Dell EMC Networking HiveManager site cloud.aerohive.com certificate expiration How to Manually Upgrade HiveAgent on Dell N Series Switches

Summary

 

 

 

The HTTPS SSL certificate on https://cloud.aerohive.com  expires on October 23, 2019. This SSL cert was issued by "Comodo RSA Certification Authority".
 

 

Users will see the following message on their Dell HiveManager Appliance.

 

The CA Branding has changed from Comodo and new certificate is available from Re-branded CA.
HiveAgent in Dell N Series switches has the Comodo root certificate hard coded into the devices and will need the new certificate chain to be installed.
HiveAgent Version 1.1.29 contains new CA certificate chain.
As mentioned in the message, switches connected to HiveManager before 10/21/2019 will automatically Upgrade to 1.1.29 HiveAgent. 

Until new version of OS 6 is released, which will include the new CA trust chain, any switches not connected to HiveManager before 10/21/2019 will need to manually update HiveAgent in order to connect to HiveManager after 10/23/2019. 

 

Software Fix

Following is the process of upgrading HiveAgent on Dell N Series switches Manually.

 

• Use the following CLI to check and confirm the running HiveAgent Version.
   
  • show hiveagent status 
    • Note: If the  HiveAgent Version is not 1.1.29.0 or later, then HiveAgent needs to be upgraded.
    • Accept the EULA to get output from the below command "N3048(config)#eula-consent hiveagent accept"

                        N3048#show hiveagent status 

                        HiveAgent: Enabled
                        EULA: Accepted
                        
                        HiveManager Server Name: HiveManagerNG
                        HiveManager NG (enabled):
                        HiveAgent Version.............................. 0.2.68
                        HiveAgent Status............................... TRYING TO FETCH HMNG ADDRESS
                        HiveAgent AssociationUrl....................... -
                        HiveAgent AssociationMethod.................... IP_DHCP
                        HiveAgent PollUrl.............................. -


HiveAgent upgrade files for Dell switches are available on the Dell Aerohive SFTP Portal.
 

 

 

 

Use a SFTP client to connect to the secure site like WINSCP.

Download the HiveAgent 1.1.29 upgrade files from the Dell Aerohive SFTP portal (sftp://dellsupport.aerohive.com)
Unzip and upload the files to a ftp or tftp server

 

• Use the following CLI commands to upgrade the HiveAgent on the switch.
  • enable
  • application stop hiveagent
  • delete user-apps/hiveagent
  • delete user-apps/hiveagent_pr
  • delete user-apps/hiveagent_pr_s
  • delete user-apps/ah_ha.conf
  • delete user-apps/ah_ha.conf_s
  • copy tftp://x.x.x.x/HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr
  • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent_pr application hiveagent_pr_s
  • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/hiveagent application hiveagent
  • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf
  • copy tftp://x.x.x.x /HiveAgent_Dellxxxx_1.1.29/ah_ha.conf application ah_ha.conf_s
  • configure
  • application install hiveagent start-on-boot
  • exit
  • copy running-config startup-config
  • application start hiveagent
    
     
• Wait for about 30 seconds and then use the following CLI to check and confirm that HiveAgent Version reads 1.1.29.0
  • show hiveagent status

                        N3048#show hiveagent status 
                        
                        HiveAgent: Enabled
                        EULA: Accepted
                        
                        HiveManager Server Name: HiveManagerNG
                        HiveManager NG (enabled):
                        
                        ............................................... .......................................
                        HiveAgent Status............................... FAILED TO CONNECT TO REDIRECTOR/HIVEMANAGER, WAITING BEFORE TRYING AGAIN
                        HiveAgent Version.............................. 1.1.29.0
                        HiveAgent Debug................................ OFF
                        ............................................... .......................................
                        HiveAgent Association Method................... -
                        HiveAgent Association Url...................... -
                        HiveAgent Poll URL............................. -
                        ............................................... .......................................

                Once HiveAgent is upgraded, Switch will be able to connect to HiveManager with the New Certificate if it is on boarded on to the HiveManager.