Generating the encryption-based ciphertext for a storage system account
In advance or at the time of a support session, the administrator can generate the ciphertext (blob) and
provide it to Hewlett Packard Enterprise support to be deciphered. Before or upon arriving at the site, the
approved service provider can obtain the password from Hewlett Packard Enterprise support over the
phone, text message, or email.
Procedure
1.
Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface.
2.
To generate a ciphertext, initiate the HPE 3PAR CLI
controlrecoveryauth ciphertext
<user>
command, where
<user>
is either
root
or
console
.
3.
Copy and paste that ciphertext into an email, text message, or into an encrypted zip file and send to
Hewlett Packard Enterprise support.
The ciphertext is safe to email, because the random credential contained in the ciphertext is first
encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise support can unwrap
the encrypted credential using the corresponding private key.
Regenerating the encryption-based ciphertext for a storage system account
Procedure
1.
Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface.
2.
To regenerate a ciphertext, initiate the HPE 3PAR CLI
controlrecoveryauth rollcred
<user>
command, where
<user>
is either
root
or
console
.
3.
Copy and paste that ciphertext into an email to Hewlett Packard Enterprise support or to the approved
service provider.
The ciphertext is safe to email, because the random credential contained in the ciphertext is first
encrypted and then wrapped using a public key. Only Hewlett Packard Enterprise can unwrap the
encrypted credential using the corresponding private key.
Alert notifications for the storage system—SP 5.x
When a component is in a degraded or failed state, notification of the issue is provided in the following
ways:
• Email notification from service processor (SP) if enabled
During the service processor setup, the
Send email notification of system alerts
option was either
enabled or disabled. If enabled, the service processor can send email notifications of alerts from
systems to contacts. The
Contacts
page allows you to manage system support contacts (for Hewlett
Packard Enterprise to contact about issues with the system) and local notification contacts (to receive
email notifications). The Service Console also allows for the creation of local notification rules for
suppression and disclosure of specific alerts for contacts. The email might include a
Corrective
Action
for the failure and the spare part number for the failed part. The spare part number is used to
order a replacement part.
• Alert banner or a health alert on the dashboard of the HPE 3PAR StoreServ Management Console
(SSMC)
• Alert banner or a health alert in the Service Console interface for the HPE 3PAR Service Processor
• LED on the component indicating a fault
More information
85