PowerVM

Power Virtualization

Learn about the virtualization technologies designed specifically for IBM Power including #PowerVM, #PowerVC, #VM Recovery Manager, #HCM/CMC, and more.


#Power
#TechXchange Conference Lab


#Servers
 View Only

  • 1.  How do I request a CSR from the HMC without rebooting the HMC?

    Posted 02/24/25 09:55 AM

    I want to use the GUI, not a command line.  I am using a browser on my PC to get to my vHMC.  HMC 10.3.1061.

    Tried looking online but most IBM sites refer to obsolete versions of the HMC, including those pointed to from Power 10 systems.

    I go into HMC Management, HMC certificates, I see my existing certificate.  I select Actions, Create, Signed by CA, turn off proceed with temporary certificate generated by HMC.  However it will not create a CSR without restarting the HMC.  There is no need to restart the HMC at this point.  How do I tell it not to restart?



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------

    #HMCandCMC


  • 2.  RE: How do I request a CSR from the HMC without rebooting the HMC?

    Posted 02/24/25 09:57 AM

    Also, on the other HMC I forgot to turn off the stupid proceed with temporary certificate generated by HMC.  So now I cannot get to the HMC from any browser since it is a stupid self signed certificate.  So how do I get past this?



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------



  • 3.  RE: How do I request a CSR from the HMC without rebooting the HMC?

    Posted 02/25/25 02:29 AM

    Use mkhmccert and chhmccert commands from SSH session. 



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------

    Original Message


  • 4.  RE: How do I request a CSR from the HMC without rebooting the HMC?

    Posted 02/25/25 04:20 AM

    It sounds as Request for enhancement is needed. 

    I think it is caused that a new certificate requires a service restart and HMC development did not consider an option to post pone the restart. 



    ------------------------------
    Bartlomiej Grabowski
    IBM Champion - Platinum Redbook Author and Principal System Specialist
    ------------------------------



  • 5.  RE: How do I request a CSR from the HMC without rebooting the HMC?

    Posted 02/25/25 08:18 AM

    Ok, on the second HMC I remembered to turn off that obnoxious "Proceed with temporary certificate generated by the HMC" when I requested the CSR.  Even though the button still said Create and Restart it knew that I only wanted a CSR and did not restart.  Whew.

    As far as recovering the first hmc I opened up a case.  And, as soon as I berated the technician for the usual work avoidance requests he immediately set up a Teams meeting.  I had to use the vmware console and put the certs I downloaded from Digicert on to our IBM i based GoAnywhere sftp site and then the HMC could get the certs from that.

    All is well.



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------

    Original Message


Related Content