Title
Replacing MegaRAID Storage Manager (MSM) With LSI Storage Authority (LSA) – Windows
Description
MSM has been found to have some exposure to CVE-2021-44228, the Apache Log4j remote code execution vulnerability, see statement from Broadcom Log4j2 Exposure (CVE-2021-44228). As a result you may be able to replace MSM with LSA using the following instructions.
Product
- MegaRAID 92xx Series RAID Controllers
- MegaRAID 93xx Series RAID Controllers
- Windows 10 (x64)
- Windows Server 2016 (x64)
- Windows Server 2019 (x64
Solution
Identify the controller using Knowledge Base Article #7244 “How to Identify the MegaRAID Controller Model on an exacqVision Server”
92xx series RAID Controllers
Machines with 92xx series RAID controllers have the following options.
- Uninstall MSM
- Manage the array using the BIOS available on boot
- Manage the array using storcli
- Update MSM
93xx series RAID Controllers
For Machines with 93xx series RAID controllers MSM should be replaced with LSA.
Objectives
- Uninstall MSM
- Install LSA (See KB #7255 “LSI Storage Authority (LSA) Installation Screenshots – Windows”)
- Copy storcli.exe and storcli64.exe
- Restart exacqVision server
- Verify LSA can be accessed and login is working
- Verify Storage information in exacqVision client is correct
Uninstalling MSM
- Press the Windows key on keyboard to open the Start menu
- Locate and select MegaRAID Storage Manager
- Expand and select Uninstall
- Confirm that you want to remove MegaRAID Storage Manager
- Right click on MegaRAID Manager icon on desktop and click “Delete”
Install LSI Storage Authority (LSA)
- Download LSA from https://docs.broadcom.com/docs/007.019.006.000_LSA_Windows.zip
- LSI website will require reading a download agreement, (scrolling down to the bottom of the agreement), clicking an acknowledgement checkbox, then click “I Agree” button
- Once downloaded, unzip the file and open the resulting folder
- You may see another zipped file. If so unzip that and open the resulting folder
- Double click the setup.exe to begin the install process.
- You will see a request to install OpenSLP, click Next
- Check or tick “I accept the terms of the license agreement” and click Next
- Choose Typical installation button
- Click Install
- Click Finish
- At this time you may be prompted to install one or two other VC++ Redistributables. Click Next, OK, or Install if so
- The InstallShield Wizard for LSI Storage Authority will appear. Click Next
- Select “I accept the terms of the license agreement” and click Next
- Customer Information, leave as default (Windows User and blank), click Next
- Destination Folder, leave default and click Next
- Select Standalone, click Next
- Port configuration, leave default values of 2463 and 9000 for Webserver and LSA Server respectively. Click Next
- Congifure Range of Events to Generate Alert Notifications, tick Since Last Shutdown
- Ready to Install, click Install
- When InstallShield Wizard is complete, click Finish
- LSA is now installed
Copy storcli.exe and storcli64.exe
- From either C:\exacqSoftware\storcli\ or C:\exacqscripts\storcli\
- To: C:\Program Files (x86)\MegaRAID Storage Manager\
Restart the exacqVision Server Service
- Press Windows Key+R, type services.msc in the run box and press enter
- Find exacqVision Server and select restart
Verify LSA Access
- Double click the Launch LSA Icon on the desktop
- Enter username and password Note: Windows credentials should be used and select Sign In
- You should now be on the LSI Storage Authority landing page
Verify Storage information in the exacqVision Client
- Open exacqVision Client
- Navigate to Storage (Configuration > YOUR SERVER > Storage
- Check Drive Configuration under the Drive Tab
- Check the Storage Hardware under the Hardware Tab