Dell EMC OpenManage Version 9.0.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright Copyright © 2017 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Introduction..................................................................................................................... 5 What Is New In This Release.............................................................................................................................................. 5 Software Availability.....................................................................................................................................................
Uninstalling Systems Management Software................................................................................................................... 26 5 Using Microsoft Active Directory...................................................................................27 Active Directory Schema Extensions................................................................................................................................ 27 Overview Of The Active Directory Schema Extensions................
1 Introduction This topic provides information on: • Installing Server Administrator on managed systems. • Installing and using the Remote Enablement feature. • Managing remote systems using Server Administrator Web Server. • Configuring the system before and during a deployment or upgrade. NOTE: If you are installing management station and managed system software on the same system, install identical software versions to avoid system conflicts.
Systems management software comprises of two ISO images: • Systems Management Tools and Documentation • Server Update Utility NOTE: For more information on these ISO images, see Systems Management Tools And Documentation Installation Guide. Server Administrator Components On A Managed System The setup program provides the following options: • Custom Setup • Typical Setup The custom setup option allows you to select the software components you want to install.
Component What is installed Deployment Scenario Systems to install on WMI (Management Interface) Windows Management Instrumentation Interface of Server Instrumentation Install to provide local and remote system management solutions to manage Server data using WMI protocol. Supported systems. For a list of supported systems, see the Dell EMC OpenManage Systems Software Support Matrix.
Security Features Systems management software components provide these security features: • Authentication for users from operating system with different privilege levels, or by using the optional Microsoft Active Directory. • User ID and password configuration through the web-based interface or the command line interface (CLI), in most cases. • SSL encryption (Auto Negotiate and 128-bit or higher). NOTE: Telnet does not support SSL encryption.
2 Preinstallation Setup Ensure that you perform the following before installing Server Administrator: • Read the installation instructions for the operating system. • Read the Installation Requirements to ensure that the system meets or exceeds the minimum requirements. • Read the applicable readme files and the Dell EMC OpenManage Systems Software Support Matrix. • Close all applications running on the system before installing the Server Administrator applications. Prerequisite Checker The setup.
Return Code Description —5 The prerequisite checker does not run. The user failed to change the working directory to %TEMP%. —6 The destination directory does not exist. The prerequisite checker does not run. —7 An internal error has occurred. The prerequisite checker does not run. —8 The software is already running. The prerequisite checker does not run. —9 The WSH is corrupted, is a wrong version, or is not installed. The prerequisite checker does not run.
NOTE: Ensure that the web browser is configured to bypass the proxy server for local addresses. Multilingual User Interface Support The installer provides Multilingual User Interface (MUI) support available on the following operating systems: • Microsoft Windows Server 2016 The MUI Pack are a set of language-specific resource files that you can add to the English version of a supported Windows operating system.
Table 3. Availability of Systems Management Protocol by Operating Systems Operating System SNMP CIM/WMI Supported Microsoft Windows operating systems. Available from the operating system installation media. Always installed. Digital Certificates All Server Administrator packages for Microsoft are digitally signed with a certificate that helps guarantee the integrity of the installation packages.
Configuring SNMP Agents The systems management software supports the SNMP systems management standard on all supported operating systems. The SNMP support may or may not be installed depending on the operating system and how the operating system was installed. An installed supported systems management protocol standard, such as SNMP, is required before installing the systems management software.
• Windows Remote Management (WinRM) • CA/Self-Signed Certificate • WinRM HTTPS Listener Port • Authorization for WinRM and Windows Management Instrumentation (WMI) Servers Installing WinRM On Windows Server, Windows client operating system, and WinRM 2.0 is installed by default. On Windows Server, WinRM 1.1 is installed by default.
If you are using WinRM 2.0, type winrm configsddl default. 3. Click Add and add the required users or groups (local/domain) to the list. 4. Provide the appropriate permission(s) to the respective users and click OK. WMI To configure user authorization for WMI servers: 1. Click Start → Run. 2. Type wmimgmt.msc, and then click OK. The Windows Management Infrastructure (WMI) screen is displayed. 3. Right-click the WMI Control (Local) node in the left pane, and then click Properties.
3 Installing Managed System Software On Microsoft Windows Operating Systems On Microsoft Windows, an autorun utility is displayed when you insert the Dell EMC OpenManage Systems Management Tools and Documentation software. This utility allows you to choose the systems management software you want to install on the system. If the autorun program does not start automatically, use the autorun program from the DVD root or the setup program in the SYSMGMT\srvadmin\windows directory on the Dell EMC OpenManage Sys
You want to Select Remotely access an inoperable system, receive alert notifications when a system is down, and remotely restart a system. iDRAC Command Line Tools. NOTE: Install the Simple Network Management Protocol (SNMP) agent on the managed system using the operating system medium before installing the managed system software. Installer Location The location of the installers is: • DVD Drive\SYSMGMT\srvadmin\windows\SystemsManagementx64\SysMgmtx64.
• • • • • • SNMP Operating System Logging DRAC Command Line Tools Intel SNMP Agent Broadcom SNMP Agent QLogic SNMP Agent During a Typical installation, individual management station services that do not meet the specific hardware and software requirement for that service are not installed on the managed systems.
10. Click Next on the Custom Setup dialog box to accept the selected software features for installation. NOTE: You can cancel the installation process by clicking Cancel. The installation rolls back the changes that you made. If you click Cancel after a certain point in the installation process, the installation may not roll back properly, leaving the system with an incomplete installation. The Alert Messaging Type Selection dialog box is displayed. 11.
Mapping A Drive To Act As The Typical Unattended Installation Package 1. Share an image of the Systems Management Tools and Documentation software with each remote system on which you want to install Server Administrator. You can accomplish this task by directly sharing the software or by copying the entire ISO image to a drive and sharing the copy. 2. Create a script that maps a drive from the remote systems to the shared drive described in step 1. This script should execute msiexec.exe /i Mapped Drive\
Optional Command Line Settings The following table shows the optional settings available for the msiexec.exe MSI installer. Type the optional settings on the command line after msiexec.exe with a space between each setting. NOTE: See support.microsoft.com for details about all the command-line switches for the Windows Installer Tools. Table 5. Command Line Settings for MSI Installer Setting Result /i This command installs or configures a product. /i .
For example, running msiexec.exe /i SysMgmt.msi /qn installs Server Administrator features on each remote system based on the system's hardware configuration. This installation is done silently and unattended. Customization Parameters REINSTALL and REMOVE customization CLI parameters provide a way to customize the exact software features to install, reinstall, or uninstall when running a silent or unattended installation.
Feature ID Description OMSM Installs SI, OMSS, CLI, WMI, SNMP, OSLOG NOTE: To manage the server, select either Server Administrator Webserver or one of the Management Interfaces – CLI, WMI, SNMP or OSLOG along with Server Instrumentation (SI) or Server Administrator Storage Management Service (OMSS). NOTE: If SI or OMSS is installed using silent installation (unattended installation), then IWS and WMI are automatically installed. MSI Return Code An application event log entry is recorded in the SysMgmt.
Uninstalling Managed System Software You can uninstall managed system software features by using the Dell EMC OpenManage Systems Management Tools and Documentation software, or the operating system. You can simultaneously perform unattended uninstallation on multiple systems. Uninstalling Managed System Software Using The Provided Media Perform the following tasks to uninstall managed system software using the provided media. 1.
Unattended uninstall using the product GUID If you do not have the installation image or the MSI package available during an uninstallation, use the package GUIDs in the command line to uninstall systems management software on managed systems or management stations running Windows operating system. For managed systems, use msiexec.
4 Installing Managed System Software On Microsoft Windows Server and Microsoft Hyper-V Server The Server Core installation option of the Microsoft Windows Server and Hyper-V Server operating system provides a minimal environment for running specific server roles that reduce the maintenance and management requirements and the attack surface for those server roles. A Windows Server or Hyper-V Server installation installs only a subset of the binaries that are required by the supported server roles.
5 Using Microsoft Active Directory If you use Active Directory service software, configure it to control access to the network. The Active Directory database is modified to support remote management authentication and authorization. Server Administrator, as well as Integrated Remote Access Controllers (iDRAC), Remote Access Controllers (RAC), can now interface with Active Directory. With this tool, you can add and control users and privileges from one central database.
Figure 1. Typical Setup for Active Directory Objects In addition, you can set up Active Directory objects in a single domain or in multiple domains. Setting up objects in a single domain does not vary, whether you are setting up RAC, or Server Administrator objects. When multiple domains are involved, however, there are some differences. The following figure shows the set up of the Active Directory objects in a single domain.
Setting Up Objects In A Single Domain To set up the objects in a single domain scenario, perform the following tasks: 1. Create two Association Objects. 2. Create two RAC Product Objects, RAC1 and RAC2, to represent the two DRAC 4 cards. 3. Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privileges. 4. Group User1 and User2 into Group1. 5.
Setting Up Server Administrator Active Directory Objects In Multiple Domains For Server Administrator, the users in a single Association can be in separate domains and need not be in a Universal group. The following is a very similar example to show how Server Administrator systems in separate domains affect the setup of directory objects. Instead of RAC devices, you will have two systems running Server Administrator (Server Administrator Products sys1 and sys2). sys1 and sys2 are in different domains.
• Adding Users and Privileges to Active Directory • Configuring the Systems or Devices Configuring The Active Directory Product Name To configure the Active Directory product name: 1. Locate the omsaoem.ini file in the installation directory. 2. Edit the file to add the line adproductname=text, where text is the name of the product object that you created in Active Directory. For example, the omsaoem.ini file contains the following syntax if the Active Directory product name is configured to omsaApp.
CAUTION: The Dell Schema Extender uses the SchemaExtenderOem.ini file. To ensure that the Dell Schema Extender utility functions properly, do not modify the name or the contents of this file. 1. Click Next on the Welcome screen. 2. Read the warning and click Next. 3. Select Use Current Log In Credentials or enter a user name and password with schema administrator rights. 4. Click Next to run the Dell Schema Extender. 5. Click Finish.
Table 12. dellProduct Class OID 1.2.840.113556.1.8000.1280.1.1.1.5 Description This is the main class from which all the products are derived. Class Type Structural Class SuperClasses Computer Attributes dellAssociationMembers Table 13. dellOmsa2AuxClass Class OID 1.2.840.113556.1.8000.1280.1.2.1.1 Description This class is used to define the privileges (Authorization Rights) for Server Administrator.
Attribute Name/Description Assigned OID/Syntax Object Identifier Single Valued Link ID: 12071 Table 16. Server Administrator-Specific Attributes Added to the Active Directory Schema Attribute Name/Description Assigned OID/Syntax Object Identifier dellOMSAIsReadOnlyUser Single Valued 1.2.840.113556.1.8000.1280.1.2.2.1 TRUE if the User has Read-Only rights in Boolean (LDAPTYPE_BOOLEAN 1.3.6.1.4.1.1466.115.121.1.7) Server Administrator TRUE dellOMSAIsReadWriteUser 1.2.840.113556.1.8000.1280.1.2.2.
NOTE: Server Administrator users must use Universal-type Product Groups to span domains with their product objects. NOTE: When adding Universal-type Product Groups from separate domains, create an Association object with Universal scope. The default Association objects created by the Schema Extender utility are domain Local Groups and do not work with Universal-type Product Groups from other domains. 1. In the Console Root (MMC) window, right-click a container. 2. Select New. 3.
Click the Privilege Object tab to add the privilege object to the association that defines the user’s or user group’s privileges when authenticating to a system. NOTE: Add only one Privilege Object to an Association Object. To Add A Privilege 1. Select the Privileges Object tab and click Add. 2. Type the Privilege Object name or browse and click OK. Click the Products tab to add one or more systems or devices to the association.
6 Frequently Asked Questions What ports do systems management applications use? The default port used by Server Administrator is 1311. These ports are configurable. For port information of a particular component, see the User Guide of that respective component.
What are the firewall-related configuration that needs to be done for WinRM? With firewall turned ON, WinRM must be added to the firewall exclusion list to allow TCP port 443 for HTTPS traffic. When launching the Systems Management Install, an error message may display, stating a failure to load a specific library, a denial of access, or an initialization error. An example of installation failure during Systems Management Install is "failed to load OMIL64.DLL.
Does systems management Install support Windows Advertised installation? No. Systems management Install does not support Windows Advertised installation - the process of automatically distributing a program to client computers for installation, through the Windows group policies. How do I check the disk space availability during custom installation? In the Custom Setup screen, you must click an active feature to view the hard drive space availability or to change the installation directory.
Can I launch my installation without running the prerequisite checker? How do I do that? Yes, you can. For example, you can run the MSI of the managed system software, directly from SYSMGMT\srvadmin\Windows \SystemsManagement. In general, it is not a good idea to bypass the prerequisite checker as there could be important information that you would not know otherwise.
