Step 1

Log in as root on the Cisco UCS Director appliance.

Step 2

Enter the admin password reset script.

# opt/infra/dbPwdReset.sh 

Step 1

Clear your browser cache.

Step 2

Log into Cisco UCS Director.

Step 1

Choose Administration > System.

Step 2

On the System page, click Service Provider Feature.

Step 3

Check Enable Service Provider Feature.

Step 4

Click Submit.

Step 1

Log into the vCenter.

Step 2

Select the VM which is running Cisco UCS Director.

Step 3

Choose Edit Settings.

Step 4

Choose Options.

Step 5

Select VMware Tools.

Step 6

Clear Synchronize guest time with host.

Step 7

Click OK.

Step 1

Take a snapshot of the Cisco UCS Director VM.

Step 2

Log into the Cisco UCS Director Shell using SSH client.

Step 3

Disable swapping on the files using swapoff -a command.

Step 4

Reconfigure the partitions using fdisk command. In the following example, fdisk /dev/device_filename command is used to navigate to the device file and delete partition 1 and partition 2. Ensure that you delete partition 2 first.

fdisk /dev/device_filename

Command (m for help): d
Partition number (1,2, default 2):

Partition 2 has been deleted.

Command (m for help): d
Selected partition 1
Partition 1 has been deleted.

Step 5

To create a new partition, perform the following tasks:

1. Create a new device file and enter n to create a new partition.

   The following information is displayed:

   
   fdisk /dev/device_filename1
   
   Command (m for help): n
   Partition type
      p   primary (0 primary, 0 extended, 4 free)
      e   extended (container for logical partitions)
   Select (default p):
   

2. Enter p and press Enter.

   The following information is displayed:

   
   Select (default p): p
   Partition number (1-4, default 1): 
   

3. Enter 1 and press Enter.

   The following information is displayed:

   
   First sector (2048-209715199, default 2048):
   Last sector, +sectors or +size{K,M,G,T,P} (2048-209715199, default 209715199): +96G
   
   Created a new partition 1 of type 'Linux' and of size 96 GiB.
   

4. Repeat Step a to Step c to create swap partition. You can add more partitions, if required.

Step 6

To change the partition type, perform the following tasks:

1. To change the partition type for partition 2, enter t in fdisk prompt and press Enter.

   The following information is displayed:

   
   Command (m for help): t
   Partition number (1,2, default 2):
   

2. Enter 2 and press Enter to change the partition type for partition 2.

   The following information is displayed:

   
   Partition type (type L to list all types): 
   

3. Enter L and press Enter.

   The following information is displayed:

   
    0  Empty           24  NEC DOS         81  Minix / old Lin bf  Solaris
    1  FAT12           27  Hidden NTFS Win 82  Linux swap / So c1  DRDOS/sec (FAT-
    2  XENIX root      39  Plan 9          83  Linux           c4  DRDOS/sec (FAT-
    3  XENIX usr       3c  PartitionMagic  84  OS/2 hidden or  c6  DRDOS/sec (FAT-
    4  FAT16 <32M      40  Venix 80286     85  Linux extended  c7  Syrinx
    5  Extended        41  PPC PReP Boot   86  NTFS volume set da  Non-FS data
    6  FAT16           42  SFS             87  NTFS volume set db  CP/M / CTOS / .
    7  HPFS/NTFS/exFAT 4d  QNX4.x          88  Linux plaintext de  Dell Utility
    8  AIX             4e  QNX4.x 2nd part 8e  Linux LVM       df  BootIt
    9  AIX bootable    4f  QNX4.x 3rd part 93  Amoeba          e1  DOS access
    a  OS/2 Boot Manag 50  OnTrack DM      94  Amoeba BBT      e3  DOS R/O
    b  W95 FAT32       51  OnTrack DM6 Aux 9f  BSD/OS          e4  SpeedStor
    c  W95 FAT32 (LBA) 52  CP/M            a0  IBM Thinkpad hi ea  Rufus alignment
    e  W95 FAT16 (LBA) 53  OnTrack DM6 Aux a5  FreeBSD         eb  BeOS fs
    f  W95 Ext'd (LBA) 54  OnTrackDM6      a6  OpenBSD         ee  GPT
   10  OPUS            55  EZ-Drive        a7  NeXTSTEP        ef  EFI (FAT-12/16/
   11  Hidden FAT12    56  Golden Bow      a8  Darwin UFS      f0  Linux/PA-RISC b
   12  Compaq diagnost 5c  Priam Edisk     a9  NetBSD          f1  SpeedStor
   14  Hidden FAT16 <3 61  SpeedStor       ab  Darwin boot     f4  SpeedStor
   16  Hidden FAT16    63  GNU HURD or Sys af  HFS / HFS+      f2  DOS secondary
   17  Hidden HPFS/NTF 64  Novell Netware  b7  BSDI fs         fb  VMware VMFS
   18  AST SmartSleep  65  Novell Netware  b8  BSDI swap       fc  VMware VMKCORE
   1b  Hidden W95 FAT3 70  DiskSecure Mult bb  Boot Wizard hid fd  Linux raid auto
   1c  Hidden W95 FAT3 75  PC/IX           bc  Acronis FAT32 L fe  LANstep
   1e  Hidden W95 FAT1 80  Old Minix       be  Solaris boot    ff  BBT
   

4. Enter 82 and press Enter.

   The following information is displayed:

   
   Changed type of partition 'Linux' to 'Linux swap / Solaris' 
   

5. Enter w and press Enter to save the changes.

   The following information is displayed:

   
   The partition table has been altered.
   Calling ioctl() to re-read partition table.
   Re-reading the partition table failed.: Device or resource busy
   
   The kernel still uses the old table. The new table will be used at the next reboot or after you run partprobe(8) or kpartx(8). 
   

Step 7

Use the partprobe command to update the kernel with the partition changes.

Step 8

Resize the file system on fdisk /dev/device_filename1.

Step 9

To enable swap, perform the following tasks:

1. Create a swap location on fdisk /dev/device_filename1 using the mkswap command.

2. Edit the system configuration file using the /etc/fstab command.

3. Enable swap using the swapon -a command.

Step 10

If you continue to notice that the primary disk size is full and it is impacting performance of the system, then contact Cisco TAC.

Step 1

Verify that the Cisco UCS Director Bare Metal Agent services are running.

***
# /opt/infra/statusInfra.sh 
 Service                  Status        PID
 ----------           ----------      -----
 broker                  RUNNING      21420
 controller              RUNNING      21443
 networkServices         RUNNING      21475

 Database Connectivity : UP
****

Step 2

Verify that the TFTP service is enabled.

# ps -ef | grep tftpd
root     21477 21475  0 Oct29 ?        00:18:57 
java -Xmx1024m -Dpxe.tftpd.enable=on -Dremap=true 
-DpxeServer.ip=192.0.2.1 -DpxeServer.mgmt_vlan_ip=192.0.2.254 
-cp .:networkServices.jar

Step 3

Restart the Cisco UCS Director Bare Metal Agent services.

# /opt/infra/startInfraAll.sh

Step 4

Check the dhcpd.conf file to make sure that the network settings are appropriately defined. Verify that the subnet is the same.

# cat /etc/dhcpd.conf
#
# DHCP Server Configuration file.
#   see /usr/share/doc/dhcp*/dhcpd.conf.sample  
#
ddns-update-style interim;
ignore client-updates;

subnet 198.51.100.1  netmask 255.255.255.0 {
         option routers                  198.51.100.2;
        option subnet-mask              255.255.255.0;

        option nis-domain               "domain.org";
        option domain-name              "domain.org";
        option domain-name-servers      192.168.55.1;

        option time-offset              -18000; # Eastern Standard Time

        range dynamic-bootp 198.51.100.101 198.51.100.254;
        default-lease-time 21600;
        max-lease-time 43200;
        allow booting;
        allow bootp;
        next-server 198.51.100.3;
        filename "/pxelinux.0";

}

Step 1

Choose Administration > Physical Accounts.

Step 2

On the Physical Accounts page, click Bare Metal Agents.

Step 3

Verify that the status for your Cisco UCS Director Bare Metal Agent account is active. If the status is inactive, generally this is due to a difference in the date or time between the two appliances.

Step 4

Reconfigure the date or time on both appliances.

Step 1

On the BMA, navigate to the following directory /opt/cnsaroot/templates/<your_image_name>.

Step 2

There will be two files in this directory, 1) ks.cfg and 2) pxe.cfg.

Step 3

The pxe.cfg file is more specific to the configuration of the PXE process, this is where we can tell the server specifically which vNIC (in our case eth0 to use for the PXE install process. You can see below we add the ksdevice=eth0 to tell the pxe process to use the eth0 interface .

Step 4

Now also check the ks.cfg. This file pertains more specifically to the final configuration of the server. This is where we can tell the kickstart process to use eth1 and assign the servers final IP address to eth1. The -device=eth1 parameter tells kickstart to assign the IP address to the eth1 interface.

Step 5

Make sure the UCS Service Profile vNIC that corresponds to eth0 has the PXE VLAN allowed on it and it is set as the native VLAN for that vNIC in UCSM.

Step 6

Make sure the UCS Service Profile vNIC that corresponds to eth0 has the Mgmt VLAN allowed on it. If you have the -vlanid= parameter (as seen above in green) in the kickstart file, then you do not need to set it as the native vlan. If you do not have the -vlanid= parameter, you will need to set it as the native vlan for this vNIC.

Step 1

Choose Administration > Physical Accounts.

Step 2

On the Physical Accounts page, click Bare Metal Agents.

Step 3

Click the row with the appropriate bare metal account.

Step 4

Click Edit.

Step 5

Verify that the management IP and the PXE IP addresses are correct. Once confirmed, note the IP address of the PXE Interface Address of the Cisco UCS Director Bare Metal Agent.

Step 6

Log in to the Cisco UCS Director Bare Metal Agent appliance.

Step 7

Edit the DHCP configuration file located at /etc/dhcp/dhcpd.conf.

Step 8

Set the next-server option in the DHCP configuration file to match the IP address of the PXE Interface Address of the Cisco UCS Director Bare Metal Agent.

[root@localhost dhcpl# cat dhcp.conf
         #
         # DHCP Server Cofiguration file.
         #   see/usr/share/doc/dhcp*/dhcp.conf.sample
         #
         ddns-update-style- interim;
         ignore client-updates;

         subnet 198.51.100.0 netmask 255.255.0.0{
               option routers                198.51.100.1;
              option subnet-mask            255.255.255.0;

              option time-offset -18000; #Easter Stadard Time;

          range dynamic-bootp 192.0.2.1, 192.0.2.254;
          default-lease-time 21600;
          max-lease-time 43200;
          allow booting;
          allow bootp;
          next-server  192.0.2.3
          filename "/pxelinux.0";

Step 9

Restart the DHCP servers from the Cisco UCS Director Bare Metal Agent command line using the service dhcp restart command.

Step 1

When you upgrade the Bare Metal Agent from 6.0.0.0 to 6.5.0.0, wait for the upgrade to complete. Once the Bare Metal Agent appliance is up, wait for 5 minutes and then execute the following commands in the Bare Metal Agent console.

setsebool -P samba_export_all_ro=1 samba_export_all_rw=1
find /opt/cnsaroot/templates/ -name "Win*" -exec ln -s '{}' /var/www/html/ \;

Step 2

When you upgrade the Bare Metal Agent from 6.0.1.0 to 6.5.0.0, wait for the upgrade to complete and reboot the Bare Metal Agent appliance. Once the Bare Metal Agent appliance is up, wait for 5 minutes and then execute the following commands in the Bare Metal Agent console.

setsebool -P samba_export_all_ro=1 samba_export_all_rw=1
find /opt/cnsaroot/templates/ -name "Win*" -exec ln -s '{}' /var/www/html/ \;

Step 1

Ensure Cisco UCS Director services are active.

Step 2

Ensure that the IP address of Cisco UCS Director can be pinged over the network.

Step 3

Ensure that Cisco UCS Director can be accessed through a web browser. If you cannot access Cisco UCS Director, do the following:

Step 4

Ensure that Cisco UCS Director is able to reach all of the hardware and software.

Step 5

Ensure that Cisco UCS Director is on the same interface as Cisco UCS Director Bare Metal Agent.

Step 1

At a command prompt, enter gpedit.msc to open your group policy editor.

Step 2

Expand Computer Configuration > Administrative Templates > Network, and then click SSL Configuration Settings.

Step 3

Under SSL Configuration Settings, click the SSL Cipher Suite Order setting.

Step 4

In the SSL Cipher Suite Order pane, scroll to the bottom of the pane.

Step 5

Follow the instructions labeled How to modify this setting.

Step 1

Ensure that the DHCP service (daemon) is active.

Step 2

Ensure that the status of Cisco UCS Director Bare Metal Agent network services is active.

Step 3

Ensure Cisco UCS Director Bare Metal Agent can ping the Cisco UCS Director Bare Metal Agent IP address. If not, check the connectivity through the network configuration of the Cisco UCS Director Bare Metal Agent appliance using vCenter.

Step 4

Ensure that Cisco UCS Director Bare Metal Agent can ping the management and blade server network.

Step 1

In the Cisco UCS Director shelladmin, choose Stop services to stop the Cisco UCS Director services on the primary node and all service nodes.

Step 2

Replace the IP address of the master inventory VM with that of the backup inventory VM in the following files:

Step 3

Start the application services on the primary node and the service node.

Step 1

In the Cisco UCS Director shelladmin, choose Stop services to stop the Cisco UCS Director services on the primary node and all service nodes.

Step 2

Replace the IP address of the master monitoring VM with that of the backup monitoring VM in the following files:

Step 3

Start the application services on the primary node and the service node.

Step 1

Edit the /opt/infra/dbMonitoringBackupRestore.sh script using vi.

Step 2

Remove the CHARGEBACK_HISTORY_ENTRY table name from the script.

Step 1

SSH to the appliance using the root account.

Step 2

Edit the /etc/hosts to update the new hostname.

vi /etc/hosts
192.0.2.1 newhostname
192.0.2.2 CUCSD_Inventory
192.0.2.3 CUCSD_Monitoring

If the screen is blank, click in the black area of the screen and press the Enter key.

Step 1

Unconfigure the VNC.

Step 2

Power off and power on the VM.

Step 3

Launch the VMRC HTML5 Console again.

To establish the VNC session, you must power off and power on the VM twice. When you unconfigure the VNC client on a VM, you must power off and power on the VM once to terminate the VNC session. This is only applicable for vCenter 6.5.

Step 1

Restart the system running Cisco UCS Director.

Step 2

Use VMware - Edit VDC Storage Policy instead of Update Storage Policy.

Step 1

In the Workflow Designer, double-click the Register Host with vCenter task.

Step 2

On the User Input Mapping screen, uncheck Map to User Input for the PXE Boot Request ID and Host Node fields.

Step 3

Click Next.

Step 4

On the Task Inputs screen, uncheck Register PXE Host. You are required to enter a host node, user ID, and password.

Step 5

Click Next.

Step 6

Click Submit.

Step 1

Enable NPAPI in Chrome.

Step 2

Enable the VMRC plug-in.

Step 1

Check the average RTT between the following nodes using the ping -cc 20 Peer IP or hostname command:

1. Primary node and VMware vCenter

2. Primary node and inventory node

3. Service node and VMware vCenter

4. Service node and inventory node

Step 2

Run a basic diagnostic in primary and the service node using the diagnostics tool.

Step 1

Log in to the Cisco UCS Director shelladmin on a service node.

Step 2

In the Cisco UCS Director shelladmin, choose Configure Multi Node Setup (Advanced Deployment).

Enter: [a/b/x]?

Step 3

Enter a and press the Enter key.

Do you want to configure this node as Primary Node [y/n]?

Step 4

Enter y and press the Enter key.

Configuring Primary Node
Stopping UCS Director Services
Select the IP version you want to configure [a) IPv4, b)IPv6] a/b:

Step 5

Enter a and press the Enter key.

Provide Inventory DB IP:

Step 6

Enter the inventory database IP address and press the Enter key.

Provide Monitoring DB IP:

Step 7

Enter the monitoring database IP address and press the Enter key.

Disabling Database service at startup
Starting UCS Director Services
Configured Primary Node Successfully
In order for changes to take effect logout and login back
Do you want to logout [y/n]?

Step 8

Enter y and press the Enter key.

Step 1

Run the following command as the root user on the local datastore or the external datastore to determine the I/O speed:

dd if=/dev/zero of=/tmp/test1 bs=4096 count=262144 oflag=direct

Step 2

Check the average RTT between the nodes using the ping -cc 20 Peer IP or hostname command.

ping -c 20 192.0.2.253

rtt min/avg/max/mdev = 60.474/69.888/134.199/21.529 ms

Step 3

If the average RTT value is above 100 ms, work with your network administrator to debug any possible network latency issues to reduce the RTT to under 100 ms.

In the Cisco UCS Director VM prompt after the VM is powered on, press Alt-F1.

Step 1

Edit the vmware.properties file located in the /opt/infra/inframgr directory using vi.

Step 2

Update the wsclient_connection_timeout and wsclient_read_timeout parameters to 45,000 and 60,000 milliseconds, respectively.

#wsclient connection timeout
wsclient_connection_timeout_milliseconds=45000
#wsclient read timeout
wsclient_read_timeout_milliseconds=60000

Step 3

Restart the infra services the appliance from the shelladmin.

Step 1

Choose Policies > Virtual/Hypervisor Policies > Storage.

Step 2

On the Storage page, click VMware Storage Policy.

Step 3

Click the row with the storage policy that you want to edit.

Step 4

Click Edit.

Step 5

On the Edit Storage Resource Allocation Policy screen, enter the datastore capacity value rounded up to one value after the decimal in the Filter Conditions field.

Step 6

Click Next.

Step 7

On the Additional Disk Policies screen, click Next.

Step 8

On the Hard Disk Policy screen, click Submit.

Step 1

Verify that the Cisco UCS Director and VMware vCenter systems have the same NTP server configured for content library inventory discovery.

Step 2

Perform the content library inventory discovery.

Step 1

Choose Virtual > Storage.

Step 2

On the Storage page, choose the cloud.

Step 3

On the Storage page, click Datastore Clusters.

Step 4

Click the row with the datastore cluster with the DRS rule you want to modify.

Step 5

Click View Details.

Step 6

Click SDRS Rules.

Step 7

Click the row with the rule that you want to delete.

Step 8

Click Delete.

Assign a GUID to the cloned VM using the Cisco UCS Director Shell menu.

Step 1

Convert the template to a VM.

Step 2

Run the Get-NetIPAddress command to check whether IPv6 address is enabled.

Step 3

Run the following PowerShell command to disable IPv6 address on the VM.

New-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters -Name DisabledComponents -PropertyType DWord -Value 0xffffffff

Step 4

Restart the Guest OS or reboot the VM.

Step 5

Convert the VM to a template and use it to provision a VM in Cisco UCS Director.

Step 1

Edit the JDK_HOME/jre/lib/security/java.security file using vi.

Step 2

Comment out the following line:

#jdk.certpath.disabledAlgorithms=MD2

Step 1

Open the Deploy Apic L4-L7 Services workflow in the Cisco UCS Director Orchestrator Workflow Designer.

Step 2

Click the wait task inside the workflow.

Step 3

Change the wait task time interval to a value greater than 60 seconds.

Step 1

Log in to Cisco UCS Director user interface.

Step 2

Choose Orchestration > Custom Workflow Tasks.

Step 3

Choose and modify the required custom workflow task.

var builder = new ProcessBuilder();
builder.command("sudo",”<</opt/infra/testJVR.sh>>”);
 var process = builder.start();

Step 4

Click Submit.

Step 5

Log in to Cisco UCS Director as shelladmin using your SSH terminal client.

Step 6

Append the file entry in /etc/sudoers file.

Cmnd_Alias UCSD_COMMANDS=<</opt/infra/testJVR.sh>> 
(At the end of the line, append the file entry)

Step 7

Provide the required permissions to file.

Step 8

In the Cisco UCS Director user interface, choose Orchestration > Custom Workflow Tasks.

Step 9

Select the required workflow and execute.

Step 10

Click Submit.

Step 1

Log in to Cisco UCS Director.

Step 2

Choose Orchestration > Custom Workflow Tasks.

Step 3

Select and modify the required custom workflow task.

var builder = new ProcessBuilder();
builder.command("sudo","mkdir","<</opt/jvr>>");
 var process = builder.start(); 

Step 4

Click Submit.

Step 5

Choose Orchestration > Workflows.

Step 6

Select the required workflow and execute.

Step 7

Click Submit.

Step 1

Log in to Cisco UCS Director.

Step 2

Choose Orchestration > Custom Workflow Tasks.

Step 3

Select and modify the required custom workflow task.

var builder2 = new ProcessBuilder();
builder2.command("sudo","touch","<</opt/jvr/testScript.sh>>");
var process2 = builder2.start();

Step 4

Click Submit.

Step 5

Choose Orchestration > Workflows.

Step 6

Select the required workflow and execute.

Step 7

Click Submit.

Step 1

Check the Cisco UCS Director Release Notes for information on whether a new version of the PowerShell Agent is included in the current version of Cisco UCS Director.

Step 2

If available, download and install a new version of the PowerShell Agent from the upgraded Cisco UCS Director appliance.

Step 3

Choose Administration > Virtual Accounts.

Step 4

On the Virtual Accounts page, click PowerShell Agents.

Step 5

Click Download Installer.

Step 6

On the Download Agent Installer screen, review the installation requirements and click Submit.

Step 7

Copy the executable file to your target machine.

Step 8

Double-click the PSASetup.exe file.

Step 9

Follow the InstallShield Wizard prompts to install the PowerShell Agent.

Step 1

On both VMs, configure the value " * " in the TrustedHosts table of WinRM by entering the winrm set winrm/config/client @{TrustedHosts="*"} command.

C:\Users\Administrator>winrm set winrm/config/client @{TrustedHosts="*"}
Client
NetworkDelayms = 5000
URLPrefix = wsman
AllowUnencrypted = false
Auth
Basic = true
Digest = true 
Kerberos = true
Negotiate = true
Certificate = true
CredSSP = false
DefaultPorts
HTTP = 5985
HTTPS = 5986
TrustedHosts = *
			 	 	 			 

Step 2

On your hosts, enter the winrm quickconfig command.

C:\Users\Administrator>winrm quickconfig
WinRM service is already running on this machine.
WinRM is not set up to allow remote access to this machine for management.
The following changes must be made:

Configure LocalAccountTokenFilterPolicy to grant administrative rights remotely to local users.

Make these changes [y/n]?

Step 3

Enter y.

Make these changes [y/n]? y
WinRM has been updated for remote management.
Configured LocalAccountTokenFilterPolicy to grant administrative rights remotely to local users.

Step 4

Verify that WinRS is enabled by entering the winrm g winrm/config command at a command prompt.

Step 1

Unmount the file system using the umount command.

# umount /mount-point

Step 2

Run the fsck command to reset the file system state.

# fsck /mount-point

Step 3

Reboot the VM.

Step 1

Choose Administration > User Interface Settings.

Step 2

On the User Interface Settings page, click Reports Customization.

Step 3

Click the row with the catalog report.

Step 4

Click Edit.

Step 5

On the Customize Report screen, uncheck Hide Report to show the report.

Step 6

Click Save.

Step 1

Choose Administration > System.

Step 2

On the System page, click Advanced Controls.

Step 3

Check Resource Metering and VM Metering.

Step 4

Click Submit.

Step 1

Clear the browser cache.

Step 2

Restart the browser (or all open browsers).

Step 3

Use a different browser.

Step 4

Reset the browser as described in the following documents. This erases any previously configured browser settings.

• For Firefox, see https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings.
• For Internet Explorer, see http://windows.microsoft.com/en-us/internet-explorer/reset-ie-settings#ie=ie-11.

Step 1

Stop the upgrade in process.

Step 2

Manually resync the NTP server settings using the Time Sync shell admin option in the standalone (single-node) node, primary node, service node, inventory node, and monitoring node.

Step 3

Restart the upgrade process.

Step 1

Generate and import the SSL or CA certificates prior to upgrading, or after upgrading from any previous release.

Step 2

From the Cisco UCS Director Shell menu, choose Start Services to restart the services.

Step 3

Choose Display Services Status to verify that the websock service is up.

Step 1

Login to the Shell Admin console on the monitoring and inventory database nodes.

Step 2

Select option 18 - Reset MySQL User Password.

Step 3

When prompted to reset the password, enter cloupia as the new password.

Step 4

Select option 2 - Display Service Status to determine the status of the database services.

Step 5

After verifying that all services are up and running, for better security, reset the mysql db password on all the nodes in the following order:

Step 1

On Primary and Service nodes, create a folder titled mysql in the /opt/certs location.

Step 2

Manually copy the /opt/certs/mysql/dbkeys.key and /opt/certs/mysql/dbcreds.properties files from any of the database nodes to the /opt/certs/mysql folder in the Primary and Service nodes.

Step 3

Reset the mysql db password on all the nodes in the following order: