No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Alarm and Event Reference 04

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ALM-73002 OAM Certificate Mismatch

ALM-73002 OAM Certificate Mismatch

Description

This alarm is generated when the certificates installed for the oam-network-server and oam-network-agent are inconsistent.

Attribute

Alarm ID

Alarm Severity

Auto Clear

73002

Critical

Yes

Parameters

Name

Meaning

Fault Location Info

component: indicates the name of the component for which the alarm is generated.

Additional Info

None

Impact on the System

The oam-network-server cannot communicate with the oam-network-agent.

Possible Causes

  • The FNM certificate is not replaced on the FusionCompute web client if VRM is interconnected after the FusionSphere OpenStack service SSL certificate is replaced.
  • Different certificates are installed for the oam-network-server and oam-network-agent.

Procedure

  1. Use PuTTY to log in to the first FusionSphere OpenStack node through the IP address of the External OM plane.

    The default user name is fsp. The default password is Huawei@CLOUD8.

    The system supports both password and public-private key pair for identity authentication. If the public-private key pair is used for login authentication, see detailed operations in Using PuTTY to Log In to a Node in Key Pair Authentication Mode.

    NOTE:
    To obtain the IP address of the External OM plane, search for the required parameter on the Tool-generated IP Parameters sheet of the xxx_export_all.xlsm file exported from HUAWEI CLOUD Stack Deploy during software installation. The parameter names in different scenarios are as follows:
    • Region Type I scenario:

      Cascading system: Cascading-ExternalOM-Reverse-Proxy

      Cascaded system: Cascaded-ExternalOM-Reverse-Proxy

    • Region Type II and Region Type III scenarios: ExternalOM-Reverse-Proxy

  2. Run the following command and enter the password of user root to switch to user root:

    su - root

    The default password of user root is Huawei@CLOUD8!.

  3. Run the following command to disable user logout upon system timeout:

    TMOUT=0

  1. Import environment variables. For details, see Importing Environment Variables.
  2. Replace the certificates for both oam-network-agent and oam-network-server, ensuring that they have the same certificates. You can replace certificates on any host in the AZ by running the following command. For details, see "Replacing a Single or Multiple Certificates at a Time on ManageOne" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.

    cps certificate-update --parameter <key=value> --service <service_name> <template_name>

    For example, to replace the certificate of oam-network-server, run the following commands:

    cps certificate-update --parameter certfile=/home/cert/server.crt private_key=/home/cert/server.key ca_certfile=/home/cert/ca.crt --service fusionnetwork oam-network-server

    cps commit

    If the FusionCompute hypervisor is connected, you also need to replace the oam-network-agent certificate for CNA nodes. You can log in to the FusionCompute web client and choose System > System Configuration > Authentication Mgt > FNM Security Authentication to update certificates.

    Then check whether this alarm is cleared.

    • If yes, no further action is required.
    • If no, go to 6.

  3. Contact technical support for assistance.

Related Information

None

Translation
Download
Updated: 2019-08-30

Document ID: EDOC1100062365

Views: 48448

Downloads: 33

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next