Dell OpenManage Server Administrator Version 7.
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2013 Dell Inc.
Contents 1 Introduction..................................................................................................................................6 Installation................................................................................................................................................................ 6 Updating Individual System Components.................................................................................................................6 Storage Management Service....
Server Administrator Managed System Login — Using The Web Browser....................................................27 Central Web Server Login................................................................................................................................ 27 Using The Active Directory Login.....................................................................................................................28 Single Sign-On......................................................................
6 Server Administrator Logs.......................................................................................................64 Integrated Features................................................................................................................................................ 64 Log Window Task Buttons............................................................................................................................... 64 Server Administrator Logs.................................
Introduction 1 Dell OpenManage Server Administrator (OMSA) provides a comprehensive, one-to-one systems management solution in two ways: from an integrated, web browser-based graphical user interface (GUI) and from a command line interface (CLI) through the operating system. Server Administrator enables system administrators to manage systems locally and remotely on a network.
NOTE: For more information about obtaining and using the Server Update Utility (SUU), to update your Dell Systems or to view the updates available for any systems listed in the Repository, see the Dell Server Update Utility User's Guide at dell.com/support/manuals. Storage Management Service The Storage Management Service provides storage management information in an integrated graphical view.
• Added support for Safari 5.1.7 on Apple Mac OS X • Added support for the following Network Interface Cards (NICs): – Broadcom 57840S Quad Port 10G SFP+ Rack NDC – Broadcom 57840S-k Quad Port 10GbE Blade KR NDC • Support for 240-Volt DC power supplies • Ability to set Platform Event Destinations as IPv4, IPv6, or FQDN on 12G systems with iDRAC7 specific versions • Added support for the following features in Storage Management: – PCIe SSD support for ESXi 5.1 U1.
Server Administrator adds considerable security to these systems management standards. All attributes set operations (for example, changing the value of an asset tag) must be performed with Dell OpenManage IT Assistant while logged in with the required privileges. The following table shows the systems management standards that are available for each supported operating system. Table 1.
• The Dell Remote Access Controller 5 User's Guide provides comprehensive information about using the RACADM command line utility to configure a DRAC 5. • The Dell Chassis Management Controller User’s Guide provides comprehensive information about using the controller that manages all modules in the chassis containing your Dell system.
• 5. Serviceability Tools To view the document, click the required product version. NOTE: You can also directly access the documents using the following links: • For Enterprise System Management documents — dell.com/openmanagemanuals • For Remote Enterprise System Management documents — dell.com/esmmanuals • For Serviceability Tools documents — dell.com/serviceabilitytools • For Client System Management documents — dell.
2 Setup And Administration Dell OpenManage Server Administrator provides security through role- based access control (RBAC), authentication, and encryption for both the Web-based and command line interfaces. Role-Based Access Control RBAC manages security by determining the operations that can be executed by persons in particular roles. Each user is assigned one or more roles, and each role is assigned one or more privileges that are permitted to users in that role.
Instrumentation User, Power User, Administrator, Elevated Administrator Power User, Administrator, Elevated Administrator Remote Access User, Power User, Administrator, Elevated Administrator Administrator, Elevated Administrator Storage Management User, Power User, Administrator, Elevated Administrator Administrator, Elevated Administrator Authentication The Server Administrator authentication scheme ensures that the correct access types are assigned to the correct user privileges.
Encryption Server Administrator is accessed over a secure HTTPS connection using secure socket layer (SSL) technology to ensure and protect the identity of the system being managed. Java Secure Socket Extension (JSSE) is used by supported Microsoft Windows, Red Hat Enterprise Linux, and SUSE Linux Enterprise Server operating systems to protect the user credentials and other sensitive data that is transmitted over the socket connection when a user accesses the Server Administrator home page.
NOTE: You must be logged in as root or an equivalent user to perform the following procedures. NOTE: You must have the useradd utility installed on your system to perform the following procedures. Creating Users NOTE: For information about creating users and user groups, see your operating system documentation. Creating Users With User Privileges 1. Run the following command from the command line: useradd -d -g where is not root.
Table 5. Examples for adding the role definition in OpenManage Server Administrator 3. Bob Ahost Poweruser + root Bhost Administrator + root Chost Administrator Bob *.aus.amer.com Poweruser Mike 192.168.2.3 Poweruser Save and close the file. Best Practices While Using The Omarolemap File The following are the best practices to be considered while working with the omarolemap file : • • Do not delete the following default entries in the omarolemap file.
Disabling Guest And Anonymous Accounts In Supported Windows Operating Systems NOTE: You must be logged in with Administrator privileges to perform this procedure. 1. Open the Computer Management window. 2. In the console tree, expand Local Users and Groups and click Users. 3. Double-click Guest or IUSR_system name user account to see the Properties for those users, or right-click the Guest or IUSR_system name user account and then select Properties. 4. Select Account is disabled and click OK.
your SNMP agent for proper interaction with management applications such as IT Assistant, perform the procedures described in the following sections. NOTE: For additional details on SNMP configuration, see the operating system documentation. Enabling SNMP Access On Remote Hosts (Windows Server 2003 Only) Windows Server 2003, by default, does not accept SNMP packets from remote hosts.
Enabling SNMP Set Operations SNMP Set operations must be enabled on the Server Administrator system to change Server Administrator attributes using IT Assistant. 1. Open the Computer Management window. 2. Expand the Computer Management icon in the window, if necessary. 3. Expand the Services and Applications icon, and then click Services. 4. Scroll down the list of services until you find SNMP Service, right-click SNMP Service, and click Properties. The SNMP Service Properties window appears. 5. 6.
For Red Hat Enterprise Linux and VMware ESXi 4.0 operating systems, the default SNMP agent configuration gives readonly access for the public community only to the MIB-II system branch (identified by the 1.3.6.1.2.1.1 OID) of the MIB tree. This configuration does not allow management applications to retrieve or change Server Administrator or other systems management information outside of the MIB-II system branch.
To enable SNMP Set operations on the system running Server Administrator, edit the SNMP agent configuration file, /etc/snmp/snmpd.conf, and perform the following steps: 1. Find the line that reads: access publicgroup "" any noauth exact all none none or access notConfigGroup "" any noauth exact all none none. 2. Edit this line, replacing the first nonewith all.
NOTE: You can enable SNMP access from multiple specific remote hosts by adding a rocommunity directive for each remote host. 3. To enable SNMP configuration changes, restart the SNMP agent by typing: /etc/init.d/snmpd restart. To enable SNMP access from all remote hosts to a system running Server Administrator, edit the SNMP agent configuration file, /etc/snmp/snmpd.conf, and perform the following steps: 4. Find the line that reads: rocommunity public 127.0.0.1. 5. Edit this line by deleting 127.0.0.1.
a. vicfg-snmp.pl --server --username root --password -c -p X –t @162/ Where represents an unused port. To find an unused port, check the /etc/services file for the port assignment for defined system services.
NOTE: For more information about using the VMware vSphere CLI, see vmware.com/support. Configuring Your System To Send Traps To A Management Station Server Administrator generates SNMP traps in response to changes in the status of sensors and other monitored parameters. One or more trap destinations must be configured on the system running Server Administrator for SNMP traps to be sent to a management station.
b. To open an entire network interface or the SNMP port, select High, Medium, or Enabled and proceed to step 4. 4. Press to go to Customize and press . The Firewall Configuration-Customize screen appears. 5. Select whether to open an entire network interface or just the SNMP port on all network interfaces. a. To open an entire network interface, press to go to one of the Trusted Devices and press the spacebar.
Using Server Administrator 3 To start a Server Administrator session, double-click the Dell OpenManage Server Administrator icon on your desktop. The Server Administrator Log in screen is displayed. The default port for Dell OpenManage Server Administrator is 1311. You can change the port, if required. For instructions on setting up your system preferences, see Dell Systems Management Server Administration. NOTE: Servers running on XenServer 6.
Server Administrator Managed System Login — Using the Desktop Icon This login is available only if the Server Administrator Web Server component is installed on the system. To log in to Server Administrator to manage a remote system: 1. Double-click the Dell OpenManage Server Administrator icon on your desktop. 2. Type the managed system's IP Address or system name or Fully Qualified Domain Name (FQDN).
NOTE: When you launch Server Administrator using either Mozilla Firefox version 3.0 and 3.5 or Microsoft Internet Explorer version 7.0 or 8.0, an intermediate warning page may appear displaying a problem with security certificate. To ensure system security, it is recommended that you generate a new X.509 certificate, reuse an existing X.509 certificate, or import a root certificate or certificate chain from a Certification Authority (CA).
Configuring Security Settings On Systems Running A Supported Microsoft Windows Operating System You must configure the security settings for your browser to log in to Server Administrator from a remote management system that is running a supported Microsoft Windows operating system. The security settings for your browser may prevent the execution of client-side scripts that are used by Server Administrator.
6. Close the browser. 7. Log in to Server Administrator. The Server Administrator Home Page NOTE: Do not use your Web browser toolbar buttons (such as Back and Refresh) while using Server Administrator. Use only the Server Administrator navigation tools. With only a few exceptions, the Server Administrator home page has three main areas: • The global navigation bar provides links to general services. • The system tree displays all visible system objects based on the user's access privileges.
Figure 1. Sample Server Administrator Home Page — Non-Modular System The following figure shows a sample Server Administrator home page layout for a user logged in with administrator privileges on a modular system. Figure 2. Sample Server Administrator Home Page — Modular System Clicking an object in the system tree opens a corresponding action window for that object.
NOTE: Administrator or Power User privileges are required to view most of the system tree objects, system components, action tabs, and data area features that are configurable. Additionally, only users logged in with Administrator privileges can access critical system features such as the shutdown functionality included under the Shutdown tab.
Global Navigation Bar The global navigation bar and its links are available to all user levels in the program. • Click Preferences to open the Preferences home page. See Using the Preferences Home Page. • Click Support to connect to the Dell Support website. • Click About to display Server Administrator version and copyright information. • Click Log Out to end the current Server Administrator program session.
Description Icon The component has a failed or critical condition. A critical condition occurs when a probe or other monitoring tool detects a reading for a component that falls within certain minimum and maximum values. A critical condition requires immediate attention. The component's health status is unknown. Task Buttons Most windows opened from the Server Administrator home page contain at least five task buttons: Print, Export, Email, Help and Refresh.
Figure 3. Gauge Indicator Using The Online Help Context-sensitive online help is available for every window of the Server Administrator home page. Clicking Help opens an independent help window that contains detailed information about the specific window you are viewing. The online help is designed to guide you through the specific actions required to perform all aspects of the Server Administrator services.
Figure 4. Sample Preferences Home Page - Managed System Managed System Preferences When you log in to a remote system, the Preferences home page defaults to the Node Configuration window under the Preferences tab. Click the Server Administrator object to enable or disable access to users with User or Power User privileges. Depending on the user’s group privileges, the Server Administrator object action window may have the Preferences tab.
Set up your user preferences: 1. Click Preferences on the global navigation bar. The Preferences home page appears. 2. Click General Settings. 3. To add a preselected e-mail recipient, type the e-mail address of your designated service contact in the Mail To : field, and click Apply. NOTE: Click E-mail ( ) in any window to send an e-mail message with an attached HTML file of the window to the designated e-mail address.
– Auto Negotiate — Allows connection from browser with any encryption strength. The browser auto negotiates with the Server Administrator Web Server and uses the highest available encryption level for the session. Legacy browsers with weaker encryption can also connect to the Server Administrator. – 128-bit or Higher — Allows connections from browsers with 128-bit or higher encryption strength.
NOTE: When using a self-signed certificate, most web browsers display an untrusted warning as the selfsigned certificate is not signed by a Certificate Authority (CA) trusted by the operating system. Some secure browser settings can also block the self-signed SSL certificates. The OMSA web GUI requires a CA-signed certificate for such secure browsers.
Server Administrator Services 4 The Dell OpenManage Server Administrator Instrumentation Service monitors the health of a system and provides rapid access to detailed fault and performance information gathered by industry-standard systems management agents. The reporting and viewing features allow retrieval of the overall health status for each chassis that comprises your system.
NOTE: You must have Administrator or Power User privileges to view many of the system tree objects, system components, action tabs, and data area features that are configurable. Additionally, only users logged in with Administrator privileges can access critical system features such as the shutdown functionality included under the Shutdown tab.
To view the modular system’s chassis information and Chassis Management Controller (CMC) information, click the Modular Enclosure object. • Tab: Properties • Subtab : Information Under the Properties tab, you can: • View the chassis information for the modular system being monitored. • View detailed Chassis Management Controller (CMC) information for the modular system being monitored.
NOTE: Automatic System Recovery actions may not execute exactly per the time-out period (n seconds) when the watchdog identifies a system that has stopped responding. The action execution time ranges from n-h+1 to n+1 seconds, where n is the time-out period and h is the heart beat interval. The value of the heart beat interval is 7 seconds when n<30 and 15 seconds when n > 30.
• View current Platform Event Filter settings and set the Platform Event Filtering actions to be performed in the event that a system component sensor returns a warning or failure value. You can also use the Configure Destination option to select a destination (IPv4 or IPv6 address) where an alert for a platform event is to be sent. NOTE: Server Administrator does not display the scope ID of the IPv6 address in its graphical user interface.
NOTE: Hardware performance is supported only on Dell PowerEdge 10G and later systems. The Power Supplies option is not available on Dell PowerEdge 1900. Power management is supported on limited Dell PowerEdge 10G and later systems. Power Supply Monitoring and Power Monitoring features are available only for systems that have two or more redundant, hot-swappable power supplies installed.
system’s LCD information can be selected from the drop-down menu. You can also enable Indication of Remote KVM session from the Front Panel sub tab. Batteries Click the Batteries object to view information about your system’s installed batteries. Batteries maintain the time and date when your system is turned off. The battery saves the system’s BIOS setup configuration, which allows the system to reboot efficiently.
NOTE: The NIC configuration information within the Server Administrator BIOS setup may be inaccurate for embedded NICs. Using the BIOS setup screen to enable or disable NICs might produce unexpected results. It is recommended that you perform all configurations for embedded NICs through the actual System Setup screen that is available by pressing while a system is booting. Fans Click the Fans object to manage your system fans.
Unknown Reason Normal • Properties • Subtab: Information [N/A] Under the Properties tab, you can view the details of system’s performance degradation. Intrusion Click the Intrusion object to manage your system's chassis intrusion status. Server Administrator monitors chassis intrusion status as a security measure to prevent unauthorized access to your system's critical components. Chassis intrusion indicates that someone is opening or has opened the cover of the system's chassis.
• View the current SNMP trap alert thresholds and set the alert threshold levels for memory modules. The selected traps are triggered if the system generates a corresponding event at the selected severity level. Network Click the Network object to manage your system's NICs. Server Administrator monitors the status of each NIC present in your system to ensure continuous remote connection. Dell OpenManage Server Administrator reports FCoE and iSoE capabilities of the NICs.
You can also view the System Instantaneous Headroom and System Peak Headroom. The values are displayed in both Watts and BTU/hr (British Thermal Unit). Power thresholds can be set in Watts and BTU/hr. The Statistics tab allows you to view and reset your system’s Power tracking statistics like energy consumption, system peak power, and system peak amperage.
Processors Click the Processors object to manage your system's microprocessor(s). A processor is the primary computational chip inside a system that controls the interpretation and execution of arithmetic and logic functions. The Processors object action window can have the following tabs, depending on the user's group privileges: Properties and Alert Management.
NOTE: Enabling/disabling IPv4/IPv6 is possible only in a dual stack environment (where both the IPv4 and IPv6 stacks are loaded). Users Subtab: Users Under the Users tab, you can modify the remote access user configuration. You can add, configure, and view information about Remote Access Controller users. NOTE: On Dell PowerEdge 9G systems: - Ten user IDs are displayed. If a DRAC card is installed, sixteen user IDs are displayed. - Serial Over LAN Payload column is displayed.
NOTE: Some temperature probe fields differ according to the type of firmware your system has such as BMC or ESM. Some threshold values are not editable on BMC-based systems. When assigning probe threshold values, Server Administrator sometimes rounds the minimum or maximum values you enter to the closest assignable value.
Subtab: Information Under the Properties tab, you can view basic information about your operating system. Storage Server Administrator provides the Storage Management Service: The Storage Management Service provides features for configuring storage devices. In most cases, the Storage Management Service is installed using Typical Setup. The Storage Management Service is available on Microsoft Windows, Red Hat Enterprise Linux, and SUSE Linux Enterprise Server operating systems.
Server Administrator Click the Server Administrator object to enable or disable access to users with User or Power User privileges and to configure the SNMP root password. The Server Administrator object action window can have the following tab, depending on the user's group privileges: Preferences. Subtabs: Access Configuration | SNMP Configuration Preferences Under the Preferences tab, you can: • Enable or disable access to users with User or Power User privileges. • Configure the SNMP root password.
Working With Remote Access Controller 5 This chapter provides information about accessing and using the remote access features of BMC/iDRAC and DRAC. The Dell systems baseboard management controller (BMC)/Integrated Dell Remote Access Controller (iDRAC) monitors the system for critical events by communicating with various sensors on the system board and sends alerts and log events when certain parameters exceed their preset thresholds.
System Non-modular system Main System Chassis Non-modular system For more information on the systems support for remote access devices, see the Dell Systems Software Support Matrix available at dell.com/support/manuals. Server Administrator allows remote, in-band access to event logs, power control, and sensor status information and provides the ability to configure the BMC/iDRAC.
IPv4 Address • IP Address Source • IP Address • IP Subnet • IP Gateway IPv6 Address • IP Address Source • IPv6 Address 1 • Default Gateway • IPv6 Address 2 • Link Local Address • DNS Address Source • Preferred DNS Server • Alternate DNS Server NOTE: You can view IPv4 and IPv6 address details only if you enable the IPv4 and IPv6 address properties under Additional Configuration in the Remote Access tab.
NOTE: The NIC Selection option is available only on 11G systems and earlier. • Primary and Failover Network options For 12G systems, the Primary Network options for Remote Management (iDRAC7) NIC are: LOM1, LOM2, LOM3, LOM4, and Dedicated. The Failover Network options are: LOM1, LOM2, LOM3, LOM4, All LOMs, and None. The dedicated option is available when the iDRAC7 Enterprise License is present and valid. NOTE: The number of LOMs varies based on the system or hardware configuration. 5.
Configuring The Remote Access Device To Use A Serial Port Connection To configure the BMC for communication over a serial port connection: 1. Click the Modular Enclosure → System/Server Module → Main System Chassis/Main System → Remote Access. 2. Click the Configuration tab. 3. Click Serial Port. The Serial Port Configuration window appears. 4. Configure the following details: • Connection Mode Setting • Baud Rate • Flow Control 5. • Channel Privilege Level Limit Click Apply Changes. 6.
5. • Minimum Privilege Required Click Apply Changes. 6. Click Advanced Settings to further configure BMC. 7. In the Serial Over LAN Configuration Advanced Settings window, you may configure the following information: • Character Accumulate Interval 8. • Character Send Threshold Click Apply Changes. 9. Click Go Back to Serial Over LAN Configuration to return to the Serial Over LAN Configuration window.
NOTE: Six additional user entries are configurable when DRAC is installed. This results in a total of 16 users. The same username and password rules apply to BMC/iDRAC and RAC users. When DRAC/iDRAC6 is installed, all the 16 users entries are allocated to DRAC. Setting Platform Event Filter Alerts To configure the most relevant BMC features, such as Platform Event Filter (PEF) parameters and alert destinations using Server Administrator Instrumentation Service: 1. Click the System object. 2.
6. NOTE: Power reduction is not supported on all systems. Power Supply Monitoring and Power Monitoring features are available only for systems that have two or more redundant, hot-swappable power supplies installed. These features are unavailable for permanently installed, non-redundant power supplies that lack power management circuitry. Select the Generate Alert check box for the alerts to be sent.
Server Administrator Logs 6 Server Administrator allows you to view and manage hardware, alert, and command logs. All users can access logs and print reports from either the Server Administrator home page or from its command line interface. Users must be logged in with Administrator privileges to clear logs or must be logged in with Administrator or Power User privileges to e-mail logs to their designated service contact.
• • Alert Log Command Log Hardware Log On Dell PowerEdge 9G and 11G systems, use the hardware log to look for potential problems with your system's hardware components. the hardware log status indicator changes to critical status ( ) when the log file reaches 100 percent capacity. There are two available hardware logs, depending on your system: the Embedded System Management (ESM) log and the System Event Log (SEL).
Information displayed in the Alert log includes: • The severity level of the event • The event ID • The date and time that the event was captured • The category of the event • A description of the event NOTE: The log history may be required for future troubleshooting and diagnostic purposes. Therefore, it is recommended that you save the log files. For detailed information about alert messages, see the Server Administrator Messages Reference Guide at dell.com/ support/manuals.
Setting Alert Actions 7 Setting Alert Actions For Systems Running Supported Red Hat Enterprise Linux And SUSE Linux Enterprise Server Operating Systems When you set alert actions for an event, you can specify the action to display an alert on the server. To perform this action, Server Administrator sends a message to /dev/console. If the Server Administrator system is running an X Window System, the messsage is not displayed.
To resolve this issue, first call the command processor cmd.exe to start your script. For example, the alert action value to execute an application can be set as follows: c:\winnt\system32\cmd.exe /c d:\example\example1.vbs where d:\example\example1.vbs is the full path to the script file. Do not set a path to an interactive application (an application that has a graphical user interface or which requires user input) in the absolute path to the application field.
Table 13. PEF Alert Events Event Description Fan Probe Failure The fan is running too slow or not at all. Voltage Probe Failure The voltage is too low for proper operation. Battery Probe Warning The battery is operating below the recommended charge level. Battery Probe Failure The battery has failed. Discrete Voltage Probe Failure The voltage is too low for proper operation. Temperature Probe Warning The temperature is approaching excessively high or low limits.
Troubleshooting 8 Connection Service Failure On Red Hat Enterprise Linux, whenSELinux is set to enforced mode , the Dell Systems Management Server Administrator (SM SA) Connection service fails to start. Perform one of the following steps and start this service: • Set SELinux to Disabled mode or to Permissive mode. • Change the SELinux allow_execstack property to ON state. Run the following command: a. • setsebool allow_execstack on Change the security context for the SM SA connection service.
c. You log in to Server Administrator as a normal user without administrator privileges. For more information, see the VMware documentation on assigning the role. Fixing A Faulty Server Administrator Installation On Supported Windows Operating Systems You can fix a faulty installation by forcing a reinstall and then performing an uninstall of Server Administrator. To force a reinstall: 1. Check the version of Server Administrator that was previously installed. 2.
Service Name Description Impact of Failure Recovery Mechanism Severity NOTE: If the 32-bit compatibility libraries are not installed on a 64-bit Linux system, the shared services fail to start the inventory collector and display the error message libstdc++.so.5 is required to run the Inventory Collector. The srvadmin-cm.rpm provides the binaries for the inventory collector. For the list of RPMs that srvadmin-cm depends on, see the OpenManage Server Administrator Installation Guide available at dell.
Frequently Asked Questions 9 This section lists the frequently asked questions about OpenManage Server Administrator. NOTE: The following questions are not specific to this release of Server Administrator. 1. Why does ESXi 4.x (4.0 U3) and ESXi 5.x host rebooting functionality fail from OpenManage Server Administrator? This issue is due to VMware stand-alone license (SAL) key. For more information, see the knowledge base article at kb.vmware.com/kb/kb1026060. 2.
9. Can Server Administrator send e-mails when there is a problem? No, Server Administrator is not designed to send e-mails when there is a problem. 10. Is SNMP required for ITA discovery, inventory, and software updates on PowerEdge systems? Can CIM be used by itself for discovery, inventory, and updates or is SNMP required? ITA communicating with Linux systems: SNMP is required on the Linux system for discovery, status polling, and inventory.
