Users Guide

Table 5. Required Access Control (continued)
Access Type Description
VSS/VDS access Microsoft services running on a computer must be able to automatically log in to the
vss-control volume on the computer.
See Microsoft VSS/VDS Service Access to the Group for more information.
Volume access To create Smart Copies of a volume, the computer must be logged in to the volume.
To log in, the computer must present credentials that match one of the volume’s
access control records. The methods to ensure computer access to a volume or its
snapshots include Storage Manager for SANs or CHAP accounts. For information
about these methods, see Access to Volumes and Snapshots
(Optional) Global Smart Copy access
on other computers
To allow a computer to import Smart Copies from a different computer than the one
that created them, you can set up access controls that enable other computers to
access the Smart Copies.
Specify the global Smart Copy access credentials by selecting PS Group Access,
then Smart Copy access in the ASM/ME.
See PS Group Access Settings for more information.
Smart Copy access on the computer When a computer attempts to import a Smart Copy, it must automatically present
credentials that match one of the Smart Copy’s access control records.
Specify the global Smart Copy access credentials by selecting PS Group Access,
then Smart Copy access in the ASM GUI. When you perform this operation on a
computer that did not create the Smart Copy, use the same CHAP credentials set for
global Smart Copy access on the originating computer.
See PS Group Access Settings for more information.
VSS/VDS Service Access to the Group
When a computer creates or imports Smart Copies, you must that the VSS and VDS services running on the computer can
access the PS Series group without user intervention.
In a PS Series group, VSS/VDS access control records are used to restrict service access, according to IP address, iSCSI
initiator name, CHAP credentials, or any combination of the three. A computer must meet all the requirements in one record in
order for the services to access the PS Series group.
To ensure VSS and VDS services have access to a PS Series group:
● Unitialized PS Series group—Use the Remote Setup Wizardto initialize the array and create a new group. The wizard
creates a VSS/VDS access control record and local CHAP account in the group, and creates CHAP authentication
credentials on the computer.
See the Host Integration Tools Installation and User’s Guide for more information.
● Initialized PS Series group—Use the ASM/ME GUI to configure computer access to an existing group.
See About PS Group Access Settings for more information.
Access to Volumes and Snapshots
A computer must be logged in to the PS Series group volumes for which it will create Smart Copies. To access volumes and
snapshots, use the iSCSI initiator control panel to log in to the PS Series volume for which it will create Smart Copies. Launch
the iSCSI initiator control panel from ASM/ME by clicking Launch → iSCSI Control Panel.
For a computer to discover the iSCSI targets (volumes or snapshots) in a PS Series group, you must configure the group IP
address as the iSCSI discovery address. You can run the Remote Setup Wizard on the computer to initialize an array and
create or expand a PS Series group or to configure computer access to the group. You can also specify the iSCSI discovery
address by using the iSCSI Initiator control panel.
Configure ASM/ME
17