Trouleshooting This setion explins the following: Verify the Ciso Prime Collortion Provisioning Instlltion (for Advned or Stndrd Mode), pge 1 Upgrde the Ciso Prime Collortion Provisioning from Smll to Medium Deployment Model, pge 2 Upgrde the Ciso Prime Collortion Provisioning Server from the Smll or Medium to Lrge Deployment Model, pge 3 Downgrde Ciso Prime Collortion Provisioning Deployment Model, pge 4 Chnge the IP Address on the Provisioning Server (Single Setup), pge 5 Creting Trouleshooting Aount, pge 5 To Aess Trouleshooting Aount or Console Aount if the PCP UI is inessile, pge 5 Generte Console Aount using Trouleshooting User, pge 6 Generte Certifite Signing Request (CSR), pge 6 Verify the Ciso Prime Collortion Provisioning Instlltion (for Advned or Stndrd Mode) You n verify tht Ciso Prime Collortion Provisioning hs een properly instlled s follows: 1 In rowser, speify the IP ddress of the server on whih Ciso Prime Collortion Provisioning (stndrd or dvned) hs een instlled. The login pge is displyed. Log in with glol dministrtor redentils. 2 Log in to the Provisioning server s gloldmin. Go to Administrtion>Logging nd Showteh, rete trouleshooting user, nd otin the response string y miling hllenge string to the Engineering Tem, nd then login s trouleshooting user to the Trouleshooting UI. 1
Upgrde the Ciso Prime Collortion Provisioning from Smll to Medium Deployment Model Trouleshooting With the Trouleshooting UI, the user n hek the servies, rete the onsole ount, nd ess the PCP CLI. 3 Disply the proesses tht re running. show pplition sttus pm sh : no jo ontrol in this shell httpd denotes httpd servie nie.sh denotes Nie servie strtupm.sh denotes Joss servie postmster/su denotes Postgres servie STAT PID USER COMMAND ELAPSED =============================================== Ss 629 root httpd 02:11:38 S 613 root nie.sh 02:11:38 S 610 root strtupm.sh 02:11:38 S 608 root su 02:11:38 The prmeters in the COMMAND olumn re the proesses tht re running on the Ciso Prime Collortion Provisioning server (stndrd or dvned). If you do not see the proesses running, enter the following ommnds to restrt the Ciso Prime Collortion Provisioning servies: dmin#pplition stop pm dmin#pplition strt pm The ove ommnds tke one or two minutes to stop or strt the Ciso Prime Collortion Provisioning servies. You n verify if the instlltion is omplete nd suessful, y heking if the JBoss servie is running. In the SSH terminl, run the following ommnd s trouleshooting user to know if the JBoss servie is running: ps - ef grep strtupm You n lso hek t wht time the JBoss servie ws strted, in the following lotion (in the lst line of the log file): /opt/upm/sep/logs/joss.log If the JBoss servie is running, see Get Strted fter New Instlltion, to get strted with the Ciso Prime Collortion Provisioning pplition. Upgrde the Ciso Prime Collortion Provisioning from Smll to Medium Deployment Model After you mnully upgrde the system requirements (vram, vcpu, vdisk, nd so on), you must run the following sripts s trouleshooting user: 1 Exeute the memorymodel.sh file under /opt/upm: 2
Trouleshooting Upgrde the Ciso Prime Collortion Provisioning Server from the Smll or Medium to Lrge Deployment Model./memorymodel.sh medium "-Xms512m -Xmx1024m -XX:MxPermSize=256m -server" "-Xms512m -Xmx1024m -XX:MxPermSize=256m" simple ll 2 Exeute pmdiskutil.sh under /opt/upm:. /pmdiskutil.sh /dev/sd 3 Restrt the server(vmwre instne). If you wnt to support endpoint ount s per the upgrded deployment model in Ciso Prime Collortion Provisioning, you must dd sle liense. Upgrde the Ciso Prime Collortion Provisioning Server from the Smll or Medium to Lrge Deployment Model 1 Bk up the dtse from the Ciso Prime Collortion Provisioning pplition y following the proedures provided in Ciso Prime Collortion Provisioning Guide. 2 Deploy lrge OVA, oth s n pplition nd dtse server y following the proedure in the Deploying nd Configuring Ciso Prime Collortion Provisioning. Ensure tht the gloldmin pssword is the sme s the pssword tht you provided during the deployment. Copy the lienses from the old server to the new server. If you use the MAC ddress of the existing Ciso Prime Collortion Provisioning server, then updte the MAC ddress using the VMwre lient for this VMwre instne. If you use new MAC ddress for server, then you must rehost the lienses in the /opt/upm/liense diretory to mth the new server VM. 3 Stop provisioning servies in the server. d e f Go to the /opt/upm folder. Exeute sudo./upm-pp-servie.sh stop Ensure tht Aphe, JBoss, nd NICE servies re stopped. ps -ef grep strtupm ps -ef grep nie Stop ny running proess. kill -9 strtupm proess id kill -9 nie proess id Chek whether the nie proess is still holding on the postgres onnetion. ps -ef Look for the proess: /opt/upm/jvm/in/jv -server -lsspth /opt/upm/sep/li/dom.jr Stop ny running nie proess. 3
Downgrde Ciso Prime Collortion Provisioning Deployment Model Trouleshooting kill -9 Proess-Id found erlier g Wit minute to mke the resoures, suh s ports, to eome free. 4 Restore the dtse in the server using the ked-up dtse file tken from Step 1. For detils, see the setion Restoring Dtse in the server setion in the Ciso Prime Collortion Provisioning Guide. 5 Stop nd then strt the provisioning servies in the server d /opt/upm folder. sudo./upm-d-servie.sh stop Wit 30 seonds efore strting the dtse servies Strt the dtse servies. d /opt/upm sudo./upm-d-servie.sh strt 6 Copy the following files from the originl Ciso Prime Collortion Provisioning server to the newly deployed server /opt/upm/sep/df.properties /opt/upm/sep/df.keystore /opt/upm/joss/server/upm/onf/login-onfig.xml 7 Chnge the diretory to /opt/upm/sep nd edit the df.properties file using the vi editor d e d /opt/upm/sep vi df.properties Chnge the property df.memory.model=medium to df.memory.model=lrge Chnge the property df.postgres.host=lolhost to df.postgres.host=ip of server Dtse Sve hnges nd exit the editor 8 Strt pplition servies in the server. Chnge diretory to /opt/upm to strt the pplition servies d /opt/upm sudo./upm-pp-servie.sh strt The system is now redy to e used. Downgrde Ciso Prime Collortion Provisioning Deployment Model Ciso Prime Collortion does not support the downgrde of the deployment model; tht is, you nnot downgrde from the Ciso Prime Collortion lrge deployment model to smll deployment model. 4
Trouleshooting Chnge the IP Address on the Provisioning Server (Single Setup) Chnge the IP Address on the Provisioning Server (Single Setup) The following proedure is pplile for Ciso Prime Collortion Provisioning 12.3 nd lter releses. 1 Cll the Engineering Tem, nd get the trouleshooting ount ess. 2 Generte the Console Aount, nd then login to the CLI ount. 3 In OS, hnge the onfigurtion file /et/sysonfig/network-sripts/iffg-eth0 tht stores network onfig settings speifi to the new IP ddress. 4 Restrt the network servies using the ommnd servie network restrt. 5 To verify IP ddress hnge, issue the ommnd ifonfig nd hek for updted IP in the response. 6 Updte the file /et/resolv.onf with the DNS of the new IP ddress. 7 Updte /et/hosts file with new server IP nd hostnme. 8 Set the hostnme in Ciso Prime Collortion Provisioning server y running the ommnd hostnmetl set-hostnme <HOSTNAME>. Creting Trouleshooting Aount From PCP ) Login to PCP ) Go to Administrtion > Logging nd ShowTeh. In Trouleshooting Aount field, provide User ID, nd Selet durtion from Expires In dropdown, nd then lik Crete Aount. On reting Trouleshooting user, hllenge string is generted, using this we n generte response whih ts s pssword for Trouleshooting user. Contt the Engineering Tem for generting response string. Login to PCP s Trouleshooting user, then strt miro servie pge from Trouleshooting>Lunh. Also, Sep dmin n e essed under Trouleshooting menu. To Aess Trouleshooting Aount or Console Aount if the PCP UI is inessile When PCP UI is inessile, you n verify the sttus of the server from the miro servie pge. We n ess Trouleshooting ount from miro servie pge:https:// <PCP ip server>:28080/index. 1 Go to miro servie pge, rete trouleshooting user. For reting trouleshooting user, refer to Creting Trouleshooting Aount. 5
Generte Console Aount using Trouleshooting User Trouleshooting 2 Login from miro servie pge, go to Proess Mngement to verify the sttus of PCP servies. Console ount n e reted to ess CLI ount of PCP. Generte Console Aount using Trouleshooting User Follow these steps to generte onsole ount using trouleshooting user 1 In PCP miro servie pge under Console Aount, we generte onsole ount user y providing usernme nd pssword. 2 From onsole ount, you n ess CLI of PCP server. In PCP 12.1, there is no ess to CLI/SSH s root, so the user reted through onsole ount n ess this privilege. If trouleshooting user is reted using troule shooting UI, nd the Ciso Prime Collortion Provisioning dtse is not up nd running, then the user will e ville only through the trouleshooting UI nd not through the Ciso prime Collortion Provisioning UI. Generte Certifite Signing Request (CSR) Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Go to miro servie pge, nd then rete trouleshooting user. For reting trouleshooting user, refer to Creting Trouleshooting Aount. Generte the Console Aount, nd then login to the CLI ount. Go to d /opt/upm/httpd/in To generte the CSR, enter:./openssl req -new -key <keynme>.key -out <srnme>.sr Enter the pproprite detils when prompted, suh s: Country Nme: <Country> Stte/Prov: <Stte> Lolity: <Lolity> Orgniztion nme: <Org> Orgniztionl unit nme: <unit> Common nme: <hostnme>.<ompnynme>.om The generted CSR is ville in the lotion /opt/upm/httpd. 6
Trouleshooting Generte Certifite Signing Request (CSR) 7
Generte Certifite Signing Request (CSR) Trouleshooting 8