Re-create the Amqp client certificate

ch.close()

conn.close()

if __name__ == '__main__': main()

26.7 Re-create the AMQP client certificate

If you change the appliance name, you must re-create the AMQP client certificate.

Prerequisites

•Minimum required session ID privileges: Infrastructure administrator

Re-creating and downloading the client certificate, private key, and root CA certificate using REST APIs

1.Revoke the certificate.

DELETE /rest/certificates/ca/rabbitmq_readonly

Request body is not required.

NOTE: When you revoke the default client certificate, the appliance re-generates the CA certificate, AMQP server certificate, and the default client certificate.

2.Download the certificate and private key.

GET /rest/certificates/client/rabbitmq/keypair/default

3.Download the root CA certificate.

GET /rest/certificates/ca

26.7 Re-create the AMQP client certificate 195

Page 195

Image 195

HP OneView manual Re-create the Amqp client certificate, Delete /rest/certificates/ca/rabbitmqreadonly

Contents

Abstract HP OneView 1.0 User Guide Acknowledgments Contents Navigating the graphical user interface Understanding the security features of the appliance II Planning tasks Planning your data center resources Using the Rest APIs and other programmatic interfacesAccessing documentation and help Planning for configuration changes An HP 3PAR Storage System 105 107Managing networks and network resources 115 Managing firmware for managed devices 135 Managing power and temperature 139Managing users and authentication 143 Managing enclosures and enclosure groups 131 Managing the appliance 153 Backing up an appliance 149 About unsupported and unmanaged hardware 165 Monitoring power and temperature 179 VI Troubleshooting 197 199 Using the State-Change Message Bus Scmb 185 Restoring an appliance from a backup file 221 Support and other resources 227231 Using the virtual appliance console 269 Backup and restore script examples 271Index 293 Part I Learning about HP OneView Page HP OneView for converged infrastructure management Learning about HP OneViewHP OneView for converged infrastructure management Architecture Hardware and software provisioning features One tool and one data set-one viewLearning about HP OneView Expert design with consistent deployment Hardware and software provisioning featuresServer profiles Groups, templates, and sets Types of groups and sets Define configurations for specific environments Streamlined process for bringing hardware under management Operating system deploymentFlexibility in design and deployment Simplified firmware management Firmware and configuration change management featuresMonitoring and response features Simplified configuration change management Isolated management network Automatic configuration for monitoringMonitoring the environment and responding to issues Monitoring and response features Data center environmental management Resource utilization monitoringAlert and health management Backup and restore features Backup and restore featuresSpecialized user role for creating backup files Recovery from catastrophic failures Availability features Security features Graphical and programmatic interfaces User interface-efficiency and simplicity by designRest APIs-automation and integration Integration with other HP management software Open integrationConvenient licensing model Logical interconnects Networking featuresNetworking features Supported networks Network sets Understanding the resource model Resource model summary diagram UI screens and Rest API resources Server profilesConnection templates Relationship to other resources Connections and server-profiles ConnectionsServer hardware types Connection-templates Server-hardware-types Server hardwareZero or more server profiles UI screen Rest API resource Server Hardware Types Enclosure-groups Enclosure groupsEnclosure types Server-hardware Exactly one enclosure group Zero or more power delivery devicesEnclosures Interconnect types Interconnect-types Interconnects Logical-interconnects Logical interconnect groupsUI screen Rest API resources Interconnects Interconnects , interconnect-types , Logical interconnects UI screen Rest API resource Logical Interconnect GroupsLogical-interconnect-groups To a downlink Uplink setsUI screen Rest API resource Logical Interconnects Logical-downlinks Uplink-sets NetworksNetwork sets Zero or one uplink set per logical interconnect Domains DomainsAppliance Network-sets Relationship to other resources Resources related data center facilitiesData centers Racks Zero or more unmanaged devices Power delivery devicesPower-devices Unmanaged devices Rest APIs UI screen Rest API resource Unmanaged DevicesUnmanaged-devices You can view, add, or edit the propertiesPage Understanding the security features of the appliance Securing the applianceSecuring the appliance Best practices for maintaining a secure appliance Understanding the security features of the appliance Creating a login session Authentication for appliance accessCreating a login session Specifying user accounts and roles Controlling access for authorized usersProtecting credentials Understanding the audit log Resource category MessageUnderstanding the audit log Overview Appliance access over SSLExample 1 Sample audit entries user login and logout Managing certificates from a browser Managing certificates from a browser Using a certificate authorityVerifying a certificate Downloading and importing a self-signed certificate SSL connection PasswordsBrowser best practices for a secure environment Nonbrowser clients Required ports Access to the appliance consoleSwitching from one console to another Ports needed for HP OneView SSL see Enabling or disabling authorized services accessRestricting console access Algorithms for securing the appliance Downloads from the appliance Downloads from the appliancePage Browsers Required plug-ins and settingsCommonly used browser features and settings Navigating the graphical user interface About the graphical user interface Set the browser for US or metric units of measurementSet US or metric units of measurement About the graphical user interface Screen topography About the Activity sidebar Banner and main menuButton functions Filters sidebar Help sidebarUI buttons Oneviewcommunity online Icon descriptions Display details Status and severity iconsUser control icons Large icon Small icon Resource Activity Task Critical Informational icons Map view screen details Notifications area Notifications area Search help topics Log out of the appliance About help system search results Search resources Nameenclosure10 name192.0.2.0, PDU Error Unknown DisabledView resources according to their health status Advanced searching and filtering with properties View resources according to their health status Reset the health status viewPage Resource data Using the Rest APIs and other programmatic interfacesResource operations Operation Http Verb Create Resource model format Log in to the appliance using Rest APIsReturn codes URI format Task resource Error handlingConcurrency control using etags Asynchronous versus synchronous operations Querying resources using common Rest API parameters State Change Message BusDeveloper tools in a web browser Rest API help design Accessing documentation and helpOnline help-conceptual and task information as you need it This user guide supplements the online help Downloading Html help and Rest API files Where to find HP OneView documentationAccessing documentation and help HP OneView documentation Part II Planning tasks Page Planning your data center resources How many data centers?Security planning Choosing a policy for the audit log Determining your backup policyChoosing a security certificate policy Determining roles and restrictions for authorized users Preparing your data center network switches Reviewing your firewall accessPlanning your resource names Planning the appliance configuration Appliance VM and host requirementsResource name Time clocks and NTP Planning for high availabilityLocation of the appliance Separate networks for data and managementPage Interconnects and logical interconnects Planning for configuration changesAppliance Enclosures Planning for configuration changes Server profiles and server hardwareAdding a network Adding an enclosure Page Part III Configuration quick starts Page Process overview Quick Start Initial ConfigurationConfigure the environment for the first time Process overview Fibre Channel Local authenticationDirectory-based authentication Ethernet Configuration step Required action or input Configuration step Add power devices to the appliance Page Resource Task Description Networks Add the network Process Server Profiles Hardware Resource TaskPage Checklist connecting a server blade to a data center network Page Resource Task Enclosures Process It to the server Resource Task Logical Create a logical InterconnectGroups Enclosure Server Profiles Do one Following Hardware Create a server Enter a name for 104 105 Resource Task Description Networks Add the Fibre Sets for the DirectAttach network Resource Task Server Hardware Add the server using Rest APIs for107 108 Part IV Configuration and management 110 Server-profiles and connections Server hardware features supported by the applianceManaging servers and server profiles UI screens and Rest API resources Prerequisites for bringing server hardware under management RolesTasks for server profiles Tasks for server hardware Tasks for server hardwareTasks for server hardware types Effects of managing server hardware iLOs Learning more Interconnects Data center switch port requirementsManaging networks and network resources Managing Fibre Channel networks SANs Tasks Managing Ethernet networksAbout network connectivity Roles About Fibre Channel networks Fibre Channel network typesAbout network connectivity Direct attach Fibre Channel networks Fabric attach Fibre Channel networks Ethernet networks and network sets About Ethernet networksAbout network sets Fibre Channel networks and FCoE Network set details Managing enclosure interconnect hardware About interconnectsManaging enclosure interconnect hardware About unsupported interconnects Interconnects Networking featuresLearning more Connectivity and synchronization with the appliance About logical interconnects Server Blade Logical Interconnect Uplink sets Stacking modes Stacking healthAdding a logical interconnect Deleting a logical interconnect About logical interconnect groups Logical Interconnect Group a About Snmp settings Interconnect maps Items Compliance checking Ethernet interconnect settingsConfiguration defined by the logical interconnect group? Set? Configure a port to monitor network traffic 130 Prerequisites for bringing an enclosure under management Managing enclosures and enclosure groups Managing enclosures and enclosure groups TasksAbout enclosures Connectivity and synchronization with the appliance About enclosure groups Effects of managing an enclosureAbout enclosure groups 134 Unsupported firmware for firmware bundles Managing firmware for managed devicesAbout the appliance firmware repository About unsupported firmware Unsupported firmware for server profiles Firmware update processRoles and Tasks Unsupported firmware for enclosures Best practices for firmware OptionBest practice First step Upload the latest current SPP Best practice Troubleshooting firmware bundles Managing power and temperature Managing powerAbout power delivery devices About racks Managing power and temperature Managing temperature Managing temperatureDefault data center Datacenter Default rack placement About utilization graphs Managing users and authentication Reset the administrator passwordAbout user accounts Action privileges for user roles About user rolesAction privileges for user roles Appliance role types Restores Administrator BackupsGlobal settings Login sessions About directory service authentication About authentication settings Managing user passwords Managing user passwords Resetting the administrator password Reset the administrator password Backing up an appliance Overview of the backup processBackup file name Backups Guidelines for creating a backup file Create and download a backup fileBacking up an appliance GET /rest/backups/archive/backup URI Creating and downloading a backup filePost /rest/backups Download the backup file 152 How the appliance handles an unexpected shutdown Managing the applianceManaging appliance availability Best practices for managing a VM appliance Restart the appliance Appliance recovery operationsWhat to do when an appliance restarts Shut down the appliance Managing the appliance settings About appliance Snmp settingsRestarting the appliance Id-pools Managing the security features of the applianceEnabling or disabling HP support access to the appliance Managing addresses and ID pools Tasks Managing SSL certificatesManaging the HP public key Roles Licenses Managing licensesDownloading audit logs Audit-logs License reporting About licensingLicense types License delivery Server hardware licensing View license statusLicense graph colors Licensed features Server blade licensing at the enclosure levelEnclosure licensing policy behavior Rack mount server licensing behavior Rack mount server licensingLicensing and utilization statistics Licensing scenarios Licensing scenarios Updating the appliance Appliance/firmware How the appliance handles unsupported hardware About unsupported and unmanaged hardwareHow the appliance handles unsupported hardware About unmanaged devices 166 Part V Monitoring 168 Activities Monitoring data center status, health, and performanceDaily monitoring Initial check the Dashboard General health monitoring steps Monitor data center temperatureBest practices for monitoring data centers Best practices for monitoring health with the appliance UI Overall health monitoring Best practices for monitoring health using Rest APIsServer hardware health monitoring Network health monitoring Get the associated events Get a specific alert using the alert IDGET /rest/alerts GET /rest/alerts/id Managing activities Managing activitiesAbout activities GET /rest/logical-interconnects/id Task type Description User Activity types alerts and tasksAbout alerts About tasks Activity statuses Activity states Dashboard screen details Using the Dashboard screenHow to interpret the Dashboard graphs About the Dashboard Status icons Disabled or Unknown Monitoring data center status, health, and performance UI power and temperature monitoring Monitoring power and temperaturePower and temperature monitoring feature overview Power and temperature monitoring features by resource Manipulating the view of the data center visualization Monitoring power and temperature Monitoring power and temperature utilization About the Utilization panelAbout utilization graphs Utilization metric Resource Enclosures Power Delivery Devices Server HardwareUtilization statistics gathered by resource Utilization graphs Power utilization metrics Prerequisites Rest API power and temperature monitoringUpdate enclosure power capacity settings Update server hardware power capacity settings Create and download the Amqp client certificate Using the State-Change Message Bus ScmbGET /rest/certificates/client/rabbitmq/keypair/default Connect to the Scmb Using the State-Change Message Bus Scmb Set up a queue to connect to the HP OneView Scmb exchange Sample queues Json structure of message received from the Scmb NET C# code example ChangeType valuesExample 2 Json example NET C# code example Additional example-specific prerequisites Examples Java code example Java code example Example 5 Java code example Python code example Python code example Example 6 Python code example pika Example 7 Python code example amqplib Re-create the Amqp client certificate Delete /rest/certificates/ca/rabbitmqreadonlyRe-create the Amqp client certificate 196 Part VI Troubleshooting 198 Troubleshooting Category199 Recommendation Details Look for a message Basic troubleshooting techniquesAbout network setup errors About reported serious errors Recommendation Details When VM host is down or nonresponsiveCreate a support dump file Creating a support dump file GET /rest/appliance/support-dumps/file name Creating a support dump using Rest APIs Create support dumpPost /rest/appliance/support-dumps Download the support dump file Unexpected appliance shutdown Troubleshooting the applianceFirst time setup Appliance cannot access the network Insufficient time Appliance update is unsuccessfulSupport dump file creation action fails Certificate action fails Appliance network is down Backup file creation, download, or restore action failsBackup file creation is still in progress Backup file is incompatible Restart or shutdown failure Profile operation was running during the backupRestore operation fails or times out Internal server error VM does not restart when VM host time is manually set Reinstall the remote consoleReinstall the software Restart interconnect Troubleshooting enclosures and enclosures groupsAdd or remove enclosure is unsuccessful Clear vcmode Restart interconnect N Incorrect credentials Troubleshooting firmware bundlesCertificate Error Add server blade is unsuccessful Troubleshooting licensing Troubleshooting interconnects License assigned does not match the type specified Troubleshooting logical interconnects27.9.1 I/O bay occupancy errors Uplink set warnings or errors Network create operation is unsuccessful Troubleshooting networksTroubleshooting server hardware Physical interconnect warnings and errors Is claimed by that software Cannot control power on server blade Troubleshooting server profiles Server profile is not created or updated correctlyTroubleshooting server profiles Prerequisites and conditions have not been met Verify the operational status of the server hardware What to do when you cannot apply the server profileServer hardware or its iLO are powered-off or reset Invalid configuration Incorrect privileges Troubleshooting user accountsUnauthenticated user or group Profile operations fail Inaccurate credentials Directory service not availableCannot add directory service User public key is not accepted Cannot add directory user or group Cannot add server for a directory serviceLost connection with directory service host User or group not configured in the directory service See also Post-restoration tasks Restoring an appliance from a backup fileRestore operation overview Restores Restoring an appliance from a backup file Preparing to restore an appliance Restore an appliance from a backup file Restore an appliance from a backup file Post-restoration tasks Using Rest APIs to restore an appliance from a backup fileCreating a custom script to restore an appliance Restoring an appliance from a backup file Post-restoration tasks Preventing duplicate IDs on the network after a restore 226 Get connected to the HP OneView online user forum How to contact HPSoftware technical support and software updates Support and other resources Support and other resources Using your software technical support and update serviceRelated information Documentation Product websites Docsfeedback@hp.com Submit documentation feedbackFor UI and Rest API help For user guides and other manuals 230 Tasks you can perform without data center hardware Tasks you can perform without data center hardwareInformation about the sample data center Sample data center hardware Enclosure ILOAdminOAAdmin Rack mount server Data center networks Fibre Channel networksFibre Channel networks for the SAN fabrics SAN a and SAN B Fibre Channel network configurations Switches in the data centerStorage system Ethernet Networks Networks for vMotion and virtual machine managementProduction networks Development networks Planning the configurationPlanning for installation of the appliance Ethernet network configuration values Planning the configuration Planning for network setsPlanning for users and roles Workflow Installing the appliancePlanning resource names Assumptions Configuring the networks and network sets Configuring the Fibre Channel SAN networksCopying the template server profile to eight servers Configuring the Ethernet networks Prod 1101 1102 1103 1104 Use the following names and Vlan IDs for the test networks Configuring the network sets Page Creating the logical interconnect group Creating a logical interconnect group and its uplink sets Creating the uplink sets for the Fibre Channel networks Creating the uplink sets for the Ethernet networks ProdUS DevUSTestUS Click Create to create the logical interconnect group Creating an enclosure group for vSphere ESXi hosts 172.18.1.12 Address Enclosures PasswordAdding the enclosure Viewing the server hardware types View information about the server hardware Creating a server profile to use as a templateViewing server hardware types Editing server hardware typesPage Esxi vmotion Attribute Value Device type Ethernet NetworkEsxi mgmt Secondary Boot Not bootable Attribute Value Device type Fibre Channel NetworkRequested bandwidth Page Copying the template server profile to eight servers Name Server hardwareEsx02 Encl1, bay Esx03 Esx04 Esx05 Esx06 Esx07 Esx08 Creating the Flat SAN networks 172.18.1.14 Address Page Page Enclosure group name Creating the server profileEnclosure name Encl2 Requested bandwidth Default value FlexNIC Device type Fibre Channel NetworkFlatSAN a FlatSAN B Page Assumptions Powering on the server Adding the server hardwareViewing information about the server Page Adding a license for the server Page Key combinations for the virtual appliance console Using the virtual appliance consoleUsing the virtual appliance console Using the virtual appliance console 270 Sample script Backup and restore script examplesSample backup script Sample backup script Backup and restore script examples Example 8 Sample backup.ps1 script Sample backup script None, does not accept piping Sample backup script Backup and restore script examples Backup resource object Absolute path of the download file Sample backup script Backup and restore script examples Sample backup script Sample restore script Sample restore script Example 9 Sample restore.ps1 script Outputs the new active Api version Response body to the upload post request Sample restore script Outputs the response body from the Post restore call None, end of script upon completion or fail Uri of the restore task in string form Sample restore script Backup and restore script examples Host, security access, 80 initial configuration Index293 Index Eula 295 Scmb see State-Change Message Bus Status icon, 62 storage system website Logical interconnect, 125 State-Change Message Bus 297 Vlan ID

HP OneView Re-create the Amqp client certificate, Delete /rest/certificates/ca/rabbitmqreadonly

Models: OneView

26.7 Re-create the AMQP client certificate

Prerequisites

DELETE /rest/certificates/ca/rabbitmq_readonly

GET /rest/certificates/client/rabbitmq/keypair/default

GET /rest/certificates/ca

26.7 Re-create the AMQP client certificate 195