Installing VPN Keys on a Qumulo Cluster

This section explains how to install VPN keys on your Qumulo cluster over a network. You can install the VPN keys by using the qq CLI from a machine on the same network as your cluster or from one of your nodes.

Prerequisites

Before you begin, make sure that you have done the following.

Obtain a .zip file with VPN keys from Qumulo Care
Whitelist the following domains in your firewall rules:
- ep.qumulo.com
- missionq.qumulo.com
- api.missionq.qumulo.com
- monitor.qumulo.com
- api.nexus.qumulo.com
Permit outbound HTTPS traffic on port 443

Note
If your firewall performs stateful packet inspection (also known as SPI or deep-packet inspection), you must allow OpenVPN (SSL VPN) explicitly, rather than only open port 443.

To Install VPN Keys from a Networked Machine

Copy the .zip file from Qumulo Care to a computer on the same network as your cluster, and decompress the file.
Install the qq CLI on the same computer. For more information, see QQ CLI: Get Started on Qumulo Care.
To log in to your cluster, use the qq CLI and specify your cluster’s IP address. For example:
```
qq --host 203.0.113.0 login
```
Note
Your user must have PRIVILEGE_SUPPORT_WRITE and PRIVILEGE_SUPPORT_READ.
To install the VPN keys on your cluster, specify your cluster’s IP address and the path to the directory that contains the VPN keys. For example:
```
qq --host 203.0.113.0 install_vpn_keys /my/path
```
To verify that the VPN keys installed correctly, use the get_vpn_keys command. For example:
```
qq --host 203.0.113.0 get_vpn_keys
```
Remove any local copies of the VPN key files.

To Install VPN Keys from a Node

Note
On macOS and Linux, you can use the scp and ssh tools. On Windows Server 2022, Windows Server 2019, and Windows 10 (build 1809 and higher), we recommend installing OpenSSH.

Copy the .zip file from Qumulo Care to a computer on the same network as your cluster, and decompress the file.
To copy the VPN key files to one of your nodes, use the scp command. For example:
```
scp /my-path/* admin@203.0.113.0:~/
```
To connect to the node to which you copied the VPN key files, use the ssh command. For example:
```
ssh admin@203.0.113.0
```
The qq CLI is available to the admin user. For example:
```
qq version
```
To install the VPN keys on your cluster, specify the path to the directory that contains the VPN keys. For example:
```
sudo qq install_vpn_keys /my/path/
```
To verify that the VPN keys installed correctly, use the get_vpn_keys command. For example:
```
sudo qq get_vpn_keys
```

To Register Cluster with Cloud-Based Monitoring

To retrieve your cluster ID, use the node_state_get command.
Send the output of the command to Qumulo Care.
Use the Web UI to enable Qumulo Care Remote Support.
Notify Qumulo Care when this process is complete.

Qumulo Care verifies your VPN functionality and then adds your cluster to Cloud-Based Monitoring.

Installing VPN Keys on a Qumulo Cluster

Prerequisites

To Install VPN Keys from a Networked Machine

To Install VPN Keys from a Node

To Register Cluster with Cloud-Based Monitoring

Related Topics