Software Owner manual

11 Removing an external manager account
For VCEM to manage VC Domains (using VCM), the embedded software in a Virtual Connect
Ethernet module) VCEM uses programmatic interfaces with each VCM. VCEM automatically creates
an external manager account in each VCM for subsequent authentication.
NOTE: VCEM uses a Secure Sockets Layer (SSL) connection provided by Systems Insight Manager.
For more information about the available cipher suites and how to enable or disable them, see
the Understanding Systems Insight Manager security white paper at http://h18013.www1.hp.com/
products/servers/management/hpsim/infolibrary.html.
VCEM creates a local account on each VCM it manages. To prevent inadvertent modification, this
account is not visible from the user-interface on the VCM associated with the VC Domain being
managed by VCEM. This account has full privileges to the VCM and the credentials are used for
SOAP interfaces with the VCM, using a connection over Secure Sockets Layer (SSL). These
credentials are securely stored on the Central Management Server (CMS) used to run VCEM. Each
VCM managed by VCEM has a unique, randomly generated password.
Removing the external manager account removes VCM from VCEM control. Remove the account
using the following methods:
• Preferred method—Uses the VCEM user-interface and removes the account from VCM and
the credential store from VCEM.
◦ Remove the VC Domain from the VC Domain Group
• Alternate method—Uses the VCM command line interface to remove the account from the
VCM.
If the preferred method is not possible (for example, if the CMS where VCEM is installed is
inoperable or unreachable from the VC Domain), the VCM supports command line interfaces
that allow the external manager account to be deleted from the VCM and also allow a VCM
to be removed from VCEM control.
To remove the external manager account:
1. Telnet in to the VCM using an SSH connection such as SSH [e-mail],
where xxx is the VC Domain IP address.
2. To determine the user name of the external manager account, from the VCM command
prompt, enter show external-manager. For this example, assume the user name
returned was xyz.
3. To disable the account, from the VCM command prompt, enter
set external-manager Username=xyz Enabled=false
Perform the following:
◦ To remove the account and release the VC Domain from VCEM control, from the
VCM command prompt, enter
remove external-manager Username=xyz
mactype=<Factory-Default/User-Defined> MacStart=<> MacEnd=<>
wwnType=<Factory-Default/User-Defined> WwnStart=<> WwnEnd=<>
serverIdType=<Factory-Default/User-Defined> serverIdStart=<>
serverIdEnd=<>
NOTE: The "-quiet" option is used to suppress user confirmation prompts. This option is useful
for scripting operations. This option is available for the disable account, remove the account,
and release ranges commands.
151