ProxySG 510/810 Series. Hard Disk Drive Installation

Transcription

1 Blue Coat 510/810 Series Disk Drive Installation Blue Coat ProxySG 510/810 Series Hard Disk Drive Installation

2 Section A: Before You Begin About this Document This document describes how to replace disk drives in a Blue Coat 510/810 system. The procedures in this document apply to the SG appliance, ProxyAV, and Director 510 systems. Procedures are given for hot-swapping disk drives in multi-disk drive systems and coldswapping disk drives in single-disk or multi-disk systems. Hot-swapping means replacing a disk drive without powering off the appliance. You can only hot-swap disk drives if the appliance has multiple disks. Cold-swapping means that you must power off the system before replacing the disk drive. Appliances with single-disk drives do not support hot-swapping. You must cold-swap the disk drives. Use the table below to determine where to go next. To... Determine the software version that was installed onto the replacement disk at the time it was manufactured. (Useful for single-disk systems to determine if the version is the same as your backup file.) Archive your configuration. (If you have a single-disk system and the disk drive has errors but is still functional.) Replace a disk drive in an 810 system with multiple disks, without powering off the system. Replace a disk drive in a 510 system. Replace a disk in a system with only a singledisk drive. Go to... Determining the Replacement Disk Drive Software Version on page 11 Archiving Your Configuration on page 2 Section B: "Hot-Swapping Disk Drives in Multi-Disk Drive 810 Systems" on page 4 Section C: "Cold-Swapping Disk Drives" on page 11 Replace a disk drive in a system with multiple disk drives, while the system is powered down. Verify disk drive installation. Set the default system image. (Useful for multi-disk systems to ensure that the correct software image is booted.) Regenerate the appliance certificate. (Single-disk systems only.) Determine the meaning of front panel LEDs. Section D: "Verifying Disk Drive Installation" on page 15 Set the Default Boot System on page 6 Regenerating the Appliance Certificate on page 2 Section E: "Understanding the Disk Drive LEDs" on page 17 1

3 Archiving Your Configuration If you replace the disk drive in a single-disk appliance, you must have a configuration archive to restore your configuration. If the disk drive failed (in a single-disk drive system) and you did not create an archive, all configuration data is lost. The archive, taken from the running configuration, contains all system settings differing from system defaults, along with any installable lists configured on the SG appliance. To create a system configuration archive: 1. Open the Management Console. 2. Select Configuration > General > Archive. 3. In the View Current Configuration section, select the configuration that you want to use for the newly-manufactured machine from the drop-down list: Configuration - post setup: This displays the configuration on the current system, minus any configurations created through the setup console, such as the hostname and IP address. It also includes the installable lists. Configuration - brief: This displays the configuration on the current system, but does not include the installable lists. Configuration - expanded: This is the most complete snapshot of the system configuration, but it contains system-specific settings that should not be pushed to a new system. Results of Configuration Load: This displays the results of the last configuration pushed to the system. 4. View the configuration you selected by clicking View. You can also view the file by selecting Text Editor in the Install Configuration section and clicking Install. 5. Save the configuration as a text file on your local system or on a secure Web server. To restore a system configuration: 1. Open the Management Console. 2. Select Configuration > General > Archive. 3. The Archive Configuration tab displays. 4. In the Install Configuration section, browse to the location of the file and highlight it. 5. Click Install. The configuration is installed, and the results screen displays. Regenerating the Appliance Certificate If you replace the disk drive in a single-disk appliance, the appliance certificate might need to be regenerated. This section describes what the certificate is and how you can regenerate it if you need to do so. SG appliances come with a cryptographic key that allows the system to be authenticated as an SG appliance when an appliance certificate is obtained. 2

4 An appliance certificate is an X.509 certificate that contains the hardware serial number of a specific SG device as the CommonName (CN) in the subject field. This certificate can then be used to authenticate the SG appliance that matches the hardware serial number listed in the certificate. Information from the presented certificate is extracted and used as the device ID. The appliance attempts to get the certificate automatically (with no user intervention) if it can connect to the Blue Coat CA server at boot time or within about five minutes of being booted. If the appliance does not have a certificate (for example, it had one until you did a restore-defaults factory-defaults command), it attempts to get one on every boot. After the appliance gets a certificate, that certificate is used until another restoredefaults factory-defaults command is issued. If Internet connectivity is established more than five minutes after the system is booted, you might need to complete the following steps. To automatically obtain an appliance certificate: 1. Select Configuration > SSL > Appliance Certificates > Request Certificate. 2. Click Request appliance certificate. 3. In the Confirm Request dialogue box, click OK. The Blue Coat CA server does validation checks and signs the certificate. The certificate is automatically placed in the appliance-key keyring. Note that the appliance-key keyring cannot be backed up. The keyring is recreated if it is missing at boot time. 3

5 Section B: Hot-Swapping Disk Drives in Multi-Disk Drive 810 Systems This section describes how to hot-swap disk drives in multi-disk drive 810 systems. Disk drive hot-swapping is not supported on 510 systems. If your appliance is an 810 with only a single-disk drive, see Cold-Swapping Disk Drives on page 11. Procedure Overview The following list describes the high-level tasks required to hot-swap disk drives in an appliance with multiple disk drives. When you hot-swap a disk drive, all software images and configuration files are automatically transferred to the new disk drive. Important: The system always attempts to load the newest system image on reboot. If the replacement disk drive is installed with the newest system image and you want to run a different image, you must configure the system to boot the other image. See Set the Default Boot System on page 6 for more information. The following procedures provide a high-level overview of disk drive hot-swapping: 1. Take the failed disk drive offline. 2. Remove the failed disk drive. 3. Insert the new disk drive. 4. Verify disk drive installation. 5. Select the boot image to be loaded on the next reboot. You can perform these procedures using the Management Console or the CLI: Management Console See Hot-Swapping a Disk Drive in a Multi-Disk 810 System on page 4. CLI See Using the CLI to Hot-Swap a Disk Drive in a Multi-Disk System on page 6. Hot-Swapping a Disk Drive in a Multi-Disk 810 System To hot-swap the disk drive in a multi-disk 810 system, complete the following steps. Take the Disk Drive Offline To hot-swap a disk drive in a multi-disk system, you must take the disk drive that you want to hot-swap offline. The disk drive indicator light turns from green to off when the disk drive is offline. Using the Management Console, complete the following steps to take the disk drive offline: 1. Open a browser and enter the appliance URL. 2. Select the Maintenance tab. 3. Select System and Disks > Disks 1-2 (or 3-4). 4. Take the disk offline by clicking Take Disk <x> Offline. where <x> is the number of the disk drive you are taking offline. 4

6 Figure 1-1: Using the Management Console to take a disk drive offline. 5. Wait for the HDD LED to turn off on the front panel display. Replace the Failed Disk Drive Complete the following steps to hot-swap the disk drive: 1. Open the front panel by pulling the two bezel tabs forward and down. 2. To remove the disk drive, press the disk-drive button to release the disk-drive lever, then gently pull the lever to slide the drive out. 3. Insert the new disk drive. To seat the disk drive, hold the disk-drive lever out, align the disk drive with the guide rails in the slot, and carefully insert the disk drive. 4. When the disk-drive lever meets the frame of the appliance, push the lever forward slowly until the lever locks in place. 5

7 When the new disk drive is plugged in, the LED turns green to indicate that an electrical connection has been established. In addition, the LED will start to flash when the OS has recognized the presence of the disk drive. After a few seconds, the status light stops flashing and glows solid while the disk drive is in function with SGOS. All software images and configuration files will automatically be transferred to the new drive. 5. Reboot the appliance (recommended). 6. Verify disk installation using the procedure described in Verifying Disk Drive Installation on page 15. Set the Default Boot System The system will always try to boot the newest software image, which might be the image installed on the new disk drive. If you do not want to boot that software image on the next reboot, you must reselect the default software image. Using the Management Console, configure the appliance to boot the desired system image. To set the default boot system using the Management Console: 1. Select Maintenance > Upgrade > Systems. 2. In the SG Appliance Systems section, locate the desired software image and select the Default radio button. Using the CLI to Hot-Swap a Disk Drive in a Multi-Disk System To use the CLI to hot-swap a disk in a multi-disk system, complete the following steps. Take the Disk Drive Offline Using the CLI, complete the following steps to take the disk drive offline: 1. Go to the Serial Console Menu. 2. Select 1) Command Line Interface. 6

8 Figure 2. The Serial Console Menu Begin by taking the disk drive offline. 1. Type enable. 2. Enter the enable password you created during the initial configuration of your appliance. 3. Type disk offline <slot_number>. The term slot_number represents the slot that contains the disk drive you want to take offline. 7

9 Figure 3. Using the CLI to take a disk drive offline and to verify that the disk drive is offline. 4. Type show disk all. As shown in Figure 3, the CLI displays the slots that have disk drives installed and the slots in which no disk drives are installed. If the disk drive is offline, it will be shown as uninstalled. Replace the Failed Disk Drive Complete the following steps to hot-swap the disk drive (Refer to the photos on Page 5): 1. Remove the disk drive from the slot. a. Open the front panel by pulling the two bezel tabs forward and down. b. To remove the disk drive, press the disk-drive button to release the disk-drive lever, then gently pull the lever to slide the drive out. 2. Install the replacement disk drive. a. Insert the new disk drive. To seat the disk drive, hold the disk-drive lever out, align the disk drive with the guide rails in the slot, and carefully insert the disk drive. b. When the disk-drive lever meets the frame of the appliance, push the lever forward slowly until the lever locks in place. When the new disk drive is plugged in, the LED turns green to indicate that an electrical connection has been established. In addition, the LED will start to flash when the OS has recognized the presence of the disk drive. After a few seconds, the status light stops flashing and glows solid while the disk drive is in function with SGOS. 3. Reboot the appliance (recommended). 4. Type show disk all. As shown in Figure 4, the appliance displays information about the new, hot-swapped disk drive. 8

10 Figure 4. Information displayed for the disk drive in Slot 2, including the vendor, product, and other information. Set the Default Boot System The system always tries to boot the newest software image, which might be the image installed on the new disk drive. If you do not want to boot that software image on the next reboot, you must reselect the default software image. Using the CLI, configure the appliance to boot the desired system image. To set the default boot system using the CLI: 1. Enter enable mode. SGOS # enable Enable Password: 2. Enter configuration mode. SGOS # conf t Enter configuration commands, one per line. End with CTRL-Z. 3. Enter the installed-systems submode. SGOS # (config) installed-systems 4. View the installed systems. SGOS # (config installed-systems) view 1. Version: SGOS 5.x.x.1, Release ID: Thursday July :12:56 UTC, Lock Status: Unlocked Boot Status: Last boot succeeded, Last Successful Boot: Thursday July :45:16 UTC 2. Version: SGOS 5.x.x.3, Release ID: Tuesday February :11:47 UTC, Lock Status: Unlocked Boot Status: Last boot succeeded, Last Successful Boot: Thursday June :26:57 UTC 9

11 3. Version: SGOS 5.x.x.2, Release ID: Thursday July :12:03 UTC, Lock Status: Unlocked Boot Status: Last boot succeeded, Last Successful Boot: Wednesday July 11 Default system to run on next hardware restart: 2 Default replacement being used. (oldest unlocked system) Current running system: 1 5. Set the desired default system. SGOS # (config installed-systems) default 1 10

12 Section C: Cold-Swapping Disk Drives This section describes how to cold-swap disk drives in single and multi-disk drive SG510 or SG810 systems. If your SG810 has multiple disk drives and you want to replace the disk drive without interrupting service, see Hot-Swapping Disk Drives in Multi-Disk Drive 810 Systems on page 4. Important: If you replace the disk drive in a single-disk system, you should verify that the appliance certificate is regenerated. See Cold-Swapping a Disk Drive in a Single-Disk SG510 System on page 12 and Regenerating the Appliance Certificate on page 2 for more information. Cold-Swapping: Single-Disk Drive SG510 System You can remove and replace the disk drive in a single-disk SG510 appliance, but you must power off the system before replacing the disk drive. Before You Begin Before cold-swapping the disk drive on a single-disk drive SG510 system, ensure that you have the following: A configuration backup to restore your configuration onto the new disk drive. If you do not have a configuration backup but the disk drive is still functional, create a system backup as described in Archiving Your Configuration on page 2. If the disk drive has failed and you do not have a configuration backup, your configuration cannot be restored and all data is lost. Access to the version of software that is the same as the configuration backup. To restore the configuration, the disk drive must be running the same version of the operating system that was running on the system when the configuration backup was taken. After installing the disk drive, check the operating system version (see Determining the Replacement Disk Drive Software Version on page 11) and upgrade or downgrade the software on the new disk drive so that it is the same version as your configuration backup. Instructions for regenerating the appliance certificate. See Regenerating the Appliance Certificate on page 2 for more information. Determining the Replacement Disk Drive Software Version You can determine the software version installed on the replacement disk drive by examining the label on the disk drive, as shown in Figure 5. Figure 5. Locating the software version on the disk drive 11

13 Procedure Overview The following list describes the high-level tasks required to cold-swap a disk drive in a single-disk SG510 system: 1. Power off the appliance. 2. Remove the failed disk drive. 3. Insert the new disk drive. 4. Power up the appliance. 5. Using the serial console, configure the appliance. 6. Verify disk installation. 7. Load the correct software version. 8. Restore the configuration. 9. Verify that the appliance certificate has been regenerated. Cold-Swapping a Disk Drive in a Single-Disk SG510 System Before starting this procedure, ensure that you have met the requirements described in Before You Begin on page 11. Then, complete the following steps: 1. Power off the single-disk drive system. 2. Open the front panel by pulling the two bezel tabs forward and down. 3. Remove the replacement disk drive from the shipping container. (The disk-drive lever, the black latch, must be on left side for the 510/810 Series.) 4. Examine the disk drive and write down the software version installed on the replacement disk drive. You might have to upgrade or downgrade the disk drive to the correct software version See Archiving Your Configuration on page 2 for more information. 5. To insert a disk drive into the unit, push the button on the right to release the diskdrive lever. Then, hold the disk-drive lever out, align the disk drive with the drive bay guide rails, and gently push the disk drive into the drive bay (to avoid damaging the SATA/SCSI connectors). 6. When the disk-drive lever meets the frame, push the lever forward slowly until it locks into place. 7. Close the front panel. 8. Power up the system. 9. Using the serial console, configure the appliance basic settings. 10. Verify disk installation using the procedure described in Verifying Disk Drive Installation on page Optional Restore the system configuration: a. If the software version running on the disk is different than your configuration backup, upgrade or downgrade the software to the correct version. b. Restore the configuration: At the enable command prompt, enter the following command: 12

14 SGOS# configure network url For more information about restoring the configuration, see Archiving Your Configuration on page Verify that the appliance certificate was automatically generated. a. Select Configuration > SSL > Device Authentication. b. Verify that the bluecoat-appliance-certificate is listed among the profiles. If the certificate is not listed, see Regenerating the Appliance Certificate on page 2. Cold-Swap: Multi-Disk Drive SG510/SG810 System If you want to take the appliance offline before replacing the failed disk drive, use the procedure in this section. If you have an 810 appliance and do not want to interrupt service, see Hot-Swapping a Disk Drive in a Multi-Disk 810 System on page 4. Procedure Overview The following list describes the high-level tasks required to cold-swap a disk drive in a multi-disk SG510 or SG810 system: 1. Power off the appliance. 2. Remove the failed disk drive. 3. Insert the new disk drive. 4. Power up the appliance. 5. Verify disk installation. 6. Select the boot image to be loaded on the next reboot. Cold-Swapping Disk Drives in a Multi-Disk System Follow the procedures below to cold-swap a disk drive in a Blue Coat Series 510/810 multi-disk drive system. If you are hot-swapping a disk drive, see Section E: "Understanding the Disk Drive LEDs" on page Power off the multi-disk drive system. 2. Open the front panel by pulling the two bezel tabs forward and down. 13

15 3. Remove the disk drive from the shipping container. Place the disk drive into the first available disk drive bay on the left. (The disk-drive lever, the black latch, must be on the left side.) 4. To insert the disk drive, hold the disk-drive lever out, align the disk drive with the drive bay guide rails, and gently push the disk drive into the drive bay (to avoid damaging the SATA/SCSI connect). 5. When the disk-drive lever meets the appliance frame, push the lever forward slowly until the lever locks in place. 6. Repeat the preceding steps to install additional disk drives. 7. Close the front panel. 8. Power up the appliance. 9. Verify disk installation using the procedure described in Section D: "Verifying Disk Drive Installation" on page Set the default boot system, as described in Set the Default Boot System on page 6. 14

16 Section D: Verifying Disk Drive Installation You can verify that you installed the disk drive correctly by reviewing information in the Management Console or the CLI: Management Console See Using the Management Console to Verify Disk Drive Installation on page 15. CLI See Using the CLI to Verify Disk Drive Installation on page 15. Using the Management Console to Verify Disk Drive Installation The following procedure describes how to use the Management Console to verify disk drive hot-swapping. If you replaced the disk drive in an appliance with only one disk drive, you must configure the appliance s basic settings before you can access the Management Console. 1. Enter the appliance URL. 2. Select Maintenance > System and Disks. Figure 6. Disk details on the Statistics > General > Summary page. 3. Select the Summary tab. The Summary tab lists the total number of installed disk drives. Verify that the number of installed disk drives matches the number physically installed in the appliance. Using the CLI to Verify Disk Drive Installation The following procedure describes how to use the CLI to verify disk drive installation. Note: These steps are applicable only to an appliance that has already been configured. 15

17 1. Access the CLI: a. If the appliance is already configured, open an SSH session to the CLI and go to Step 2. b. If you replaced the only disk drive in the appliance and have not yet configured it, connect to the appliance serial console and configure the appliance s basic settings. Then, press Enter three times to access the CLI and go to Step Type enable. 3. Enter the enable password you created during the initial configuration of your appliance. 4. Type show disk all. As shown in Figure 7, the appliance displays the slots that have disk drives installed and the slots in which disk drives are not installed. Figure 7. Sample CLI output displaying disk drive slot information. 16

18 Section E: Understanding the Disk Drive LEDs The following table describes the meaning of disk drive LED activity. Boot Time During the boot sequence After the boot sequence When the boot sequence is complete Disk Drive LED Activity All disk drive LED lights flash. Status LEDs flash until the appliance test is completed. The green Activity LED flashes with disk drive activity. The status LEDs for installed disk drives stay on. A fast flashing status LED indicates a disk drive that has been taken offline. Status LEDs that are off can indicate one of the following conditions: An empty disk drive bay A disk drive that is not properly installed A defective disk drive 17

19 Contact Information Blue Coat Systems Inc. 420 North Mary Ave Sunnyvale, CA For concerns or feedback about the documentation: Document Number: Revision Number: C.0 Copyright Information Copyright Blue Coat Systems, Inc. All rights reserved worldwide. No part of this document may be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the written consent of Blue Coat Systems, Inc. All right, title and interest in and to the Software and documentation are and shall remain the exclusive property of Blue Coat Systems, Inc. and its licensors. ProxyAV, ProxyOne, CacheOS, SGOS, SG, Spyware Interceptor, Scope, ProxyRA Connector, ProxyRA Manager, Remote Access and MACH5 are trademarks of Blue Coat Systems, Inc. and CacheFlow, Blue Coat, Accelerating The Internet, ProxySG, WinProxy, PacketShaper, PacketShaper Xpress, PolicyCenter, PacketWise, AccessNow, Ositis, Powering Internet Management, The Ultimate Internet Sharing Solution, Cerberian, Permeo, Permeo Technologies, Inc., and the Cerberian and Permeo logos are registered trademarks of Blue Coat Systems, Inc. All other trademarks contained in this document and in the Software are the property of their respective owners. BLUE COAT SYSTEMS, INC. AND BLUE COAT SYSTEMS INTERNATIONAL SARL (COLLECTIVELY BLUE COAT ) DISCLAIM ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL BLUE COAT, ITS SUPPLIERS OR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF BLUE COAT SYSTEMS, INC. HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Americas: Rest of the World: Blue Coat Systems, Inc. Blue Coat Systems International SARL 420 N. Mary Ave. 3a Route des Arsenaux Sunnyvale, CA Fribourg, Switzerland

20 Document Number: Revision C.0