Server Administrator Version 8.0.
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright Copyright © 2014 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws.
Contents 1 Introduction........................................................................................................... 6 What Is New In This Release................................................................................................................. 6 Software Availability.........................................................................................................................6 Systems Management Software.................................................................
Uninstalling Managed System Software Features Using The Operating System........................32 Unattended Uninstall Using The Product GUID...........................................................................33 Unattended Uninstallation Of Managed System Software.......................................................... 33 4 Installing Managed System Software On Microsoft Windows Server 2008 Core And Microsoft Hyper-V Server........................................................
Do I need to uninstall previous versions of Server Administrator before installing Citrix Metaframe?.................................................................................................................................... 51 When I run systems management Install, I see unreadable characters on the Prerequisite check information screen..............................................................................................................
Introduction 1 This topic provides information on: • Installing Server Administrator on managed systems. • Installing and using the Remote Enablement feature. • Managing remote systems using Server Administrator Web Server. • Configuring the system before and during a deployment. NOTE: If you are installing management station and managed system software on the same system, install identical software versions to avoid system conflicts.
Server Administrator Components On A Managed System The setup program provides the following options: • Custom Setup • Typical Setup The custom setup option enables you to select the software components you want to install. The table lists the various managed system software components that you can install during a custom installation. Table 1.
Component What is installed Deployment Scenario Systems to install on Command Line Interface (Management Interface) Command Line Interface of Server Instrumentation Install to provide local and remote system management solutions to manage Server and Storage instrumentation data using commandline interfaces. Supported systems. For a list of supported systems, see the Systems Software Support Matrix.
Component What is installed Deployment Scenario Systems to install on event data and the most recent crash screen (available only on systems running Windows operating system) to help you diagnose the probable cause of a system crash. Intel SNMP Agent (NIC Interfaces) Intel Simple Network Management Protocol (SNMP) Agent Install to enable Server Administrator to obtain information about Network Interface Cards (NICs).
• The Systems Build and Update Utility User’s Guide provides information on using the Systems Build and Update Utility. • The Systems Software Support Matrix provides information about the various systems, the operating systems supported by these systems, and the systems management components that can be installed on these systems. • The Server Administrator User's Guide describes the installation and use of Server Administrator.
2 Preinstallation Setup Ensure that you perform the following before installing Server Administrator: • Read the installation instructions for the operating system. • Read the Installation Requirements to ensure that the system meets or exceeds the minimum requirements. • Read the applicable readme files and the Systems Software Support Matrix. • Close all applications running on the system before installing the Server Administrator applications. Prerequisite Checker The setup.exe (located at \SYSM
Return Code Description resolve the conditions causing the warning before proceeding with the installation of the software. To continue, select and install the software using the custom installation. 3 An error condition, or conditions, is associated with the software. Resolve the conditions causing the error before proceeding with the installation of the software. If you do not resolve the issues, the software is not installed. —1 A Microsoft Windows Script Host (WSH) error.
• Domain Name System (DNS) or Windows Internet Name Service (WINS) server running on the system can cause a warning condition for RAC software. See the relevant section in Server Administrator readme for more information. • Do not install managed system and management station RAC components on the same system. Install only the managed system RAC components, as they offer the required functionality.
NOTE: When the MUI Pack is set to non-Unicode languages like Simplified Chinese, set the system locale to Simplified Chinese. This enables display of the prerequisite checker messages. This is because any non-Unicode application runs only when the system locale (also called Language for non-Unicode Programs on XP) is set to match the application's language.
The following table shows the availability of the systems management standards for each supported operating system. Table 3. Availability of Systems Management Protocol by Operating Systems Operating System SNMP CIM/WMI Supported Microsoft Windows operating systems. Available from the operating system installation media. Always installed.
! — Flush each line to the log "*" — Wildcard, log all information except for the v option. To include the v option, specify "/l*v". Once activated, the log files are generated in the %TEMP% directory. Some log files generated in this directory are: • Managed System Installation – SysMgmt_.log These log files are created by default if the prerequisite checker user interface (UI) is running.
Setting User And Server Preferences You can set user and secure port server preferences for Server Administrator from the Preferences web page. Click General Settings and click either the User tab or Web Server tab. X.509 Certificate Management Web certificates are necessary to ensure that the identity and information exchanged with a remote system is not viewed or changed by others. To ensure system security, it is strongly recommended that you either generate a new X.509 certificate, reuse an existing X.
Certificate Authority Signed Self-Signed Certificate You need a certificate signed by a CA or a self‑signed certificate (generated using the SelfSSL tool) to install and configure the Remote Enablement feature on the system. NOTE: It is recommended that you use a certificate signed by a CA. Using A Certificate Signed By A CA To use a certificate signed by a CA: 1. Request a valid CA signed certificate. 2. Create a HTTP listener with the CA signed certificate.
If you are using WinRM 2.0, type winrm configsddl default. 3. Click Add and add the required users or groups (local/domain) to the list. 4. Provide the appropriate permission(s) to the respective users and click OK. WMI To configure user authorization for WMI servers: 1. Click Start → Run. 2. Type wmimgmt.msc, and then click OK. The Windows Management Infrastructure (WMI) screen is displayed. 3. Right-click the WMI Control (Local) node in the left pane, and then click Properties.
Installing Managed System Software On Microsoft Windows Operating Systems 3 On Microsoft Windows, an autorun utility is displayed when you insert the Systems Management Tools and Documentation DVD. This utility allows you to choose the systems management software you want to install on the system. If the autorun program does not start automatically, use the autorun program from the DVD root or the setup program in the SYSMGMT\srvadmin\windows directory on the Systems Management Tools and Documentation DVD
You want to Select Manage and monitor the current system on the Simple Network Management Protocol Interface. Server Instrumentation and SNMP. Manage and monitor the current system from a remote system. Remote Enablement For systems running on Microsoft Windows, Remote Enablement is under the Server Instrumentation option. You must then install the Server Administrator Web Server on the remote system.
NOTE: If you use the MSI file to try to install Server Administrator on a system where the User Account Control settings is set to a greater level, the installation fails and displays a message: Server Administrator installation program could not install the HAPI driver. You must perform the installation process as an administrator. You can also install Server Administrator successfully by the following methods: • Click the setup.
NOTE: Management station and managed system services can be installed in the same or in different directories. You can select the directory for installation. 1. Log in with built-in administrator privileges to the system on which you want to install the system management software. 2. Close all open applications and disable any virus-scanning software. 3. Insert the Systems Management Tools and Documentation DVD into the system's DVD drive. The autorun menu is displayed. 4.
NOTE: If you have selected Remote Enablement during installation, an error message A provider, WinTunnel, has been registered in the Windows Management Instrumentation namespace ROOT\dcim\sysman to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. is logged in Windows Event Log. You can safely ignore this message and continue with installation.
NOTE: After an unattended installation is complete, to use the command line interface (CLI) feature of Server Administrator, you must open a new console window and execute the CLI commands from there. Executing CLI commands from the same console window in which Server Administrator was installed does not work. You can make the DVD image available to the remote system by either distributing the entire contents of the media, or by mapping a drive from the target system to the location of the DVD image.
Distributing Custom Unattended Installation Packages For distributing custom unattended installation packages: 1. Configure the ISV distribution software to execute the batch script once the installation package is distributed. 2. Use the ISV distribution software to distribute the custom unattended installation package to the remote systems. The batch script installs Server Administrator along with specified features on each remote system.
Setting Result /qr – reduced UI. This option is used for unattended installation while displaying a modal dialog box showing install progress. /qf – full UI. This option is used for standard attended installation. /f[p|o|e|d|c|a|u |m|s|v] This command repairs a product. /fp – This option reinstalls a product if a file is missing. /fo – This option reinstalls a product if a file is missing or if an older version of a file is installed.
Customization Parameters REINSTALL and REMOVE customization CLI parameters provide a way to customize the exact software features to install, reinstall, or uninstall when running a silent or unattended installation. With the customization parameters, you selectively install, reinstall, or uninstall software features for different systems using the same unattended installation package.
Feature ID Description RmtMgmt Remote Enablement CLI Command Line Interface of Server Instrumentation WMI Windows Management Instrumentation Interface of Server Instrumentation SNMP Simple Network Management Protocol Interface of Server Instrumentation OSLOG Operating System Logging SA Installs SI, CLI, WMI, SNMP, OSLOG OMSM Installs SI, OMSS, CLI, WMI, SNMP, OSLOG NOTE: To manage the server, select either Server Administrator Webserver or one of the Management Interfaces – CLI, WMI, SNMP or
When the MSI engine is going through the installation sequence, it ignores all actions that are scheduled as rollback actions. If a Custom Action, MSI Standard Action, or a installation action fails, then a rollback starts. You cannot roll back an installation once it is completed; transacted installation is only intended as a safety net that protects the system during an installation session. If you want to remove an installed application, you should uninstall that application.
6. To select a specific managed system software application, click the drop-down arrow beside the listed feature and select either This feature will be installed… to install the feature, or This feature will not be available to ignore the feature. A selected feature has a hard drive icon depicted next to it. A deselected feature has a red X next to it. By default, if the prerequisite checker finds a software feature with no supporting hardware, the checker deselects the feature. 7.
Uninstalling Managed System Software You can uninstall managed system software features by using the Systems Management Tools and Documentation DVD, or the operating system. You can simultaneously perform unattended uninstallation on multiple systems. Uninstalling Managed System Software Using The Provided Media Perform the following tasks to uninstall managed system software using the provided media. 1. Insert the Systems Management Tools and Documentation DVD into the system's DVD drive.
If you are prompted to reboot the system, select from the following reboot options: • Yes, reboot my system now. • No, I will reboot my system later All Server Administrator features are uninstalled. Unattended Uninstall Using The Product GUID If you do not have the installation DVD or the MSI package available during an uninstallation, use the package GUIDs in the command line to uninstall systems management software on managed systems or management stations running Windows operating system.
4 Installing Managed System Software On Microsoft Windows Server 2008 Core And Microsoft Hyper-V Server The Server Core installation option of the Microsoft Windows Server 2008 and Hyper-V Server operating system provides a minimal environment for running specific server roles that reduce the maintenance and management requirements and the attack surface for those server roles.
To install the localized version of the managed system software, type msiexec /i .msi TRANSFORMS= .mst in the command prompt. Replace .mst with the appropriate language file: • 1031.mst (German) • 1034.mst (Spanish) • 1036.mst (French) • 1041.mst (Japanese) • 2052.
Using Microsoft Active Directory 5 If you use Active Directory service software, configure it to control access to the network. The Active Directory database is modified to support remote management authentication and authorization. Server Administrator, as well as Integrated Remote Access Controllers (iDRAC), Remote Access Controllers (RAC), can now interface with Active Directory. With this tool, you can add and control users and privileges from one central database.
may only link to one Privilege Object. This behavior allows an administrator to control users and their rights on specific systems. The Product Object links the system to Active Directory for authentication and authorization queries. When a system is added to the network, the administrator must configure the system and its product object with its Active Directory name so that users can perform authentication and authorization with Active Directory.
Figure 2. Setting Up RAC Active Directory Objects in a Single Domain Setting Up Objects In A Single Domain To set up the objects in a single domain scenario, perform the following tasks: 1. Create two Association Objects. 2. Create two RAC Product Objects, RAC1 and RAC2, to represent the two DRAC 4 cards. 3. Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privileges. 4. Group User1 and User2 into Group1. 5.
Figure 3. Setting Up RAC Active Directory Objects In Multiple Domains Setting Up RAC Active Directory Objects In Multiple Domain To set up the objects for this multiple domain scenario, perform the following tasks: 1. Ensure that the domain forest function is in Native mode. 2. Create two Association Objects, AO1 (of Universal scope) and AO2, in any domain. 3. Create two RAC Device Objects, RAC1 and RAC2, to represent the two remote systems. 4.
Figure 4. Setting up Server Administrator Active Directory Objects In Multiple Domains Setting Up Server Administrator Active Directory Objects For Multiple Domain To set up the objects for this multiple domain scenario, perform the following tasks: 1. Ensure that the domain forest function is in Native mode. 2. Create two Association Objects, AO1 and AO2, in any domain. The figure shows the objects in Domain1. 3. Create two Server Administrator Products, sys1 and sys2, to represent the two systems.
• Installing the Extension to the Active Directory Users and Computers Snap-In • Adding Users and Privileges to Active Directory • Configuring the Systems or Devices Configuring The Active Directory Product Name To configure the Active Directory product name: 1. Locate the omsaoem.ini file in the installation directory. 2. Edit the file to add the line adproductname=text, where text is the name of the product object that you created in Active Directory. For example, the omsaoem.
Folder Name Installation Type NOTE: Only iDRAC6 is supported on xx1x systems and iDRAC7 is supported on xx2X systems. To use the LDIF files, see the instructions in the readme that is in the LDIF files directory. To use the Schema Extender to extend the Active Directory Schema, perform the steps in Using the Dell Schema Extender. Copy and run the Schema Extender or LDIF files from any location.
Table 10. dellAssociationObject Class OID 1.2.840.113556.1.8000.1280.1.1.1.2 Description This class represents the Dell Association Object. The Association Object provides the connection between the users and the devices or products. Class Type Structural Class SuperClasses Group Attributes dellProductMembers dellPrivilegeMember Table 11. dellPrivileges Class OID 1.2.840.113556.1.8000.1280.1.1.1.
dellOmsaIsReadWriteUser dellOmsaIsAdminUser Table 14. dellOmsaApplication Class OID 1.2.840.113556.1.8000.1280.1.2.1.2 Description This class represents the Server Administrator application. Server Administrator must be configured as dellOmsaApplication in Active Directory. This configuration enables the Server Administrator application to send LDAP queries to Active Directory. Class Type Structural Class SuperClasses dellProduct Attributes dellAssociationMembers Table 15.
Table 16. Server Administrator-Specific Attributes Added to the Active Directory Schema Attribute Name/Description Assigned OID/Syntax Object Identifier Single Valued dellOMSAIsReadOnlyUser 1.2.840.113556.1.8000.1280.1.2. TRUE TRUE if the User has Read-Only 2.1 rights in Server Administrator Boolean (LDAPTYPE_BOOLEAN 1.3.6.1.4.1.1466.115.121.1.7) dellOMSAIsReadWriteUser 1.2.840.113556.1.8000.1280.1.2. TRUE TRUE if the User has Read-Write 2.2 rights in Server Administrator Boolean (LDAPTYPE_BOOLEAN 1.
administrator pack installed on the local system. To install this administrator pack, click Start → Run, type MMC, and press . 2. Click File in the Console 1 window. 3. Click Add/Remove Snap-in. 4. Click Add. 5. Select the Active Directory Users and Computers snap-in and click Add. 6. Click Close and click OK.
Creating An Association Object The Association Object is derived from a Group and must contain a group Type. The Association Scope specifies the Security Group Type for the Association Object. When you create an Association Object, choose the Association Scope that applies to the type of objects you intend to add. Selecting Universal, for example, means that Association Objects are only available when the Active Directory Domain is functioning in Native Mode. 1.
Configuring The Systems Or Devices For instructions on configuring the Server Administrator systems using CLI commands, see Configuring Active Directory Using CLI on Systems Running Server Administrator. For DRAC users, see the Remote Access Controller 4 User’s Guide or Remote Access Controller 5 User’s Guide. For iDRAC users, see the Integrated Remote Access Controller User's Guide.
Frequently Asked Questions 6 What ports do systems management applications use? The default port used by Server Administrator is 1311. These ports are configurable. For port information of a particular component, see the User Guide of that respective component.
What do I do when the creation of WinRM listener fails with the following error message? The CertificateThumbprint property must be empty when the SSL configuration will be shared with another service This error occurs when the Internet Information Server (IIS) is already installed and configured for HTTPS communication. Details about coexistence of IIS and WinRM is available at technet.microsoft.com/enus/library/cc782312.aspx.
Do I need to uninstall previous versions of Server Administrator before installing Citrix Metaframe? Yes. Uninstall previous versions of Server Administrator before installing Citrix Metaframe (all versions). As errors may exist in the registry after the Citrix Metaframe installation, you must reinstall Server Administrator. When I run systems management Install, I see unreadable characters on the Prerequisite check information screen.
same. The SysMgmt.msi file must be located in the SYSMGMT \srvadmin\windows\SystemsManagement. For more detailed information, go to msdn.microsoft.com and search for MEDIAPACKAGEPATH Property Does systems management Install support Windows Advertised installation? No. Systems management Install does not support Windows Advertised installation - the process of automatically distributing a program to client computers for installation, through the Windows group policies.
Is the time shown during installation or uninstallation by Windows Installer Services accurate? No. During installation or uninstallation, the Windows Installer Service may display the time remaining for the current task to complete. This is only an approximation by the Windows Installer Engine based on varying factors. Can I launch my installation without running the prerequisite checker? How do I do that? Yes, you can.
Feature Name in WIndows Remote Access Controller Console (DRAC 4) Remote Access Controller 4 (DRAC 4) 54