It all depends on which one is ahead of the other. Have you configured an NTP server on the SA server yet? If not, under Administration -> System > NTP Settings, by default it will be set to use the CentOS pool ntp servers, but if NTP is not allowed from the SA server to the internet, then they cannot sync. You can usually point it at an Active Directory server and use that to sync time.
To test ntp time server access on the SA server, do the following:
service ntpd stop
ntpdate <IP or FQDN of NTP Server>
If it works you'll get something like this back:
ntpdate[29683]: adjust time server <IP of NTP Server> offset -0.003140 sec
Restart ntpd:
service ntpd start
The SA server acts as a time server for all the other devices (this will be configured during enablement), to sync the VLC before that, do the following:
service ntpd stop
ntpdate <IP address of SA server> (should have similar output to above)
service ntpd start
Now try to re-provision the VLC
Remove the VLC from the Hosts page with "Remove and Repurpose Appliance" option
Verify the hostname & IP address on the VLC
cat /etc/hosts (note the IP and hostname of the VLC)
cat /etc/sysconfig/network (compare hostname to previous)
cat /etc/puppet/csr_attributes.yaml (compare hostname & IP address)
cat /etc/sysconfig/network-scripts/ifcfg-eth0 (or em1) (verify network information)
hostname (compare hostname)
If any of these don't match, edit them to match properly.
Check the Node ID's on the VLC:
/etc/puppet/scripts/node_id.py (copy the returned ID to notepad)
cat /var/lib/puppet/node_id (compare to previous output, they should match)
cat /etc/puppet/puppet.conf | grep certname (should match the other two ID's)
On SA server:
Clear any old cert requests:
/var/lib/puppet/ssl/certificate_requests/*
Check for old node in cert list:
puppet cert list --all | grep <old agent NODE_ID>
If it exists:
puppet cert clean <old agent NODE_ID>
/etc/scripts/puppet/delNode.py <old agent NODE_ID>
From VLC, run the following commands.
service puppet stop
rm -rf /var/lib/puppet/ssl
puppet agent -t --waitforcert 30 && tail -f /var/log/messages | grep agent
When "did not receive certificate" appears in log
In SA UI
Click on "Discover" button on the Hosts page
Enable Devices screen should appear listing the VLC
Select the VLC and click "enable"
You will see alot of trafic in the log on the VLC ass puppet provisions the host and finishes enablement.
If the "enabling" indicator on the hosts page goes red, but there is still activity in the log on the VLC, wait unitl puppet is finished, before clicking the enable button & attempting again.
Once provisioning is complete
On VLC:
service puppet start
