Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
Document Version Release Date Details 2 02/21/2018 This issue is corrected in HPE OneView Version 4.00.07. 1 01/17/2018 Original Document Release. An issue has been identified that prevents successful upgrades from earlier HPE OneView releases to the Version 4.0 release. This advisory describes the steps to ensure a successful upgrade. If the upgrade instructions detailed in the Resolution are not followed, it is possible for the upgrade to fail and not revert back to the previous OneView version. Contact HPE Support to recover from a failed upgrade.
The issue affects the following: Any HPE OneView virtual appliance that has been upgraded from HPE OneView Version 2.0 (or earlier) and is being upgraded to Version 4.00.05 (or earlier). For example, upgrading from Version 1.20 to Version 2.0 to Version 3.1 and then to Version 4.0. Any new HPE OneView Version 3.0 and Version 3.1 installations (for both Virtual and Synergy Composer appliances) using Certificate Authority-signed (CA-signed) certificates, the resolution steps below should be applied to ensure a successful upgrade if either: The current CA-signed appliance certificate is expired OR Multiple Certificate Signing Requests (CSRs) have been issued for the appliance
This issue is corrected in HPE OneView 4.00.07 (or later): https://h20392.www2.hpe.com/portal/swdepot/displayProductInfo.do?productNumber=Z7550-63180 If the an upgrade to OneView 4.00 has already been attempted and it failed to revert back to the previous OneView version, contact HPE Support and reference Engineering Advisory a00040081en_us: Click on the following URL to locate the HPE Customer Support phone number in your country: https://h20195.www2.hpe.com/v2/Getdocument.aspx?docname=A00039121ENW . The following steps are only required if upgrading to OneView 4.00. Overview of Steps When upgrading to HPE OneView Version 4.0 from earlier releases, for example, upgrading from Version 1.20 to Version 2.0 to Version 3.1 and then to Version 4.0, perform the following steps: Create and download a current backup of the appliance. Create a specially crafted, new appliance self-signed certificate before starting the upgrade to Version 4.0. This certificate is a workaround for an issue in the upgrade process. NOTE: This step is also required for appliances currently using certificate authority-signed (CA-signed) certificates. Upgrade appliance to Version 4.0. After a successful upgrade, restore the appliance certificate settings to their pre-upgrade values either by recreating the appliance's self-signed certificate or issuing a new Certificate Signing Request (CSR). Update any clients, such as HPE OneView Global Dashboard with the new certificate. Detailed Steps Use the following steps that describe the OneView 4.0 update details. Pre-Upgrade Steps Use standard upgrade best practices to backup the currently running version of the OneView appliance using Settings->Backup. In the OneView online help, see the topic (link below) on how to backup the appliance manually and make sure to download the resulting backup file as described in the topic: Backup the Appliance Manually After the backup is created, refer to instructions to download it: Download a backup file NOTE: The minimum for the required privileges is infrastructure administrator to access the Service Console and perform backup or upgrade operations. Before starting the upgrade, update the appliance’s current certificate with a new, specially crafted, self-signed certificate using the steps below. Important : Appliances using certificate authority-signed (CA-signed) certificates also need to perform these steps. a. Go to the Settings->Security screen and choose "Create appliance self-signed certificate" from the Actions menu. b. Fill out the certificate fields as follows: i. Enter the fixed string "OU" in the two character "Country (C)" field. "OU" is an abbreviation for OneView Upgrade. ii. Enter the fixed string "mailto:oneviewupgrade@example.com" in the Email address field. iii. Enter the fixed string "OneView Upgrade" in every remaining field except Common Name (CN) and Alternative Name. An example of Create Appliance Self-Signed Certificate screen is shown: c. Press OK and wait for the new certificate to be generated. Perform the Version 4.0 Upgrade Perform a standard Version 4.0 upgrade. In the online help, see Update the appliance After a successful upgrade to Version 4.0, restore the appliance certificate settings to their pre-upgrade settings: If self-signed certificates are being used, update the appliance certificate using your standard, desired field values. In the online help, see Create an appliance self-signed certificate If CA-signed certificates are used, issue a new certificate signing request and update the appliance with the resulting CA-signed certificate. In the online help, see Create an appliance certificate signing request Update any clients, such as, HPE OneView Global Dashboard with the new OneView certificate. For OneView Global Dashboard specifically, follow the steps below: Updating certificates in OneView Global Dashboard Perform the following steps: Global Dashboard will note that the OneView appliance's certificate has changed and display that appliance in a critical state on the main page: Choose Settings -> Appliances and select the OneView appliance. It is displayed as offline due to an invalid certificate: Click the "Reconnect" button, and provide valid credentials for the OneView appliance, and click "Reconnect" again. Global Dashboard will retrieve the new OneView appliance certificate and display a summary of its attributes. Click "Trust" to have Global Dashboard use the new OneView appliance certificate. Global Dashboard will use the new certificate to re-establish communicate, the appliance will change to "online" and perform a refresh of the appliance resources. RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively via e-mail through HPE Subscriber's Choice. Sign up for Subscriber's Choice at the following URL: Proactive Updates Subscription Form. NAVIGATION TIP : For hints on navigating HPE.com to locate the latest drivers, patches, and other support software downloads for ProLiant servers and Options, refer to the Navigation Tips document . SEARCH TIP : For hints on locating similar documents on HPE.com, refer to the Search Tips Document .