Connect to the HPE 3PAR SP 4.x either by initiating an SSH session or logging in to the Linux console opened from the VMware vsphere Client. 2. Log in to gain access to the HPE 3PAR SPMaint interface. 3. From the HPE 3PAR SPMaint main menu, enter 7 for Interactive CLI for a StoreServ. Check health action from the SP From the HPE 3PAR Service Processor (SP), the Check health action can be initiated in the following ways: With SP 5.x: Initiate Check health from the HPE 3PAR Service Console (SC). With SP 4.x: Initiate Check health from the HPE 3PAR SPMaint interface. Related tasks Checking health from the SP 5.x SC interface on page 10 Accessing the interactive CLI interface from the SP 5.x TUI 9

10 Checking health from the SP 4.x SPOCC interface on page 10 Checking health from the SP 4.x SPMaint interface on page 10 Checking health from the SP 5.x SC interface 1. Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Service Console (SC) main menu, select Systems. 3. Select Actions > Check health. Checking health from the SP 4.x SPOCC interface IMPORTANT: Ensure that browser pop-ups are allowed. 1. Connect and log in to the HPE 3PAR Service Processor (SP) 4.x. 2. From the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface main menu, click Support in the left navigation pane. 3. From the Service Processor - Support page, under StoreServs, click Health Check in the Action column. 4. A pop-up window appears showing a status message while the health check runs. NOTE: When running the Health Check using Internet Explorer, the screen might remain blank while information is gathered. This process could take a few minutes before displaying results. Wait for the process to complete and do not attempt to cancel or close the browser. 5. When the health check process completes, it creates a report and displays in a new browser window. Click either Details or View Summary to review the report. 6. Resolve issues if any. Close the report window when you are done. Checking health from the SP 4.x SPMaint interface 1. Connect and log in to the HPE 3PAR Service Processor (SP) 4.x. 2. From the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface main menu, select SPMAINT in the left navigation pane. 3. From the HPE 3PAR SPMaint main menu, HPE 3PAR Service Processor Menu, enter 4 for StoreServ Product Maintenance, and then press Enter. 4. From the StoreServ Product Maintenance Menu, enter 4 for Perform StoreServ Health Check, and then press Enter. 5. Enter the number corresponding to the storage system (HPE 3PAR StoreServ) you want to run the health check on and press Enter. 6. Enter: y to retrieve and transfer the check health data and press Enter. 10 Checking health from the SP 5.x SC interface

11 Are you sure you want to retrieve and transfer the check health data for StoreServ <StoreServ_Name>? (y or n) y... 16:44.51 Checking health of alert 16:44.52 Checking health of cabling 16:44.52 Checking health of cage 16:44.53 Checking health of date 16:44.54 Checking health of file 16:44.55 Checking health of ld 16:44.56 Checking health of license 16:44.56 Checking health of network 16:44.57 Checking health of node 16:44.59 Checking health of pd 16:45.05 Checking health of pdch 16:45.06 Checking health of port 16:45.14 Checking health of rc 16:45.14 Checking health of snmp 16:45.15 Checking health of sp 16:45.15 Checking health of task 16:45.16 Checking health of vlun 16:45.16 Checking health of vv 7. After the health check completes gathering the data, the HPE 3PAR SP displays a list of files to view Show latest health check status from StoreServ Available files 1 ==> /sp/prod/data/files/ /status/ all 2 ==> /sp/prod/data/files/ /status/ det 3 ==> /sp/prod/data/files/ /status/ err 4 ==> /sp/prod/data/files/ /status/ sum 0 ==> Abort Operation Please select a file to display 8. To view the available files, enter the corresponding number, and then press Enter to continue. 9. Select the number corresponding to the data file with the.all extension and press Enter. After the file is reviewed, press Enter to continue, and then select option 0 to exit health check. NOTE: The HPE 3PAR SPMaint interface uses the more command to view files. To move to the next page, press the spacebar. After viewing the contents of the file, to exit press Enter then select 0 (Abort Operation to return to the previous menu. After you return to the previous menu, the report is discarded. To view the health status again, run the health check again. HPE 3PAR Service Processor 11

12 Maintenance mode action from the SP From thehpe 3PAR Service Processor (SP), the storage system can be set to Maintenance Mode to prevent support information and local notifications of alerts related to the maintenance from being sent to Hewlett Packard Enterprise. The Maintenance Mode action can be set in the following ways: With HPE 3PAR SP 5.x: Set Maintenance Mode from the HPE 3PAR Service Console (SC). While Maintenance Mode is enabled, the status of the storage system shows as degraded in the HPE 3PAR SC interface, and the state description indicates that the storage system is in maintenance mode. With HPE 3PAR SP 4.x: Set Maintenance Mode from the HPE 3PAR SPMaint interface. Related tasks Setting maintenance mode from the SP 5.x SC interface on page 12 Setting maintenance mode from the SP 4.x interactive CLI interface on page 12 Setting or modifying maintenance mode from the SP 4.x SPMaint interface on page 12 Setting maintenance mode from the SP 5.x SC interface 1. Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Service Console (SC) main menu, select Systems. 3. Select Actions > Set maintenance mode. Setting maintenance mode from the SP 4.x interactive CLI interface With HPE 3PAR Service Processor (SP) 4.x, a prompt to set Maintenance Mode automatically occurs when starting an interactive CLI session from SPMaint. 1. Connect and log in to the HPE 3PAR SP 4.x. 2. From the HPE 3PAR SPMaint main menu, enter 7 for Interactive CLI for a StoreServ. 3. To select your storage system, enter If you are prompted to turn on Maintenance Mode, enter y. The prompt message states Do you wish to turn ON maintenance mode for StoreServ ###### before performing any CLI operations? (y or n). Setting or modifying maintenance mode from the SP 4.x SPMaint interface 1. Connect and log in to the HPE 3PAR Service Processor (SP) 4.x. 2. From the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) main menu, select SPMAINT in the left navigation pane. 3. From the HPE 3PAR SPMaint main menu under Service Processor - SP Maintenance, select StoreServ Configuration Management. 12 Maintenance mode action from the SP

13 4. Under Service Processor - StoreServ Configuration, select Modify under Action. 5. Under Service Processor - StoreServ Info, select either On or Off for the Maintenance Mode setting. Locate action from the SP From the HPE 3PAR Service Processor (SP), the Locate action can be initiated in the following ways to light a specific LED for the specified components: With HPE 3PAR SP 5.x: From the HPE 3PAR Service Console (SC) interface With HPE 3PAR SP 4.x: From the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) interface, the HPE 3PAR SPMaint interface, and interactive CLI interface using HPE 3PAR CLI commands Related tasks Running the locate action from the SP 5.0 SC interface on page 13 Running the locate action from the SP 4.x SPOCC interface on page 13 Running the locate action from the SP 5.0 SC interface 1. Connect and log in to the HPE 3PAR Service Processor (SP) From the HPE 3PAR Service Console (SC) main menu, select the system or a component. 3. Run the Locate action in the following ways. On the Actions menu, select Locate. From the Views menu, select Schematic, and then click the locate LED icon ( ) on the component in the schematic diagram. Running the locate action from the SP 4.x SPOCC interface IMPORTANT: Ensure that browser pop-ups are allowed. 1. Connect and log in to the HPE 3PAR Service Processor (SP) 4.x. 2. From the HPE 3PAR Service Processor Onsite Customer Care (SPOCC) main menu, select Support in the left navigation pane. 3. From the Service Processor - Support page, under StoreServs, select Locate Cage in the Action column. When you select Locate Cage for an identified storage system, the HPE 3PAR SP queries the storage system to determine available drive enclosures (cages), and then prompts you to select the cage to locate. After you select the cage, the LEDs on the cage flash amber for 30 seconds. Locate action from the SP 13

14 Alert notifications from the SP Alert notifications by from Hewlett Packard Enterprise Support or the HPE 3PAR Service Processor (SP): During the HPE 3PAR SP setup, the Send notification of system alerts option was either enabled or disabled. If enabled, the HPE 3PAR SP sends notifications of alerts to the system support contact. The might include a Corrective Action for the failure and the spare part number for the failed part. The spare part number is used to order a replacement part. Alert notifications in the HPE 3PAR SP 5.0 HPE 3PAR Service Console (SC): In the Detail pane of the HPE 3PAR SC interface, an alert notification will display in the Notifications box. Figure 1: Detail pane of the HPE 3PAR SC Views (1) The Views menu identifies the currently selected view. Most List panes have several views that you can select. Clicking the down arrow ( ). Actions (2) The Actions menu allows you to perform actions on one or more resources that you have selected, in the list pane. If you do not have permission to perform an action, the action is not displayed in the menu. Also, some actions might not be displayed due to system configurations, user roles, or properties of the selected resource. Notifications box (3) The notifications box is displayed when an alert or task has affected the resource. Resource detail (4) Information for the selected view is displayed in the resource detail area. Browser warnings When connecting to the HPE 3PAR Service Processor (SP) IP address, you might receive a warning from your browser that there is a problem with the security certificate (Internet Explorer) for the website, that the connection is not private (Google Chrome), or the connection is not secure (Mozilla Firefox). To continue to the site, clear the warning. 14 Alert notifications from the SP

15 Related tasks Clear Internet Explorer browser warning on page 15 Clear Google Chrome browser warning on page 15 Clear Mozilla Firefox browser warning on page 16 Clear Internet Explorer browser warning Click Continue to this website (not recommended). Clear Google Chrome browser warning 1. Click the Advanced link. 2. Click Proceed to <sp_ip_address> (unsafe). Clear Internet Explorer browser warning 15

16 Clear Mozilla Firefox browser warning 1. Click Advanced. 2. Click Add Exception Clear Mozilla Firefox browser warning

17 3. (Optional) To remove the warning for this site in the future, select Permanently store this exception in the Add Security Exception dialog. 4. In the Add Security Exception dialog, click Confirm Security Exception. HPE 3PAR Service Processor 17

18 Accounts and credentials for service and upgrade IMPORTANT: There are separate accounts for access to the storage system or the service processor. The account options and type of password vary based on the version of the software installed for the storage system and the version of the software installed on the service processor. Beginning with HPE 3PAR SP 5.x for the service processor, time-based or encryption-based passwords are implemented for the support accounts used with the SP. Beginning with HPE 3PAR OS for the storage system, time-based or encryption-based passwords are implemented for the support accounts used with the storage system. HPE 3PAR Service Processor accounts for service and upgrade For access to the HPE 3PAR Service Processor (SP) interfaces, there are the following account options for the administrator or for HPE Support personnel and authorized service providers. Based on the account, there are differences in the access it provides to the HPE 3PAR SP interfaces, the type of password options, and the permissions associated with the account. Interfaces for HPE 3PAR SP 5.x: HPE 3PAR Service Console (SC) HPE 3PAR Text-based User Interface (TUI) Interfaces for HPE 3PAR SP 4.x: HPE 3PAR Service Processor Onsite Customer Care (SPOCC) HPE 3PAR SPMaint utility (SPMaint) HPE 3PAR CPMaint utility (CPMaint) Accounts with HPE 3PAR SP 5.x for service and upgrade Account Password options Interface access Permissions admin Static password Administrator sets/ changes SC through a web browser TUI through a physical or virtual console TUI through an SSH Only the administrator Default account Can create new local SP users hpepartner Static password Administrator sets/ changes SC through a web browser TUI through a physical or virtual console TUI through an SSH Only authorized service providers Service and diagnostic functions Table Continued 18 Accounts and credentials for service and upgrade

19 Accounts with HPE 3PAR SP 5.x for service and upgrade Account Password options Interface access Permissions hpesupport Time-based or encryptionbased password Administrator sets the password option through the SC or TUI For encryption-based password, administrator regenerates ciphertext (blob) through the SC or TUI Authorized service provider obtains the ciphertext (blob) from the administrator and retrieves the password through the StoreFront Remote SC through a web browser TUI and Linux Shell through a physical or virtual console TUI and Linux Shell through an SSH Only HPE Support Service and diagnostic functions root Time-based or encryptionbased password Administrator sets the password option through the SC or TUI For encryption-based password, administrator regenerates ciphertext (blob) through the SC or TUI Authorized service provider obtains the ciphertext (blob) from the administrator and retrieves the password through the StoreFront Remote SP Linux shell Only HPE Support and authorized service providers Service and diagnostic functions Accounts and credentials for service and upgrade 19

20 Accounts with HPE 3PAR SP 4.0 for service and upgrade Account Password options Interface access Permissions 3parcust Static password Administrator sets/ changes SPOCC through a web browser SPMaint through a physical or virtual console SPMaint through an SSH Only the administrator Default account Can create new local SP users cpmaint Static password Administrator sets/ change SP Linux shell CPMaint Only the administrator Administrative Secure Service Agent (SSA) functions spvar Static password Administrator sets/ change SPOCC through a web browser SPMaint through a physical or virtual console SPMaint through an SSH Only HPE personnel and authorized service providers Service and diagnostic functions spdood Static password HPE sets/changes per release SPOCC through a web browser SPMaint through a physical or virtual console SPMaint through an SSH Only HPE Support Service and diagnostic functions root Static password HPE sets/changes per release SP Linux shell Only HPE Support and authorized service providers Service and diagnostic functions Interfaces for the HPE 3PAR SP on page 7 Setting time-based or encrypted-based password option from the SP 5.x SC 1. Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Service Console (SC) main menu, select Service Processor, and then select Actions > Set HPE Support password 3. Select Time based password or Encryption based password. 4. Click Apply. Interfaces for the HPE 3PAR SP on page 7 20 Setting time-based or encrypted-based password option from the SP 5.x SC

21 Generating the encrypted-based ciphertext from the SP 5.x SC In advance or at the time of a support session, the administrator can generate the ciphertext (blob) and provide it to Hewlett Packard Enterprise Support to be deciphered. Before or upon arriving at the site, the approved service provider can obtain the password from Hewlett Packard Enterprise Support over the phone, text message, or Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Service Console (SC) main menu, select Service Processor, and then select Actions > HPE Support password. 3. Select Set HPE Support password. 4. Click Show Key for either Encrypted Password Key for hpesupport or Encrypted Password Key for root, then click Yes, show to confirm. The ciphertext (blob) is displayed for the account in the text box. With Show Key, the ciphertext (blob) is regenerate and makes the prior password invalid. You can also select Regenerate under the hpesupport or root text box to regenerate the ciphertext. 5. To select all the ciphertext, click in the text box, and then copy it to the clipboard using Crtl-C or rightclick and Copy. 6. To accept your changes and keep the dialog open, click Apply or OK to accept the changes and close the dialog. 7. Copy and paste that ciphertext into an , text message, or into an encrypted zip file and send to Hewlett Packard Enterprise Support. The ciphertext is safe to , because the random credential contained in the ciphertext is first encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise can unwrap the encrypted credential using the corresponding private key. Interfaces for the HPE 3PAR SP on page 7 Setting time-based or encrypted-based password option from the SP 5.x TUI 1. Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Text-Based User Interface (TUI) main menu, enter 5 for 5 == Secure Password Management. The current mode is displayed after Current password mode: as either TIME or ENCRYPT. Generating the encrypted-based ciphertext from the SP 5.x SC 21

22 3. Enter 1 for 1 == Change password mode to <TIME or ENCRYPT>. Interfaces for the HPE 3PAR SP on page 7 Generating the encrypted-based ciphertext from the SP 5.x TUI 1. Connect and log in to the HPE 3PAR Service Processor (SP) 5.x. 2. From the HPE 3PAR Text-Based User Interface (TUI) main menu, enter 5 for 5 == Secure Password Management. The current mode is displayed as: Current password mode: ENCRYPT 3. Enter either 2 for 2 == Display password blob for root or enter 3 for 3 == Display password blob for hpesupport. The ciphertext (blob) is displayed. 4. Copy the entire ciphertext and paste it into an to Hewlett Packard Enterprise Support or to the approved service provider. The ciphertext is safe to , because the random credential contained in the ciphertext is first encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise can unwrap the encrypted credential using the corresponding private key. 22 Generating the encrypted-based ciphertext from the SP 5.x TUI

23 When copying the ciphertext, copy the text starting with: Begin tpd blob and all the text ending with: End tpd blob Interfaces for the HPE 3PAR SP on page 7 Storage system accounts for service and upgrade For access to the HPE 3PAR StoreServ Storage system interfaces, there are the following account options for the administrator or for HPE Support personnel and authorized service providers. Based on the account, there are differences in the access it provides to the storage system interfaces, the type of password options, and the permissions associated with the account. Storage system accounts for service and upgrade 23

24 Storage system accounts with HPE 3PAR OS and for service and upgrade Account PW options Interface access Permissions 3paradm Static password Administrator sets/ changes through the Administrator console Main console Administrator console Interactive CLI Only the administrator Create new CLI user accounts Service and diagnostic functions Super rights console Time-based or encryptedbased password Administrator sets the password option through CLI commands For encrypted-based password, administrator retrieves/exports the ciphertext (blob) through CLI commands Main console Administrator console Only HPE Support and authorized service providers Service and diagnostic functions root Time-based or encryptedbased password Administrator sets the password option through CLI commands For encrypted-based password, administrator retrieves/exports the ciphertext (blob) through CLI commands Linux Shell on the storage system Only HPE Support and authorized service providers Service and diagnostic functions Setting time-based or encrypted-based password option for a storage system account 1. Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface. 2. Query the current mode by using the HPE 3PAR CLI controlrecoveryauth status command. 3. To change the mode, use the controlrecoveryauth setmethod <totp ciphertext> command, where <totp ciphertext> is either totp or ciphertext. Interfaces for the HPE 3PAR SP on page 7 Generating the encrypted-based ciphertext for a storage system account In advance or at the time of a support session, the administrator can generate the ciphertext (blob) and provide it to Hewlett Packard Enterprise Support to be deciphered. Before or upon arriving at the site, the approved service provider can obtain the password from Hewlett Packard Enterprise Support over the phone, text message, or Setting time-based or encrypted-based password option for a storage system account

25 1. Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface. 2. To generate a ciphertext, initiate the HPE 3PAR CLI controlrecoveryauth ciphertext <user> command, where <user> is either root or console. 3. Copy and paste that ciphertext into an , text message, or into an encrypted zip file and send to Hewlett Packard Enterprise Support. The ciphertext is safe to , because the random credential contained in the ciphertext is first encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise Support can unwrap the encrypted credential using the corresponding private key. Interfaces for the HPE 3PAR SP on page 7 Regenerating the encrypted-based ciphertext for a storage system account 1. Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface. 2. To regenerate a ciphertext, initiate the HPE 3PAR CLI controlrecoveryauth rollcred <user> command, where <user> is either root or console. 3. Copy and paste that ciphertext into an to Hewlett Packard Enterprise Support or to the approved service provider. The ciphertext is safe to , because the random credential contained in the ciphertext is first encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise can unwrap the encrypted credential using the corresponding private key. Interfaces for the HPE 3PAR SP on page 7 Time-based password (strong password) With the time-based password option, the HPE Support person or authorized service provider can acquire the account password when needed without the involvement of the administrator. The time-based password is generated using strong cryptographic algorithms and large key sizes, valid for 60 minutes, and are automatically regenerated at the start of each hour. During the service, upgrade, or diagnostic procedure, the account password remains active until logging out of the account, even if 60 minutes is exceeded. During the procedure, if it is necessary to log out of the account and then log back in to the account (for example, closing the session or rebooting a controller node), do either of the following: If 60 minutes has not been exceeded, use the same password. If 60 minutes has been exceeded, obtain the newly generated password. Encryption-based password (strong password) With the encryption-based (ciphertext) password option, the administrator initiates the generation or regeneration of account ciphertext that is copied and provided to the authorized service provider. The authorized service provider decrypts the ciphertext to obtain the account password that they will use for the service, upgrade, or diagnostic procedure. The password does not expire. After the service, upgrade, or diagnostic procedure is completed, the administrator regenerates a new ciphertext to make the current password invalid. Only the administrator initiates the generation or regeneration of the account ciphertext for a new password. Regenerating the encrypted-based ciphertext for a storage system account 25

26 HPE 3PAR StoreServ Management Console for the storage system The HPE 3PAR StoreServ Management Console (SSMC) provides browser-based consoles (interfaces) for monitoring an HPE 3PAR StoreServ Storage system. The HPE 3PAR SSMC procedures in this guide assume that the storage system to be serviced has already been added to the HPE 3PAR SSMC and is available for management through logging in to the HPE 3PAR SSMC Main Console. If that is not the case, you must first add the storage system to the HPE 3PAR SSMC by logging in to the HPE 3PAR SSMC Administrator Console. HPE 3PAR SSMC guidelines: The HPE 3PAR SSMC must not be installed the HPE 3PAR Service Processor (SP) or a storage system running a virtual SP, and instead the HPE 3PAR SSMC must be installed on a separate customer system running Linux or Windows OSs. The HPE 3PAR SSMC should be run locally from the storage system on which it is installed. HPE 3PAR SSMC documentation: The following documents are available at the Hewlett Packard Enterprise Information Library Storage website. The HPE 3PAR StoreServ Management Console Release Notes provide OS-dependent details. The HPE 3PAR StoreServ Management Console Administrator Guide provides information on planning, installing, and configuring HPE 3PAR SSMC server instances. The HPE 3PAR StoreServ Management Console User Guide and the HPE 3PAR StoreServ Management Console Online Help provide information for managing a storage system after installing an HPE 3PAR SSMC server instance. Connection method for the SSMC Connecting to the SSMC from a web browser 1. Browse to the HPE 3PAR StoreServ Management Console (SSMC) with the address <localhost>:8443. NOTE: The default port number is Another port might have been assigned during installation of the software or the <localhost> can be Enter the username and password credentials for an HPE 3PAR SSMC user account. Interfaces for the storage system from the SSMC Interfaces for the HPE 3PAR StoreServ Management Console (SSMC): Main Console (SSMC console) Manage a storage system. Administrator Console (Admin console) Add, edit, connect, disconnect, and remove a storage system; accept certificates, and view connected and disconnected systems. 26 HPE 3PAR StoreServ Management Console for the storage system

27 Related tasks Accessing the SSMC Main Console interface on page 27 Accessing the SSMC Administrator Console interface on page 27 Accessing the SSMC Main Console interface 1. Connect to the HPE 3PAR StoreServ Management Console (SSMC) from a web browser. 2. Enter the username and password credentials for an HPE 3PAR SSMC user account. Accessing the SSMC Administrator Console interface 1. Connect to the HPE 3PAR StoreServ Management Console (SSMC) from a web browser. 2. Select the Administrator Console check box. 3. Enter the username and password credentials for the HPE 3PAR SSMC administrator account. Checking health from the SSMC Health panels are included in the Overview view of most detail panes in the HPE 3PAR StoreServ Management Console (SSMC). The dashboard screen summarizes the key properties and health of all connected storage systems. 1. Connect and log in to the HPE 3PAR SSMC. 2. On the HPE 3PAR SSMC main menu, click Storage Systems > Systems. The storage systems managed by the HPE 3PAR SSMC are listed and the health and configuration summary panels provide a system overview and shows the system health status. Connection method for the SSMC on page 26 Alert notifications from the SSMC The HPE 3PAR StoreServ Management Console (SSMC) interface displays the following types of HPE 3PAR StoreServ Storage system alerts: OK / normal alert Indicates normal activity. No action is required. Critical alert Indicates that immediate action is required to resolve an issue with a logical or physical component. Major, minor, degraded alert Indicates that action is required to resolve an issue with a logical or physical component. HPE 3PAR StoreServ Management Console for the storage system on page 26 Accessing the SSMC Main Console interface 27

28 Drive guidelines CAUTION: To avoid potential damage to equipment and loss of data, handle drives carefully following industry-standard practices and ESD precautions. Internal storage media can be damaged when drives are shaken, dropped, or roughly placed on a work surface. When installing a storage drive, press firmly to make sure that the drive is fully seated in the drive bay and then close the latch handle. When removing a storage drive, press the release button and pull the drive slightly out of the enclosure. To allow time for the internal disk to stop rotating, wait approximately 10 seconds before completely removing the drive from the enclosure. Storage drives are hot-pluggable only when they are in a service replaceable state initiated by servicemag. If a storage drive fails, the system automatically runs servicemag in the background. To avoid damage to hardware and the loss of data, never remove a drive without confirming that the drive fault LED is lit. If the StoreServ is enabled with the HPE 3PAR Data Encryption feature, only use self-encrypting drives (SED). Using a non-self-encrypting drive may cause errors during the repair process. IMPORTANT: The HPE 3PAR solid-state drives (SSDs) have a limited number of writes that can occur before reaching a write-endurance limit for the SSD. This limit is expected to exceed the service life of the HPE 3PAR StoreServ Storage system and is based on most configurations, I/O patterns, and workloads. The storage system tracks all writes to an SSD to allow for proactively replacing an SSD that is nearing the limit. If an SSD write-endurance limit is reached during the product-warranty period, a replacement of the SSD follows the guidelines of the warranty. To prepare for an SSD replacement after the product-warranty period has expired, Hewlett Packard Enterprise provides the HPE 3PAR SSD Extended Replacement program. This program is available for eligible HPE 3PAR SSDs. IMPORTANT: After initial storage system installation, to prevent damage to the drives, any HPE 3PAR StoreServ Storage system with LFF drives that require physical relocation must have all LFF drives removed from the drive enclosures (cages). Clearly label and package all drives. Reinstall the drives in the same drive enclosure locations after the move is complete. As a best practice, back up the storage system data before relocation. 28 Drive guidelines

29 Replacing a drive The HPE 3PAR storage system supports hard disk drives (HDD) and solid-state drives (SSD) in the following form factors: Large form factor (LFF) Small form factor (SFF) The drive replacement procedures are the same for all drives. Review and follow the drive guidelines listed in Drive guidelines on page 28 before adding, removing, or replacing drives. For information about the HPE 3PAR SP, see HPE 3PAR Service Processor on page 5. Additional information about the HPE 3PAR SP is available at the Hewlett Packard Enterprise Information Library Storage website. 1. Connect and log in to the HPE 3PAR Service Processor (SP). 2. Set maintenance mode. With HPE 3PAR SP 4.x: Set Maintenance Mode from the HPE 3PAR SPMAINT interface. From the HPE 3PAR SPMAINT main menu, enter 7 for Interactive CLI for a StoreServ. To select your storage system, enter 1. If you are prompted to turn on Maintenance Mode, enter y. The prompt message states Do you wish to turn ON maintenance mode for StoreServ ###### before performing any CLI operations? (y or n). With HPE 3PAR SP 5.x: Set Maintenance Mode from the HPE 3PAR Service Console (SC). From the HPE 3PAR SC main menu, select Systems. Select Actions > Set maintenance mode. 3. Initiate Check Health of the storage system. With HPE 3PAR SP 4.x: Use the CLI to issue the checkhealth -detail command. With HPE 3PAR SP 5.x: From the HPE 3PAR Service Console (SC) main menu, select Systems, and then select Actions > Check health. CAUTION: If health issues are identified during the Check Health scan, resolve these issues before continuing. Refer to the details in the Check Health results, review the documentation, and contact HPE support if necessary. 4. Identify the failed drive. With HPE 3PAR SP 4.x: Use the CLI to issue the showpd -i -failed command to identify the failed drive. With HPE 3PAR SP 5.x: In the Detail pane of the HPE 3PAR SC interface, a drive alert notification will display in the Notifications box. NOTE: If a storage drive fails, the system automatically runs the servicemag command in the background. The servicemag command illuminates the blue drive LED to indicate a fault and the drive to replace. Storage drives are replaced for various reasons and not necessarily the result of a failure. In this case, the displayed output may not show errors. If the replacement is a proactive replacement prior to a failure, enter servicemag start -pdid <pdid> to initiate the removal of data from the drive. The system will store the removed data on the spare chunklets. 5. Monitor the status of the drive. Replacing a drive 29

30 With the CLI session: To monitor progress, issue the servicemag status command. With the SC: From the HPE 3PAR SC main menu, select Physical Drives. When servicemag has completed, the output displays a yellow triangle icon to the left of the drive. To the right of the drive the output displays a solid blue UID/Locate icon. NOTE: When servicemag successfully completes, the blue LED on the drive to be replaced is illuminated. 6. Illuminate the blue service LED of the cage where the drive is located. With the CLI session: To determine the cage to locate, issue the showpd -degraded command and identify the drive in the output. The first digit for CagPos for your drive is the cage to locate. In the following example, the cage to locate is 7: cli% showpd -degraded -Size(MiB)- ----Ports---- Id CagePos Type RPM State Total Free A B Capacity(GB) 63 7:11:0 FC 10 degraded :1:3* 0:1:3* 450 To illuminate the blue service LED of the cage where the drive is located, issue the locatecage <cageid> command. With the SC: To determine the cage to locate, from the HPE 3PAR SC main menu, select Physical Drives and then select your drive. The drive enclosure (cage) is listed in the SC GUI output. Select the drive enclosure in the GUI. To illuminate the blue service LED of the drive enclosure, select Drive Enclosures, and then select Actions > Locate. 7. Identify the drive enclosure. The blue service LED of the drive enclosure will be lit. 8. To remove the front bezel of the drive enclosure: a. Press the release tab. b. Pull it out from the front of the drive enclosure. 9. Identify the drive to replace. The blue service LED of the drive will be lit. 10. To remove the drive: a. (1) Press the release button of the drive to open the latch handle. Extend the latch handle. b. (2) Pull out the drive from the bay. Figure 2: Removing the drive 11. To install the replacement drive: a. (1) Press the release button of the new drive to open the latch handle. Insert it into the bay. b. (2) Close the latch handle to lock it into place. 30 Replacing a drive

31 Figure 3: Installing the drive 12. Confirm that the green LED is lit. The blue service LED will blink while data is being restored to the replacement drive. NOTE: The servicemag command begins automatically. 13. Monitor the progress of the drive: Confirm the servicemag operation has begun. Display progress of the integration of the drive into the system. Display progress about the transfer of data onto the drive. With the CLI session: Issue the servicemag status command to monitor the progress of the drive. With the SC: From the main menu, select Physical Drives. When servicemag has completed, the GUI displays a yellow triangle icon to the left of the drive. To the right of the drive the UID/ Locate icon is solid blue. 14. Replace the front bezel on the drive enclosure. 15. Verify the current state of the system. With the CLI session: Issue the checkhealth -detail command. With the SC: From the main menu, select Systems, and then select Actions > Check health. 16. End the maintenance mode if significant time is left in the maintenance window. With the SC: From the main menu, select Systems, and then select Actions > Set Maintenance Mode, select a maintenance window, and then click the Edit icon next to it. 17. Exit and log out of the session. With HPE 3PAR SP 4.x: To continue to the main menu, enter exit and press Enter. To exit the 3PAR Service Processor Menu, select X. With HPE 3PAR SP 5.x: To log out of the session, select the Session icon in the upper right corner. Replacing a drive 31