HP Systems Insight Manager 7.2 Technical Reference Guide

converted to CIM/XML format and returned to the CMS. The discovery and Identification task

uses the proxies in the WMI Mapper Proxy list to discover whether a system is a WMI-enabled

system. If the system is WMI-enabled, then the identification information for that system is

returned.

The WMI Mapper makes it possible to retrieve WMI instrumented data on a Windows machine

through WBEM requests. The Windows version of Systems Insight Manager installs this WMI

Mapper locally so that it can make WMI requests across the network to the systems without

the need to install the WMI Mapper on the managed Windows systems.

The WMI Mapper is included in a Typical installation of the Systems Insight Manager on a

Windows CMS (optional in a Custom installation) . For HP-UX and Linux-based systems, the

WMI Mapper is not available.

Remote Command Execution feature

The Remote Command Execution feature enables HP SIM tools to run remotely on managed systems

though SSH.

SSH is installed as a part of UNIX and most operating systems other than Windows. IF SSH is not

installed on a Windows system, Insight managed system setup wizard on a Windows Central

Management Server (CMS) supports installing Open SSH on a Windows managed system. If you

are running from a Linux or HP UX CMS, be sure that OpenSSH is installed manually on the system.

See Installing OpenSSH.

Configuration

Configuring SSH involves setting up Public key-based authentication between HP SIM CMS and

the managed system. This establishes a trust relationship between HP SIM CMS and the managed

system. This is a prerequisite for the HP SIM's Distributed Task Facility (DTF) to execute tasks, or

commands on managed systems. This feature is also used by other features in the Insight managed

system setup wizard for remote configurations on the managed system.

SSH key-based authentication copies the HP SIM CMS public key to the users SSH key directory

on the managed system. The HP SIM CMS public key is appended to the authenticated keys file

in the managed system. If host-based authentication is configured, then all valid users on the

managed system can execute tasks from HP SIM. If user-based authentication is configured, then

you must configure SSH keys for each user that needs to execute an HP SIM tool or task. The user

must be a valid SSH user on the managed system. This feature is supported on most managed

servers with non-embedded operating systems. It is also supported on iLOs.

If no SSH user name is entered and user-based authentication is selected, HP SIM verifies there is

a working SSH credential set for the system. SSH credential can be password-based, user-based

or host-based.

If a user name is entered with the user-based authentication, then password-based authentication

is included while verifying that a user can log in to the remote system. HP SIM can successfully

correctly.

NOTE: Host-based in Windows is configured only for the user that configures SSH. To enable

other users to use the host-based key, you must add entries to the psswd file on a managed system.

You can use the sshuser utility. This utility is available in the managed system if you installed

OpenSSH through HP SIM. If not, this utility is available in the lbin directory of HP SIM CMS

Run sshuser -u <username> -d <domain_name> -f <location of passwd file>

on the managed system. For example, the following command permits SSH access for user joe in

the Windows domain MyDomain:

sshuser joe MyDomain f "C:\Program Files\OpenSSH\etc\passwd"

52 Initial setup