HP System Management Homepage 6.
© Copyright 2009 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents 1 Product overview........................................................................................7 Product features......................................................................................................................................7 2 Installation requirements..............................................................................9 Supported operating systems...................................................................................................
Installing HP SMH with preconfiguration..................................................................................................47 Preconfiguring HP SMH components..................................................................................................47 Installing HP SMH as a single component...........................................................................................51 Installing HP SMH without preconfiguration................................................................
List of Tables 4-1 Bundle information..........................................................................................................................15 4-2 Variables and tags..........................................................................................................................18 5-1 Environment variables and tags.........................................................................................................33 4 Publishing history.........................................
1 Product overview HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems.
2 Installation requirements Supported operating systems HP ProLiant servers • Windows Server 7 for x86 and x64 • Windows Server 2008 Foundation R2 • Windows Server 2008 R2 for x64 • Windows Server 2008 Standard for x86 and x64 • Windows Server 2008 Enterprise for x86 and x64 • Windows Server 2008 Datacenter for x86 and x64 • Windows Server 2008 Essential Business Server • Windows Server 2008 Small Business Server • Windows Server HPC 2008 • Windows Server® 2003 Standard Edition SP2 for x8
HP Integrity servers • Windows Server 2008 for Itanium-based systems, 64-bit • Windows Server 2008 R2 for Itanium-based systems, 64-bit • Red Hat Enterprise Linux 5.0 Update 1 • Red Hat Enterprise Linux 4.0 Update 6 • SUSE Linux Enterprise Server (SLES) 10 Service Pack 1 • SUSE Linux Enterprise Server (SLES) 9 Service Pack 4 HP-UX • HP-UX 11i v3 (B.11.31) for HP Integrity Servers and HP 9000 Servers • HP-UX 11i v2 (B.11.23) for HP Integrity Servers and HP 9000 Servers • HP-UX 11i v1 (B.11.
• Firefox 3.5 • Mozilla Firefox 1.5.0.x NOTE: Installation of HP SMH does not require a browser. The HP Web-enabled System Management Software is hardware-dependent. For the installation to complete successfully, your system must support at least 256 colors. Verifying system requirements Before installation begins, the installation utility verifies whether: • For HP-UX, Linux, and Windows, the operating system meets the minimum requirements.
3 Preparing to install HP SMH You can install HP System Management Homepage (HP SMH) on systems running HP-UX, Linux, and Windows operating systems. You can install HP SMH locally using the Windows ProLiant or Integrity Support Pack or the Linux RPM (Red Hat Package Manager) or remotely with optional preconfiguration using the HP Smart Update Manager (HPSUM) on Windows or the Linux Deployment Utility on Linux.
4 Installing HP SMH on HP-UX operating systems System Administration Management Tool changes: SAM and HP SMH The HP-UX System Administration Manager (SAM) is deprecated in HP-UX 11i v3. HP SMH is the system administration tool for managing HP-UX 11i. HP SMH provides web-based systems management functionality, at-a-glance monitoring of system component health, and consolidated log viewing. HP SMH also provides a Terminal User Interface (TUI). SAM continues to provide access to TUI and X-based interfaces.
Product Bundle Path Status /usr/conf or Recommended /usr/conf/lib/librng.a, /usr/share, /usr/include, /sbin/init.d, /sbin/rc1.d Release HP-UX Strong Random Number Generator KRNG11i HP-UX Tomcat-based Servlet Engine hpuxwsTomcat /opt/hpws/tomcat Recommended. Certain HP SMH plug-ins, such as Partition Manager require it. HP-UX 11i v1, v2, v3 HP WBEM Services WBEMSvcs /opt/wbem Recommended. Certain HP SMH plug-ins, such as Property Pages found on the Home page require it.
install and update HP-UX, including recommended and default-installed HP application bundles. See “Installing HP SMH using the Applications media” (page 17). • You can use swinstall to install or update the bundles (for example, hpuxwsApache and hpuxwsTomcat) using the HP-UX 11i v1 (B.11.11), HP-UX 11i v2 (B.11.23), and HP-UX 11i v3 (B.11.31) media. See “Installing HP SMH using the Applications media” (page 17). • You can go to the Software Depot Home at http://www.hp.
6. 7. Save the bundle to a local directory such as /var/temp. Install the product to your system: swinstall -s /var/temp/ depot_filename.depot bundlename For example: swinstall -s \ /var/temp/SysMgmtHomepage_A2214_HP-UX_B.11.23_IA+PA.depot SysMgmtWeb 8. Start using HP SMH. Configuring HP SMH The HP SMH configuration is based on environment variables and tags that are set by the /opt/hpsmh/lbin/envvars, /opt/hpsmh/conf.common/smhpd.xml and /opt/hpsmh/conf/timeout.conf files.
only (nothing listens on port 2381, so that port fails). When it contacts port 2301 (http), then the HP-UX Apache-based Web Server starts on port 2381 (https), and the page redirects. • Automatic startup on boot This mode starts HP SMH automatically during system initialization. If the automatic startup on boot start mode is enabled and the system was rebooted using this configuration, you can access HP SMH using a web browser and navigating to https://hostname:2381/.
5 Installing HP SMH on a Windows operating system Installing HP SMH directly on Windows Note: You can click Cancel at any time during configuration of HP SMH settings. 1. Initiate the setup.exe file to begin the installation wizard. After the wizard begins, the Welcome dialog box appears. 2. Click Next. The OS Groups dialog box appears.
3. Add HP SMH group names: a. In the Group Name field, enter a name for the operating system group. b. Select an operating level to include Administrator, Operator, or User. Note: You must assign an account to an operating system user group with administrator privileges to access the Version Control Repository Manager from the Version Control Agent.
Select one of the following access types: • Select Anonymous Access to enable anonymous access to unsecured pages. • Select Local Access to automatically grant access to any user at the local console at the selected access level. Caution: Selecting Local Access with administrator privileges provides all users with access to the local console full access without prompting them for a user name or password. 4. Click Next. The Trust Mode dialog box appears.
5. Select the level of security you want to provide from one of the following trust modes: • 24 Trust By Certificate 1. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows you to add trusted certificate files to the Trusted Certificate List.
2. Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Add File dialog box appears. If you entered an invalid file name in the file name field, an error message appears indicating the file does not exist. Click OK to select another file, or click Cancel to close the dialog box. The Trusted Certificate List appears.
1. 2. Select Trust By Name. Click Next. The Trusted Server dialog box appears. Note: Although the Trust By Name mode is a slightly better security method than the Trust All mode, your system is still vulnerable to security attacks. The Trust By Name mode sets up HP SMH to accept only certain requests from servers with the HP SIM certificate names designated in the Trust By Name field. The Trust By Name option is easy to configure and can prevent unauthorized access.
1. 2. Select Trust All. Click Next. The IP Binding dialog box appears. Note: The Trust All option leaves your system vulnerable to security attacks and sets up HP SMH to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and all users in the network are trusted. 6. Select IP Binding to enable the Subnet IP Address and NetMask.
Installing HP SMH on a Windows operating system
8. Select IP Restricted Login, and click Next. The IP Address to Include dialog box appears. This dialog box enables you to specify the IP address or IP address ranges to grant login access permission. If IP addresses are in the Inclusion list, then only those IP addresses have login privileges. If no IP addresses are in the Inclusion list, then all IP addresses that are not in the Exclusion list have login privileges.
9. Click Next. The IP Address to Exclude dialog box appears. a. b. c. In the Exclude field, enter a beginning IP address. In the To field, enter an ending IP address. All IP addresses that fall between the beginning and ending IP addresses do not have login access. Click Add. The IP address or IP address range is added to the Exclusion list. To delete an IP address or IP address range, select an IP address or IP address range, and click Delete.
11. Click Next. The installation process begins. Note: During the installation of HP SMH, the Cancel button is disabled. Even if you click X in the upper-right corner of the box, the current operation cannot be canceled. 12. Click Finish to complete the installation.
Installing HP SMH for Windows silently The HP SMH installation for Windows enables you to silently install HP SMH. After the installation is complete, you can configure HP SMH settings. NOTE: Do not copy or import certificates when using the setup.exe /r option. Generating a setup.iss file setup.exe /r The HP SMH installation interface appears and records your selections. The setup.iss file is placed into the Windows directory. You can move this file to the location of your choice.
If perform an initial installation of HP SMH 3.x, the /preserve command preserves the pre-3.x settings. If an HP SMH 2.x installation is present, you must enter setup.exe /s /reinst /preserve /f1-full_path_to_setup.iss . If you do not include /preserve, the setup.iss is applied. Configuring HP SMH The HP SMH configuration is based on environment variables and tags that are set by SystemDrive\hp\hpsmh\smhpd.xml file.
6 Installing HP SMH using HPSUM The HP Smart Update Manager (HPSUM) utility enables you to deploy ProLiant or Integrity Support Pack software and firmware components from a single, easy-to-use graphical user interface. The utility enables you to deploy and maintain ProLiant or Integrity Support Pack and Smart Components on a local server or one or more remote servers. This utility enables legacy support of existing software and firmware components while simplifying the overall deployment process.
Options for HP SMH component and select the For Install checkbox. The HP SMH component is listed under Updates to be Installed. 8. 9. After selecting the HP SMH component, click Install. A screen appears showing the installation progress. After installation is finished, the Installation Result panel appears. In the Installation Result panel, the Reboot Now and Exit buttons appear. 10. To reboot the system, select Reboot Now. To exit the program, select Exit.
3. 4. • Click Add. The certificate appears under Certificate Files. You can click Save to save your changes up to this point or click Cancel to discard the changes and close the wizard. Click Next. The IP Binding page appears. Trust by Name Sets HP SMH to accept certain configuration changes only from servers with the HP SIM certificate names designated in the Trust By Name field. The Trust By Name option is easy to configure.
4. 5. Click Add. The IP binding configuration is saved and appears under the IP Binding List. Click Next. The IP Restricted Login page appears. 10. The IP Restricted Login enables the HP SMH to restrict login access based on the IP address of a system. You can set address restriction at installation time, or administrators can set address restriction from the IP Restricted Login page • If an IP address is excluded, it is excluded even if it is also listed in the Included box.
7 Installing HP SMH directly on Linux operating systems Installation for Linux on x86 and x86_64 operating systems The HP SMH installation for Linux enables you to silently install HP SMH on x86 and x86_64 operating systems. After the installation is complete, you can configure the HP SMH settings. NOTE: To install HP SMH, you must log in as root user. NOTE: HP SMH already uses the user and group name hpsmh. Do not use the hpsmh user and group name for any other purpose.
8 Installing HP SMH directly on Itanium-based Linux operating systems Installation for Itanium-based Linux operating systems The HP SMH installation for Linux enables you to silently install HP SMH on Itanium-based operating systems. After the installation is complete, you can configure the HP SMH settings. NOTE: To install HP SMH, you must log in as root user.
3. 4. 2. • Press Enter. admin1 appears in the Administrator Group List. Enter n to go to the next screen. • Enter 2 for Operator. • Enter 3 for User. Enter n to go to the next screen. To delete a group: 1. Enter 2 to delete a group. The following options are available: 2. 3. • Enter 1 for Administrator. The Administrator Group List appears. • Enter 2 for Operator. The Operator Group List appears. • Enter 3 for User. The User Group List appears. At the prompt, enter 1, 2, or 3.
A. B. Enter File: /home/ServerName/cert1.pem . Press Enter. The cert1.pem is added to the Trusted Certificates List. If the certificate file does not exist, a message appears indicating that /home/ServerName/cert1.pem does not exist. C. • Add as many certificates as you want by repeating these steps. Press Enter when you finish. To import a certificate: 1. Enter 2. You are prompted for the server name. 2. Enter the name or IP address of the HP SIM server and press Enter. The certificate appears.
A. B. C. Enter 1 to add an IP address. You are prompted for the IP address. Enter the IP address to be added. IP Address: YourIPAddress appears. You are prompted for the netmask. Enter the netmask. netmask: YourNetmask appears. Note: You can add or delete as many IP addresses as you want. To delete an IP address: A. B. Enter 2. Enter the number of the IP address or netmask to be deleted. The IP address or netmask is removed from the IP address or netmask list.
D. E. Press Enter. The IP Address Exclusion List screen appears. Enter n for next. The IP Address Inclusion list and IP Address Exclusion list appears. Note: You can add or delete as many IP addresses or IP address ranges as you want. 3. • Enter n for next. To disable IP Restricted Login: Enter 2 to disable IP Restricted Login, which sets it to OFF. IP Restricted Login: OFF appears. Note: Only IPv4 address ranges are supported for IP restricted login. 9. Enter n to go to the next screen.
9 Installing HP SMH directly on Linux using Linux Deployment Utility Installing HP SMH with preconfiguration The Linux Deployment Utility enables you to easily upgrade and manage system software. The utility enables you to deploy and maintain ProLiant Support Pack software on local servers through the terminal window or ssh (secure shell) utility. The Linux Deployment Utility is shipped with the Linux ProLiant Support Pack, which is available on the HP SmartSetup CD.
3. 4. Right-click HP System Management Homepage for Linux and select Configure Component. The Configuration Option screen appears. In the Please enter the Operating System (OS) Group Names for Administrator level access field, enter the operating system group name for administrator-level access. Note: You can enter up to five operating system group names for administrator-level access. Separate the group names with a semicolon (;) or space.
5. In the Please enter the Operating System (OS) Group Names for operator-level access field, enter the operating system group name for operator-level access. Note: You can enter up to five operating system group names for operator-level access. Separate the group names with a semicolon (;) or space. 6. In the Please enter the Operating System (OS) Group Names for user-level access field, enter the operating system group name for user-level access.
11. In the IP Binding field, enter YES to enable IP Binding or NO to disable IP Binding. 12. In the IP Binding List field, enter the IP address and netmask pairs separated by semicolons. For example, IPAddress1/Netmask1;IPAddress2/Netmask2. The masking field is not required for IPv6 addresses. 13. In the Enable IP Restricted Login field, enter YES to enable IP restricted logins or NO to disable IP restricted logins. 14.
18. After preconfiguration is complete, you can begin installation through the Linux Deployment Utility as part of the complete ProLiant Support Pack or the single component can be installed independent. Installing HP SMH as a single component You can install HP SMH independent of other components included in the ProLiant Support Pack. 1. 2. Select all components except the HP SMH component. Right-click all other components and select Do Not Install component.
10 Initializing the software for the first time After you have installed and configured HP SMH for the first time, a process to create a private key and corresponding self-signed Base64-encoded certificate is initiated. This certificate is a Base64-encoded PEM file. Key and certificate information • In HP-UX operating systems, both public and private keys for HP SMH are stored in the /var/opt/hpsmh/sslshare directory. The files are called file.pem (private key) and cert.pem (server certificate).
11 Signing in and signing out of HP SMH Signing in with Microsoft Windows XP If HP SMH is installed on a Microsoft Windows XP® system, you must enable the following security option to sign in to HP SMH: 1. 2. 3. 4. Select Control Panel ⇒ Administrative Tools ⇒ Local Security Policy. The Local Security Settings dialog box appears. Select Local Policies. Select Security Options. Right-click Network Access: Sharing and security model for local accounts and select Properties.
3. Enter a user name. If you have not yet added user groups into HP SMH security settings, then users must log in with an operating system account in the Administrators group for Windows or the operating system group root (which in turn contains the user root by default) for HP-UX and Linux. If the credentials cannot be authenticated, the user is denied access. Administrator on Windows and root on HP-UX or Linux have administrator access on HP SMH. 4. 5. Enter a password. Click Sign In. HP SMH appears.
• In the System Management Homepage banner, click Sign Out. • Close every instance of the web browser that you use to sign in to HP SMH. • You can stop HP SMH from the HP-UX command line: /opt/hpsmh/lbin/hpsmh stop This will not stop the mini-daemon smhstartd, but will stop the HP-UX Apache-based web server. The next time you contact HP SMH through http://hostname:2301, the HP-UX Apache-based web server will again start on port 2381 (https).
12 Uninstalling HP SMH Uninstalling from an HP-UX operating system To uninstall HP SMH on an HP-UX operating system, use the following swremove command: swremove -x enforce_dependencies=false SysMgmtHomepage This method is recommended for uninstalling HP SMH. Uninstalling from a Itanium-based Linux, x86 or x86_64 operating system To uninstall HP SMH: Run the following command: rpm –e hpsmh NOTE: When the HP SMH is uninstalled, where HP SMH directory is /opt/hp/hpsmh, the HP SMH directory is not deleted.
Uninstalling manually for Windows and Linux operating systems Uninstalling manually duplicates the actions of the HP SMH uninstaller, which can be accessed through Add/Remove Programs in the Control Panel. Use this procedure if you want to completely uninstall HP SMH, and the uninstaller has been inadvertently removed or corrupted. Note: The _jvm directory is present if there is an existing HP SMH 2.0.1 or 2.0.2 installation and can be removed.
• \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\HP System Management Homepage • \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMgmtHP Uninstalling manually for HP-UX operating systems CAUTION: Manually uninstalling HP-UX SMH is not recommended. When you must uninstall HP-UX SMH, HP recommends using the swremove command, as described in “Uninstalling from an HP-UX operating system” (page 59). The following procedure manually uninstalls HP SMH on an HP-UX system. 1.
Support and other resources Intended audience HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux, and Microsoft® Windows® operating systems. This installation guide is for system administrators who install HP SMH.
• Simplifying single-system management on HP-UX 11i – HP System Management Homepage (HP SMH) This white paper introduces HP SMH and its various plug-ins. The use cases involving HP SMH plug-ins highlight the features provided by HP SMH. The white paper is available on the HP Technical Documentation website at http://www.docs.hp.com/en/5991-7499/SMH_whitepaper_11iv3.pdf.
Manufacturing part number Supported operating systems Supported versions Edition number Publication date 466305-003 Linux and Windows Integrity updates for Windows and Linux. 19 March 2009 438862-402 HP-UX HP-UX 11i v3 (B.11.31), HP-UX 11i v2 (B.11.23), HP-UX 11i v1 (B.11.11) 18 March 2009 466305-001 Linux and Windows See “Installation requirements” (page 9). 17 January 2009 438862-401 HP-UX HP-UX 11i v3 (B.11.31), HP-UX 11i v2 (B.11.23), HP-UX 11i v1 (B.11.
HP encourages your comments HP encourages your comments concerning this document. HP is committed to providing documentation that meets your needs. Send any errors found, suggestions for improvement, or compliments to: docsfeedback@hp.com. Include the document title, manufacturing part number, and any comment, error found, or suggestion for improvement you have concerning this document.
Index C console installation Linux, 39 Linux system preparation, 41 D requirements installation, 9 verifying system requirements, 11 resources, 63 S features, 63 service and support, 66 setup, 13 signing in, 55 signing out, 55 software, 11, 53 G U getting started, 13 uninstallation, 59 H W HP Smart Update Manager installation, 35 HP-UX installation, 15 web browsers, supported, 10 websites, 11 Windows installation, 21 installation of HP Smart Update Manager, 35 documentation, 63 F I installat
