Setting up managed systems from a Windows CMS

Use the following checklist as a guideline to assist you with setting up managed systems.

Ensure that HP SIM is installed on the CMS.
Ensure the First Time Wizard has been completed on the CMS.
Important: You must run discovery before setting up managed systems. Configuring automatic discovery is part of the First Time Wizard.
Configure the managed system software. See Configuring the managed system software using the Configure or Repair Agents feature from the CMS for more information.

Configuring the managed system software using the Configure or Repair Agents feature from the CMS

The HP SIM Configure or Repair Agents tool is a quick and easy way to configure Windows, Linux, and HP-UX managed systems to communicate with HP SIM from a Windows CMS.

To run Configure or Repair Agents remotely against multiple systems simultaneously, you must have authorizations to run the Configure or Repair Agents tool.

You must have full CMS administrative privileges to modify the HP SIM community strings in the system security file. In addition, you must enter administrator-level user credentials for the target system.

To configure agents remotely:

Select ConfigureConfigure or Repair Agents. The Step 1: Select Target Systems page appears.
NOTE: The Step 1: Verify Target Systems page appears if you select the targets before selecting a tool.
Select target systems.

Click Next. The Step 2: Install Providers and Agents (Optional) page appears.

Configure or Repair Agents - Windows CMS

You can install Insight Management Agents or providers, either WBEM or SNMP, on managed systems so that HP SIM can collect inventory and status information from these systems and receive event notifications from the systems. Installation is supported only on ProLiant or Itanium-based servers with a Windows operating systems.

From the Step 2: Install Providers and Agents (Optional) page:

Select Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows to install WBEM or WMI providers on Windows managed systems.
Select Install SNMP Agent (HP Insight Management Agents) for Windows to install the SNMP agent on Windows managed systems. This Insight Management Agent allows network monitoring and control.
Select Install OpenSSH to install OpenSSH on Windows managed systems.
Select Install Linux PSP or ESX Agents to install Linux PSP and ESX Agents which are a collection of SNMP agents used by HP SIM to gather information from managed systems and send traps to HP SIM.
Select Install the Version Control Agent for Windows (VCA) to install the HP VCA on Windows managed systems. The HP VCA enables you to view the HP software installed on a system and whether updates for the software are available in the repository.

HP SIM determines the type of agent or provider to install based on the system type, subtype, and operating system description of the system.

Table 6-1 Version support matrix for components used for installation

Supported systems	HP WBEM Provider	HP ProLiant Agent	OpenSSH	Version Control Agent	System Management Home Page
Unknown	2.2.1.0 (32-bit)	8.2.0.0 (32-bit)	5.1p1-3	2.1.10.801	2.1.15.210
ProLiant systems with 32-bit Windows operating system ( 2003, 2008 )	2.2.1.0 (32-bit)	8.2.0.0 (32-bit)	5.1p1-3	2.1.10.801	2.1.15.210
ProLiant systems with 64-bit Windows operating system (2003, 2008)	2.2.1.0 (64-bit)	8.2.0.0 (64-bit)	5.1p1-3	2.1.10.801	2.1.15.210
ProLiant systems with 32-bit Windows operating systems (2000)	Not supported	7.60 (32-bit)	5.1p1	2.1.8	2.1.8.780
Itanium-based systems with Windows operating system (2003)	6.1.0.0	5.1.10	5.1p1-3	2.1.7.770	2.1.8.179

If you want to install a 64-bit agent or provider, be sure the target system is identified as a 64-bit system in HP SIM.
If your system is not correctly identified, go to System PageTools & LinksEdit System Properties. Select the correct system type, or subtype and enter the operating system description manually.
Example: Installing Insight Management Agents on a ProLiant Windows 64-bit system:
1. Select System type: server.
2. Select System subtype 1: HP ProLiant.
3. Enter operating system description as Microsoft Windows Server 2003, x64 Enterprise Edition Service Pack 1 or the correct operating system description of your system.
If you want to configure the agents after installation, select the force reboot option. This allows the newly installed component to be completely initialized before you configure it.
NOTE: Installation with reboot typically takes about 8 minutes.
Click Next. The Step 3: Configure or Repair Agents page appears.
NOTE: The Step 3: Configure or Repair Agents page changes to show the configuration options available with the installed plug-ins.

Configure the target system by selecting one of the following options:

Configure WBEM / WMI. This section enables you to configure the target Linux, Windows, or HP-UX system to send WBEM indications or events to HP SIM.
For this section, consider the following:
- Create subscription to WBEM events so that WBEM events will be sent to the CMS
- Send a sample WBEM / WMI indication to this instance of HP SIM to test that events appear in HP SIM in the Event List or All Event User Interface for the selected system
  NOTE: This indication will appear as an Informational Event in the Event List of HP SIM. This indication is supported only on HP-UX and Windows managed systems with WBEM provider installed.
- Use an HP SIM WBEM certificate (good for 10 years) rather than username/password to manage the system This option deploys a WBEM certificate to the managed system and is only valid for HP-UX systems.
- Configure a nonadministrative account for HP SIM to access WMI data This option applies to Windows systems with HP WBEM providers. The configuration of the managed system updates to allow the specified user to access WMI information over the network. HP SIM uses this user to read inventory and configuration information from the system and is configured as the WBEM user in the System Credentials. If HP SIM is configured with a user with administration rights, this configuration step is not necessary . HP SIM does not create this user. The user already exists as either a domain user or one local to the managed system.
  The user is added to the DCOM Users group on the managed system and has read-only access to WMI information, and read-write permissions to the HPQ name space. This user does not need to be an administrator of the managed system or have sign-in rights. The domain administrator should create a special domain account.
  To enter the credentials for HP SIM to use to access the managed systems:
  In the User name field, enter a user name.
  In the Password field, enter the password.
  In the Password (Verify) field, re-enter the password exactly as it was entered in the Password field.
  In the Domain field, enter the Windows domain if the target belongs to a domain.
  If configuration of a nonadministrative user is successful, then these credentials are saved as the System Credentials for WBEM access in HP SIM.

Configure SNMP This section enables you to configure SNMP settings.

Select Set read community string to specify a community string. By default, the first HP SIM community string that is not public appears. If no community string exists in HP SIM, you must enter one.




	NOTE: If you configure only HP-UX systems with default SNMP installations, you do not need to set this option. HP-UX enables read by default (get-community-name is set to public by default on HP-UX systems).If you select this option, the Read Only community string is added to the target systems. If the target system is SuSE Linux or Microsoft Windows 2003, the managed systems do not always enable SNMP communication between themselves and a remote host. This setting is modified to enable the instance of the HP SIM system to communicate using SNMP with these target systems.You can enter a community string up to 255 characters. Repairing the SNMP settings adds a Read Write community string to the target system only if one does not currently exist. This community string is unique for each system, is composed of over 30 characters to include letters and numbers, and is visible only to the user with administrator privileges for that system. This Read Write community string is required by the Web Agent to perform certain threshold setting capabilities. This community string is used locally only on the target system and is not used by HP SIM over the network. Linux and HP-UX systems do not require a Read Write community string. The Read Write community string is added on Windows systems only.

Select Set traps to refer to this instance of HP Systems Insight Manager in the target systems SNMP Trap Destination List. This setting enables the target systems to send SNMP traps to this instance of HP SIM.

Select Send a sample SNMP trap to this instance of the HP SIM to test that events appear in HP SIM event lists to verify that SNMP events appear in the HP SIM events list.

To successfully send a test trap, you must configure target systems to send a trap to this instance.




	NOTE: You can send a test trap only from a managed system with an HP Insight Management Agent installed.The trap from Windows appears as a Generic Trap from the system and is listed as a Major Event in the Event List of HP SIM. The trap received from Linux and HP-UX targets appears as a Cold Trap and is listed as Informational Events in the Event List of HP SIM.

Configure secure shell (SSH) access Select this option to configure SSH access on managed systems.

If you select this option, you must select one of the following options:

Host based authentication for SSH
NOTE: For this option to work, the user name and password provided in step 2 must be an administrative level account. For Linux or HP-UX targets, it must be the root account and password.

Each user has to be authenticated on the managed system




	NOTE: If you do not want all users that have sign-in access to HP SIM to run the tool and you would like to control which users need to have access, this option is more secure.You can configure SSH only if the OpenSSH service is running on the managed systems. You can install OpenSSH on Windows systems by running the Install Open SSH or by selecting the tool under DeployDeploy DriversFirmware and AgentsInstall Open SSH.

Set Trust relationship to "Trust by Certificate" Select this option to configure systems to use the Trust by Certificate trust relationship with the HP SIM.

For HP SIM on the target systems, this option sets the trust mode to Trust by Certificate and copies the HP SIM system certificate to the target system trusted certificate directory. This option enables HP SIM users to connect to the HP SMH using the certificate for authentication.

You can configure SSO to management processors for Onboard Administrator and for iLO2. To configure SSO, select Set Trust Relationship. After you configure SSO, you are not continually prompted to supply the login credentials for the management processor.




	NOTE: For systems with Management HTTP Server 4.x and earlier, Configure or Repair Agents adds the Administrator password in the Management HTTP Server store and modifies the SNMP settings but cannot change trust relationship information.

Select the checkbox beside Import Secure Sockets Layer (SSL) certificate for HP SIM to trust the HP SMH of the managed system. This option is only valid for HP-UX and Linux operating systems.

Configure Version Control Agent (VCA) Select this option to configure the HP VCA to point to the HP VCRM, where the repository of software and firmware is located, enabling version comparison and software updates. This option is available only for Windows systems. This section can be accessed in the Configuration section of all CMS systems including Windows, HP-UX, and Linux.
To configure HP VCA:
1. In the Select the system where the HP VCRM is installed field, select a server from the dropdown list.
2. In the User Name field, enter the user name to access the HP VCRM. This user cannot be the default administrator user, and must have administrative privileges.
3. In the Password field, enter the password to access the HP VCRM.
4. In the Confirm Password field, re-enter the password for the HP VCRM.

Set administrator password for Insight Management Agents version 7.1 or earlier Select this option to repair the administrator password on all Insight Management Agents installed on the target systems as applicable for Windows and Linux systems.




	NOTE: Do not set this option if you have Insight Management Agents 7.2 or later installed.If the remote system is running HP-UX, this option is not executed on the remote system because it is not applicable on HP-UX systems. If you are configuring only HP-UX target systems, you do not need to set this option. If you select this option, you must complete the following steps: In the Password field, enter the new administrator password. In the Confirm Password field, re-enter the new administrator password.

Click Next. The Step 4: Enter credentials page appears. The credentials specified on this page are for a privileged account on the target system.
If you select Configure secure shell (SSH) access for a Windows target system, the account you specify must be a member of the local Administrators group. For Windows targets using a domain account, the account is automatically added to this group.
From the Step 4: Enter credentials page, enter the following credentials. The credentials used in this step must work for all selected target systems. HP recommends using domain administrator credentials. Credentials entered here are not saved by HP SIM except to run a scheduled task later.
1. Select one of the following options:
  - Use sign-in credentials. These credentials must be a privileged account on the managed system.
    NOTE: This option is not available if you selected any options on the “Step 2: Install Providers and Agents (Optional)” page.
  - Use the following credentials for all systems.
2. In the User name field, enter the system administrator name.
3. In the Password field, enter the system administrator password.
4. In the Password (Verify) field, re-enter the system administrator password.
5. In the Domain field, enter the Windows domain if you are using a domain account.
Click Run Now. The Task Results page appears.
NOTE: Click Schedule to run this task at a later time.The Configure or Repair Agents tool can update multiple target systems. The log results indicate whether the repair attempt was successful.
The Task Results page displays the following information:
- Status This field displays the details for each target system within a task instance.
- Exit Code This field represents the success or failure of an executable program. If the return value is zero or a positive value, the executable ran successfully. If a negative value is returned, the executable failed. This exit code does not indicate that all configuration attempts were successful. It is possible for some to succeed but some to fail.
- Target Name This field displays the name/IP address of the target.
- The stdout tab This tab displays the output text information.
- The stderr tab This tab displays information if the executable experienced an error.
- View Printable Report You can print reports for the selected target system or for all target systems associated with the task instance.
  To print a report:
  Click View Printable Report.
  An Options Message box appears.
  Select a report.
  Click OK to display the report, or click Cancel to return to the View Task Results page.
If the Management HTTP Server is installed on target systems, the login credentials are updated in the Management HTTP Server password file.

Like other HP SIM tools, you can configure the Configure or Repair Agents tool to run on a schedule or manually. Only one instance of Configure or Repair Agents tool can run at a time.

Setting up managed systems from a Windows CMS

Technical documentation

» Table of Contents

» Glossary

» Index

Configuring the managed system software using the Configure or Repair Agents feature from the CMS