 |
» |
|
|
|
Use the following checklist as a guideline to assist you with setting up managed systems from a Windows Central Management Server (CMS): Configuring the managed system software using the Configure or Repair Agents feature from the CMS | |
The HP SIM Configure or Repair Agents tool is a quick and easy way to configure
Linux, HP-UX and Windows managed systems to communicate with HP SIM from a Windows CMS. To run Configure or Repair Agents remotely against multiple systems simultaneously, you must have authorizations to run the Configure or Repair Agents tool. You must have full CMS configuration privileges to modify the HP SIM community strings in the system security file. In addition, you must enter administrator level user credentials for the target system. To configure agents remotely: Select Configure Configure or Repair Agents. The Step 1: Select Target Systems page appears.
Note: The Step 1: Verify Target Systems page appears if the targets are selected before selecting a tool. Select target systems. Click Next. The Step 2: Enter credentials page appears. The credentials specified on this page are for a privileged account on the target system.
Note: If you plan to Configure secure shell (SSH) access on a Windows target system, the account specified must be a member of the local Administrators group. For Windows targets using a domain account, the account is automatically added to this group if applicable. From the Step 2: Enter credentials page: In the User name field, enter the system administrator name. In the Password field, enter the system administrator's password for the user name previously entered. In the Password (Verify) field, reenter the system administrator's password exactly as it was entered in the Password field. In the Domain field, enter the Windows domain if you are using a domain account.
Note: The credentials used in this step must work for all target systems that have been selected. HP recommends using domain administrator credentials. Credentials entered here are not saved by HP SIM except to run a scheduled task later.
Click Next. The Step 3: Install Providers and Agents (Optional) page appears. You can install Insight Management Agents or providers, either Web-Based Enterprise Management or Simple Network Management Protocol, on managed systems so HP SIM can collect inventory and status information from these systems and receive event notifications from the systems. Installation is supported only on ProLiant or Itanium-based servers with Windows operating system.
From the Step 3: Install Providers and Agents (Optional) page: Select Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows to install WBEM or WMI providers on Windows managed systems.
Select Install SNMP Agent (HP Insight Management Agents) for Windows to install the SNMP agent on Windows managed systems. This Insight Management Agent allows network monitoring and control. Select Install Open SSH to install OpenSSH on Windows managed systems. Select Install the Version Control Agent (VCA) to install the HP Version Control Agent; (VCA) on Windows managed systems. The VCA enables you to view the HP software installed on a system and wheonfigther updates for the software are available in the repository.
HP SIM determines the type of agent/provider to install based on the system type, subtype, and operating system description of the system. Table 6-1 Version Support Matrix for components used for install. | Supported systems | HP WBEM Provider | HP ProLiant Agent | Open SSH | Version Control Agent |
|---|
| Unknown | 2.1 (32 bit) | 7.90 (32 bit) | 3.71 | 2.1.8 | | ProLiant systems with 32 bit Windows operating system ( 2003, 2008 ) | 2.1 (32 bit) | 7.90 (32 bit) | 3.71 | 2.1.8 | | ProLiant systems with 32 bit Windows operating system (2003, 2008) | 2.1 (64 bit) | 7.90 (64 bit) | 3.71 | 2.1.8 | | ProLiant systems with 32 bit Windows operating systems (2000) | Not supported | 7.60 (32 bit) | 3.71 | 2.1.8 | | Itanium-based systems with Windows operating system (2003) | Not supported | 5.1.10 | 3.71 | 2.1.7.770 |
System Management Homepage version 2.1.7 is also installed, if necessary, with these agents. If you want to configure the agents after installing, select the force reboot option. This allows the newly installed component to be completely initialized before configuring it. Note: Installation with reboot typically takes about 8 minutes to complete. Click Next. The Step 4: Configure or Repair Agents page appears. The Step 4: Configure or Repair Agents page enables you to select options to configure the target system. The following options are available:
Configure WBEM / WMI. This section enables you to configure the target Linux, Windows or HP-UX system to send WBEM indications or events to HP Systems Insight Manager.
For this section, the following must be considered:
Create subscription to WBEM events, so that WBEM events will be sent to the CMS.
Send a sample WBEM / WMI indication to this instance of HP SIM to test that events appear in HP SIM in the Event list or All Event User Interface for the selected system.
Note: The indication will appear as an Informational Event in the Event List of HP SIM. Note: This is supported only on HP-UX and Windows managed systems with WBEM provider installed.
Use an HP SIM WBEM certificate (good for 10 years) rather than username/password to manage the system. This option deploys a WBEM certificate to the managed system and is only valid for HP-UX systems.
Configure a non-administrative account for HP SIM to access WMI data. This option is applicable to Windows systems with HP WBEM providers. The configuration of the managed system will be updated to allow the specified user to access WMI information over the network. This user will be used by HP SIM to read inventory and configuration information from the system, and will be configured as the WBEM user in the System Protocol Settings. This configuration step is not necessary if HP SIM is configured with a user with administration rights. This user is not created by HP SIM; it should already exist as either a domain user or one local to the managed system. The user will be added to the "DCOM Users” group on the managed system and will be given read-only access to WMI information, plus read-write permissions to the HPQ name space. This user does not need to be an administrator of the managed system and need not have logon rights. A special purpose domain account is recommended, and should be created by the domain administrator. To enter the credentials for HP SIM to use to access the managed systems: In the User name field, enter a user name. In the Password field, enter the password for the user's name previously entered. In the Password (Verify) field, reenter the password exactly as it was entered in the Password field. In the Domain field, enter the Windows domain if the target belongs to a domain. If configuring a non-administrative user is successful, then these credentials are saved as the System Protocol settings for WBEM access in HP SIM.
Configure SNMP. This section enables you to configure SNMP settings. For this section, the following must be considered: Select Set read community string to specify a community string. By default, HP SIM's first community string, that is not public, appears in the field. If no community string exists in HP SIM, you must enter one.
Note: If only HP-UX systems with default SNMP installation are being configured at this time, you need not set this option. HP-UX enables read by default (get-community-name is set to public by default on HP-UX systems).
Note: If this option is selected, the Read Only community string is added to the target systems. If the target system is SuSE Linux or Microsoft Windows 2003, the managed systems do not always enable SNMP communication between themselves and a remote host. This setting is modified to enable the instance of the HP SIM system to communicate using SNMP with these target systems.
Note: You can enter a community string up to 255 characters.
Note: Repairing the SNMP settings adds a Read Write community string to the target system only if one does not currently exist. This community string is unique for each system, is composed of over 30 characters to include letters and numbers, and is only visible to the user with administrator privileges for that system. This Read Write community string is required by the Web Agent to perform certain threshold setting capabilities. This community string is only used locally on the target system and is not used by HP SIM over the network. Linux and HP-UX systems do not require a Read Write community string; hence the Read Write community is added on Windows systems only. Select Set traps to refer to this instance of HP Systems Insight Manager in the target systems' SNMP Trap Destination List. This setting enables the target systems to send SNMP traps to this instance of HP SIM.
Select Send a sample SNMP trap to this instance of the HP SIM to test that events appear in HP SIM event lists to verify that SNMP events appear in the HP SIM events list. To successfully send a test trap, you must configure target systems to send a trap to this instance.
Note: A test trap can only be sent from a Windows managed system with HP Insight Management Agent installed. If you attempt to run this task on a Linux or HP-UX managed system, a message displays indicating the operation is not supported.
Note: The trap will appear as a Generic Trap from the system. This event will appear as an Informational Event in the Event List of HP SIM.
Configure secure shell (SSH) access. Select this option to configure SSH access on managed systems.
If this option is selected, you must select one of the following options:
Host based authentication for SSH.
Note: For this option to work, the user name and password provided in step 2 must be an administrative level account. For Linux or HP-UX targets, it must be the "root" account and password.
Each user has to be authenticated on the managed system
Note: If you do not want all users that have login access to HP SIM to run the tool and you would like to control which users need to have access, this option is more secure.
Note: SSH can be configured only if the OpenSSH service is running on the managed systems. OpenSSH can be installed on Windows systems, by
running the Install Open SSH as done in step three or by selecting the tool under DeployDeploy DriversFirmware and AgentsInstall Open SSH.
Set Trust relationship to "Trust by Certificate". Select this option to configure systems to use the Trust by Certificate trust relationship with the System Management Homepage. For System Management Homepage on the target systems, this option sets the trust mode to Trust by Certificate and copies the HP SIM system certificate to the target system's trusted certificate directory. This option enables HP SIM users to connect to the System Management Homepage using the certificate for authentication.
You can configure Single Sign-On (SSO) to management processors for Onboard Administrators and for Integrated Lights-Out 2 (iLO2). To configure SSO, select Set Trust Relationship. After SSO is configured, you are not continually prompted to supply the login credentials for the management processor. Note: For systems with Management HTTP Server 4.x and earlier, Configure or Repair Agents adds the Administrator password in the Management HTTP Server store and modifies the SNMP settings but cannot change trust relationship information because Management HTTP Server 4.x and earlier did not deploy trust relationships.
Configure Version Control Agent (VCA). Select this option to configure the VCA to point to the HP Version Control Repository Manager (VCRM), where the repository of software and firmware is located, enabling version comparison and software updates. This option is available only for Windows systems. This section can be accessed in the Configuration section of all CMS systems including Windows, Linux and HP-UX. To configure VCA: In the Select the system where the VCRM is installed field, select the server where the VCRM is installed from the dropdown list. In the User Name field, enter the user name to access the VCRM. This user cannot be the default "Administrator" user. It has to be an user with administrative privileges. In the Password field, enter the password to access the VCRM. In the Confirm Password field, reenter the password for the VCRM just as you entered it in the Password field.
Set administrator password for Insight Management Agents version 7.1 or earlier. Select this option to repair the administrator password on all Insight Management Agents installed on the target systems as applicable for Windows and Linux systems.
Note: Do not set this option if you have Insight Management Agents 7.2 or later installed.
Note: If the remote system is running HP-UX, this option is not executed on the remote system since it is not applicable on HP-UX systems. If only HP-UX target systems are being configured at this time, you need not set this option. If this option is selected, you must complete the following steps: In the Password field, enter the new administrator password. In the Confirm Password field, reenter the new administrator password exactly as you entered it previously.
Click Run Now. The Task Results page appears.
Note: Click Schedule to run this task at a later time.
Note: The Configure or Repair Agents tool can be used to update multiple target systems, each of which might potentially have different results. The log results indicate whether the repair attempt was successful. The Task Results page displays the following information:
Status. This field displays the details for each target system within a task instance.
Exit Code. This field represents the success or failure of an executable program. If the return value is zero or positive, the executable ran successfully. If a negative value is returned, the executable failed. This exit code does not indicate that all configuration attempts were successful. It is possible for some to succeed and for some to fail.
Target Name. This field displays the name/IP address of the target.
The stdout tab. This tab displays the output text information.
The stderr tab. This tab displays information if the executable experienced an error.
View Printable Report. Reports can be printed for the currently selected target system or for all target systems associated with the task instance.
To print a report: Click View Printable Report. An Options Message box appears, asking if you want to generate a report containing only the currently selected target system or all systems associated with the task instance. Select which report to display. Click OK to display the report, or click Cancel to return to the View Task Results page.
If the Management HTTP Server is installed on target systems, the login credentials are updated in the Management HTTP Server password file.
Consistent with many other HP Systems Insight Manager tools, the Configure or Repair Agents tool can be configured to run automatically on a schedule, or you can run it manually. Only one instance of Configure or Repair Agents tool can run at a time. |
Printable version
