Issue:
Users have a Network Management Card (NMC) and do not wish to expose it to the internet, or for other reasons must keep devices on the same network as their NMC from accessing the internet

Product:
Network Management Card 3 devices (AP9640/AP9641/AP9643)
Devices that use an embedded NMC3, including but not limited to certain model rack PDU/ATS manufactured after specific dates 2022
Devices that support v3.x+ NMC3 firmware, and can use the Secure NMC System Tool to upgrade

Solution:

NOTE: Admin rights are required to activate a Secure NMC Subscription offline.

Windows:

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.
2. Launch the SNS Tool as normal and add your NMCs into the Tool.
3. Once all the NMCs have been added, close the Tool. In a command prompt window, navigate to the Tool’s installation directory (“C:\Program Files\Schneider Electric\SecureNMCSystemTool”) containing SecureNMCSystemTool.exe.
4. Run the command SecureNMCSystemTool.exe --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory (“C:\Users\<user>\AppData\Local\Schneider Electric\SecureNMCSystemTool\”) containing a list of MAC Addresses and Serial Numbers of your NMCs.

NOTE: See SecureNMCSystemTool.exe --help for more info on the commands and short options.

5. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “C:\Users\<user>\AppData\Local\Schneider Electric\SecureNMCSystemTool\”
6. From the Tool’s installation directory, run the command SecureNMCSystemTool.exe --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.
7. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI. If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.
8. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory
9. From the Tool’s installation directory, run the command SecureNMCSystemTool.exe --importlicensingfiles. This will import your licensing files to the SNS Tool.  Now you can launch the SNS Tool as normal and proceed with the firmware update process.

Linux:

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.
2. Launch the SNS Tool as normal and add your NMCs into the Tool.
3. Once all the NMCs have been added, close the Tool, and open a terminal window.
4. Run the command securenmcsystemtool --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/” containing a list of MAC Addresses and Serial Numbers of your NMCs.

NOTE: See securenmcsystemtool --help for more info on the commands and short options.

5. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/”
6. Open a terminal and run the command securenmcsystemtool  --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.
7. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI.  If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.
8. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/”
9. From a terminal, run the command securenmcsystemtool --importlicensingfiles. This will import your licensing files to the SNS Tool. Now you can launch the SNS Tool as normal and proceed with the firmware update process.

macOS:

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.
2. Launch the SNS Tool as normal and add your NMCs into the Tool.
3. Once all the NMCs have been added, close the Tool, and navigate to the Secure NMC System Tool application file (.app).
   1. Control+click on the .app file and click Show Package Contents, then navigate to the Contents folder.

2. Control+click on macOS and select New Terminal at Folder.

4. From this terminal, you can run the command ./SecureNMCSystemTool --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory “/Users/<user>/Library/Application Support/Schneider Electric/SecureNMCSystemTool/” containing a list of MAC Addresses and Serial Numbers of your NMCs.

NOTE: See ./SecureNMCSystemTool --help for more info on the commands and short options.

5. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “/Users/<user>/Library/Application Support/Schneider Electric/SecureNMCSystemTool/”

6. Open a terminal and run the command ./SecureNMCSystemTool --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.
7. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI.  If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.
8. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory
9. Follow the instructions in step 3 above to open a new terminal, then run ./SecureNMCSystemTool --importlicensingfiles. This will import your licensing files to the SNS Tool. Now you can launch the SNS Tool as normal and proceed with the firmware update process.

You can interchange what operating system is online / offline by following the associated steps. For example, you can have an offline Windows operating system and then use an online Linux system to process the CSV file and generate the LicenseFiles.zip file.

NOTE: The Secure NMC System tool will require access to the following domains using port 443 to activate a license:

https://schneider-electric.flexnetoperations.com

https://dsc-apps-prod.auth.eu-west-1.amazoncognito.com

https://www.se.com

Secure NMC System Tool – Windows Offline License Activation v2.0.x

게시 대상: 슈나이더 일렉트릭 Korea