Software Owner's manual

11 Removing an external manager account
For VCEM to manage VC Domains (using the Virtual Connect Manager, the embedded software
in a Virtual Connect Ethernet module) VCEM uses programmatic interfaces with each Virtual Connect
Manager. VCEM automatically creates an external manager account in each Virtual Connect
Manager for subsequent authentication.
NOTE: VCEM uses a Secure Sockets Layer (SSL) connection provided by Systems Insight Manager.
For more information about the available cipher suites and how to enable or disable them, see
the Understanding Systems Insight Manager security white paper at http://h18013.www1.hp.com/
products/servers/management/hpsim/infolibrary.html.
VCEM creates a local account on each Virtual Connect Manager it manages. To prevent inadvertent
modification, this account is not visible from the user-interface on the Virtual Connect Manager
associated with the VC Domain being managed by VCEM. This account has full privileges to the
Virtual Connect Manager and the credentials are used for SOAP interfaces with the Virtual Connect
Manager, using a connection over Secure Sockets Layer (SSL). These credentials are securely stored
on the Central Management Server (CMS) used to run VCEM. Each Virtual Connect Manager
managed by VCEM has a unique, randomly generated password.
Removing the external manager account removes Virtual Connect Manager from VCEM control.
Remove the account using the following methods:
• Preferred method—Uses the VCEM user-interface and removes the account from the Virtual
Connect Manager and the credential store from VCEM.
◦ Remove the VC Domain from the VC Domain Group
• Alternate method—Uses the Virtual Connect Manager command line interface to remove the
account from the Virtual Connect Manager.
If the preferred method is not possible (for example, if the CMS where VCEM is installed is
inoperable or unreachable from the VC Domain), the Virtual Connect Manager supports
command line interfaces that allow the external manager account to be deleted from the Virtual
Connect Manager and also allow a Virtual Connect Manager to be removed from VCEM
control.
To remove the external manager account:
1. Telnet in to the Virtual Connect Manager using an SSH connection such as SSH
[e-mail], where xxx is the VC Domain IP address.
2. To determine the user name of the external manager account, from the Virtual Connect
Manager command prompt, enter show external-manager. For this example, assume
the user name returned was xyz.
114 Removing an external manager account