NetWitness Swapping Drives with New RAID Controller: A Step-by-Step Guide for Customers

[#1]

Article Number

000003190

Applies To

NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type:  NetWitness Platform
NetWitness Version/Condition:
Platform: CentOS
O/S Version: 6/7

Issue

RMA process for swapping drives with new RAID controller and avoiding data loss.

Cause

The internal PERC H740 RAID controller within Series 6 appliances may fail or require replacement. Since the PERC H740 is being phased out and replaced by the newer PERC H750 model, customers needing to replace or upgrade their appliance must transfer their existing drives to a new appliance equipped with the H750 controller. Without a proper process, this transfer poses a risk of data loss or corruption due to compatibility or configuration issues between the different controller models.

Resolution

Perform any one of the following:

• Swapped drives are encrypted on the failed host and migrated to the new host (with PERC H750)

• Swapped drives are not SED Capable, or Encryption is not enabled on the failed host and migrated to the new host (PERC H750)

Swapped drives are encrypted on the failed host and migrated to the new host (with PERC H750)

1. Power on the appliance

2. Press F2 to enter System Setup > Select Device Settings > Select appropriate device (For example, PERC H750).

3. In the Dashboard view, select the Main Menu.

4. To enable Security on the PERC H750 Controller, enter the Pass Phrase and Key ID (These are the values set when encrypting the drives on the original appliance).

5. Press F2 > Device Settings >Image description > Main Menu -> Controller Management > Advanced Controller Management > Enable Security > Select Local Key Management (LKM) and Press OK.

Image description

Image description

Image description

6. Enter the Security Key Identifier and Passphrase used to encrypt the drives on the failed host, Select Enable Security, confirm and OK. For example, ‘Netwitness1!’ is used as Key Identifier and Passphrase to encrypt drives initially on the failed host.  Use the same values on the new host controller. NOTE: If you enter incorrect Security Key Identifier or Passphrase, IO errors is displayed after booting and the appliance is not usable.

Image description

Image description

7. To Import Foreign Configuration, return to Main Menu and Select Manage Foreign Configuration > Preview Foreign Configuration > Import Foreign Configuration F2 > Device Settings >Image description> Main Menu > Configuration Management > Manage Foreign Configuration

Image description

Image description

8. Select Confirm and press Yes.

Image description

9. Press OK on the success status page.

Image description

10. Set the Boot Device (post drive swap) by Selecting Main Menu > Controller Management F2 > Device Settings >Image description> Main Menu > Controller Management > Select Boot Device > Select VD corresponding to 1.091 TB. Note: Usually this is VD239

Image description

11. Revert to the Main Menu and select Finish as necessary to complete the configuration.

12. Reboot the appliance (Cold Boot / Power Cycle System).

13. To update network configurations, update udev rules and network configuration (/etc/sysconfig/network-settings/ifcfg-em1 – update the mac address and IP settings).For information on udev update instructions see, https://community.netwitness.com/t5/netwitness-knowledge-base/guide-for-replacing-the-entire-chassis-on-an-rsa-netwitness/ta-p/677557
    
     

Swapped drives are not SED Capable, or Encryption is not enabled on the failed host and migrated to the new host (PERC H750)

1. Power on the appliance.

2. Press F2 > Device Settings >Image description > Main Menu -> Controller Management > Advanced Controller Management > Enable Security > Select Local Key Management (LKM) and Press OK.

Image description

Image description

Image description

3. Enter the Security Key Identifier and Passphrase used to encrypt the drives on the failed host, Select Enable Security, confirm and OK. For example, ‘Netwitness1!’ is used as Key Identifier and Passphrase to encrypt drives initially on the failed host.  Use the same values on the new host controller. NOTE: If you enter incorrect Security Key Identifier or Passphrase, IO errors is displayed after booting and the appliance is not usable.

Image description

Image description

4. To Import Foreign Configuration, return to Main Menu and Select Manage Foreign Configuration > Preview Foreign Configuration > Import Foreign Configuration F2 > Device Settings >Image description> Main Menu > Configuration Management > Manage Foreign Configuration

Image description

Image description

5. Select Confirm and press Yes.

Image description

6. Press OK on the success status page.

Image description

7. Set the Boot Device (post drive swap) by Selecting Main Menu > Controller Management F2 > Device Settings >Image description> Main Menu > Controller Management > Select Boot Device > Select VD corresponding to 1.091 TB. Note: Usually this is VD239

Image description

8. Revert to the Main Menu and select Finish as necessary to complete the configuration.

9. Reboot the appliance (Cold Boot / Power Cycle System).