Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Anonymous_User Absent Member.
Absent Member.
3148 views

Start from Scratch?

I am considering starting over from scratch with my 2 servers. I can't
get patches to download and have a number of other issues with bundles
and such. I had thought that I could rebuild the one server (2k3) and
that would get patch working but it doesn't appear to be the case and
now that server won't even update to 10.0.1 so it seems to have been a
waste of time.

What I'm wondering is: Can I uninstall ZEN from my primary server but
keep the CASA stuff so that the certs are the same? If not, what will I
have to do to get my 90 clients communicating with the primary server again?

Thanks.
Labels (2)
0 Likes
10 Replies
jaredljennings Absent Member.
Absent Member.

Re: Start from Scratch?

Alisia,

> What I'm wondering is: Can I uninstall ZEN from my primary server but
> keep the CASA stuff so that the certs are the same? If not, what
> will I have to do to get my 90 clients communicating with the primary
> server again?


That should not keep the certificate. I do not know that for sure, but
logic and how certs work, tells me that it will not.

Re-deploying the agents, should point the agents to the new servers.

I think you could do the following:

You could keep the original install of ZCM running, install ZCM to your
second server (Fresh). Create a bundle deployment on the old system,
that distributes the PreAgent bundle, created by the new system. At
that point, the agents should point to the new server and the older
server could be de-commissioned. Using this method would also allow for
options b, c, d and z, when all else fails.

--
Jared Jennings - Data Technique, Inc.
Novell Support Forums Sysop
My Blog and Wiki with Tips, Tricks, and Tutorials
http://jaredjennings.org
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Jared Jennings wrote:
> Alisia,
>
>> What I'm wondering is: Can I uninstall ZEN from my primary server but
>> keep the CASA stuff so that the certs are the same? If not, what
>> will I have to do to get my 90 clients communicating with the primary
>> server again?

>
> That should not keep the certificate. I do not know that for sure, but
> logic and how certs work, tells me that it will not.
>
> Re-deploying the agents, should point the agents to the new servers.
>
> I think you could do the following:
>
> You could keep the original install of ZCM running, install ZCM to your
> second server (Fresh). Create a bundle deployment on the old system,
> that distributes the PreAgent bundle, created by the new system. At
> that point, the agents should point to the new server and the older
> server could be de-commissioned. Using this method would also allow for
> options b, c, d and z, when all else fails.
>

Okay, this sounds really good in theory. I've created a bundle on the
old system of the pre-agent package from the new system and when I try
to run it, it fails with an error 11. The log shows that the pre-agent
already exists.

What now?

A
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Alisia wrote:
> Jared Jennings wrote:
>> Alisia,
>>
>>> What I'm wondering is: Can I uninstall ZEN from my primary server but
>>> keep the CASA stuff so that the certs are the same? If not, what
>>> will I have to do to get my 90 clients communicating with the primary
>>> server again?

>>
>> That should not keep the certificate. I do not know that for sure, but
>> logic and how certs work, tells me that it will not.
>>
>> Re-deploying the agents, should point the agents to the new servers.
>>
>> I think you could do the following:
>>
>> You could keep the original install of ZCM running, install ZCM to your
>> second server (Fresh). Create a bundle deployment on the old system,
>> that distributes the PreAgent bundle, created by the new system. At
>> that point, the agents should point to the new server and the older
>> server could be de-commissioned. Using this method would also allow for
>> options b, c, d and z, when all else fails.
>>

> Okay, this sounds really good in theory. I've created a bundle on the
> old system of the pre-agent package from the new system and when I try
> to run it, it fails with an error 11. The log shows that the pre-agent
> already exists.
>
> What now?
>
> A

I may have solved my own problem. I can't rerun the preagent package
but I can use zac to unregister and then register with the new zone. Is
there any way to automate the cert acceptance? It only takes a minute
to do this but it would be nice to be able to automate it completely.
0 Likes
jaredljennings Absent Member.
Absent Member.

Re: Start from Scratch?

Alisia,

> I may have solved my own problem. I can't rerun the preagent package
> but I can use zac to unregister and then register with the new zone.
> Is there any way to automate the cert acceptance? It only takes a
> minute to do this but it would be nice to be able to automate it
> completely.


Do'h. That is just to easy. Sorry for my wild goose-chase.

I do not know of a switch to accept the cert, but you could write an
AUTOIT script to accept the cert for you. It would wait until the
Window pops-up and then click the button for you.
Here's an example:
http://www.adminscripteditor.com/scriptlibrary/view.asp?id=355

--
Jared Jennings - Data Technique, Inc.
Novell Support Forums Sysop
My Blog and Wiki with Tips, Tricks, and Tutorials
http://jaredjennings.org
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Hi,
What i use to handle cert acceptance is to add the certificate in the store
with certmgr.exe

"certmgr.exe -add c:\install\zcm.cer -s -r localMachine root"

for example.




> Alisia,
>
>> I may have solved my own problem. I can't rerun the preagent package
>> but I can use zac to unregister and then register with the new zone.
>> Is there any way to automate the cert acceptance? It only takes a
>> minute to do this but it would be nice to be able to automate it
>> completely.
>>

> Do'h. That is just to easy. Sorry for my wild goose-chase.
>
> I do not know of a switch to accept the cert, but you could write an
> AUTOIT script to accept the cert for you. It would wait until the
> Window pops-up and then click the button for you.
> Here's an example:
> http://www.adminscripteditor.com/scriptlibrary/view.asp?id=355



0 Likes
jaredljennings Absent Member.
Absent Member.

Re: Start from Scratch?

Alisia,

> It only takes a minute to do this but it would be nice to be able to
> automate it completely.


To spin off what Patrick said, you could download the certificate ahead
of time and add the new certificate before registering with the new ZCM
server. For that matter, this action could be done in a bundle, either
chained or as an action before the reg command.

I think the following certmgr command would add the certificate. I
haven't tested this command though.

"certmgr /add newCert.cer /n myCert /s localMachine"

Please let me know if the command works.
--
Jared Jennings - Data Technique, Inc.
Novell Support Forums Sysop
My Blog and Wiki with Tips, Tricks, and Tutorials
http://jaredjennings.org
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Jared Jennings wrote:
> Alisia,
>
>> It only takes a minute to do this but it would be nice to be able to
>> automate it completely.

>
> To spin off what Patrick said, you could download the certificate ahead
> of time and add the new certificate before registering with the new ZCM
> server. For that matter, this action could be done in a bundle, either
> chained or as an action before the reg command.
>
> I think the following certmgr command would add the certificate. I
> haven't tested this command though.
>
> "certmgr /add newCert.cer /n myCert /s localMachine"
>
> Please let me know if the command works.

Well, I've created a bundle that will install the files needed to the
machine (the cert, and the certmgr.exe). This part works fine. But, I
get an error 1008 Calling LoadUserProfile for the launch part. I've got
this configured to use a DAU since my users are not local admins. I
also wonder in the process order for the launch items if all three will
process if the first one is an unregister from the current zone? They
are 1. unregister, 2. add cert, 3. register with the new zone.
0 Likes
jaredljennings Absent Member.
Absent Member.

Re: Start from Scratch?

Alisia,

> I also wonder in the process order for the launch items if all three
> will process if the first one is an unregister from the current zone?
> They are 1. unregister, 2. add cert, 3. register with the new zone.


That's very possible.
Also, the certificate is stored in the registry under
hklm/software/novell/zenworks, It may be prudent to delete this key
before installing the certificate.

--
Jared Jennings - Data Technique, Inc.
Novell Support Forums Sysop
My Blog and Wiki with Tips, Tricks, and Tutorials
http://jaredjennings.org
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Jared Jennings wrote:
> Alisia,
>
>> It only takes a minute to do this but it would be nice to be able to
>> automate it completely.

>
> To spin off what Patrick said, you could download the certificate ahead
> of time and add the new certificate before registering with the new ZCM
> server. For that matter, this action could be done in a bundle, either
> chained or as an action before the reg command.
>
> I think the following certmgr command would add the certificate. I
> haven't tested this command though.
>
> "certmgr /add newCert.cer /n myCert /s localMachine"
>
> Please let me know if the command works.

Well, I've created a bundle that will install the files needed to the
machine (the cert, and the certmgr.exe). This part works fine. But, I
get an error 1008 Calling LoadUserProfile for the launch part. I've got
this configured to use a DAU since my users are not local admins. I
also wonder in the process order for the launch items if all three will
process if the first one is an unregister from the current zone? They
are 1. unregister, 2. add cert, 3. register with the new zone.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Start from Scratch?

Are you in Active Directory ?
If yes, just authorize that certificate in your domain group policy.
After that, at computer startup, create a batch file where you do an UNR and
then a REG in the new zone.


"Alisia" <alisia.prince@alamancecc.edu> a écrit dans le message de groupe de
discussion : c1Y7j.8693$k06.5639@kovat.provo.novell.com...
> Jared Jennings wrote:
>> Alisia,
>>
>>> It only takes a minute to do this but it would be nice to be able to
>>> automate it completely.

>>
>> To spin off what Patrick said, you could download the certificate ahead
>> of time and add the new certificate before registering with the new ZCM
>> server. For that matter, this action could be done in a bundle, either
>> chained or as an action before the reg command.
>>
>> I think the following certmgr command would add the certificate. I
>> haven't tested this command though.
>>
>> "certmgr /add newCert.cer /n myCert /s localMachine"
>>
>> Please let me know if the command works.

> Well, I've created a bundle that will install the files needed to the
> machine (the cert, and the certmgr.exe). This part works fine. But, I
> get an error 1008 Calling LoadUserProfile for the launch part. I've got
> this configured to use a DAU since my users are not local admins. I also
> wonder in the process order for the launch items if all three will process
> if the first one is an unregister from the current zone? They are 1.
> unregister, 2. add cert, 3. register with the new zone.


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.