HP Insight Control for Linux 6.0 User Guide

22 Advanced topics
Topics include:
• “Management Processor Credentials” (page 211)
• “Deploying WBEM provider components using Configure or Repair Agents task” (page 213)
22.1 Management Processor Credentials
Insight Control for Linux is easiest to use when the credentials on your management processors
(MPs) match either the global management processor credentials that you specified when you
installed Insight Control for Linux or the credentials that you specified on the Insight Control
for Linux Configure→Management Processor→Credentials screen.
It is not uncommon for company policies to prohibit setting global user names and passwords
for security reasons. When this is the case, Insight Control for Linux has the ability to maintain
individual credentials for each discovered management processor. This section describes the
procedures required for maintaining this advanced level of security.
22.1.1 General information on Insight Control for Linux MP credentials
Insight Control for Linux uses management processor credentials to connect to management
processors for tasks like controlling system power and collecting environmental metrics. Which
credential it uses depends on the type of operation performed.
Most Insight Control for Linux deployment and monitoring operations use the global MP
credential unless a system-specific credential was set. If a system specific credential has been set,
that is used instead.
However, when initiating a bare-metal discovery from the Options→IC-Linux→Initiate Bare-Metal
Discovery... tool or when first collecting data for the Options→IC-Linux→Network
Configuration Editor tool, the global MP credentials are used to access the device regardless of
whether or not a system specific credential was set.
How you manage the MP credentials is determined by whether or not you use either of these
two tools. These tools are required when you first configure and discover new servers using the
virtual media based deployment features of Insight Control for Linux. After a system has been
fully discovered and configured, the procedure for managing MP credentials is the same.
22.1.2 Maintaining MP unique credentials
The first step to maintaining separate credentials for all your management processors is to disable
the pushing of the global credentials on bare-metal discovery. To do this, simply add the following
line to the /opt/mx/icle/icle.properties file:
DISCOVERY_MP_CREDENTIAL_PUSH=false
22.1.2.1 Discovering and setting up servers with PXE deployment
If you manage servers using the standard PXE deployment method, use this procedure to discover
servers:
1. Be sure the unique credentials are already set on your management processor.
2. Discover the system and the MP using either standard HP SIM tools or the Insight Control
for Linux bare-metal discovery process. Be sure the system and its MP are properly associated
with each other in HP SIM.
3. Run the Configure→Management Processor→Credentials tool, select the MP that was
just discovered, and select the Edit button
4. Enter the unique credentials for the MP you selected. Be sure to check the box labeled Update
only local credentials.
22.1 Management Processor Credentials 211