Command line tool for SEM FIPS edition (RHEL)

The SEM FIPS edition on Red Hat Enterprise Linux (RHEL) does not include the CMC console. Instead, use the semcli command-line tool on the RHEL host for SEM administrative tasks, and use standard RHEL tools for operating system tasks such as network configuration (nmcli or nmtui).

semcli is installed with the SEM Manager RPM. The /usr/bin/lem directory is added to the PATH through /etc/profile.d/semprofile.sh, so you can run semcli from any directory after you log in to the host.

semcli commands

To list the available commands, run semcli --help.

Command	Description
semcli --help	Lists the available commands.
semcli debugdump	Collects a diagnostics archive that you can send to SolarWinds Support. The resulting output is a dated log file in the /tmp directory.
semcli exportcert	Exports the SEM CA certificate. The command prints the certificate and the message Please save printed CA Certificate as a .crt file. Copy the printed certificate and save it as a .crt file.
semcli exportcertrequest	Generates and exports a certificate signing request (CSR). The command prints the CSR and the message Please save printed Certificate Signing Request as a .csr file, have it signed by your CA, then use 'importcert' command. Save the printed CSR as a .csr file, have it signed by your certificate authority, and then run semcli importcert. Include a Subject Alternative Name (SAN) in the certificate.
semcli importcert	Imports a CA-signed certificate. After the import, the command prints the certificate details.
semcli confselfsignedcert	Configures SEM to use a self-signed certificate.
semcli resetadmin	Resets the SEM admin account. When prompted, enter the support key that SolarWinds Support provides from the decoder site. The command rejects an incorrect support password.

Manage the SEM Manager service

The virtual appliance aliases semrestart, semstop, semstart, manager.log, and mgrconfig.log are not available on RHEL. Use standard RHEL commands instead:

• To check the service status, run sudo systemctl status sem-manager --no-pager.

• To restart the service, run sudo systemctl restart sem-manager.

View log files

• Manager log: /usr/local/contego/manager.log

For example, run sudo tail -f /usr/local/contego/manager.log to follow the Manager log.

Update connectors offline

On the FIPS edition, you apply a connector update package by copying it to a folder on the RHEL host instead of using the CMC.

1. Download the latest connectors ZIP file from the Customer Portal

2. Copy the ZIP file to /var/sem/connectors-update/offline on the RHEL host.

   SEM applies the update automatically.

3. Verify the result:

   • If the update succeeds, the ZIP file is deleted from /var/sem/connectors-update/offline.

   • If the update fails, the ZIP file is moved to /var/sem/connectors-update/offline/failed. The reason is written to /usr/local/contego/manager.log.

   A connectors package with a lower version than the installed connectors is rejected.