Skip to main content

Configure replacement primary Admin Node

Contributors netapp-perveilerk netapp-lhalbert
PDFs

The replacement node must be configured as the primary Admin Node for your StorageGRID system.

Before you begin

  • For primary Admin Nodes hosted on virtual machines, the virtual machine has been deployed, powered on, and initialized.

  • For primary Admin Nodes hosted on a services appliance, you have replaced the appliance and have installed software. See the installation instructions for your appliance.

  • You have the latest backup of the Recovery Package file (sgws-recovery-package-id-revision.zip).

  • You have the provisioning passphrase.

Steps

  1. Open your web browser and navigate to https://primary_admin_node_ip.

  2. Manage a temporary installer password as needed:

    • If a password has already been set using one of these methods, enter the password to proceed.

      • A user set the password while accessing the installer previously

      • For bare metal systems, the password was automatically imported from the node config file at /etc/storagegrid/nodes/<node_name>.conf

      • For VMs, the SSH/console password was automatically imported from the OVF properties

    • If a password has not been set, optionally set a password to secure the StorageGRID installer.

  3. Click Recover a failed primary Admin Node.

    Install or recover Primary Admin Node

  4. Upload the most recent backup of the Recovery Package:

    1. Click Browse.

    2. Locate the most recent Recovery Package file for your StorageGRID system, and click Open.

  5. Enter the provisioning passphrase.

  6. Click Start Recovery.

    The recovery process begins. The Grid Manager might become unavailable for a few minutes as the required services start. When the recovery is complete, the sign in page is displayed.

  7. If single sign-on (SSO) is enabled for your StorageGRID system and the relying party trust for the Admin Node you recovered was configured to use the default management interface certificate, update (or delete and recreate) the node's relying party trust in Active Directory Federation Services (AD FS). Use the new default server certificate that was generated during the Admin Node recovery process.

    Note To configure a relying party trust, see Configure single sign-on. To access the default server certificate, log in to the command shell of the Admin Node. Go to the /var/local/mgmt-api directory, and select the server.crt file.
Caution After recovering a primary admin node, determine if you need to apply a hotfix.