Hello, in order to initialize security I had to connect to SPA via console cable. Here instructions to be followed: [1] cable needed: 038-003-084 EMC Null Modem Micro DB9 to DB9/F Serial Cable – 25 Feet [2] Plug the serial cable into the service port on Storage Processor A. Set up a serial PPP VPN on a Windows laptop using 115200, 8, n, 1. Username is clariion, password is clariion! - Doesn't matter what you put for the phone number. [3] After the PPP dialup has been created in Networking close out of that wizard and navigate to: %appdata%\Microsoft\Network\Connections\PbkEdit the rasphone.pbx file in notepadChange Type=1 to Type=3Dial with login clariion/clariion! [4] point a web browser to 192.168.1.1/setup. Scroll down until you see a button that says Reset Domain Security. Click this and OK to the pop-ups. Note that this is **not** disruptive to array operations - you can do this anytime. Repeat for Storage Processor B. Now disconnect your serial cable, fire up your Unisphere session and you'll be prompted to create a new administrator user and password. Done! Thx, Andrea
Hello, I'm unable to connect VNX5300 via GUI (USM/SP) using sysadmin account while ssh to CS using root is fine. Apparently naviseccli can talk to spa/spb. As you can see below the spa/spb complains that security is not initalized. If I try to create a new administrator user (ie: sysadmin2) it says that credential on control station is invalid. Any help or suggestion to fix this is really appreciated! (also [URL]|spb]/setup reports "Domain Security Uninitialized - Please initialize the security using Unisphere or Naviseccli") Thank you, Andrea   [nasadmin[NAME]-cs0 ~]$ naviseccli -h spa getagent Agent Rev: 7.32.33 (9.2)Name: K10Desc: Node: A-CKM00122601488Physical Node: K10Signature: 3244558Peer Signature: 3244576Revision: 05.32.000.5.249SCSI Id: 0Model: VNX5300Model Type: RackmountProm Rev: 7.20.00SP Memory: 8192Serial No: CKM00122601488SP Identifier: ACabinet: DPE8 [nasadmin[NAME]-cs0 ~]$ naviseccli -h spa security -listSecurity is not initialized. Add a global administrator to initialize security.[nasadmin[NAME]-cs0 ~]$ [nasadmin[NAME]-cs0 ~]$ naviseccli -h spa security -adduser -user sysadmin2 -password sysadmin2 -scope global -role administrator -type systemWARNING: You are about to add user: sysadmin2 Proceed?(y/n) yAdd user operation failed. The internal credential to the Control Station is invalid.Log in to the Control Station as root and run /nas/http/bin/set_passphrase IP_SP[nasadmin[NAME]-cs0 ~]$ [nasadmin[NAME]-cs0 ~]$ [nasadmin[NAME]-cs0 ~]$ suPassword: [root[NAME]-cs0 nasadmin]# [root[NAME]-cs0 nasadmin]# /nas/http/bin/set_passphrase 10.58.11.198/nas/sbin/classic_navicli -np -h 10.58.11.198 getagent 2>&1Error returned from AgentAgent denied request -- Caller not privileged. /nas/sbin/classic_navicli [-p] [-v|q] [-m] [-np] [-t timeout] [-h hostname][-d device] [-help] [-f filename] CMD  Possible commands are: alpa arrayname arraycommpath bind baseuuidcachecard chglun chgrg clearlog clearstatscreaterg emconfiguration failovermodeflashleds firmware getagent getall getarrayuidgetatf getcache getconfiggetcontrol getcrus getdisk getlog getloop getlun getresume getrg getsniffer getsp getsptime initializearray inserttestevent luncachelunmapinfo managedby managefiles mirrorview ndunetworkadmin port r3wrbuff readcru readlunrebootSP register removerg reserved responsetestremoteconfig sancopy setcache SC_OFF setloopsetraid5 setsniffer setspstime setsptime setstatsshutdown snapview storagegroup systemtype spcollectspportspeed trespass unbind unitserialnumberupload setfeature Too few or invalid command line parameters Unable to set passphrase.[root[NAME]-cs0 nasadmin]#  
VNX5300: Security is not initialized