HP Insight Dynamics - VSE for ProLiant Installation and Configuration Guide HP Part Number: 509062-001 Published: January 2009, first edition
© Copyright 2009 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents About This Document.....................................................................................7 Intended Audience..................................................................................................................................7 Publishing History...................................................................................................................................7 Document Organization...................................................................
Performing HP Vulnerability and Patch Management postinstallation configuration tasks............................46 Using the VPM Acquisition Utility..................................................................................................46 Acquiring HP Vulnerability and Patch Management updates.............................................................47 Acquisitions from the VPM server.............................................................................................
List of Tables 1-1 1-2 1-3 1-4 1-5 1-6 1-7 1-8 1-9 1-10 1-11 1-12 1-13 1-14 1-15 1-16 1-17 1-18 2-1 3-1 4-1 Hardware requirements....................................................................................................................11 Operating system naming convention................................................................................................11 HP Insight Software CMS requirements..............................................................................................
About This Document This document covers installation on an HP ProLiant CMS running Microsoft® Windows®, HP-UX, or Linux. Intended Audience This document is for the person who installs and configures servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
Related Documents In addition to this guide, the following table lists the documentation resources available for each of the components on the HP Insight Software DVD. The HP Insight Control Environment Support Matrix lists supported target servers and operating systems for the components in the various HP Insight Software suites. For a comprehensive list of supported products in the release, see the latest support matrix at http://www.hp.com/ go/ice.
HP Performance Management Pack and HP Vulnerability and Patch Management Pack HP Performance Management Pack and HP Vulnerability and Patch Management Pack documentation are incorporated into Insight Control Manager documentation. For information on additional documentation resources, see the "Insight Software Documentation" section. HP Virtual Machine Management Pack • http://www.hp.
NOTE: HP cannot provide product support through this email address. To obtain product support, contact your HP Support Representative, your HP Services Representative, or your authorized HP reseller. For more information about support services, see the support website at http://www.hp.com/go/support. For other ways to contact HP, see the Contact HP website at http://welcome.hp.com/country/us/en/ contact_us.html.
1 Insight Dynamics—VSE ProLiant component installation requirements This chapter describes the requirements for Insight Dynamics—VSE ProLiant component installation. Hardware requirements The following table lists the Insight Software CMS hardware installation requirements.
Windows Server 2008 Specification Windows Server 2003 Windows Server 2003 R2 32-bit 64-bit 32-bit Acrobat® Reader ✓ ✓ ✓ ✓ Adobe Flash Player 9.02 ✓ ✓ ✓ ✓ Internet Protocol Version 6 (IPv6) ✓ ✓ ✓ ✓ ✓ ✓ Microsoft iSCSI Software Initiator 2.05, 2.06 or 2.073 64-bit 32-bit iSCSI 6.0.6001.180004 ✓ ✓ SNMP ✓ ✓ ✓ ✓ TCP/IP with DNS installed so that system names must resolve to an IP addresses. It is necessary that IP addresses must resolve to system names.
Operating system VMware ESX Server 3.0.2 HP SIM RDP ✓ ✓ PMP VPM ✓ IPM ✓ ✓ VMware ESX Server 3.0.3 ✓ VMware ESX Server 3.5 Update 1 or later ✓ ✓ VMM SMP HPID–VSE HP IO ✓ ✓ ✓ ✓ ✓ ✓ HP IR VCEM ✓ ✓ ✓ ✓ ✓ The following table lists the minimum support for installation of HP Insight Software. Installations with Microsoft Data Engine (MSDE) 2000 Service Pack 3a are migrated to Microsoft SQL 2005 Express Edition Service Pack 2.
Install, Reuse, Upgrade Parameter Install Installation directory Value Possible value Description Any valid directory on the installation system (default is C:\Program Files\HP) The directory where you want to install HP Insight Software components. Previously installed components are upgraded in their current location. The installation directory cannot be changed for upgrades. Record existing Rapid Deployment Pack configuration parameters in the following table.
Install, Reuse, Upgrade Parameter Install Reuse/Upgrade Value Possible value Description Domain Domain account with administrator privileges in the local server or domain name currently in use by HP SIM. When the server is part of a Windows domain, a domain account with administrative privileges in the local server can be used. In this case, use the domain for the account provided in the username.
Install, Reuse, Upgrade Parameter Value Possible value Description NOTE: Passwords must be alphanumeric characters or - _ $ & ^ % # + = ` ~ | \ < > period and space. Do not use a space as the last character in the account password. If you are not installing VPM 3.0, your password can also include [ ] ( ) * ! @ ; ? and comma. NOTE: If HP SIM is already installed, the HP Insight Software Integrated Installer reads the service and database credentials from the previous HP SIM installation.
Install, Reuse, Upgrade Parameter Value Possible value Description NOTE: Only Microsoft Proxy Server is tested and supported. Only basic authentication for Internet proxy servers is supported. The use of internet proxy server scripts and full NTLM authentication are not supported. Record the Rapid Deployment Pack configuration parameters in the following table.
Install, Reuse, Upgrade Parameter Install Value Possible value Description Windows Server 2008 x86 Standard key (optional) A valid Windows Server 2008 key This key deploys Windows Server 2008 x86 Standard. For more information, see your Microsoft licensing agreement. Install Windows Server 2008 x64 Datacenter key (optional) A valid Windows Server 2008 key This key deploys Windows Server 2008 x64 Datacenter. For more information, see your Microsoft licensing agreement.
Install, Reuse, Upgrade Parameter Install HP SIM HP SIM Discovery range (recommended) Value Possible value Description ###.###.###.###, where ### ranges from 0 to 255. Multiple ranges can be specified by separating them with white space (tabs, new lines, and spaces). The range of IP addresses on which HP SIM attempts to discover devices. A large IP address range takes longer to discover than a targeted range.
Install, Reuse, Upgrade Parameter Value Possible value Description NOTE: Passwords must be alphanumeric characters or - _ $ & ^ % # + = ` ~ | \ < > period and space. Do not use a space as the last character in the account password. If you are not installing VPM 3.0, your password can also include [ ] ( ) * ! @ ; ? and comma.
2 Performing an installation This chapter describes how to perform an installation. Performing an integrated installation IMPORTANT: Be sure that maintenance activities do not reboot the system during installation. The HP Insight Software integrated installation is completed in a single process with all HP Insight Software components installed on a single management server. Variations to this installation process might occur under any of the following scenarios: • If HP SIM 5.
4. Resolve any remaining issues, or click Close to exit Insight Software Advisor. After you close HP Insight Software Advisor, the Welcome to the HP Insight Software DVD screen reappears. 5. 6. 7. 8. On the Welcome to the HP Insight Software DVD screen, click Review Installation Checklist. A PDF of the HP Insight Software Installation Checklist appears. You must identify the configuration parameters or configure the settings as listed in the checklist.
NOTE: If using an ISO mounting utility, remount the ISO image after reboot. 11. The Warning screen appears, listing the system prerequisites for installation. Your system must meet all these prerequisites. Prerequisites are based on selections from step 8. NOTE: When installing or upgrading HP Server Migration Pack – Universal, HP Insight Software tests for Microsoft iSCSI Software Initiator 2.05, 2.06, or 2.07 for Windows 2003, or integrated iSCSI Initiator for Windows 2008.
1. Select the appropriate option to install Microsoft SQL Server Express, or enter the name of a remote database server: a. To install Microsoft SQL Server 2005 Express, select Install SQL Express. b. To use existing SQL Server 2005 (Enterprise, Standard or Express Editions), 2008 (Enterprise or Standard Editions), select Use existing SQL Server 2005 or 2008 (Enterprise, Standard, or Express Editions).
NOTE: Obtain Windows operating system product keys directly from Microsoft, or at http:// www.microsoft.com/windows/. 22. (Optional) If you are installing HP SIM, enter the following credentials on the Basic settings for HP Systems Insight Manager screen: a. Enter the global protocol settings (the sign-in credentials). b. Enter the SNMP default read community string. HP recommends performing this step at this time, although you can provide these values later through HP SIM.
1. Before updating Insight Software passwords, stop the HP SIM service. When the HP SIM service is stopped, you can then update the passwords for installed Insight Software applications. a. Select Start→Control Panel→Administrative Tools→Services. b. Right-click HP Systems Insight Manager, and then select Stop. IMPORTANT: 2. If installed, change the HP SIM password: a. Change the user password to remove the invalid characters. b. Update the OpenSSH service password. c.
7. If installed, change the SMP – Universal Edition password: a. Change the password to remove the invalid characters. b. Right-click SMP – Universal, and then select Properties. c. Click the Log On tab, and then update with the new password. 8. After updating all Insight Software passwords, restart the HP SIM service: a. Select Start→Control Panel→Administrative Tools→Services. b. Right-click HP Systems Insight Manager, and then select Start.
Bastille Settings on the CMS If Bastille/Install-Time Security is used to secure the CMS, use the “Managed DMZ” level for initial lockdown. To configure the CMS for Managed DMZ, use Procedure 2-4. For additional information, see bastille(1M). Procedure 2-4 Configure CMS for Managed DMZ Under HP-UX Bastille 1. Copy the configuration file /etc/opt/sec_mgmt/bastille/MANDMZ.config to /etc/opt/sec_mgmt/bastille/config. NOTE: In some versions of HP-UX Bastille, the MANDMZ.
NOTE: In some versions of HP-UX Bastille, the MANDMZ.config file might be located in a subdirectory under /etc/opt/sec_mgmt/bastille/. 2. Add the following rules to the top of the file /etc/opt/sec_mgmt/bastille/ipf.customrules. NOTE: line.
NOTE: Only Microsoft Proxy Server is tested and supported. Only basic authentication for Internet proxy servers is supported. The use of internet proxy server scripts and full NTLM authentication are not supported. 3. To check for results, click Check for Updates Now. A list of available updates appears. To modify the scheduled task, click Schedule. The HP SIM task scheduler appears.
Downloading HP Version Control Repository Manager automatic updates After installation, an automatic update from hp.com populates HP Version Control Repository Manager (VCRM) with the latest software and firmware components. When you configure the HP Version Control Agent on your managed node to connect to the HP SIM server (see the HP SIM documentation for more information), the repository is populated with components used to facilitate deployment and to receive updates from HP SIM.
Using the First Time Wizard The First Time Wizard is automatically launched the first time a user with administrative privileges signs in to HP SIM. The administrative account used to install HP SIM is the initial administrative account. If the wizard is canceled before completion, it restarts each time an administrative user signs in. You can cancel and disable the wizard from starting automatically by selecting the Do not automatically show this wizard again checkbox and clicking Cancel.
Enabling automatic system discovery HP SIM uses automatic discovery to find and identify systems on the network. The System Automatic Discovery task is the default discovery task and is disabled by default. You can enable and configure the System Automatic Discovery task by selecting to have it run immediately when First Time Wizard finishes, or by selecting Options→Discovery from the HP SIM menu. You can create multiple automatic discovery tasks from the Discovery page. 1. 2. 3. 4.
9. administrative rights or the administrator template in the previous step, this option is automatically selected. Under the Sign-In IP Address Restrictions section, in the Inclusion ranges field, enter the IP addresses of the systems you want this user to be able to use as a client browsing this CMS. If you list multiple IP addresses, separate them with a semicolon (;). Each range is a single IP address or two IP addresses separated by a dash (-).
If you are changing the e-mail settings from the Options→Events→Automatic Event Handling→Email Settings page, click OK to save changes. NOTE: If the Server Requires Authentication option is selected, and you enter incorrect account information, e-mail event notifications do not reach the intended recipients. Additional e-mail settings The globalsettings.props contains properties that can be set for additional information to be included in e-mail messages.
Keyword Description DNAME Device name DDISCOV Device discovered time DURL Device URL HDR Header which can be used to format message Setting up managed systems Setting up managed systems from a Windows CMS Use the following checklist as a guideline to assist you with setting up managed systems from a Windows CMS: 1. 2. Ensure that HP SIM is installed on the CMS. Ensure the First Time Wizard has been completed on the CMS. Important: You must run discovery before setting up managed systems.
You can install Insight Management Agents or providers, either WBEM or SNMP, on managed systems so that HP SIM can collect inventory and status information from these systems and receive event notifications from the systems. Installation is supported only on ProLiant or Itanium-based servers with a Windows operating systems. From the Step 2: Install Providers and Agents (Optional) page: a. b. c. d. e.
Supported systems HP ProLiant Agent OpenSSH Version Control Agent System Management Home Page ProLiant systems Not supported with 32-bit Windows operating systems (2000) 7.60 (32-bit) 5.1p1 2.1.8 2.1.8.780 Itanium-based 6.1.0.0 systems with Windows operating system (2003) 5.1.10 5.1p1-3 2.1.7.770 2.1.8.179 4. HP WBEM Provider If you want to install a 64-bit agent or provider, be sure the target system is identified as a 64-bit system in HP SIM.
6. Configure the target system by selecting one of the following options: • Configure WBEM / WMI. This section enables you to configure the target Linux, Windows, or HP-UX system to send WBEM indications or events to HP SIM.
does not need to be an administrator of the managed system or have sign-in rights. The domain administrator should create a special domain account. To enter the credentials for HP SIM to use to access the managed systems: 1. 2. 3. 4. In the User name field, enter a user name. In the Password field, enter the password. In the Password (Verify) field, re-enter the password exactly as it was entered in the Password field. In the Domain field, enter the Windows domain if the target belongs to a domain.
• Configure secure shell (SSH) access systems. Select this option to configure SSH access on managed If you select this option, you must select one of the following options: • Host based authentication for SSH Note: For this option to work, the user name and password provided in step 2 must be an administrative level account. For Linux or HP-UX targets, it must be the root account and password.
7. Click Next. The Step 4: Enter credentials page appears. The credentials specified on this page are for a privileged account on the target system. If you select Configure secure shell (SSH) access for a Windows target system, the account you specify must be a member of the local Administrators group. For Windows targets using a domain account, the account is automatically added to this group. 8. From the Step 4: Enter credentials page, enter the following credentials.
• The stderr tab • View Printable Report You can print reports for the selected target system or for all target systems associated with the task instance. This tab displays information if the executable experienced an error. To print a report: a. Click View Printable Report. An Options Message box appears. b. c. Select a report. Click OK to display the report, or click Cancel to return to the View Task Results page. 10.
time-out (for example, five seconds) with at least one retry. For a LAN, a shorter time-out can be used. You can configure these settings on a single-system basis. To access the Global Credentials page, select Go to the Global Credentials page to set global SNMP community strings. 7. In the Read community string field, enter up to 10 read community strings. This value is case-sensitive.
• Improve communications, planning, and management of the Customer Enterprise.
3. (Optional) Configure the MAC addresses to match the needs in the data center. a. From the VCEM Home page, click the Home tab. To return to the Home page, click the Home link on the upper right-hand corner of the screen. b. Click the Configure a MAC address hyperlink. c. To create a custom range, click Add custom. 4. 5. (Optional) Create MAC exclusion ranges.. (Optional) Configure the World Wide Names ranges to meet your requirements. a. From the VCEM Home page, click the Home tab.
6. 7. 8. 9. If you use a proxy, select I use a proxy, and enter the appropriate configuration information. If your proxy requires authentication, select My proxy requires authentication, and enter the appropriate user credentials. Only basic (not encrypted) authentication is supported. Click Next. To run the patch acquisition, click Run Now. The vulnerability and patch acquisition process begins.
Modifying the HP Vulnerability and Patch Management settings You must complete a patch acquisition using the VPM Acquisition Utility and save to the designated directory before you can complete a patch acquisition. For more information, see Acquiring HP Vulnerability and Patch Management updates. 1. Select Options→Vulnerability and Patch Management→Settings. 2. Select the source for the patch and vulnerability updates.
• If the system that created the systemid file is running Red Hat Advanced Server Linux 3, rename the file redhat 3as.sid. • If the system that created the systemid file is running Red Hat Advanced Server Linux 2.1, rename the file redhat 2.1as.sid. Managing VPM target systems Vulnerability and Patch Management Pack manages target systems. To enable HP SIM to better identify the target systems, HP recommends installing HP Management Agents on ProLiant target systems.
You can deploy the VMM Agent manually or from HP SIM. This section includes instructions for various methods of deploying agents. All the communications in Virtual Machine Management Pack use SSL digital certificates that are dynamically generated at the time of registering virtual machine host using the register agent feature of Virtual Machine Management Pack.
3. 4. 5. 6. The Password box is always blank and saved values such as User Name, Service URL, and version appear when you visit this page. Make sure they are correct. When this page is loaded, the connection is tested with the stored values. • The informational icon ( ) indicates that no credentials are present. • The red X icon ( ) indicates that the connection is failing. • The green check icon ( ) indicates that the connection is working. Enter the password.
# /etc/init.d/owcimomd stop Shutting down OpenWBEM CIMOM Daemon 2. Remove OpenWBEM and packages that depend on OpenWBEM through the YaST Control Center or another package management application. Procedure 2-30 Download OpenPegasus WBEM Use the following steps to download OpenPegasus WBEM packages from the HP website. 1. 2. 3. Go to http://www.hp.com/. Enter “OpenPegasus WBEM Services” in the product search field and click the Search button.
3 Licensing Insight Dynamics suites This section describes the licensing procedures for Insight Control and Insight Dynamics suites. You must have HP SIM administrative rights to add or deploy suite licenses. NOTE: The HP Insight Dynamics – VSE suite for ProLiant has separate license keys. Insight Control Environment (ICE) is a prerequisite for using the HP Insight Dynamics – VSE suite.
IMPORTANT: HP SIM collects HP Integrated Lights-Out (iLO) license information through an SSH connection. If you have not already done so, you must configure the proper SSH credentials so that HP SIM can collect this information. To perform an automatic collection of iLO licenses, select Deploy→License Manager→Collect Remote License info. For more information about this procedure, see the HP SIM Technical Reference Guide.
1. 2. 3. 4. 5. Select Deploy→License Manager. Click Add Licenses. Enter the key in the Specify Key String field. Click Process. When key details appear, click Add Licenses Now. To apply an Insight Control Environment for BladeSystem license key in HP SIM: 1. 2. 3. 4. 5. 6. 7. Select Deploy→License Manager. Select Insight Control Environment for BladeSystem in the Product License Information list, and then click the Manage Licenses button. A list of license keys appears. Click Apply Licenses.
Adding and applying licenses to iLO Power Management Pack Your iLO Power Management Pack license includes keys for the Insight Power Manager (IPM) and iLO Advanced Pack or iLO Advanced Pack for BladeSystem. You must apply both keys to each managed target system. Your Insight Power Manager license key might contain one or more licenses. One license is required for each managed target system. To add the license key: 1. 2. 3. 4. 5. Select Deploy→License Manager. Click Add Licenses.
3. 4. 5. 6. Click Licensing. The iLO 2 license activation screen appears. Enter the license key in the spaces provided. Press Tab or click inside a box to move between boxes. The Activation key box advances as you enter data. Click Licensing to clear the boxes and reload the page. Click Install. Click OK.
Applying an HP Insight Dynamics – VSE license in HP SIM applies licenses for the VSE Management Software and Server Migration Pack – Universal Edition. You must apply Insight Control Environment, VCEM, and iLO2 licenses separately. Licensing HP Insight Dynamics – VSE The HP Insight Dynamics – VSE suite for ProLiant has separate license keys. HP Insight Control Environment is a prerequisite for using the Insight Dynamics suite.
4 Accessing ProLiant components Accessing HP Insight Software component interfaces in HP SIM The following table lists the options to access the various HP Insight Software components in HP SIM.
Index A F accessing HP Insight Software interfaces within HP SIM, 59 acquiring updates HP Vulnerability and Patch Management updates, 47 adding and applying licenses first-time installation or upgrade, 55 HP Insight Dynamics – VSE, 58 HP Server Migration Pack – Universal Edition, 58 HP Virtual Connect Enterprise Manager, 57 iLO 2 license keys, 56 iLO Power Management Pack, 56 Insight Control Environment, 53, 54 Insight Control Environment for BladeSystem, 54 Insight Power Manager managed systems, 56 manag
licensing Insight Dynamics suites, 53 licensing Insight Software components adding iLO 2 license keys, 56 iLO Power Management Pack, 56 Insight Power Manager managed systems, 56 managing Insight Power Manager license keys, 56 Linux managed systems, 51 M managed systems Windows, 36 management agents, 36 management protocols, 36 modifying HP Vulnerability and Patch Management settings, 48 setting up virtual machine hosts for Virtual Machine Management Pack, 29 using HP Insight Software update utility, 29 Pr
W Windows managed systems, 36 WMI Mapper installation time, 20 63
