Skip to main content
Solved

Universal Command Center


Forum|alt.badge.img+3

Is it possible to configure Universal Command Center when commcells are configured to use RADIUS and external two factor authentication?  It appears to me this is not supported.

Best answer by Mike Struening RETIRED

Sharing case resolution:

Since the Commvault Domain is configured to use Radius for all logins I CANNOT login with a user who doesn’t use MFA.

View original
Did this answer your question?

19 replies

Aplynx
Vaulter
Forum|alt.badge.img+13
  • Vaulter
  • 291 replies
  • December 8, 2021

If this isn’t supported, you could always open a ticket with Support for a Customer Modification Request (CMR) for future consideration.


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • December 8, 2021

Ok, thanks.  I can do that, I just wondered if anyone has configured this when MFA is involved.


Mike Struening
Vaulter
Forum|alt.badge.img+23

@Barefoot1999 , would you mind sharing the case number (and CMR number if you get one)?

I want to be sure to document these details.

Thanks!


dude
Byte
Forum|alt.badge.img+15
  • Byte
  • 287 replies
  • December 8, 2021
Barefoot1999 wrote:

Is it possible to configure Universal Command Center when commcells are configured to use RADIUS and external two factor authentication?  It appears to me this is not supported.

This seems to be very environment specific and I find it hard to find a proper documentation available. Have you tested or had any issues where the error can be shared?


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • December 8, 2021

dude,

I concur the documentation is EXTREMELY limited.  I have been unable to even get it configured at all.  When I attempt to edit UCC there is nothing I can add to configure.  Additionally, it’s been suggested to disable MFA to configure and then enable MFA.  I can’t disable MFA.  I am not using Commvault’s method for MFA, I’m using an external MFA with RADIUS domain.  I suppose my question here might be premature since I’ve not been able to even come close to getting UCC configured for two commcells.


dude
Byte
Forum|alt.badge.img+15
  • Byte
  • 287 replies
  • December 8, 2021

I was assuming you were using Commvault`s MFA configuration and that you were seeing errors. But in this case and considering that you are using external options for MFA, I would configure the UCC first and see what happens after that.

 

You probably have looked the doc: https://documentation.commvault.com/11.25/essential/134694_defining_universal_command_centers.html

But wont hurt to share. 

Personally, I have not configured that, but would be interested in what issues you are facing while implementing that as I do have multiple environments and could potentially implement that in the future.

 

Let us know.


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • December 8, 2021

Yes, I would love to share when I successfully set up the two commcells but the link you provided (yes, I had already seen it and was attempting to configure with it) has step 4 is blank for me.  There is nothing in the dropdown for me to configure nor can I input anything in the dropdown to add a UCC.


dude
Byte
Forum|alt.badge.img+15
  • Byte
  • 287 replies
  • December 8, 2021

You are running FR 22 or newer correct?

Notice this on the page: 

Note: Service CommCells must have Data Protection Suite software Feature Release 22 and later versions installed.

Interesting enough, Im running FR24 and I do not see the Univeral CommCell option either. You would probably want to open an INC for that and use that and update us. 


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • December 8, 2021

You are correct, I’m running FR24 for both my commcells.  Okay, so I’m not alone in the blank option for UCC.  I’ll open a case and let you know!


Mike Struening
Vaulter
Forum|alt.badge.img+23

Sharing the case resolution for anyone following:

Question on configuring the Universal Command Center.
Customer has 2 commcells and wants to be able to view either from Command Center.

Solution:

Other commcell has to be registered in the Java GUI so that the Universal Command Center can be configured.


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • January 24, 2022

Mike, thank you for the response, however, I still do not understand how you can register the second commcell in the java guy so that the Universal Command Center can be configured.  The documentation just states:

  1. From the navigation pane, go to Manage > CommCell.

    The CommCell environment page appears.

  2. At the bottom of the page, in the Universal Command Centers section, click Edit.

    The Edit universal Command Centers dialog box appears.

  3. From the Command Centers list, select the Command Center computers that you want to use as universal Command Center computers.

  4. Click Save.

 

There is NO computers to select to use as universal command center computers.  Where does one configure that?

Thanks again.

 


Mike Struening
Vaulter
Forum|alt.badge.img+23

@Barefoot1999 , should we reactivate the case then if it’s not working as expected?  It sounds like it still isn’t working right.  I just checked and the case was closed over 48 hours ago, though you can create a new case and reference this one.


Forum|alt.badge.img+3
  • Author
  • Byte
  • 16 replies
  • February 22, 2022

Mike,

A few weeks back I opened a new case for Universal Command Center.  It went through tier1 and tier2 support and on to development.  It seems support has no idea about this feature.  Here is the new case 220203-449.  Development requested I update my Commcell with a qoperation script to add a “PackageStateForID” to the environment.  This command provided (along with a servername in the script) was my private metrics server.  This metrics server now appears in the drop down selection for Universal Command Center.  I responded to the case notifying this change as well as asking them is my private metrics server really supposed to be the one to add here?  I guess there are just no other companies attempting to make this feature work.  Documentation is extremely thin and support is very unfamiliar with how UCC should work.


Mike Struening
Vaulter
Forum|alt.badge.img+23

@Barefoot1999 , appreciate the case share and the concern.  I know your case owner quite well, so I’ll work with him on making sure we get documentation MRs added once we have an actual solution.


Mike Struening
Vaulter
Forum|alt.badge.img+23

Sharing case resolution.

Finding Details:

Question on configuring the Universal Command Center.
Customer has 2 commcells and wants to be able to view either from Command Center.

Solution:

Other commcell has to be registered in the Java GUI so that the Universal Command Center can be configured.


Forum|alt.badge.img+3

Mike,

I appreciate the follow-up.  Unfortunately, this feature is useless to me.  You must configure UCC without MFA.  I use Radius for MFA and cannot disable it to login with an account to configure.  Development has agreed re-write documentation to explain how UCC is configured.  I’m surprised development isn’t interested in configuring UCC with MFA since this is a security risk.  Perhaps a CMR for this?  I don’t know.


Mike Struening
Vaulter
Forum|alt.badge.img+23

@Barefoot1999 , thanks for the follow up!  Let me reach out to the case owner and their team to see if they can push a CMR.

I’ll unmark the answer in the meantime!


Mike Struening
Vaulter
Forum|alt.badge.img+23

Sharing case resolution:

Since the Commvault Domain is configured to use Radius for all logins I CANNOT login with a user who doesn’t use MFA.


Scott Moseman
Vaulter
Forum|alt.badge.img+18

The local admin account was deleted from these CommServes?

Assuming that’s true, if the RADIUS host name, port or secret changes, how does someone login to update the configuration for the domain?

Thanks,
Scott
 


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings