Automated Remote Support Security With TSM and OSM on NonStop Servers

HP NonStop S-Series and NS-Series Server Automated Remote Support
Page 6 of 7
and the alarms (if any) on a system. However,
with monitoring access, a user cannot perform
operations on a system that will affect the
resources on that system (short of physically
pulling a CRU on a system). Monitoring access is
provided with any valid NSK logon.
Actions access allows a user to perform
operations on a system which may affect the
performance or availability of that system. A user
could replace a CRU, upgrade firmware, test or
verify resources, or clear a disk. Actions access
requires a SUPER group logon.
Although remote support has security features,
the system manager must configure and manage
the security environment. The system manager
has total control over the configuration and
deployment of modems and the security of those
modems. Remote support uses NSK security
and does not impose requirements for particular
logon IDs or passwords specifically for support,
although actions access requires a SUPER group
logon. The system manager should manage
NSK security normally in terms of usernames and
passwords. SUPER.SUPER and SUPER.CE are
available by default, but the manager may
remove or change these as well. You are
advised to change the Service Processor and
NetMeeting passwords periodically and notify the
GMCSC of the change. Do not let unauthorized
personnel have access to passwords.
ISEE
HP Instant Support Enterprise Edition (ISEE) is a
proactive, web-based, remote monitoring and
diagnostic tool that helps manage your systems
and devices. ISEE provides continuous hardware
event monitoring and automated notification to
identify and prevent potential critical problems.
The ISEE architecture incorporates a number of
security technologies to protect your network and
support data. Strong encryption, authentication,
and industry-standard security protocols and best
practices are integrated at the physical,
operational, network, and application levels of the
ISEE architecture, providing a multi-level, layered
security structure.
For NonStop installations, the ISEE client is
installed on your NonStop System Console
(NSC) and works with HP NonStop Open System
Management (OSM) software to monitor your
NonStop servers and forward vital system
information to HP support. ISEE will only work
with OSM and will not work with TSM.
With ISEE installed and selected on the NonStop
Console, events are routed through an internet
connection to HP services rather than utilizing the
current modem dial out capability.
Requirements
Hardware
In addition to the standard NSC hardware
requirements, a second LAN connection is
required to implement ISEE. One for connecting
to the NonStop system via the dedicated service
LAN as in use today, and a second to provide the
ISEE internet connectivity via the customers
secure operations LAN. System consoles
shipped by HP today will include two NICs. For
system consoles without a built-in second NIC, a
USB Ethernet adapter cable can be used to
provide this ISEE connectivity.
Software
Your system console must meet the following
minimum requirements in order to utilize ISEE.
• Windows XP Console with SP1
• Notification Director - T0632 G06 AAK
or later release
In addition, T0682 G06 AAC or later release of
OSM server software should be installed.
You also need to install the following software on
the NSC:
• Windows ISEE Client (A.03.90) -
available from the HP software depot –
MS Windows ISEE Client A.03.90.880
Feb2005 or later release