Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
After an enclosure refresh of an HPE OneView managed HPE BladeSystem c7000 Enclosure, OneView may display the following locked alert message: " Unable to refresh the Onboard Administrator's Network Time Protocol servers " The ciDebug.log file will show the following entry corresponding to the enclosure refresh that generated the locked alert: 2020-03-16 14:50:06.012 UTC,ERROR,perm-web,perm,com.hp.ci.mgmt.perm.c7000.configure.C7000NtpConfigurer,5b0d521c-a68f-5896-8dd3-2405dc5210c5,enclosureRefreshExecutorNonEmbedded_3770,configure():162,URI: [/rest/enclosures/09CZ32181L9B] Task: [/rest/tasks/6cf8e4e1-2ded-4c57-8c55-637100879b28] Message: [Encountered error configuring NTP.] [Exceptions: HTTP Status=400 BAD_REQUEST, ErrorMessage [message=Error getting oa status array: hostname: xxxx-xx-xxx.xxxx.com enclosure: xxxx-xx, recommendedActions=[], data={faultString=java.net.ConnectException: Connection refused (Connection refused)}]] This issue may occur on enclosures with an enclosure configuration script that has been added to any Enclosure Group associated with the HPE BladeSystem c7000 enclosure where the locked alert is occurring. The configuration script will contain HPE BladeSystem Onboard Administrator CLI commands that cause the BladeSystem Onboard Administrator (OA) network services (including web server and firewall) to restart. When this restart occurs during an enclosure refresh, this interrupts the OneView - OA communication, which in turn leads to the "Connection refused" exception that is seen in the ciDebug.log. Below are the HPE BladeSystem Onboard Administrator CLI commands that can cause the OA network/web server/firewall to restart: ENABLE SSL Protocol DISABLE SSL Protocol ENABLE SSL Cipher DISABLE SSL Cipher ENABLE SECURESH CIPHER DISABLE SECURESH CIPHER DISABLE TELNET ENABLE telnet SET HTTP REQUESTREADTIMEOUT DISABLE SNMP ENABLE SNMP DISABLE NTP ENABLE NTP DISABLE TRUSTED HOST ENABLE TRUSTED HOST DISABLE ALERTMAIL ENABLE ALERTMAIL ENABLE SECURESH DISABLE SECURESH DISABLE ROUTER ADVERTISEMENTS ENABLE ROUTER ADVERTISEMENTS DISABLE SLAAC ENABLE SLAAC DISABLE DHCPV6 ENABLE DHCPV6 DISABLE IPV6 ENABLE IPV6 DISABLE WEB ENABLE WEB ENABLE IPV6DYNDNS DISABLE IPV6DYNDNS Enable ipv4dyndns DISABLE ipv4dyndns ENABLE / DISABLE DHCP_DOMAIN_NAME SET IPCONFIG DHCP SET IPCONFIG STATIC SET VLAN IPCONFIG { DHCP | STATIC | SAVE } SET OA DOMAIN_NAME ADD OA DNS ADD OA DNS IPV6 ADD OA ROUTE IPV6 ADD OA ADDRESS IPV6 REMOVE OA ADDRESS IPV6 REMOVE OA DNS REMOVE OA DNS IPV6 REMOVE OA ROUTE IPV6 SET OA GATEWAY SET OA GATEWAY IPV6 SET OA NAME SET NIC {AUTO | FORCED} clear NTP SET NTP PRIMARY SET NTP SECONDARY SET NTP POLL
Any version of HPE OneView that manages an HPE BladeSystem Enclosure with an enclosure configuration script that is added to an Enclosure Group associated with a locked alert for a BladeSystem c7000 enclosure.
HPE OneView is operating as designed. To prevent this issue that causes the HPE BladeSystem Onboard Administrator (OA) network/web server/firewall to restart, avoid including any of the below OA CLI commands in any configuration script applied from HPE OneView during an enclosure refresh: ENABLE SSL Protocol DISABLE SSL Protocol ENABLE SSL Cipher DISABLE SSL Cipher ENABLE SECURESH CIPHER DISABLE SECURESH CIPHER DISABLE TELNET ENABLE telnet SET HTTP REQUESTREADTIMEOUT DISABLE SNMP ENABLE SNMP DISABLE NTP ENABLE NTP DISABLE TRUSTED HOST ENABLE TRUSTED HOST DISABLE ALERTMAIL ENABLE ALERTMAIL ENABLE SECURESH DISABLE SECURESH DISABLE ROUTER ADVERTISEMENTS ENABLE ROUTER ADVERTISEMENTS DISABLE SLAAC ENABLE SLAAC DISABLE DHCPV6 ENABLE DHCPV6 DISABLE IPV6 ENABLE IPV6 DISABLE WEB ENABLE WEB ENABLE IPV6DYNDNS DISABLE IPV6DYNDNS Enable ipv4dyndns DISABLE ipv4dyndns ENABLE / DISABLE DHCP_DOMAIN_NAME SET IPCONFIG DHCP SET IPCONFIG STATIC SET VLAN IPCONFIG { DHCP | STATIC | SAVE } SET OA DOMAIN_NAME ADD OA DNS ADD OA DNS IPV6 ADD OA ROUTE IPV6 ADD OA ADDRESS IPV6 REMOVE OA ADDRESS IPV6 REMOVE OA DNS REMOVE OA DNS IPV6 REMOVE OA ROUTE IPV6 SET OA GATEWAY SET OA GATEWAY IPV6 SET OA NAME SET NIC {AUTO | FORCED} clear NTP SET NTP PRIMARY SET NTP SECONDARY SET NTP POLL