Product documentation
Citrix DaaS
View PDF

Connection to HPE Moonshot

April 16, 2024
Contributed by: 
C

Create and manage connections and resources describes the wizards that create a connection. The following information covers details specific to HPE Moonshot.

Note:

Before creating a connection to HPE Moonshot, you need to first finish setting up your HPE account. See HPE Moonshot virtualization environments.

Create a connection

You can create a connection to HPE Moonshot using the:

  • Full Configuration interface
  • PowerShell commands

Create a connection using the Full Configuration interface

  1. In the Add Connection and Resources page, select the HPE Moonshot as the connection type.
  2. Enter the connection address of your Moonshot iLO Chassis Manager. You can use an IP address, host name, or FQDN for the address.
  3. Enter your chassis administrative credentials and a friendly connection name.

Connection setup stops when either of the situations occurs:

  • DaaS receives a public CA-signed certificate with errors: An error message appears. Follow the on-screen instructions to fix the issue. Otherwise, you can’t proceed with connection creation.
  • DaaS receives a private CA-signed certificate. A warning page appears. Compare the received thumbprint with the server’s for the certificate validity. If it’s valid, select Trust certificate and click OK to proceed with connection creation. DaaS will then trust the certificate and store the thumbprint for future validation.

Create a connection using PowerShell commands

When you create a connection using PowerShell command, provide the following information:

  • IP: HPE Server IP Address
  • Username: HPE username
  • Password: HPE password

For example:

New-Item -ConnectionType "Custom" -HypervisorAddress $IP -Metadata @{"Citrix_Orchestration_Hypervisor_Secret_Allow_Edit"="false"} -Path @("XDHyp:\Connections\$connectionName") -Persist -PluginId "HPMoonshotFactory" -Scope @() -SecurePassword $Password -UserName $UserName -sslthumbprint $SslThumbprint New-BrokerHypervisorConnection -HypHypervisorConnectionUid $HypervisorConnectionID
<!--NeedCopy-->

Note:

The sslthumbprint parameter is required for only Private CA-signed certificates.

Certificate and thumbprint validation

For creating a successful connection to HPE Moonshot, the certificate must not have errors and the thumbprint must have a correct value. Following are the use cases related to the certificate and thumbprint validation:

  • Public CA-signed certificate has errors. The connection is not created successfully. See the error details and resolve the issue.
  • Public CA-signed certificate without errors. The connection is created successfully, and the SslThumbprints value is Null.
  • Private CA-signed certificate without errors and a sslthumbprint value. The connection is created successfully with a correct SslThumbprints value.
  • Private CA-signed Certificate with an incorrect thumbprint value. The connection is not created successfully.
  • Private CA-signed Certificate without errors. The connection is created successfully. The SSlThumbprints is Null when creating the connection. The SSlThumbprints value is updated to a value by the site service.

Manage connections

This section details how you can manage connections:

  • Fix certificate issues using Full Configuration interface
  • Update thumbprint value using PowerShell command

Fix certificate issues

DaaS blocks an HPE Moonshot connection when certificate issues arise, preventing you from delivering and managing workloads on associated HPE Moonshot nodes. You’ll see an error icon next to the connection in the Host connections list. See the following table for specific issues and solutions.

Issue Solution
A certificate error occurs to the public CA-signed certificate Click the connection and select the Troubleshoot tab. View the error details and resolve the issue.
The received certificate is private CA-signed or expired. Edit the host connection to update the certificate thumbprint. Details steps
 
  1. Select the connection and click Edit Connection.
 
  1. On the Connection Properties page, click Edit settings.
 
  1. Enter the password to connect to the HPE Moonshot chassis, and then click Save.
 
  1. On the Warning page that appears, compare the received thumbprint with the server’s for certificate validity.
 
  1. If they are the same, select Trust certificate and then click OK.

Update thumbprint value

After creating the connection, you can update the thumbprint value of a connection using the Set-Item PowerShell command. For example, run the following commands:

  1. Get the connection details of a connection. For example:

    Get-Item -LiteralPath xdhyp:\connections\SinMoonshot-101
<!--NeedCopy-->

  2. Update the thumbprint value. For example:

    Set-Item -LiteralPath xdhyp:\connections\SinMoonshot-101 -Username Administrator -SslThumbprint xxxxxxxxxxx12AD048480631BB7AB10D69xxxxx
<!--NeedCopy-->

  3. Check the updated thumbprint value. For example:

    Get-Item -LiteralPath xdhyp:\connections\SinMoonshot-101
<!--NeedCopy-->

Note:

The update fails if you provide an incorrect thumbprint value in the Set-Item command.

Where to go next

More information

Connection to HPE Moonshot
April 16, 2024
Contributed by: 
C
April 16, 2024
Contributed by: 
C

In this article

Site feedback | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.