Page 2
Distribution Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. May 2019...
Contents About this Document Hardware Description High-Level Capacity Information Enclosure Options Capability with RSA NetWitness Platform Series 5 or 6 Hosts Package Contents Customer Supplied Materials Rear View of the PowerVault Mini-to-Mini SAS Cable Connector Monitoring PowerVault Through IDRAC Install PowerVault without Encryption Prerequisites Introduction Attach and Configure a PowerVault without Encryption...
Page 4
PowerVault (Dell MD1400) Setup Guide Install PowerVaults and 15-Drive DACs on a Series 5 or Series 6 Host (Mixed Mode) Minimum NetWitness Platform Software Versions Introduction High-Level Procedure NetWitness Platform 11.3 and Later NetWitness Platform 11.2 and Earlier Connect External Storage Devices to RSA Series 5 or Series 6 Archiver, Decoder, or Log...
PowerVault (Dell MD1400) Setup Guide About this Document This document provides instructions for installing a PowerVault external storage device on RSA Series 5 and Series 6 (Network) Decoder, Log Decoder, Concentrator, Archiver, and Hybrid hosts. The hardware setup instructions in this document are for hardware only; they do not apply to a specific release of RSA NetWitness Platform software.
The RSA PowerVault (Dell MD 1400) high capacity storage device is a drive array enclosure powered by EMC/Dell. PowerVault is used to extend the usable storage on the RSA Series 5 and Series 6 (Network) Decoder, Log Decoder, Concentrator, Archiver, and Hybrid hosts.
1. Review site requirements and safety information. 2. Install PowerVault. Package Contents Refer to the documentation that is included with the PowerVault. The Dell Storage MD1400 Enclosures Hardware Owner's Manual (http://topics-cdn.dell.com/pdf/storage-md1400-dsms_ owners-manual_en-us.pdf) contains detailed instruction on all the optional setups you can implement with PowerVault to address the needs of your environment.
PowerVault (Dell MD1400) Setup Guide Rear View of the PowerVault Key Description SAS ports. Each set of ports has a Primary port and an Expansion port. In each set, the Primary port is closer to the center of the chassis. There are two rows of ports. In each row, the ports are labeled 1 to 4 from left to right.
PowerVault (Dell MD1400) Setup Guide Monitoring PowerVault Through IDRAC You can monitor PowerVault MD array communication through the Integrated Dell Remote Access Controller (IDRAC). Refer to the "Monitoring network devices using web interface" and "Monitoring network devices using RACADM" sections of the Integrated Dell Remote Access Controller 8/7 Version 2.60.60.60 User’s Guide...
PowerVault (Dell MD1400) Setup Guide Install PowerVault without Encryption This topic describes how to install a PowerVault without encryption on RSA Series 5 and Series 6 Decoder, Log Decoder, Concentrator, Archiver, and Hybrid physical hosts. Prerequisites Make sure that you have the following required software: For RSA NetWitness Platform 11.1.0.2 and later versions:...
PowerVault (Dell MD1400) Setup Guide Introduction The following table contains the summarized installation instructions for different deployments, and detailed procedures are in individual subsections. The deployment scenarios are: Multiple PowerVaults in a Concentrator, (Network) Decoder, Log Decoder, and Archiver deployment.
PowerVault (Dell MD1400) Setup Guide NetWitness Platform 11.2 and Earlier Deployment Tasks Scenario Concentrator, 1. Connect the PowerVaults to the physical host before powering on Archiver, Decoder, the physical host as described in Connect PowerVaults to a and Log Decoder...
Page 13
Profile PD240 is labeled as “default”, however, this is not set from factory. To set the PD Profile: 1. Enter the DELL PERC 10 Configuration Utility. See Navigating to Dell PERC 10 configuration utility. 2. Click Main Menu > Controller Management > Advanced Controller Properties > Profile Management.
Page 14
PowerVault (Dell MD1400) Setup Guide Series 5 - R730 (Hybrid) The following figure shows an R730 host (port 0 ) connected to a PowerVault (port 1 in top row of ports) using a mini-to-mini SAS cable. The PERC830 card for the R730 is installed in slot #3. This means that: Port 0 is on the left and port 1 is on the right on the R730.
Page 15
PowerVault (Dell MD1400) Setup Guide Series 6 Physical Hosts Series 6 - R640 The following figure shows Series 6 - R640 host (port 0) connected to PowerVault (port 1 in top row of ports) using a mini-to-mini SAS cable. The PERC H840 card for the R640 is installed in slot #1. This means that: Port 0 is on the left and port 1 is on the right on the R640.
Page 16
PowerVault (Dell MD1400) Setup Guide Series 6 - R740xd (Hybrid) The following figure shows Series 6 - R740 hybrid host (port 0) connected to PowerVault (port 1 in top row of ports) using a mini-to-mini SAS cable. The PERC H840 card for the R740 is installed in slot #4 inverted (upside down) in this slot.
Page 17
PowerVault (Dell MD1400) Setup Guide 4. When you connect two or more PowerVaults to the RAID controller, make sure that you: Connect the Primary Port 1 of the first PowerVault to Port 0 of the Decoder RAID controller. Daisy chain up to three additional PowerVaults to the first PowerVault.
Page 18
PowerVault (Dell MD1400) Setup Guide Series 5 R730 (Hybrid) Attached to Eight PowerVaults Series 6 - R640 Attached to Eight PowerVaults Series 6 R740xd (Hybrid) Attached to Eight PowerVaults Install PowerVault without Encryption...
Page 19
PowerVault (Dell MD1400) Setup Guide Note: The PERC840 card for the R740 is installed in slot #4 inverted (upside down) in this slot. This means that Port 0 is on the right and port 1 is on the left on the R740.
PowerVault (Dell MD1400) Setup Guide Connect a PowerVault to a Hybrid You can connect only one PowerVault to a Hybrid physical host. Note: The PowerVault comes with four SAS cables. You only need one cable to connect the PowerVault to the physical host. RSA Series 5 physical hosts require different cables. For RSA Series 6 physical hosts, use a cable with the mini-SAS connector.
Page 21
PowerVault (Dell MD1400) Setup Guide Series 6 R740xd Hybrid 4. When you finish the cabling, ensure that the PowerVault is powered on and then power on the physical host. Install PowerVault without Encryption...
PowerVault (Dell MD1400) Setup Guide Run the PowerVault Installation Scripts on the Decoder, Log Decoder, Concentrator, or Archiver This procedure only applies to NetWitness Platform 11.2 and earlier. Note: For NetWitness Platform 11.3 and later, refer to Storage Guide for RSA NetWitness Platform Version 11.3 and later for instructions on how to allocate storage for your hardware.
Page 23
PowerVault (Dell MD1400) Setup Guide 68 0 11 10.692 TB HGST HUH721212AL5200 NS018DGXYLZH If a drive is in a foreign state, it shows F in the State column. If a drive is in a bad state, it shows B in the State column. A PowerVault that has never been used before should show U for unconfigured.
Page 24
PowerVault (Dell MD1400) Setup Guide Checksum type 'md5' disabled Creating new volume group decodersmall on /dev/sdc Volume group "decodersmall" successfully created Creating new volume group decoder on /dev/sdd Volume group "decoder" successfully created Additional enclosures available! Rerunning to add additional storage Creating new volume group decodersmall0 on /dev/sde Volume group "decodersmall0"...
PowerVault (Dell MD1400) Setup Guide f. Expand the database folder and select the config folder. g. Look at packet.dir, meta.dir,and session.dir as applicable to your service. Compare the output of the df - hP command to the database/config values shown in NetWitness Platform.
Page 26
PowerVault (Dell MD1400) Setup Guide 4. Important: Check the results and resolve ALL conditions before running the script: a. Make sure that there are no foreign configurations and no drives with an Unconfigured state on the PowerVault drives. (bad) Adapter 1 (PERC H810 Adapter) enclosure 160 slots found: 12 Encl Slot State P.Fail.Count Raw Size Inquiry Data...
Page 27
PowerVault (Dell MD1400) Setup Guide ./NwArrayConfig.py --drives <N> For RSA NetWitness Platform versions 11.1.0.2 and later, run the following command: OWB_ALLOW_NON_FIPS=1 ./NwArrayConfig.py --drives <N> where is the number of drives to be assigned to the Concentrator service. By default <N>...
PowerVault (Dell MD1400) Setup Guide e. Select the Decoder or Log Decoder and then select > View > Explore. f. Expand the database folder and select the config folder. g. Look at the packet.dir node and expand it fully. Ensure there is an entry for the added PowerVault and the size of the packetdb is as follows: /var/netwitness/decoder/packetdb#=<n>...
PowerVault (Dell MD1400) Setup Guide Task 4 - (Conditional) License Host Services License host services (if not already licensed). Refer to the Licensing Guide available through the application Help option and RSA Link at https://community.rsa.com/docs/DOC-40370 instructions on licensing RSA hosts.
PowerVault (Dell MD1400) Setup Guide Install PowerVault with Encryption on a Series 6 R640 Host This topic describes how to install a PowerVault with Self Encrypted Drives (SED) on an RSA Series 6 Archiver, Concentrator, or (Network) Decoder (R640) host with encrypted PowerVault external storage.
PowerVault (Dell MD1400) Setup Guide Attach and Configure New PowerVault with Encryption This table summarizes the tasks you must complete to attach and configure a PowerVault with Encryption. The tasks are shown in detail in the topics following immediately the table.
Page 32
PD240 corrects the issue. Profile PD240 is labeled as “default”, however, this is not set from the factory. To set the PD Profile: 1. Enter the DELL PERC 10 Configuration Utility. See Navigating to Dell PERC 10 configuration utility. 2. Click Main Menu > Controller Management > Advanced Controller Properties > Profile Management.
Page 33
PowerVault (Dell MD1400) Setup Guide 3. Connect the other end of the SAS cable to the PowerVault unit. When you connect the first PowerVault to the RAID controller, make sure that you insert the cable into the Primary SAS port on the PowerVault as shown in the following figure.
PowerVault (Dell MD1400) Setup Guide 4. For the Series 6 - R640 host, you can connect two to four PowerVaults to the RAID controller if you are encrypting the PowerVaults. a. Connect the Primary Port 1 of the first PowerVault to Port 0 of the Decoder RAID controller.
Page 35
PowerVault (Dell MD1400) Setup Guide Caution: After configuring the PowerVault the first time for a service, there is a possibility of background RAID initialization running for at least 24 hours. During this initialization, disk I/O performance may be affected. Note: You must use a PowerVault with Self Encrypted Drives (SED).
Page 36
PowerVault (Dell MD1400) Setup Guide 5. To run the script using the default parameters, use one of the following NwArrayConfig.py commands. Caution: You must back up the Passphrase and retain this backup in a secure location. If your PERC adapter hardware fails, you cannot recover any data on encrypted disks without the Passphrase.
Page 37
PowerVault (Dell MD1400) Setup Guide The following output and prompt is displayed. Checksum type 'md5' disabled The enclosure DELL MD1400 ID: 72 supports encryption, enable encryption for this device y/n? 6. Type and press Enter for encryption. The following output and prompt is displayed.
Page 38
PowerVault (Dell MD1400) Setup Guide 10. Type and press Enter to confirm that you backed up the Passphrase. Caution: You must back up the Passphrase and retain this backup in a secure location. If your PERC adapter hardware fails, you cannot recover any data on encrypted disks without the Passphrase.
Page 39
PowerVault (Dell MD1400) Setup Guide 13. Type and press Enter to enable encryption for this device. Creating new volume group decodersmall2 on /dev/sde Volume group "decodersmall2" successfully created Creating new volume group decoder2 on /dev/sde Volume group "decoder2" successfully created...
PowerVault (Dell MD1400) Setup Guide c. Make sure that there is an entry for each PowerVault added. An individual packetdb#, , and sessiondb# is created for each PowerVault, where # is the number metadb# associated with the PowerVault in the order it was added. For the first PowerVault that you add, # is blank and does not have a number appended.
PowerVault (Dell MD1400) Setup Guide service <nwdecoder, nwarchiver, nwconcentrator start 2. Make sure that the service comes back online and begins capture. a. In the NetWitness Platform Services view (Administration > Services or ADMIN > Services), verify that the service status is green.
PowerVault (Dell MD1400) Setup Guide Install PowerVaults and 15-Drive DACs on a Series 5 or Series 6 Host (Mixed Mode) This topic describes how to install PowerVault and 15-Drive DAC external storage devices on an RSA: Series 5 Decoder, Log Decoder, and Archiver host. The Series 5 host must have an additional H830 PERC Card installed.
PowerVault (Dell MD1400) Setup Guide High-Level Procedure This table summarizes the two PowerVaults and two 15-Drive DAC external storage deployment scenario. NetWitness Platform 11.3 and Later Deployment Scenario Tasks Archiver, Decoder, and 1. Connect the PowerVaults and 15-Drive DACs to the host...
PowerVault (Dell MD1400) Setup Guide Connect External Storage Devices to RSA Series 5 or Series 6 Archiver, Decoder, or Log Decoder Hosts You can connect one to four PowerVaults and one to four 15-Drive DACs to RSA Series 5 or Series 6 Archiver, Decoder, or Log Decoder hosts.
Page 45
PowerVault (Dell MD1400) Setup Guide 3. Connect the other end of the SAS cables to the External Storage units. a. Connect the Primary Port 1 of the first PowerVault to Port 0 of the PERC Card on the left using mini-to-mini SAS cables.
PowerVault (Dell MD1400) Setup Guide 4. When you finish the cabling, make sure that the external storage devices are powered on and then power on the host. Make sure that you have a live connection to PowerVaults. Make sure that the green light next to the Port 0 of the left PERC Card on the RSA Series 5 host is green.
Page 47
PowerVault (Dell MD1400) Setup Guide 3. Connect the other end of the SAS cables to the External Storage units. a. Connect the Primary Port 1 of the first PowerVault to Port 0 of the PERC Card on the left using mini-to-mini SAS cables.
PowerVault (Dell MD1400) Setup Guide Run the External Storage Script on the Decoder, Log Decoder, or Archiver This procedure only applies to NetWitness Platform 11.2 and earlier. Note: For NetWitness Platform 11.3 and later, refer to Storage Guide for RSA NetWitness Platform Version 11.3 and later for instructions on how to allocate storage for your hardware.
Page 49
PowerVault (Dell MD1400) Setup Guide Ensure that there are no foreign configurations and no drives with an Unconfigured(bad) state on the PowerVault drives. Adapters found: 3 Adapter 0 (PERC H730P Mini) enclosures found: 1 Adapter 0 (PERC H730P Mini) enclosure 32 slots found: 4 Encl Slot State P.Fail.Count Raw Size...
Page 52
PowerVault (Dell MD1400) Setup Guide 5. To run the script using the default parameters, use one of the following NwArrayConfig.py commands. For RSA NetWitness Platform versions 10.6.6.1-199.5.47209f4 or later, run the following command: ./NwArrayConfig.py For RSA NetWitness Platform 11.2.0.0-1808301802.5.941817f and later, run the following command: OWB_ALLOW_NON_FIPS=1 ./NwArrayConfig.py...
Page 53
PowerVault (Dell MD1400) Setup Guide The following is an example of the output. 6. Verify the results: a. Ensure that the script did not produce any errors by viewing the /opt/rsa/saTools/arrayCfg.log file: more /opt/rsa/saTools/arrayCfg.log Install PowerVaults and 15-Drive DACs on a Series 5 or Series 6 Host (Mixed...
Page 54
PowerVault (Dell MD1400) Setup Guide b. Run the following command to verify the new sizes of the databases: df -hP | grep 'decoder\|concentrator\|archiver\|Filesystem' The following is an example of the results that are displayed on a Decoder: c. Ensure that there is an entry for each PowerVault and DAC added. An individual...
PowerVault (Dell MD1400) Setup Guide Restart the Service You must restart the Decoder, Log Decoder, or Archiver service so that the service can recognize the new volumes. Note: If the host has a Log Decoder or (Network) Decoder service which is currently capturing, it is a best practice to stop capture before restarting these services (to ensure database writes are completed).
PowerVault (Dell MD1400) Setup Guide Install PowerVault on Core Appliance Used as a Hybrid This topic describes how to install a PowerVault on RSA Series 5 (R630) and Series 6 (R640) used as a hybrid. In this context , a hybrid refers to: Log Hybrid - runs the Log Collector, Log Decoder, and Concentrator services on one host (Series 5 - R630 or Series 6 - 640).
PowerVault (Dell MD1400) Setup Guide Introduction The following table contains the summarized installation instructions for different deployments, and detailed procedures are in individual subsections. The deployment scenarios are: Multiple PowerVaults in a Concentrator, (Network) Decoder, Log Decoder, and Archiver deployment.
PowerVault (Dell MD1400) Setup Guide NetWitness Platform 11.2 and Earlier Deployment Tasks Scenario Log Hybrid or 1. Connect a Concentrator PowerVault (NW-PVHP56, NW-PVHP113, or Network Hybrid NW-PVHPE78) to an R630 or R640 the physical host before powering Running on Core Appliance...
Profile PD240 is labeled as “default”, however, this is not set from factory. To set the PD Profile: 1. Enter the DELL PERC 10 Configuration Utility. See Navigating to Dell PERC 10 configuration utility. 2. Click Main Menu > Controller Management > Advanced Controller Properties > Profile Management.
Page 60
PowerVault (Dell MD1400) Setup Guide Series 5 - R630 Host The following figure shows an R630 host (port 0 ) connected to a PowerVault (port 1 in top row of ports) using a mini-to-mini SAS cable. The PERC830 card for the R630 is installed in slot #3. This means that: Port 0 is on the left and port 1 is on the right on the R630.
Page 61
PowerVault (Dell MD1400) Setup Guide Series 6 - R640 Physical Hosts The following figure shows Series 6 - R640 host (port 0) connected to PowerVault (port 1 in top row of ports) using a mini-to-mini SAS cable. The PERC H840 card for the R640 is installed in slot #1. This means that: Port 0 is on the left and port 1 is on the right on the R640.
Page 62
PowerVault (Dell MD1400) Setup Guide 4. When you connect two or more PowerVaults to the RAID controller, make sure that you: Connect the Primary Port 1 of the first Concentrator PowerVault to Port 0 of the RAID controller. Daisy chain up to three additional PowerVaults to the first PowerVault.
PowerVault (Dell MD1400) Setup Guide Run the PowerVault Installation Scripts on an R603 or R640 Used as a Hybrid This procedure only applies to NetWitness Platform 11.2 and earlier. Note: For NetWitness Platform 11.3 and later, refer to Storage Guide for RSA NetWitness Platform Version 11.3 and later for instructions on how to allocate storage for your hardware.
Page 64
PowerVault (Dell MD1400) Setup Guide 68 0 (U) 10.692 TB HGST HUH721212AL5200 NS018DGX2NPH 68 0 (U) 10 10.692 TB HGST HUH721212AL5200 NS018DGXZLPH 68 0 (U) 10.692 TB HGST HUH721212AL5200 NS018DGXYLZH If a drive is in a foreign state, it shows F in the State column. If a drive is in a bad state, it shows B in the State column.
Page 65
PowerVault (Dell MD1400) Setup Guide -d DRVS, --drives=DRVS Number of drives for the concentrator service on hybrid or for the meta on logdecoder. (3-11) [3] -r REST, --rest=REST Configured REST port if different from default -u USER, --user=USER The user name for logging into the service. [admin] -w PSWD, --password=PSWD Password for user or enter 'ask' to be prompted.
Page 66
PowerVault (Dell MD1400) Setup Guide c. Ensure that there is an entry for each PowerVault added. An individual packetdb# , and is created for each PowerVault, where # is the number metadb# sessiondb# associated with the PowerVault in the order it was added. For the first PowerVault that you add, is blank and does not have a number appended.
PowerVault (Dell MD1400) Setup Guide Restart the Services You must restart the Log Hybrid or Network Hybrid services so that the services can recognize the new volumes. Note: If this physical host has a Log Decoder or (Network) Decoder service which is currently capturing, it is a best practice to stop capture before restarting these services (to ensure database writes are completed).