Hardware Appliance Re-image

This topic describes re-imaging a hardware appliance using the Gateway10 ISO file. It uses web-based ILOM.
Before You Begin
  • Obtain the Windows image for launching ILOM. JRE 1.8.0_181 or later must be installed.
  • Copy the Gateway 10 ISO file to the Windows image.
Re-image the Hardware Appliance
To Re-image the Hardware Appliance:
  1. Launch ILOM and log in with ILOM credentials.
  2. In the left navigation panel, click
    Remote Control
    .
  3. Click
    Redirection
    then click
    Launch Remote Control
    . A prompt appears notifying you of the Java 6.0 requirement. If you have Java 6.0 installed, click
    OK
    .
  4. Click
    Keep
    when asked about the jnlpgenerator file.
  5. Click the
    ^
    icon after the file, and select
    Open
    .
    A Security Warning appears if the connection to the website is untrusted.
  6. Click
    Continue
    .
  7. Click
    Run
    . If a Check Certificate page appears warning you that the certificate is not trusted, click
    Continue (not recommended)
    .
    A new console window appears.
  8. In the top navigation bar, click
    KVMS
    , then click
    Storage
    .
  9. Click
    Add
    , browse to the ISO file on the Windows machine and click
    Select
    . The file appears listed under Storage Devices.
  10. Select the ISO file and click
    Connect
    .
  11. Reboot the machine:  in ILOM, navigate to
    Host Management
    >
    Power Control
    >
    Select Reset
    >
    Save
    .
  12. Switch to the Remote Console window and press
    F8
    to access the Boot Menu.
  13. On the Boot Menu, select
    USB:Virtual:Remote ISO
    and press Enter.
  14. A new menu appears. Choose one of the following options:
    • appliancenozero
      for a faster re-imaging without zeroing the disk
    • appliance
      to zero the disk first before re-imaging
  15. When the imaging process is complete, you are asked to Reboot. Click
    Reboot
    .
  16. After the reboot, verify that the expected Gateway version is displayed.
  17. Click
    KVMS
    and select
    Storage
    . Click
    Disconnect
  18. Click
    OK
    .
Verify the Re-image Procedure
To verify, execute the following command:
grep ERROR /root/*.log
If you see
ERROR to mount
,
ERROR to unmount
, or
ERROR to copy
, re-image the appliance and verify once again. If the errors continue, create a support ticket on casupport.broadcom.com.
You can safely ignore the following error: "ERROR - while trying to fix /opt/SecureSpan/Gateway/runtime/etc/profile.d/appliancedefs.sh"
Harden the Installation
After imaging the appliance, the sealsys script required to harden the installation is available in  the /root directory. If it is not available, re-image the appliance.
If the sealsys script is not executed after imaging the appliance, the system will be in an incomplete state and cause unpredictable issues with Gateway functionality.
Run sealsys to harden the installation. 
  1. Log into the Gateway using root credentials.
  2. Ensure that the RAID is not still in the process of initializing, by checking the status for RAID Volumes and Disks:
    [[email protected] ~]# raidconfig list all
    • Under 
      RAID Volumes
        there is one volume with status
      OK
      .
    • Under
      DISKS
      , there are two disks listed, both with status
      OK
      .
    If the status is not OK, do not proceed.
  3. Continue your verification. Run the following command:
    history -c
    There should be no output.
    Verify that there is no output when running
  4. With verification complete, type the following command to run sealsys:
    ./sealsys all
    The system shuts down and powers off.
Reconfigure Gateway System Settings
After successfully re-imaging your Hardware Appliance, ensure that your Gateway System Settings are re-entered as required, beginning with your networking and system time settings.