Skip to content

How do I unlock my Snowball Edge device?

3 minute read
0

I want to unlock my AWS Snowball Edge device.

Resolution

Unlock your device

To unlock your device, see Unlocking the Snowball Edge. To use OpsHub to unlock your Snowball Edge device, see Unlocking a Snowball Edge device with AWS OpsHub.

To check the status of the device, use the Snowball Edge Client to run the following describe-device command:

snowballEdge describe-device --endpoint https://ip-address-of-device --manifest-file path/to/manifest/file.bin --unlock-code

Note: Replace ip-address-of-device with your Snowball Edge device IP address. Replace path/to/manifest/file with the full path to your manifest file and the unlock-code with your 29-character unlock code.

Troubleshoot Snowball Edge issues

Certificate expiration, manifest file mismatches, or network misconfigurations might cause your Snowball Edge device to remain locked.

If your Snowball Edge devices remains locked and you receive an error message, then use the following troubleshooting steps to resolve your issue.

"PKIX path validation failed" or "PKIX certificate error"

If you receive "PKIX path validation failed" or "PKIX certificate error", then your manifest file and unlock code might not match your Snowball Job ID. 

To get the Snowball Job ID, use the Snowball Edge Client to run the following command:

openssl s_client -connect IP_OF_SBEdevice:9091

Note: You can also find the Job ID on your Snowball Edge device shipping label.

If your SSL certificate expired, then see How do I resolve the error "PKIX path validation failed" when I try to unlock my Snowball Edge device?

If your workstation and Snowball Edge device contain two different times, then see Setting the NTP time servers for the device with AWS OpsHub.

"Connection refused" error

If you receive a "Connection refused" error, then take the following actions:

  • Check that you used valid parameters when you ran the unlock-device command.
  • Confirm that your computer configurations or network doesn't prevent the unlock-device command from the Snowball Edge device.

For more information, see Troubleshooting unlock-device command problems with Snowball Edge.

Network connection issues

If you can't connect to your Snowball Edge device, then take the following actions:

  • Check whether firewalls, proxies, antivirus software, or VPNs prevent network connectivity between your workstation and the Snowball Edge device.
  • Use a switch that works at a rate of at least 1 Gbps.
  • Confirm that your Snowball Edge device has an IP address.
  • For DHCP, check whether the IP address changed after a device power cycle.
  • For a static IP address, confirm that no duplicate IP addresses exist on your network.

For more information, see Troubleshooting connection problems with Snowball Edge.

Related information

AWS Snowball resources

Updating the SSL certificate on Snowball Edge devices

AWS OFFICIALUpdated 3 months ago
1 Comment

Steps to unlock your Snowball Edge device Prepare the Snowball Edge device: Plug the device into a power source and your local network using a network cable (like an Ethernet cable). Power on the device using the power button above the LCD display. Wait about 10 minutes for the device to be ready. (Optional) Use the LCD display to configure network settings if necessary, for example, to assign a static IP address. Download and Install the Snowball Edge Client: If you haven't already, download and install the Snowball Edge Client from the AWS Snowball Edge resources page. Get Credentials: Sign in to the AWS Management Console and navigate to the AWS Snow Family Management Console. Find the specific job associated with your Snowball Edge device. Expand the "Job status" pane and click "View job details". Expand the "Credentials" section. Note the unlock code (including hyphens). Choose "Download manifest" and save the file to your workstation. Security best practice: Don't store the manifest file and unlock code in the same location. Find the Device IP Address: Locate the IP address displayed on the LCD screen of your Snowball Edge device, under the "Connections" tab. Run the Unlock Command: For a standalone device: snowballEdge unlock-device --endpoint https://<IP_address_of_device> --manifest-file <path_to_manifest_file> --unlock-code <29-character_unlock_code> For a cluster of devices: snowballEdge unlock-cluster --endpoint https://<IP_address_of_one_cluster_device> --manifes

replied 3 months ago