HP System Management Homepage Installation Guide HP-UX, Linux, and Windows Operating Systems HP Part Number: 466305-401 Published: April 2011 Edition: 1
© Copyright 2004, 2011 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents 1 Installation requirements..............................................................................7 Supported operating systems....................................................................................................................7 Supported browsers................................................................................................................................8 Verifying system requirements.................................................................
9 Signing in and signing out of HP SMH........................................................61 Signing Signing Signing Signing Signing in with Microsoft Windows XP.....................................................................................................61 in with Microsoft Internet Explorer................................................................................................61 in with Mozilla and Firefox.................................................................................
List of Tables 3-1 3-2 4-1 Bundle information..........................................................................................................................13 Variables and tags..........................................................................................................................17 Environment variables and tags.........................................................................................................
1 Installation requirements Supported operating systems HP ProLiant servers • Microsoft Windows Server 2011 Small Business • Microsoft Windows 7 for x86 and x64 • Microsoft Windows Server 2008 SP2 • Microsoft Windows Server 2008 Foundation R2 • Microsoft Windows Server 2008 R2 • Microsoft Windows Server 2008 R2 Server Core • Microsoft Windows Server 2008 Essential Business • Microsoft Windows Server 2008 Small Business SP2 • Microsoft Windows Server HPC 2008 • Microsoft Windows Server 200
• Citrix XEN 5.6 • Citrix XEN 5.5 U2 HP Integrity servers • Microsoft Windows Server 2008 for Itanium-based systems, 64-bit • Microsoft Windows Server 2008 R2 for Itanium-based systems, 64-bit • Red Hat Enterprise Linux 5.0 Update 1 • Red Hat Enterprise Linux 4.0 Update 6 • SUSE Linux Enterprise Server (SLES) 10 Service Pack 1 • SUSE Linux Enterprise Server (SLES) 9 Service Pack 4 HP-UX • HP-UX 11i v3 (B.11.31) for HP Integrity Servers and HP 9000 Servers • HP-UX 11i v2 (B.11.
The HP Web-enabled System Management Software is hardware-dependent. For the installation to complete successfully, your system must support at least 256 colors. Verifying system requirements Before installation begins, the installation utility verifies whether: • For HP-UX, Linux, and Windows, the operating system meets the minimum requirements. If HP SMH does not support the operating system on a system, an error message appears, indicating that an invalid operating system was found.
2 Preparing to install HP SMH You can install HP System Management Homepage (HP SMH) on systems running HP-UX, Linux, and Windows operating systems. You can install HP SMH locally using the Windows ProLiant or Integrity Support Pack or the Linux RPM (Red Hat Package Manager) or remotely with optional preconfiguration using the HP Smart Update Manager (HPSUM) on Windows or on Linux.
3 Installing HP SMH on HP-UX operating systems System Administration Management Tool changes: SAM and HP SMH The HP-UX System Administration Manager (SAM) is deprecated in HP-UX 11i v3. HP SMH is the system administration tool for managing HP-UX 11i. HP SMH provides web-based systems management functionality, at-a-glance monitoring of system component health, and consolidated log viewing. HP SMH also provides a Terminal User Interface (TUI). SAM continues to provide access to TUI and X-based interfaces.
Product Bundle Path hpuxwsApache HP-UX Apache-based Web Server hpuxws22Apache OpenSSL OpenSSL /opt/openssl Required HP-UX 11i v1, v2, v3 HP-UX Common System Management Enablers SysMgmtBase usr/sam and /opt/hpsmh/lib Required HP-UX 11i v2, v3 HP-UX Strong Random Number Generator KRNG11i /usr/conf or Recommended /usr/conf/lib/librng.a, /usr/share, /usr/include, /sbin/init.d,/sbin/rc1.
Product Bundle WBEM Provider for SCSI SCSIProvider HBA Path Status Release /opt/scsiprovider/ Optional. HP SMH HP-UX 11i v2, v3 plug-ins such as Property Pages found on the Home page require it. Java Java2 1.4 SDK for HP-UX /opt/java1.4 (T1456AA) Optional. HP SMH plug-ins such as Partition Manager require it. HP-UX 11i v1, v2, v3 HP-UX CDE User Interface CDE /usr/dt/lib/, Optional. HP SMH /usr/dt/lib/hpux32/, plug-ins such as DSAU require it.
3. Install software from the Applications DVD useing the swinstall. The following example uses swinstall to install software from the source mounted at /cdrom: /usr/sbin/swinstall -s /cdrom bundlename See the swinstall(1M) manpage for details. 4. Select and install software from the Applications DVD. The swinstall program has an interface for selecting and installing software from the DVD. 5. Unmount and eject the Applications DVD.
To change the default configuration, you can modify the files to set the value of the variables and tags described in Table 3-2 “Variables and tags” table. Table 3-2 Variables and tags Variable Description Script JAVA_HOME This variable points to the /opt/hpsmh/lbin/envvars directory where JDK is installed. 15 The tag defines the HP /opt/hpsmh/conf.common/smhpd.xml SMH session timeout in minutes.
only (nothing listens on port 2381, so that port fails). When it contacts port 2301 (http), then the HP-UX Apache-based Web Server starts on port 2381 (https), and the page redirects. • Automatic startup on boot This mode starts HP SMH automatically during system initialization. If the automatic startup on boot start mode is enabled and the system was rebooted using this configuration, you can access HP SMH using a web browser and navigating to https://hostname:2381/.
For a detailed guide on how to patch your HP-UX operating system, see the Patch Management User Guide for HP-UX 11.x Systems on the HP Technical Documentation website at http://www.hp.com/go/ hpux-core-docs. HP might issue software updates to HP SMH. Check the following resources for any notices regarding software updates: • HP-UX OE media • HP-UX Applications media • HP SMH web page on the Software Depot home at http://www.hp.com/go/softwaredepot • HP SMH website at http://hp.
4 Installing HP SMH on a Windows operating system Installing HP SMH directly on Windows Note: You can click Cancel at any time during configuration of HP SMH settings. 1. Initiate the setup.exe file to begin the installation wizard. After the wizard begins, the Welcome dialog box appears. 2. Click Next. The OS Groups dialog box appears.
3. Add HP SMH group names: a. In the Group Name field, enter a name for the operating system group. b. Select an operating level to include Administrator, Operator, or User. Note: You must assign an account to an operating system user group with administrator privileges to access the Version Control Repository Manager from the Version Control Agent.
Select one of the following access types: • Select Anonymous Access to enable anonymous access to unsecured pages. • Select Local Access to automatically grant access to any user at the local console at the selected access level. • Selecting Anonymous enables restricted access to the unsecured pages. • Selecting Administrator grants access to both secure and unsecured pages.
5. Select the level of security you want to provide from one of the following trust modes: • 24 Trust By Certificate 1. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows you to add trusted certificate files to the Trusted Certificate List.
2. Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Add File dialog box appears. If you entered an invalid file name in the file name field, an error message appears indicating the file does not exist. Click OK to select another file, or click Cancel to close the dialog box. The Trusted Certificate List appears.
1. 2. Select Trust By Name. Click Next. The Trusted Server dialog box appears. Note: Although the Trust By Name mode is a slightly better security method than the Trust All mode, your system is still vulnerable to security attacks. The Trust By Name mode sets up HP SMH to accept only certain requests from servers with the HP SIM certificate names designated in the Trust By Name field. The Trust By Name option is easy to configure and can prevent unauthorized access.
1. 2. Select Trust All. Click Next. The IP Binding dialog box appears. Note: The Trust All option leaves your system vulnerable to security attacks and sets up HP SMH to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and all users in the network are trusted. 6. Select IP Binding to enable the Subnet IP Address and NetMask.
Installing HP SMH on a Windows operating system
8. Select IP Restricted Login, and click Next. The IP Address to Include dialog box appears. This dialog box enables you to specify the IP address or IP address ranges to grant login access permission. If IP addresses are in the Inclusion list, then only those IP addresses have login privileges. If no IP addresses are in the Inclusion list, then all IP addresses that are not in the Exclusion list have login privileges.
9. Click Next. The IP Address to Exclude dialog box appears. a. b. c. In the Exclude field, enter a beginning IP address. In the To field, enter an ending IP address. All IP addresses that fall between the beginning and ending IP addresses do not have login access. Click Add. The IP address or IP address range is added to the Exclusion list. To delete an IP address or IP address range, select an IP address or IP address range, and click Delete.
11. Click Next. The installation process begins. Note: During the installation of HP SMH, the Cancel button is disabled. Even if you click X in the upper-right corner of the box, the current operation cannot be canceled. 12. Click Finish to complete the installation.
Installing HP SMH for Windows silently The HP SMH installation for Windows enables you to silently install HP SMH. After the installation is complete, you can configure HP SMH settings. NOTE: Do not copy or import certificates when using the setup.exe /r option. Generating a setup.iss file setup.exe /r The HP SMH installation interface appears and records your selections. The setup.iss file is placed into the Windows directory. You can move this file to the location of your choice.
If an HP SMH 2.x installation is present, you must enter setup.exe /s /reinst /preserve /f1-full_path_to_setup.iss . If you do not include /preserve, the setup.iss is applied. Configuring HP SMH The HP SMH configuration is based on environment variables and tags that are set by SystemDrive\hp\hpsmh\smhpd.xml file. To change the default configuration, you can modify the XML file to properly set the value of the tags.
5 Installing HP SMH using HPSUM The HP Smart Update Manager (HPSUM) utility enables you to deploy ProLiant or Integrity Support Pack software and firmware components from a single, easy-to-use graphical user interface. The utility enables you to deploy and maintain ProLiant or Integrity Support Pack and Smart Components on a local server or one or more remote servers. This utility enables legacy support of existing software and firmware components while simplifying the overall deployment process.
3. 36 If you want to install HP SMH on the local server, check the Local Host checkbox and click Next.
4. If you want to install HP SMH on remote servers: a. Select the Remote Host or Group checkbox and click Manage Host. The Manage Host panel appears. b. Click Add Host. You can add new hosts by DNS name or IP address, or you can add a range of IP addresses.
c. You can also create a group of systems on which you want to install HP SMH by selecting Manage Groups. Note: If you chose to Manage Groups, you will need to give the Windows credentials for each remote server. 5. 38 Select the target server and click Next. A Discovery Progress screen appears while the system checks for installed items. Then, the Select Bundle Filter page appears.
6. From the Select Bundle Filter page, select the appropriate PSP or ISP bundle, according to the target server operating system architecture (either x86 or x64), and select the appropriate option for the bundle filter. These options appear: • Allow Non-Bundle Version Shows other versions of the product that are in the bundle. This enables you to include updates newer than those released in the bundle. • Allow Non-Bundle Products Shows updates for products that are not part of the bundle.
8. Check the HP SMH component, and you can preconfigure the HP SMH component by selecting Configure Now. Note: If PSP or ISP contains an older version of HP SMH than what is installed on the target server, the HP SMH component is listed under the Installation not needed section. In this case, click Installation Options for HP SMH component and select the For Install checkbox. The HP SMH component is listed under Updates to be Installed. 9. 40 After selecting the HP SMH component, click Install.
10. After installation is finished, the Installation Result panel appears. In the Installation Result panel, the Reboot Now and Exit buttons appear. 11. To reboot the system, select Reboot Now. To exit the program, select Exit. The HP Smart Update Manager program is complete. Installing HP SMH on a Linux operating system using the HPSUM To install HP SMH on a Linux operating sytem using the HPSUM, your system must meet the minimun requirements, in addition, you must have the psp-8.40.x.i686.en.tar file. 1.
3. 42 If you want to install HP SMH on the local server, check the Local Host checkbox and click Next.
4. If you want to install HP SMH on remote servers: a. Select the Remote Host or Group checkbox and click Manage Host. The Manage Host panel appears. b. Click Add Host. You can add new hosts by DNS name or IP address, or you can add a range of IP addresses.
c. You can also create a group of systems on which you want to install HP SMH by selecting Manage Groups. Note: If you chose to Manage Groups, you will need to give the Windows credentials for each remote server. 5. 44 Select the target server and click Next. A Discovery Progress screen appears while the system checks for installed items. Then, the Select Bundle Filter page appears.
6. From the Select Bundle Filter page, select the appropriate PSP or ISP bundle, according to the target server operating system architecture (either x86 or x64), and select the appropriate option for the bundle filter. These options appear: • Allow Non-Bundle Version Shows other versions of the product that are in the bundle. This enables you to include updates newer than those released in the bundle. • Allow Non-Bundle Products Shows updates for products that are not part of the bundle.
8. Check the HP SMH component, and you can preconfigure the HP SMH component by selecting Configure Now. Note: If PSP or ISP contains an older version of HP SMH than what is installed on the target server, the HP SMH component is listed under the Installation not needed section. In this case, click Installation Options for HP SMH component and select the For Install checkbox. The HP SMH component is listed under Updates to be Installed. 9. 46 After selecting the HP SMH component, click Install.
10. After installation is finished, the Installation Result panel appears. In the Installation Result panel, the Reboot Now and Exit buttons appear. 11. To reboot the system, select Reboot Now. To exit the program, select Exit. The HP Smart Update Manager program is complete. Preconfiguring the HP SMH component 1. 2. 3. From the Welcome to the Configuration Wizard for the HP System Management Homepage Component page, click Next. The Operating Systems Groups page appears.
3. 4. • Click Add. The certificate appears under Certificate Files. You can click Save to save your changes up to this point or click Cancel to discard the changes and close the wizard. Click Next. The IP Binding page appears. Trust by Name Sets HP SMH to accept certain configuration changes only from servers with the HP SIM certificate names designated in the Trust By Name field. The Trust By Name option is easy to configure.
4. 5. Click Add. The IP binding configuration is saved and appears under the IP Binding List. Click Next. The IP Restricted Login page appears. 10. The IP Restricted Login enables the HP SMH to restrict login access based on the IP address of a system. You can set address restriction at installation time, or administrators can set address restriction from the IP Restricted Login page • If an IP address is excluded, it is excluded even if it is also listed in the Included box.
6 Installing HP SMH directly on Linux operating systems Installation for Linux on x86 and x86_64 operating systems The HP SMH installation for Linux enables you to silently install HP SMH on x86 and x86_64 operating systems. After the installation is complete, you can configure the HP SMH settings. NOTE: To install HP SMH, you must log in as root user. NOTE: HP SMH already uses the user and group name hpsmh. Do not use the hpsmh user and group name for any other purpose.
7 Installing HP SMH directly on Itanium-based Linux operating systems Installation for Itanium-based Linux operating systems The HP SMH installation for Linux enables you to silently install HP SMH on Itanium-based operating systems. After the installation is complete, you can configure the HP SMH settings. NOTE: To install HP SMH, you must log in as root user.
3. 4. 2. • Press Enter. admin1 appears in the Administrator Group List. Enter n to go to the next screen. • Enter 2 for Operator. • Enter 3 for User. Enter n to go to the next screen. To delete a group: 1. Enter 2 to delete a group. The following options are available: 2. 3. • Enter 1 for Administrator. The Administrator Group List appears. • Enter 2 for Operator. The Operator Group List appears. • Enter 3 for User. The User Group List appears. At the prompt, enter 1, 2, or 3.
A. B. Enter File: /home/ServerName/cert1.pem . Press Enter. The cert1.pem is added to the Trusted Certificates List. If the certificate file does not exist, a message appears indicating that /home/ServerName/cert1.pem does not exist. C. • Add as many certificates as you want by repeating these steps. Press Enter when you finish. To import a certificate: 1. Enter 2. You are prompted for the server name. 2. Enter the name or IP address of the HP SIM server and press Enter. The certificate appears.
A. B. C. Enter 1 to add an IP address. You are prompted for the IP address. Enter the IP address to be added. IP Address: YourIPAddress appears. You are prompted for the netmask. Enter the netmask. netmask: YourNetmask appears. Note: You can add or delete as many IP addresses as you want. To delete an IP address: A. B. Enter 2. Enter the number of the IP address or netmask to be deleted. The IP address or netmask is removed from the IP address or netmask list.
D. E. Press Enter. The IP Address Exclusion List screen appears. Enter n for next. The IP Address Inclusion list and IP Address Exclusion list appears. Note: You can add or delete as many IP addresses or IP address ranges as you want. 3. • Enter n for next. To disable IP Restricted Login: Enter 2 to disable IP Restricted Login, which sets it to OFF. IP Restricted Login: OFF appears. Note: Only IPv4 address ranges are supported for IP restricted login. 9. Enter n to go to the next screen.
8 Initializing the software for the first time After you have installed and configured HP SMH for the first time, a process to create a private key and corresponding self-signed Base64-encoded certificate is initiated. This certificate is a Base64-encoded PEM file. Key and certificate information • In HP-UX operating systems, both public and private keys for HP SMH are stored in the /var/opt/hpsmh/sslshare directory. The files are called file.pem (private key) and cert.pem (server certificate).
9 Signing in and signing out of HP SMH Signing in with Microsoft Windows XP If HP SMH is installed on a Microsoft Windows XP® system, you must enable the following security option to sign in to HP SMH: 1. 2. 3. 4. Select Control Panel ⇒ Administrative Tools ⇒ Local Security Policy. The Local Security Settings dialog box appears. Select Local Policies. Select Security Options. Right-click Network Access: Sharing and security model for local accounts and select Properties.
trust has not been previously configured. For more information regarding automatically importing the HP SIM certificate, see the HP System Management Homepage Online Help. 2. 3. Click Yes. The Sign In page appears unless you have enabled Anonymous access, then the HP System Management Homepage appears. Enter a user name.
NOTE: If the autostart daemon is not configured (see the smhstartconfig -a off -b on), use the command /opt/hpsmh/lbin/hpsmh start instead to start the HP-UX Apache-based Web Server on ports 2301 (http) and 2381 (https). Signing out Select one of the following options: • In the System Management Homepage banner, click Sign Out. • Close every instance of the web browser that you use to sign in to HP SMH.
10 Uninstalling HP SMH Uninstalling from an HP-UX operating system To uninstall HP SMH on an HP-UX operating system, use the following swremove command: swremove -x enforce_dependencies=false SysMgmtHomepage This method is recommended for uninstalling HP SMH. Uninstalling from a Itanium-based Linux, x86 or x86_64 operating system To uninstall HP SMH: Run the following command: rpm –e hpsmh NOTE: When the HP SMH is uninstalled, where HP SMH directory is /opt/hp/hpsmh, the HP SMH directory is not deleted.
NOTE: The uninstaller uninstall.bat batch file is shipped along with the HP SMH package. Uninstalling manually for Windows and Linux operating systems Uninstalling manually duplicates the actions of the HP SMH uninstaller, which can be accessed through Add/Remove Programs in the Control Panel. Use this procedure if you want to completely uninstall HP SMH, and the uninstaller has been inadvertently removed or corrupted. Note: The _jvm directory is present if there is an existing HP SMH 2.0.1 or 2.0.
• \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\HP System Management Homepage • \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMgmtHP • \HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Hewlett-Packard\System Management Homepage (if present) Uninstalling manually for HP-UX operating systems CAUTION: Manually uninstalling HP-UX SMH is not recommended.
Support and other resources Information to collect before contacting HP Be sure to have the following information available before you contact HP: • Software product name • Hardware product model number • Operating system type and version • Applicable error message • Third-party hardware or software • Technical support registration number (if applicable) How to contact HP Use the following methods to contact HP technical support: • In the United States, see the Customer Service / Contact HP Uni
HP authorized resellers For the name of the nearest HP authorized reseller, see the following sources: • In the United States, see the HP U.S. service locator web site: http://www.hp.com/service_locator • In other locations, see the Contact HP worldwide web site: http://welcome.hp.com/country/us/en/wwcontact.html Documentation feedback HP welcomes your feedback. To make comments and suggestions about product documentation, send a message to: docsfeedback@hp.
Documentation website at http://www.hp.com/go/hpux-core-docs, select HP-UX 11i v3 for the latest documents and for previous versions of the documents, select either HP-UX 11i v1 or HP-UX 11i v2, and search with the document title "Simplifying single-system management on HP-UX 11i - HP System Management Homepage (HP SMH)." • Safe and Powerful: Security in HP-UX System Management Homepage (SMH) This white paper provides an overview of the security aspects in HP SMH.
HP Insight Remote Support Software HP strongly recommends that you install HP Insight Remote Support software to complete the installation or upgrade of your product and to enable enhanced delivery of your HP Warranty, HP Care Pack Service or HP contractual support agreement.
Index C console installation Linux, 51 Linux system preparation, 53 D documentation, 70 F features, 70 G signing in, 61 signing out, 61 software, 9, 59 U uninstallation, 65 W web browsers, supported, 8 websites, 9 Windows installation, 21 installation of HP Smart Update Manager, 35 getting started, 11 H HP Smart Update Manager installation, 35 HP-UX installation, 13 I installation HP Smart Update Manager, 35 HP-UX, 13 Linux x86_64, 51 operating systems, 7 requirements, 7, 9 web browsers, 8 Windows,
