Chinaunix首页 | 论坛 | 博客
  • 博客访问: 89041
  • 博文数量: 71
  • 博客积分: 3000
  • 博客等级: 中校
  • 技术积分: 715
  • 用 户 组: 普通用户
  • 注册时间: 2010-07-07 16:46
文章分类

全部博文(71)

文章存档

2010年(71)

我的朋友

分类:

2010-07-08 23:29:30

Problem:
1. When you run the command: "#opcsv", you found the certificate server 'ovcs' is not started, the status of ovcs is 'aborted', then there must be a problem with your OVO certification private/public ssh keys.

2. When you the following command, you will find the command failed.
/opt/OV/bin/ovcm -issue -file /tmp/nodecert - name
     # /opt/OV/bin/ovcm -issue -file /tmp/nodecert -name scn4987
            * Enter password:
            * Retype password:
     ERROR:    No CA private key is installed.


Resolution:
1. The above situations is related to the same problem that is the prvate key/public key for this server is not right.

2. So you must perform the following steps to regenerate the private key/public key.

- Remove the current CA certificates of OVRG on OVO server from OVRG group
     #/opt/OV/bin/ovcert -remove -ovrg server
     # ovcert -remove CA_f77dea42-00dd-7524-16b2-a418bf57d2fb -ovrg server
            * Do you really want to remove the certificate with alias
              'CA_f77dea42-00dd-7524-16b2-a418bf57d2fb' (yes(y)/no(n))? y
     INFO:     Certificate has been successfully removed.

- Generate a new CA certificate of OVRG on OVO server by the command:
     #/opt/OV/bin/ovcm -newcacert -ni
     INFO:     Generating a new CA key pair...
     INFO:     Installing...
     INFO:     Installation was successful.

- Delete Certificates of OVRG on OVO server by the command:
     # ovcert -remove f77dea42-00dd-7524-16b2-a418bf57d2fb -ovrg server
    
    
- Show the management server's coreid
     # ovcoreid -show -ovrg server
     f77dea42-00dd-7524-16b2-a418bf57d2fb

- Generate a Certificate for one node on OVO management server
     # ovcm -issue -file /tmp/nodecert -name sgdsy202.chn.hp.com -coreid f77dea42-00dd-7524-16b2-a418bf57d2fb
            * Enter password:
            * Retype password:
     INFO:     Issued certificate was written to file '/tmp/nodecert'.

- Import a Certificate for OVRG on OVO management Server
     # ovcert -importcert -file /tmp/nodecert -ovrg server
            * Enter password:
     INFO:     Import operation was successful.

- Delete all CA_Certificates and Certificates for managed node
     # ovcert -remove f77dea42-00dd-7524-16b2-a418bf57d2fb
     # ovcert -remove CA_f77dea42-00dd-7524-16b2-a418bf57d2fb
    
- Import CA_Certificate and Certificate for managed node
     # ovcert -importcert -file /tmp/nodecert    

- Restart OVO, OV Core Component and sub-agent
     # opcsv -stop
     # opcagt -stop
     # ovc -kill
    
     # opcsv -start
     # opc -start
     # opcagt -start

阅读(744) | 评论(0) | 转发(0) |
给主人留下些什么吧!~~