The following describes the recovery process for the NetHSM system software. These instructions are only applicable if the API is inoperable, e.g. not responding to API requests. In the case of an operable API perform a factory reset instead. Follow the instructions precicsely to prevent any accidential deletion of data.
The system recovery only works if the GUID partition table (GPT) and the partitions itself on the disk are not corrupted. A corruption could be indicated by the following message during boot.
Booting 'NetHSM automatic boot (USB or primary system)' GRUB: No valid configuration found on (usb0). GRUB: No valid configuration found on (ahci0,gpt1). GRUB: Booting failed. System will switch off in 10 second.
If they are corrupted this instructions will result in a factory installation of the NetHSM system software.
The system recovery can be performed as follows.
Download the installer image from the releases page.
Download the installer image of the same version which was installed at the time of corruption. A downgrade, or upgrade skipping versions, is not supported.
Make sure the system is turned off, but connected to power, and the power button on the back turned on.
Connect the BMC network port with a network cable.
See the image below to identify the BMC network port.
Per default the BMC will wait for an address assignment with DHCP. If DHCP is not available the link-local address can be determined with Nmap. The command
nmap <network-in-cidr-notation> -p 80 --openwill return a list of hosts with open port 80.
Open the BMC website in a web browser, using the determined IP address from the previous step. To login, the default credentials are username
bmc_admin, and password
Mount the downloaded installer image by clicking in the menu on the left on FRU: Hermes CFL (with TPM) Nitrokey Config followed by Virtual media in the submenu. In the middle open the tab usb0, and click the button Attach media.
In the opening dialog choose Stream local file via browser as the Transfer method. Click the button Browse… and choose the downloaded installer image. Confirm the operation with the Submit button.
In the menu on the left select FRU: Hermes CFL (with TPM) Nitrokey Config, and then Remote KVM.
In the middle click the Open a floating Remote KVM window button, in the top right corner of the VGA output box.
This window will show you the graphical output of the NetHSM installer. Keep this second window open together with the main window from the BMC.
Change to the view Overview from the top of the menu on the left.
In the box Override Boot Device, select USB_BMC-virtual_media from the drop-down next to Select a Boot Device.
In the box with the title FRU: Hermes CFL (with TPM) Nitrokey Config, select On from the drop-down menu next to Power. Confirm with the Apply button.
In the previously opened Remote KVM window you can now see the installation wizard.
The KVM window now shows the boot dialog. Confirm the selection of
NetHSM automatic boot (USB or primary system)with the Enter key.
In the following dialog confirm the selection of
NetHSM Software Installerwith the Enter key.
Do NOT select
NetHSM Factory Reset - DELETES ALL DATA!from the menu. This will unrecoverable wipe the data on the disk.
The NetHSM Installer will install the system software and shutdown.