HP Insight Dynamics- VSE for ProLiant Installation and Configuration Guide

7. If installed, change the SMP – Universal Edition password:
a. Change the password to remove the invalid characters.
b. Right-click SMP – Universal, and then select Properties.
c. Click the Log On tab, and then update with the new password.
8. After updating all Insight Software passwords, restart the HP SIM service:
a. Select Start→Control Panel→Administrative Tools→Services.
b. Right-click HP Systems Insight Manager, and then select Start.
Compatibility with HP-UX Bastille and Other Network Firewalls
Network firewall software such as HP-UX Bastille might block the communication protocols used by the VSE
Management Software. If your CMS or VSE managed systems use firewall software, follow the configuration
guidelines in the following sections.
VSE Management Software Network Communication Protocols
The VSE Management Software retrieves real-time and historical utilization data from managed systems and
their associated applications using the following network communication protocols.
• The SSH-2 (secure shell) protocol is used to install the VSE agent software from the CMS to support the
visualization and configuration features of Virtualization Manager, and to collect utilization data for
Capacity Advisor.
• Web-Based Enterprise Management (WBEM) services are used to support the visualization and
configuration features of Virtualization Manager and to collect utilization data for Capacity Advisor.
• OpenSSL protocol is used to obtain application information from managed systems for Application
Discovery.
HP SIM uses additional communication protocols between the CMS and managed systems to provide real-time
system status and WBEM indications, and for basic communication between the web-based applications
and the end user.
If you are using firewall software such as HP-UX Bastille on the CMS or on managed systems, the firewall
must be configured so that it does not block the required network communication. The following sections
present detailed configuration instructions for HP-UX Bastille. Other network firewall software must be similarly
configured.
Additional information about HP SIM secure data transmission and related issues can be found in the manuals
and white papers available from the “Information library” link at http://www.hp.com/go/hpsim.
Firewall Settings on the CMS
The following set of protocols should be allowed through firewalls between the CMS and the managed
systems.
Communication Between the CMS and Managed Nodes
• The Internet Control Message Protocol ICMPv4 Type 8 (Echo), the ping protocol.
• HTTPS over port 5989, used by WBEM.
• HTTPS over port 2381, used by web agents.
• SSH-2 over port 22, used by the Distributed Task Facility (DTF).
• OpenSSL over port 9143, used by Application Discovery.
• Global Workload Manager uses ports 9617 and 9618 on the CMS. Refer to the “Communications
Ports” section of the HP Global Workload Manager Version 4.1 User's Guide for information about
changing the default ports.
Communication Between the CMS and the Web Browser
• HTTP over port 280 (initial communication).
• HTTPS over port 50000 (subsequent user interface communication).
Compatibility with HP-UX Bastille and Other Network Firewalls 27