Tuesday, June 17, 2014

HP Controller P420i (embedded) hardware error (Update)

The server BSOD and reboot unexpectedly, after the server power on, the following error have been occur:
A controller failure event occurred prior to this power-up. (Previous lock up code = 0x13)
 image
The problem is hardware failure, the P420i RAID controller Flash Based Write Cache (FBWC) memory module need to replace:
image
Solution:
Replace the fault P420i controller - 2GB Flash Based Write Cache (FBWC) memory module.
image Print Friendly and PDF
Share/Bookmark

Monday, June 2, 2014

SMS 2003 SP3 Post hotfix apply

1. Apply Hotfix KB941214 (Updated Client.MSI)

A hotfix rollup package that provides an updated Client.msi is available for Systems Management Server 2003

http://support.microsoft.com/kb/941214/en-us

The SMS client version on them is 2.50.4253.3108

Site reset - Click “Yes”

 

2. Apply Hotfix KB971225 (Windows 2008 & Vista detection)

http://support.microsoft.com/kb/971225/en-us

After you apply this hotfix, follow these steps on the SMS site database server:

1. Stop the following services:

· SMS_SITE_COMPONENT_MANAGER

· SMS_EXECUTIVE

2. Find the Update.sql script in the following folder:

Drive:\SMS\Logs\KB971225

Note In this step, the Drive placeholder represents the drive on which SMS 2003 is installed.

3. Open the Update.sql script in a Microsoft SQL Server query tool, and then run this script against the SMS database. To do this, follow these steps:

a. Copy the Update.sql file to the SMS 2003 database server.

b. Click Start, point to All Programs, point to Microsoft SQL Server, and then click Query Analyzer.

c. Connect to the SQL server.

d. On the Query menu, click Change Database.

e. Click the name of the SMS database, and then click OK.

f. On the File menu, click Open.

g. Open the SMS\Logs\KB971225 folder, click Update.sql, and then click Open.

h. On the Query menu, click Execute.

4. Start the following services:

· SMS_SITE_COMPONENT_MANAGER

· SMS_EXECUTIVE

 

3. Apply Hotfix KB974014 (Windows 7 and Windows Server 2008 R2 support)

http://support.microsoft.com/kb/974014/en-us

 

4. Reboot server Print Friendly and PDF
Share/Bookmark

Sunday, June 1, 2014

How to install a certificate to a Windows Server 2008 R2 SP1 from a Windows Server 2003 R2 SP1 Standalone CA which is the certificate enrollment Web pages is not patch

How to install a certificate to a Windows Server 2008 R2 SP1 from a Windows Server 2003 R2 SP1 Standalone CA which is the certificate enrollment Web pages is not patch (http://support.microsoft.com/kb/922706/en-us)

Since the Windows Server 2008 R2 cannot download and install the Root CA certificates and also request a client certificates from a Windows Server 2003 R2 SP1 Standalone CA which is the certificate enrollment Web pages is not patched.

We will need a Windows XP (Or Windows Server 2003) machine to complete the task.

Download the Root CA certificates

1: On a Windows XPstart the Internet Explorer
2. Go to the certificate server website (in our case http://abc....../certsrv)
3. Click on Download CA certificate, certificate chain, or CRL
4. Click Download CA Certificate chain and save it on the machine.
5. Once the certificate is downloaded, copy it to the unmanaged Windows Server 2008 R2 (Our target monitored server)

6. Login the unmanaged Windows Server 2008 R2

7. Open an MMC connect to Local Computer and load the certificates snap-in (Local Computer)
8. Go to Trusted Root Certification Authorities right click, all tasks, import and import the Root CA.

Request the unmanaged Windows Server client certificates and installation

1. start the Internet Explorer
2. Go to the certificate server website (in our case http://demo-dc01/certsrv)
3. Click on Request a certificate, choose Advanced certificate request next click

Create and submit a request to this CA

On the Advanced Certificate Request page, do the following:

  1. Under Identifying Information, in the Name field, enter a unique name, for example, the fully qualified domain name (FQDN) of the computer you are requesting the certificate for. For the remaining fields, enter the appropriate information.

clip_image001Note

Event ID 20052 of type Error is generated if the FQDN entered into the Name field does not match the computer name.

 

  1. Under Type of Certificate Needed:
    Click the list, and then select Other.
    In the OID field, enter 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2
  2. Under Key Options, make the following selections:
    Click Create a new key set
    In the CSP field, select Microsoft Enhanced Cryptographic Provider v1.0
    Under Key Usage, select Both
    Under Key Size, select 1024
    Select Automatic key container name
    Select Mark keys as exportable
    Clear Export keys to file (not required for Windows Server 2008 AD CS)
    Clear Enable strong private key protection
    Click Store certificate in the local computer certificate store.
  3. Under Additional Options:
    Under Request Format, select CMC
    In the Hash Algorithm list, select SHA-1
    Clear Save request to a file
    In the Friendly Name field, enter the FQDN of the computer that you are requesting the certificate for.
  4. Click Submit.
  5. If a Potential Security Violation dialog box is displayed, click Yes.
  6. When a Certificate Pending page displays, close the browser.

To approve the pending certificate request

  1. Log on to the computer hosting Certificate Services as a certification authority administrator.
  2. On the Windows desktop, click Start, point to Programs, point to Administrative Tools, and then click Certification Authority.
  3. In Certification Authority, expand the node for your certification authority name, and then click Pending Requests.
  4. In the results pane, right-click the pending request from the previous procedure, point to All Tasks, and then click Issue.
  5. Click Issued Certificates, and confirm the certificate you just issued is listed.
  6. Close Certification Authority.

To retrieve the certificate

  1. Log on to the computer where you want to install a certificate (for example, the gateway server or management server).
  2. Start Internet Explorer, and connect to the computer hosting Certificate Services (for example, http://<servername>/certsrv).
  3. On the Microsoft Certificate Services Welcome page, click View the status of a pending certificate request.
  4. On the View the Status of a Pending Certificate Request page, click the certificate you requested.
  5. On the Certificate Issued page, click Install this certificate.
  6. In the Potential Scripting Violation dialog box, click Yes.
  7. On the Certificate Installed page, after you see the message that Your new certificate has been successfully installed, close the browser.

On Windows XP

Step 4: Open an MMC connect to Local Computer and load the certificates snap-in (Local Computer)

Step 5: Go to Personal, select the client certificate which is you just installed right click, all tasks, export -> “Personal Information Exchange - PKCS #12 (.PFX)

  1. In the new wizard kill “Next”
  2. Select “Yes , Export the private key”
  3. Click “Next”
  4. Select “Personal Information Exchange – PKCS #12 Certificates (PFX)”
  5. Select “Enable Strong protection (requires IE5.0, NT4 SP4 or above)”
  6. Click “Next”
  7. Type a password for the certificate twice and kill “Next”
  8. Select “Browse” c:\serverFQDN.pfx”
  9. Click “Next”
  10. Check the export information and if correct kill “Finish”
  11. Click “OK” to finish the export

Save the .pfx on desktop and copy it to the unmanaged Windows Server 2008 R2

Install the Client certificates on unmanaged Windows Server 2008 R2

  1. Login the Windows Server 2008 R2
  2. On the start menu kill “Start” and “Run”

  3. Type “cmd”

  4. Navigate to > cd “program files\System Center Operations Manager 2007\Supportools\i386”

  5. Type >MOMcertimport.exe “c\:servername.domain.com.pfx” or “c:\servername.pfx”

  6. Type the asked password for the certificate import and press “Enter”.

  7. The certificate is now imported in OpsMgr 2007.

  8. Restart the “OpsMgr Health Service” on the server.

Reference:

How to Obtain a Certificate Using Windows Server 2003 Stand-Alone CA in Operations Manager 2007

http://technet.microsoft.com/en-us/library/bb735417.aspx

How to use Certificate Services Web enrollment pages together with Windows Vista or Windows Server 2008

http://support.microsoft.com/kb/922706/en-us

Update for Windows Server 2003 (KB922706)

http://www.microsoft.com/en-us/download/details.aspx?id=4758

http://www.toolzz.com/?p=279

http://blogs.technet.com/b/operationsmgr/archive/2009/09/10/step-by-step-for-using-certificates-to-communicate-between-agents-and-the-opsmgr-2007-server.aspx Print Friendly and PDF
Share/Bookmark

GPO WMI Filter to use computer name and also OS version as condition

Select * from win32_operatingsystem where (CSName like "abc00%") and (version like "6.1%" and producttype = "1")

 

Reference:

https://www.simple-talk.com/sysadmin/general/group-policy-and-wmi,-a-wonderful-combination/

http://www.grouppolicy.biz/2010/02/how-to-find-and-use-wmi-values-for-group-policy-filtering/

http://msdn.microsoft.com/en-us/library/aa394239(v=vs.85).aspx

Print Friendly and PDF
Share/Bookmark

Using a PowerShell command to retrieve the OEM license Key (Windows 8/8.1/2012/2012R2)

(Get-WmiObject -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey

Print Friendly and PDF
Share/Bookmark

HP Smart Storage Administrator (SSA) cannot access

HP Smart Storage Administrator (SSA) - HP SSA replaces the existing HP Array Configuration Utility (ACU) which is need to enable HP Intelligent Provisioning. Since when press F5, it will load to Intelligent Provisioning and then transfer to SSA

If the Intelligent Provisioning was disabled, it would impact the F5.

Solution:

Enable the Intelligent Provisioning. To enable the Intelligent Provisioning, press F9 RBSU (BIOS)

Reference:
http://h30507.www3.hp.com/t5/Coffee-Coaching-HP-and-Microsoft/Introducing-HP-Smart-Storage-Administrator-for-ProLiant-Gen8/ba-p/147053#.U0-U-emKCM8

Print Friendly and PDF
Share/Bookmark

What's up gold 16.2 TFTP

Error:
1. Download request from <IP>. Forbidden due to security rules.

Solutions:
Go to options -> Security Transfer Permissions:
"Allow downloads and uploads" or "Allow downloads only"

 

Error:
2. Client: <IP> File name: <filename>  I/O error during download. Access violation getting file outside the root folder

Solutions:
Create a folder under root folder (default: C:\tftp-root\) and put those files under this sub folder (e.g. C:\tftp-root\subfolder)

Print Friendly and PDF
Share/Bookmark

Prepare IIS 7.5 for VMware VCSA update repository

To prepare IIS 7.5 to be VMware VCSA update repository, the update file extension (.sig) need to add to the website root folder of the update repository.

The overview of the steps at the following:

1. Go to the website –> select “MIME Tyeps”
2. Add the ".sig" (Extension),  MIME Type (text/xml), Entry Type (Local)

Print Friendly and PDF
Share/Bookmark

SSH to get user list on iLO local DB

> Cd map1
> Show accounts1

Remark use show command in different level will able to check what kind of command able to use

Print Friendly and PDF
Share/Bookmark

HP iLO 3 cannot upgrade firmware from 1.1x to 1.5x

HP iLO3 cannot upgrade firmward from 1.1x (e.g. 1.16) to 1.5x (e.g. 1.50)

image

Solution:

Upgrade the firmware from 1.1x to 1.26 or 1.28, then upgrade to 1.5x

Reference:

http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/mostViewedDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_efb5c0793523e51970c8fa22b053ce01=wsrp-navigationalState%3DdocId%253Dmmr_kc-0107776-3%257CdocLocale%253Den_US&javax.portlet.tpst=efb5c0793523e51970c8fa22b053ce01&sp4ts.oid=4154735&ac.admitted=1401635580482.876444892.492883150

Print Friendly and PDF
Share/Bookmark

HP 300GB 6G SAS 15K LFF (3.5") (EF0300FARMU) upgrade firmware

HP 300GB 6G SAS 15K LFF (3.5") (EF0300FARMU) cannot upgrade firmware from HPD0 to HPD6.

It need to upgrade from HPD0 to HPD5 and then upgrade to HPD6.

Print Friendly and PDF
Share/Bookmark