HP 3PAR T-Class Installation and Deinstallation Guide

The service processor features two network configuration options to enable communication access
during the SPMOB script.
• SP Mode—enables the Customer Controlled Access (CCA) setting to control inbound/outbound
communication access via SSH session. Refer to “Configuring the SP with SP Mode” (page 110)
to enable the feature.
• Secure Network Mode—enables HP 3PAR Secure Service Agent (SSA) setting to control
inbound/outbound communication access via HTTPS. Refer to “Configuring the SP with Secure
Network Mode” (page 116) to enable the feature.
CAUTION: Except in SP 2.5.2, the customer must first install HP 3PAR Secure Service Policy
Manager before enabling Secure Network Mode with HP 3PAR Secure Service Policy Manager
during the SPMOB process. At the conclusion of the SPMOB, the SP initializes contact with the
host of the HP 3PAR Secure Service Policy Manager to validate communication access configuration.
NOTE: Secure Network Mode can only be configured for high speed (Ethernet) connectivity.
NOTE: Always register an updated SPID with Secure Service Collector database before migrating
to Secure Network Mode from SP Mode. If the updated SPID is not registered in the database,
migrating to Secure Network Mode fails.
Before performing the service processor setup using the SPMOB, determine which of the following
configurations best describes the service processor connectivity model to be used at the operating
site:
• High Speed. The service processor uses an Ethernet connection to the customer network for
all external communications. Remote control of the service processor may or may not be
permitted. When permitted, remote control of the service processor also occurs through the
customer network.
• Mixed. The service processor uses an Ethernet connection to the customer network for all
external communications. Remote control of the service processor is permitted but must occur
through a serial modem connection using a customer-supplied dialup number.
• Modem. The service processor uses a serial modem connection through a customer-supplied
dialup number for all external communications. Remote control of the service processor may
or may not be permitted. When permitted, remote control also occurs through the serial modem
connection.
• Secure site. The service processor is configured to use the customer network to monitor the
storage system. However, there is no access to or from the SP from outside of the customer
network.
NOTE: When selecting the Secure Site option during the SPMOB, the option configuration is
irreversible. To configure for SP Mode, the SP needs to be rebuilt before rerunning the SPMOB.
Use the setup instructions in the following sections to complete the service processor setup based
on one of these connectivity models.
NOTE: On the service processor output screens, brackets [ ] denote default responses. If you
press ENTER without typing a response, the service processor uses the default response indicated
in brackets, when present.
NOTE: If, at any time, you press CTRL+C to escape the service processor setup script, restart the
process by typing /sp/prod/code/csst/bin/.sbin/spmob and pressing ENTER.
Setting up the Service Processor 99