2010年(71)
分类:
2010-07-08 23:29:30
Problem:
1. When you run the command: "#opcsv", you found the certificate server 'ovcs' is not started, the status of ovcs is 'aborted', then there must be a problem with your OVO certification private/public ssh keys.
2. When you the following command, you will find the command failed.
/opt/OV/bin/ovcm -issue -file /tmp/nodecert - name
# /opt/OV/bin/ovcm -issue -file /tmp/nodecert -name scn4987
* Enter password:
* Retype password:
ERROR: No CA private key is installed.
Resolution:
1. The above situations is related to the same problem that is the prvate key/public key for this server is not right.
2. So you must perform the following steps to regenerate the private key/public key.
- Remove the current CA certificates of OVRG on OVO server from OVRG group
#/opt/OV/bin/ovcert -remove
# ovcert -remove CA_f77dea42-00dd-7524-16b2-a418bf57d2fb -ovrg server
* Do you really want to remove the certificate with alias
'CA_f77dea42-00dd-7524-16b2-a418bf57d2fb' (yes(y)/no(n))? y
INFO: Certificate has been successfully removed.
- Generate a new CA certificate of OVRG on OVO server by the command:
#/opt/OV/bin/ovcm -newcacert -ni
INFO: Generating a new CA key pair...
INFO: Installing...
INFO: Installation was successful.
- Delete Certificates of OVRG on OVO server by the command:
# ovcert -remove f77dea42-00dd-7524-16b2-a418bf57d2fb -ovrg server
- Show the management server's coreid
# ovcoreid -show -ovrg server
f77dea42-00dd-7524-16b2-a418bf57d2fb
- Generate a Certificate for one node on OVO management server
# ovcm -issue -file /tmp/nodecert -name sgdsy202.chn.hp.com -coreid f77dea42-00dd-7524-16b2-a418bf57d2fb
* Enter password:
* Retype password:
INFO: Issued certificate was written to file '/tmp/nodecert'.
- Import a Certificate for OVRG on OVO management Server
# ovcert -importcert -file /tmp/nodecert -ovrg server
* Enter password:
INFO: Import operation was successful.
- Delete all CA_Certificates and Certificates for managed node
# ovcert -remove f77dea42-00dd-7524-16b2-a418bf57d2fb
# ovcert -remove CA_f77dea42-00dd-7524-16b2-a418bf57d2fb
- Import CA_Certificate and Certificate for managed node
# ovcert -importcert -file /tmp/nodecert
- Restart OVO, OV Core Component and sub-agent
# opcsv -stop
# opcagt -stop
# ovc -kill
# opcsv -start
# opc -start
# opcagt -start