VNX 5300 Certificate has invalid Date???

This article is permission based. Find another article.

I cannot get the command naviseccli to run, how can I tell if it is even on the system?

NaviSECCli.exe -address -User root -Password *** -Scope 0 security -SPcertificate -generate
and /nas/sbin/nas_ca_certificate –generate

You can download it from https://dell.to/3pdywwH;

Do you have the command to generate and install a self signed Cert from the cli?

Yes, that should work.

So, since it is not on the system, I need to install the client software into the NAS. Can I install the windows client on the management computer and point it at the NAS? 

NaviSECCli.exe -address -User root -Password *** 

Try using cli. https://dell.to/44i7uDg Page 240

Getting the ip information using naviseccli.exe fails on two of the three devices. Sheesh, what a nightmare with this old crud

C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 networkadmin -get
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1

C:\Users\Administrator>

I have the ability to create accounts. What is the HIGHEST authority account that will give me the ability to modify IP settings? I created a "network" account with network administrator Privs and still can't modify network unless I am in the totally wrong place.

Try this command naviseccli -address SP_IP getagent or naviseccli -h SP_IP -User -Scope 0 getagent and see if that tells you the security issue.

Nope, Neither work. This one spits back nothing.

C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent

C:\Users\Administrator>naviseccli -h 192.168.50.62 -Scope 0 getagent

C:\Users\Administrator>naviseccli -h 192.168.50.60 -Scope 0 getagent

This one errors:

C:\Users\Administrator>naviseccli -h 192.168.50.60 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>naviseccli -h 192.168.50.62 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the Management Server on 192.168.50.62
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>naviseccli -h 192.168.50.63 -User nasadmin -Scope 0 getagent

Enter password:
Error returned from the Management Server on 192.168.50.63
Authentication failed. Possible reasons for failure are invalid security file, invalid username, password and/or scope.

C:\Users\Administrator>

Try adding security to the account. 
# naviseccli -AddUserSecurity -user xxxx-password xxxxx-scope 0

OK, I can see the details with the "network" account for both SP's but how do I change password on the controller before I change on the SP's? I am concerned there will be an issue if I cannot change all three

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP B
Storage Processor Network Name: SPB
Storage Processor IP Address: 192.168.50.63
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1

C:\Users\Administrator>naviseccli.exe -address 192.168.50.62 -user network -password network -scope 0 networkadmin -get
Storage Processor: SP A
Storage Processor Network Name: SPA
Storage Processor IP Address: 192.168.50.62
Storage Processor Subnet Mask: 255.255.255.0
Storage Processor Gateway Address: 192.168.50.1

C:\Users\Administrator>naviseccli.exe -address 192.168.50.60 -user network -password network -scope 0 networkadmin -get
Error returned from the target: 192.168.50.60
CLI commands are not supported by the target storage system.

C:\Users\Administrator>

C:\Users\Administrator>naviseccli.exe -address 192.168.50.63 -user network -password network -scope 0 networkadmin -set -subnetmask 255.255.254.0
Changing the IPv4 Subnet Mask on SP B, Port 0, Virtual Port 0 from 255.255.255.0 to 255.255.254.0
This operation will cause a management server restart!

WARNING: If you change these settings, you may lose management access to this storage system. See release notes for information about properly changin
g the management port settings on VNX File or VNX Unified systems.

Do you wish to continue? (y/n)

So it looks like I can change the mask on the SP(a and b), but how do I change the mask on the Management server?

Try going to https://dell.to/3CPbxuN and run the procedure for the 5300 and the service lan procedure.