Manage System Settings

Access to ActiveScale SM is limited to the predefined system administrator account, admin. You can attach additional users to this account through active directory (AD). For details, see Manage System Settings.

To make S3 call against the ActiveScale system using its FQDN as host, an S3 domain must be configured. The S3 domain name should be the FQDN that was assigned to the system for S3 requests. It is recommended to have the “s3” prefix for the FQDN, for example s3.activescale-system.your-domain where activescale-system is the identifier for the system and your-domain is the domain of the network.

Note: Setting an S3 domain is optional when all S3 requests use IP address in the host header

In order to make IAM calls against ActiveScale an IAM domain must be configured. It is not possible to make IAM calls using IP addresses in the host field. The IAM domain name should be the FQDN that was assigned to the ActiveScale system for IAM requests. It is recommended to have the “iam” prefix for the FQDN, for example iam.activescale-system.your-domain where activescale-system is the identifier for the system and your-domain is the domain of the network.

To configure an S3 or IAM domain:

1. Click Configuration > System.

2. Scroll down to the Object Storage section.

3. Click Add Domain for either S3 or IAM.

   Figure 2: Configuration > System > Object Storage > Add S3 Domain

   

   Figure 3: Configuration > System > Object Storage > Add IAM Domain

   

4. Type the FQDN of the new domain/subdomain.

   Ensure that no sub-domain of any domain already in the list is added. Quantum recommends prefixing all S3 domains with "s3." and all IAM domains with “iam.” in order to avoid issues.

   For example, if the list contains "s3.example.com", then its sub-domain "other.s3.example.com" should not be added, but "s3.other.example.com" or "other-s3.example.com" are ok to add).

   This is the only way for the system to correctly decode the bucket name. Quantum recommends prefixing all domains with "s3." in order to avoid issues.

   For example, "s3.example.com", "s3.other.example.com", and "s3.and.an.other.example.com" can all be added together; If "other.s3.example.com" is to be configured, then "s3.example.com" and "example.com" are illegal.

5. In the Password field, type the password for admin.

1. Click Configuration > User & Group.

   Figure 4: Configuration > User & Group> User Preferences

   

2. Select the User Preferences section.

3. Select a theme.

1. Click Configuration > System.

2. Select the Network section.

3. On multi-site systems, click the icon for the site whose DNS server you wish to change.

4. Type an IP address in the DNS Server field. Entering IPv6 addresses is not supported. You can define up to three DNS servers per site.

   Figure 5: Configuration > System > Network > DNS Server

   

5. Click Save.

After changing DNS servers, you need to log out of ActiveScale SM and then log back in.

1. Click Configuration > System.

2. Select the Notifications section.

   Figure 6: Configuration > System > Notifications > SMTP

   

3. To enable/disable the sending of a daily email digest of events and decommissioned disks, select/clear the Send digest email check box.

   Note: When send digest email is enabled, the software will automatically send email to techsup@quantum.com in addition to customer email addresses. Currently, emails are not acted upon by the Quantum support RAS system. If you want RAS tickets to be automatically opened when a critical event occurs, techsup@quantum.com needs to be added by the customer to the recipient list (see Change SMTP Settings).

   

1. Click Configuration > System.

2. Select the Notifications tab.

3. Scroll down to the SMTP section.

4. (On multi-site deployments) Click the icon for the site whose SMTP settings you wish to change.

   Figure 7: Configuration > System > Notifications > SMTP

   

5. Update the fields under the SMTP heading.

   Note: On multi-site deployments, be sure to select each site and then type the Recipient email for all sites, even it is the same recipient email address. Failure to specify the recipient email in this manner may result in event notifications not getting delivered properly.

6. Click Save.

7. Click Test.

   Note: Always click Save before clicking Test.

8. If the system reports that the email test failed, change your SMTP server settings and click Test again.

Contact Quantum Support.

The System Nodes are the reference for date and time in the ActiveScale system. All nodes synchronize their date and time with these nodes.

System Nodes temporarily set the date and time at installation time. But once the NTP service is set up during the installation, System Nodes synchronize with the NTP server you specified at bringup. You must ensure that the System Nodes have an active link with an NTP server.

1. Click Configuration > System.

2. Select the Notifications section.

3. (On multi-site systems) Click the icon for the site whose NTP server you wish to change.

   Figure 8: Configuration > System > Network > NTP Server

   

4. Type an IP address or fully qualified domain name in the NTP server (IP or FQDN) field. You can define up to three NTP servers per site.

   Caution: If you use different NTP servers for different sites, these NTP servers must be exactly in sync.

5. Click Save.

After changing DNS servers, you need to log out of ActiveScale SM and then log back in.

The only modifiable networks are Public Network 1 and Public Network 2.

1. Click Configuration > System.

2. Select the Network section.

   Figure 9: Configuration > System > Network > Network Configuration

   

3. On multi-site systems, select the site whose network settings you want to modify.

   Figure 10: Configuration > System > Network > Network Configuration > Select a site

   

4. Under the Network Configuration section, click the icon in the Actions column of the network you want to modify.

   Note: If the public networks are bonded, there is only one icon in the Actions column

   Figure 11: Configuration > System > Network > Network Configuration > Edit

   

    

   The Update Network Configuration wizard starts.

5. Change the settings displayed in step 1 of the wizard (network, net mask, gateway), and click Next.

   Note: You can only define one gateway. For example, if you define a gateway on Public Network 2, the system removes the gateway on Public Network 1.

   Figure 12: Configuration > System > Network > Network Configuration > Edit Network

   

6. Change the settings displayed in step 2 of the wizard (IP addresses of nodes connected to the chosen network), and click Next.

   Figure 13: Configuration > System > Network > Network Configuration > Edit Systems

   

7. Review your changes. If you need to correct anything, click Back. Otherwise, click Next.

   Figure 14: Configuration > System > Network > Network Configuration > Review

   

8. To apply the changes, click Proceed.

   Figure 15: Configuration > System > Network > Network Configuration > Apply

   

   The wizard notifies you that the system has started an Update Network Configuration job.

9. Navigate to the Jobs page to monitor the job’s progress.

   Figure 16: Configuration > System > Network > Network Configuration > Edit 1

   

10. When the job is 100% complete and successful, navigate back to Configuration > System > Network to make sure your new settings are displayed.

    Note: If the Update Network Configuration job fails, contact support to revert the network settings back to their previous values.

Note: These steps are only for setting up or changing your replication pipeline; to configure a certain bucket for replication after the pipeline has been set up, refer to ActiveScale View Manage Buckets. For more information about asynchronous replication, refer to Enabling Asynchronous Replication.

1. Click Configuration > Replication.

   Figure 17: Configuration > Replication

   

2. Enter your settings for source and destination systems.

   1. Source Settings:

      Figure 18: Configuration > Replication > Source Settings

      

   2. Destination Settings:

      Figure 19: Configuration > Replication > Destination Settings

      

3. (Optional) Set the public SHA-1 fingerprint of the destination’s SSL certificate:

   Figure 20: Configuration > Replication > SSL Certificate

   

4. Changing the Notification Settings:

   You can configure the system such that it starts sending events when the replication queue has a high backlog. This can be based on the number of objects in this queue or the total size of these objects. When one of these thresholds is exceeded, you will receive events of the type REPLICATION_THRESHOLD_EXCEEDED_COUNT or REPLICATION_THRESHOLD_EXCEEDED_SIZE .

   Set these thresholds to a value greater than 0. The exact value depends on how often you want the system to raise this event. Default: 10,000 objects and 10,000 MB.

   Figure 21: Configuration > Replication > Notification Settings

   

5. Besides the State label, click Enabled or Paused.

   To start replication, click Enabled. You can only pause replication if it has been enabled once.

   Figure 22: Configuration > Replication > Enable Replication

   

6. Click Apply at the bottom of the screen.

   Figure 23: Configuration > Replication > Apply Replication

   

The session timeout value applies to ActiveScale SM sessions as well as and management API authentication tokens.

1. Click Configuration > User & Group.

2. Select the User Preferences section.

3. In the Session Timeout field, enter a new timeout value in minutes. Valid values: 1-60 minutes.

4. Click Apply.

1. Click Configuration > User & Group.

2. Select the Account section.

   Figure 24: Configuration > User & Group > Account

   

3. Scroll down to Username admin.

4. Enter changes, and fill in the Current Password field.

5. Click Save.

The system sends a confirmation email to admin.

The Quantum.com/support account allows you to provide Quantum Support with remote access to your system. Its password is only a partial password; in other words, it cannot be used alone to access the system. When you want Quantum Support to access your system, you give them this passcode, and we combine it with a secret code to form the complete password to access your system.

1. Click Configuration > User & Group.

2. Select the Account section.

3. Scroll down to Username/Support Passcode.

4. Enter changes, and fill in the Support Passcode field.

5. Click Save.

The system sends a confirmation email to admin.

This feature is not currently available.

This procedure collects all system logs on all nodes, archives the logs (rotates and compresses them), and pushes them into the system bucket. Use this procedure when you want to make sure the system bucket has the newest system logs.

Note: These instructions are for collecting system logs only. Please see the following instructions for getting audit logs or other items in the system bucket:

• Download Audit Logs

• Get Reports

1. Click Configuration> System.

2. In the Logs section, beside Archive current logs, click Start.

   Figure 25: Configuration > System > Logs

   

3. Check the progress of the log collection job in the Jobs pane. This job takes up to 20 minutes.

If an active directory (AD) identity provider is configured, ActiveScale SM authenticates users against AD and grants users with valid credentials "admin" access to the system. Users authenticated through AD have the same privileges as the ActiveScale OSadmin user.

1. Click Configuration > User & Group > AD.

   Figure 26: Configuration > User & Group> AD

   

2. Click Add Server. The Create New AD Server dialog displays.

   Figure 27: Create New AD server

   

3. Add an AD server by entering the following information:

   • Server FQDN: Enter the fully qualified domain name (FQDN) of the AD server.

   • Port: 389 (Default). User can change the value based on the configuration.

   • Base DN: Enter the Base DN, the base point from where the server will search for User and/or Group: e.g., dc=example,dc=com

     Note: With the ‘Base DN’ above, the complete AD directory can potentially authenticate to ActiveScale. However, as long as the group they are member of is not mapped in ActiveScale they won't be able to login. Also, it would be an extra security layer of defense if the searches can be limited.  This will also be beneficial for the performance on large directories.

4. The following 'User Base DN' and 'Group Base DN' can be used to limit the searches to part of AD tree:

   • User Search Base: Base DN under which to search for users: e.g., ou=us,dc=example,dc=com.

   • Group Search Base: Base DN under which to search for groups: e.g., ou=us,dc=example,dc=com

   • CA Certificate: (If enabled) Enter the root certificate and issuing CA (chain) of the remote identity server in the CA Certificate field

   • Manager DN: The Manager DN is the user on the AD server permitted to search the LDAP directory within the defined search base. It can be any valid user DN if AD allows this user to query data. A Manager DN typically looks like the below example: cn=admin,cn=Users,dc=example,dc=com

   • Manager Password: Enter the Manager password

     Table 1: AD Terminology

     AD	Active Directory. Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks.
     FQDN	A fully qualified domain name (FQDN) is the complete domain name for a specific computer, or host, on the internet.
     DN	The directory name (DN) is the name that uniquely identifies an entry in the directory.
     OU	An organizational unit (OU) is a subdivision within an Active Directory into which you can place users, groups, computers, and other organizational units.
     CN	The User objects in the diagram have designators that start with Common Name (CN). The CN designator applies to all but a few object types.
     DC	A domain controller (DC) is a server that responds to security authentication requests within a Windows Server domain.

5. Click Validate.

6. ActiveScale OS attempts to log in to the AD server with the credentials provided in the dialog. If it is successful, the AD server is listed in the Servers table.

Assign Roles to the AD Group

1. Click Configuration > User & Group > AD.

2. Click on Group-Role assignment button, the Import AD Group window will pop up.

   Figure 28: Import AD Group.

   

3. In the search bar, provide the name of an AD group with whom user wants to associate role/roles.

   In the example below, user selects AD group int_test_admin & clicks on next button:

   Figure 29: IMport AD Group - Select Group

   

4. After clicking the Next button, the user must assign system admin role to the AD group, which is checked by default.

   In the example below, the user has assigned System Admin role to AD group int_test_Administrator

   Figure 30: Import AD Group - System Admin

   

5. After the role/roles are selected, click on Save and close button to save the changes.ActiveScale OS adds the AD group to Groups table. Members of the added group now have administrator access to ActiveScale SM.

Once saved, the mapping will be displayed on the AD screen.

Figure 31: Import AD Group - Mapping

Note: The user can assign System admin role to different AD group/groups in the same Import AD Group window by clicking on Save and assign more button

When SNMP is enabled, ActiveScale will do the following:

1. Send event notifications to a targeted server as an SNMP trap.

2. Allow clients to poll ActiveScale for status and performance metrics using the ActiveScale MIB.

For a list of traps , see Events and Recommended Actions.

1. Click Configuration > System.

2. Select the Notifications tab.

3. Scroll down to the SNMP section.

4. (On multi-site systems) Click the icon for the site whose SNMP settings you wish to change.

   Figure 32: Configuration > System > Notifications > SNMP

   

5. Select the Enable SNMP traps check box.

6. Update the fields under the SNMP heading:

   • SNMP trap community string: The community string ActiveScale uses to authorize SNMP traps sent to the configured SNMP server.

   • SNMP trap server (IP or FQDN): The IP address or fully qualified domain name of your SNMP server.

   • SNMP trap server port number: The receiving port of your SNMP server.

   • SNMP poll community string: Optional. The community string by which SNMP clients authorize requests.

   • SNMP poll subnet: Optional. The subnets through which SNMP clients can poll ActiveScale. SNMP requests by clients on other networks will be refused.

   • Specify subnets in CIDR format. For example, 172.16.110.0/24. The default entry enables access to SNMP polling services for clients that are on ActiveScale’s configured public networks. Up to 4 additional entries can be specified for SNMP clients on other networks.

7. Click Save.

8. Download the SNMP management information base (MIB) from Configuration > System > Download and upload it to your SNMP server.

Contact Quantum Support.

You cannot delete the two predefined system administrator accounts, admin and support.

1. Click Configuration > System.

2. Scroll down to the Object Storage section.

3. Click the Delete icon under Actions.

Note: Audit logs are sometimes empty.

1. Click Configuration > System.

2. Select the Logs section.

3. Beside Audit Logs, click Download.

   Figure 33: Configuration > System > Logs > Audit Logs

   

Not available.

1. Click Configuration > System.

2. Select the Download section.

   Figure 34: Configuration > System > Download > SNMP MIB

   

3. Beside SNMP MiB, click Download.

1. Click Configuration > System.

2. Scroll down to the Download section.

   Figure 35: Configuration > System > Download > CLI

   

3. To the right of the CLI label, click Download.

4. Save ascli.zip on your 64-bit x86 Linux machine (Ubuntu(16.04)/Debian or CentOs(7)/RedHat) machine.

5. Unzip ascli.zip. on your machine.

6. Make ascli executable.

   chmod 755 ascli

When an application starts up, it opens/creates its logfile(s) and starts appending entries to it. Each entry is a single line timestamped with UTC time and usually of the format:

Whenever a new logfile is created, or an application is (re)started, the application writes its identity, process ID (pid), and interpreted configuration file content in its log file.

Every hour, a cron job named system_bucket_uploader runs on every node. It rotates active log files larger than 10MB, and archives non-active log files to the system bucket. Therefore, the log files in the system bucket do not represent a real-time view of the system.

For details on the contents of the system bucket, see Get System Bucket Information. For details on accessing the system bucket, see Grant Access to the System Bucket.

System logs may be requested by Quantum Support. To download them, follow these steps:

1. Click Configuration > System.

2. Select the Logs section.

   Figure 36: Configuration > System > Logs > System Logs

   

3. (Optional) To guarantee that you have all the latest log entries, force the collection of all system logs first:

   1. Beside Archive current logs, click Start.

   2. Wait for the log collection job to complete.

4. (Optional) Use the pull-down menus to select system logs for a site, subsystem, machine, and timeframe.

   Note: Specify dates and times in UTC format.

5. The component list varies based on the subsystem you select.

6. Wait while the system calculates the size of the downloadable bundle.

   Note: If your selection results in a huge number of log files, or if there are connectivity issues with the Column, the system might report that the downloadable bundle is empty or is smaller than it really is. If this happens, use the pull-down menus to select a smaller subset of logs and retry the download.

7. Wait while the system calculates the size of the downloadable bundle.

8. Click Continue or apply more filtering to reduce the size of the downloadable bundle.

   The default name of the log bundle is ActiveScale_Support_Logs_YYYYMMDD_Hhmmss.zip. Connectivity issues can result in a slightly different filename, All_SupportLog_YYYYMMDD_Hhmmss.zip.

Note: Cloud-Based Analytics (CBA) is available in ActiveScale Software 6.2 and above.

Quantum’s Cloud-Based Analytics (CBA) software is a cloud-based monitoring and management tool that enables administrators, Quantum support personnel, and authorized service providers to monitor system health remotely. All services can be leveraged together or a-la-carte to collect, analyze, diagnose and execute expert recommendations saving you time and effort in investigating your system’s issue.

CBA is supported across multiple Quantum products, allowing you to monitor and manage your Quantum products in one central location.

Request a New Cloud-Based Analytics (CBA) Account

If you do not already have a CBA account, request an account using the steps below:

1. Go to the Quantum CBA portal at https://insight.quantum.com.

2. Click the Request Site Access link:

   Figure 37: CBA Request Site Access

   

3. Enter your First Name, Last Name, Email Address, Company Name, Product Family and Serial Number for your ActiveScale system.

   Figure 38: Enter CBA Information

   

   Click the check box next to the text that states I'm not a robot and click Apply.

4. Quantum Cloud-Based Analytics will send an email with a link to verify your email address. The link in this email will allow you to set your own password for your CBA account.

Enable Cloud-Based Analytics (CBA)

1. Click on Configuration > Cloud Analytics > Cloud-Based Analytics.

   Figure 39: Configuration > Cloud Analytics > Cloud-Based Analytics

   

2. Enable the main Cloud-Based Analytics (CBA) toggle.

3. Select which features you want to enable for CBA: Metrics and log upload and/or Remote access.

4. (Optional) Enter the Proxy Settings if you’re using an SSL proxy to connect to the CBA server:

   1. Enter Proxy Server Name and Port Number for that proxy server.

   2. Enter a Proxy Username & Proxy Password.

5. Click Save. When the changes were successfully changed, you’ll be notified at the top of the page:

   

6. In case of errors, use the Reset button, input your settings and try again.

Access Cloud-Based Analytics (CBA)

1. Browse to https://insight.quantum.com and log in with your email and the password you’ve created.

2. Verify that you can view the information for this ActiveScale system, by clicking on the Solutions tab on the CBA portal.

Note: If your solution includes more than one device (such as additional tape connectors and tape libraries) you can add them to your solution as well.

Disable Cloud-Based Analytics (CBA)

1. Click on Configuration > Cloud Analytics > Cloud-Based Analytics.

2. Disable either specific CBA features by using their respective feature toggles or disable CBA completely by disabling the main Cloud-Based Analytics (CBA) toggle.

The system can stream syslog elements to your remote server. On your remote server, you need an analytics tool that supports the RFC 5424 format to be compatible with the syslog stream.

1. Click Configuration > System.

2. Select the Notifications tab.

3. Scroll down to the Syslog section.

   Figure 40: Configuration > System > Notifications > Syslog Streaming

   

4. To disable syslog streaming, unselect the Enable syslog streaming check box.

5. To enable syslog streaming, select the Enable syslog streaming check box and enter the following information:

   • Syslog types: Click Edit, select the logs/metrics you want streamed, and click Save.

   • Remote server: Type the fully qualified domain name (FQDN) or IP address of the remote server.

   • Remote server port: Type the port number on which to receive the event stream on your remote server. This value must be between 0 and 65535, inclusive.

   • Protocol: Select a communication protocol for the event stream from the pull-down menu. Supported protocols are:

     • TCP with TLS

     • TCP

     • UDP

   • Certificate:

     • A CA certificate that’s self-signed by the server is required if you select TCP with TLS.

     • A client certificate and client key are required if you select the Requires client authentication check box.

     • Certificates must be in PEM format. (.crt or .pem)

6. Click Save.

   The system starts an asynchronous task to configure the connection to the remote server. The Save button is disabled until the configuration task completes.

7. Wait for a green banner at the top of Notifications tab to confirm success.

   When the configuration task completes successfully, ActiveScale SM displays the message Successfully updated Log Stream configuration in a green banner at the top of Notifications tab and starts streaming to your remote server.

For a quick summary of overall system health, look at the Resources tile on the Dashboard.

1. Verify all nodes are online.

2. Click Configuration > System.

3. In the General Info section, under Health Check, click Run.

   Figure 41: Configuration > System > General Info > Health Check

   

4. Check the status of the health check job in the Jobs pane.

5. If the health check job fails, look at the job’s details and follow the recommended actions.

   Figure 42: Jobs > Health Check > Failure > Details

   

You have the option to create NIC bonds at initial bringup, through the configuration wizard. For more information, see the ActiveScale P100/ActiveScale X100 Installation Guide.

1. Click Configuration > System.

2. Select the General Info section.

   Figure 43: Configuration > System > General Info > Location

   

3. Under Location, click the icon of the desired data center.

4. Click Edit.

1. Click Configuration > System.

2. Scroll down to the Object Storage section.

   Figure 44: Configuration > System > Object Storage

   

There are two ways to reset the password of the admin system administrator account. If you can no longer log in, follow the steps below to reset the admin password. If you can log in, follow the steps in Change the Password for Admin to reset the password.

1. On the ActiveScale SM login window, click Forgot password?

   • The system sends an email to admin’s email address containing a unique one-time recovery token. Restrictions:

     • This token can only be used once.

     • This token is valid for 12 hours.

     • This token can only be used on the system it is generated from.

     • Only the latest recovery token generated can be used to reset the password.

Note: Do not navigate away from this page until you receive the recovery token.

2. Copy the recovery token from the email you receive at this email address.

3. On the Forgot password? page, enter the email address of admin, paste the recovery token, and click Reset Password.

4. Type a new password.

Note: Passwords must be between 8 and 32 characters long and contain at least one uppercase, one lowercase, one number, and one non-alphanumeric character.

Contact Quantum Support to get an SFTP account set up.

This feature is not currently available.

1. Click Configuration > System.

2. Select the Notifications tab.

3. Scroll down to the SMTP section.

4. (On multi-site deployments) Click the icon for the site whose SMTP settings you wish to test.

5. Click Test.

To upgrade ActiveScale software and firmware, contact Quantum Customer Support:

To upload new security certificates, perform the following:

1. Click Configuration > System.

2. Select the Security tab.

   Figure 45: Configuration > System > Security

   

3. In the Certificates section, paste your valid PEM file into the GUI SSL or S3 SSL field.

   Your PEM file must contain (in this order):

   • A public SSL certificate

   • A private SSL key. This key must be unencrypted.

   • All necessary intermediate certificates all the way up to the intermediate or root certificates that are included in standard web browsers

4. Click Apply.

   A pop-up warns you that access to the system will be lost temporarily. Click Apply to confirm.

   Figure 46: Configuration > System > Security > Certificates: Confirmation

   

You need to know your system's deployment ID prior to contacting Quantum Support or starting a scale up/out procedure.

1. Click Configuration > System.

2. Select General Info, and scroll down to Deployment Id.

   Figure 47: Configuration > System > General Info > Deployment ID

   

1. Click Configuration > System.

2. Select the General Info tab.

3. Scroll down to Durability Policy.

   

ActiveScale SM displays the durability policies you selected at initial bring-up. If you did not enable the small file policy at initial bringup, Selected Small File Policy is set to Disabled.

1. Click Configuration > System.

2. Select the Network section.

3. Scroll down to Machine Configuration.

4. Expand a host name to see its Ethernet interfaces, network names, and IP addresses. Only IPv4 addresses are shown, even if IPv6 addresses are configured on the interface.

   Figure 48: Configuration > System > Network > Machine Configuration

   

1. Click Configuration > System.

2. Scroll down to the Object Storage section.

   Figure 49: Configuration > System > Object Storage

   

1. Click Configuration > System.

2. In the General Info section, scroll down to Location.

Note: In a multi-site ActiveScale P100 deployment you need to know each site's factory-assigned number (Site 1, Site 2, or Site 3) and customer-assigned address.

1. Click Configuration > System.

2. In the General Info section, scroll down to System.

   Figure 50: Configuration > System > General Info > Software Version

   

3. Check the field labeled Software Version.