HP System Management Homepage Manufacturing Part Number: 365395-004 May 2005, Edition 2 ©Copyright 2005 Hewlett-Packard
Table of Contents Product Overview ........................................................................................................... 4 Product Overview ................................................................................................... 4 Additional Resources ............................................................................................... 4 Related Topics ........................................................................................................
HP System Management Homepage Security Problems ................................................................................................. Other Problems .................................................................................................... Service and Support .............................................................................................. Glossary ..................................................................................................................... Index .
Product Overview Product Overview The System Management Homepage is a Web-based application that provides a consolidated interface for single system management. By aggregating the data from HP Web-based agents and management utilities, the System Management Homepage provides a common, easy-to-use interface for displaying hardware fault and status monitoring, performance data, system thresholds, diagnostics, and software version control for an individual server.
Getting Started To get started with System Management Homepage, use the following steps as a guideline for configuring the System Management Homepage properly: 1. Add user groups to effectively manage user rights - "User Groups" 2. Configure the trust mode - "Trust Mode" 3.
Getting Started You can find procedures on how to change the configuration variables in the System Management Homepage Installation Guide on the HP Technical Documentation Web site at http://docs.hp.com. 2. The first time you browse to this link, the Security Alert dialog box appears, asking you to indicate whether to trust the server. If you do not import the certificate, the Security Alert appears every time you browse to the System Management Homepage.
Getting Started The System Management Homepage appears. To log in to the System Management Homepage with Mozilla: 1. Navigate to http://hostname:2381/. If you are using Mozilla to browse to an HP-UX system, then you can use port 2381 if you changed the default configuration to have autostart disabled and start on boot enabled. If you keep the default-installed configuration, you can use the following URI: http://hostname:2301/ By default, HP-UX is installed with the autostart feature enabled.
Getting Started Logging Out To log out of the System Management Homepage, you have several options: ● In the System Management Homepage banner, for HP-UX click Sign Out and for Linux and Windows click logout. The System Management Homepage Login Window appears. ● Close every instance of the Web browser that you used to log in to System Management Homepage.
Getting Started Note: Deselect Automatically Import Management Server Certificate if you do not want to import the certificate. Deselecting this option still requires you to enter log-in credentials. However, administrator credentials are not required to log in. The certificate is added to the Trusted Certificates List.
Navigating the Software Introduction The System Management Homepage displays all HP Web-enabled System Management Software that provides information. In addition, the System Management Homepage displays various boxes that have borders defining the status of the items contained in that box. Refer to the Software Status section in the The Home Tab for more information.
Navigating the Software ● Help. The Help link launches the help files in a separate browser window. The help contains a combination of the help files related to the HP Web-enabled System Management Software and utilities. ● System Model. The System Model displays the model of the system. The System Model displays Unknown if the HP Insight Management Agent for servers are not installed on the system. ● Current User. The Current User displays the identity of the user that is currently logged in.
System Management Homepage Overview The System Management Homepage displays all HP Web-enabled System Management Software that provides information. In addition, the System Management Homepage displays various boxes that have borders defining the status of the items contained in that box. Refer to the Software Status section on the The Home Tab for more information. For information regarding navigating in the System Management Homepage, refer to Navigating the Software.
The Home Tab The Home tab is displayed on the System Management Homepage. The following information appears on the Home tab. ● System Status Summary ● Software Status ● Organizational menu Note: Depending on what information is available from the HP Web-enabled System Management Software, you may see other boxes of information including computer system, operating system, and networking.
The Home Tab ● Integrated Agents. Contains participants and links to their entry points if applicable. You can click an agent link to access that particular agent. Note: Participants are agents that are contributing information contained in the System Management Homepage. ● Other Agents. Lists the visible HP Web-enabled System Management Software that does not participate in the System Management Homepage.
The Settings Tab This section contains links to the settings or configuration pages of various HP Web-enabled System Management Software. After installing System Management Homepage, only the System Management Homepage section is present, enabling you to view or edit the System Management Homepage settings. System Management Homepage section This section provides links that enable you to configure your System Management Homepage settings and provides links to the following: ● "Credits" ● "Security" .
The Settings Tab ● IP Binding. Select Settings->System Management Homepage->Security->IP Binding. ● IP Restricted Login. Select Settings->System Management Homepage->Security ->IP Restricted Login. ● Local Server Certificate. Select Settings->System Management Homepage->Security ->Local Server Certificate. ● Local and Anonymous Access. Select Settings->System Management Homepage->Security ->Local and Anonymous Access. ● Trust Mode.
The Settings Tab Note: The System Management Homepage always binds to 127.0.0.1. If IP Binding is enabled and no subnet/mask pairs are configured, then the System Management Homepage is only available to 127.0.0.1. If IP Binding is not enabled, you bind to all addresses. To configure IP Binding: 1. Click Settings->System Management Homepage->Security. 2. Click IP Binding. The IP Binding page appears. 3. Select IP Binding to enable IP binding. 4. Enter the IP address. 5. Enter the Netmask. 6.
The Settings Tab ● If an IP address is excluded, it is excluded even if it is also listed in the included box. ● If there are IP addresses in the inclusion list, then only those IP addresses are allowed log-in access with the exception of localhost. ● If no IP addresses are in the inclusion list, then log-in access is allowed to any IP addresses not in the exclusion list. To restrict IP addresses: 1. Click Settings->System Management Homepage->Security. 2. Click IP Restricted Login.
The Settings Tab ● After the Certificate Authority has returned PKCS #7 data, the final step is to import this into the System Management Homepage. ● After the PKCS #7 data data has been successfully imported, the original \hp\sslshare\cert.pem certificate file for Windows, and the /opt/hpsmh/sslshare/cert.pem file for HP-UX and Linux is overwritten with the system certificate from that PKCS #7 data envelope.
The Settings Tab Related Topics ● ● ● ● ● ● IP Binding IP Restricted Login Local and Anonymous Access Trust Mode Trusted Management Servers User Groups Local and Anonymous Access Local and Anonymous access enables you to select the appropriate settings to include: ● Anonymous Access. Is disabled by default. Enabling Anonymous Access enables a user to access the System Management Homepage without logging in. Caution: HP does not recommend the use of anonymous access. ● Local Access.
The Settings Tab Related Topics ● ● ● ● ● ● IP Binding IP Restricted Login Local Server Certificate Trust Mode Trusted Management Servers User Groups Trust Mode The Trust Mode options enable you to select the security required by your system. There are some situations that require a higher level of security than others. Therefore, you are given the following security options: ● Trust by Certificate.
The Settings Tab Note: HP strongly recommends using the Trust by Certificate option as the other options are less secure. Configuring Trust Mode For HP-UX, the imported System Management Homepage certificates are stored in the /opt/hpsmh/certs directory. For Linux, the imported System Management Homepage certificates are stored in the /opt/hp/hpsmh/certs directory. For Windows, the imported HP Systems Insight Manager certificates are stored in the systemdrive \hp\hpsmh\certs directory.
The Settings Tab To trust by name: 1. Select Settings->System Management Homepage->Security. 2. Click Trust Mode. The Trust Mode page is displayed. 3. Select Trust by Name to trust by server names. 4. Enter the server name. 5. Click Save Configuration to save the current configurations or Reset Values to cancel all changes. Trust All To trust all servers: 1. Select Settings->System Management Homepage->Security. 2. Click Trust Mode. The Trust Mode page is displayed. 3.
The Settings Tab 2. Enter the name or IP address of the HP Systems Insight Manager system that contains the certificate to be added. Add it in the Add Certificate From Server box. 3. Cut and paste the Base64 encoded certificate into the text box. 4. Click Import Certificate Data. Adding a Certificate from a Server To add a certificate from a server: 1. Select Settings->System Management Homepage->Security->Trusted Management Servers. 2.
The Settings Tab that is specified on the "User Groups" page. The Windows administrators group and the HP-UX and Linux root group automatically have administrative access to the system. For example, the System Management Homepage Administrator access level could be assigned the user-created operating system groups Admin1, Admin2, and Admin3.
The Settings Tab Adding a User Group To add a User Group: 1. Select Settings->System Management Homepage->Security. 2. Click User Groups. The User Group page appears. 3. In the User section, enter a user group name. 4. Click Save Configuration to save the current configurations, click Clear All Groups to clear the fields, or click Reset Values to cancel all changes.
The Tasks Tab The Tasks tab displays links to task-oriented pages provided by participating HP Web-enabled System Management Software. Note: If no tasks are provided by the HP Web-enabled System Management Software, the Tasks tab is not visible.
The Tools Tab The Tools tab displays links to tool-oriented pages provided by participating HP Web-enabled System Management Software. Note: If no tools are provided by the HP Web-enabled System Management Software, the Tools tab is not visible.
The Logs Tab The Logs tab includes various log information. Any logs contained in the installed HP Web-enabled System Management Software can be displayed on this tab. For example, if the HP Version Control Agent is installed, a link to the Version Control Agent log is displayed on the Logs page. The Logs tab provides the following log options: ● Select Logs->System Management Homepage->System Management Homepage Log.
The Logs Tab System Management Homepage Legacy Log If your Linux or Windows system had HP Web-enabled System Management Software installed prior to the installation of the System Management Homepage 2.0.0, then their logs are visible by way of the System Management Homepage Legacy Log link. This log contains historical information regarding the security-related events that occurred prior to the installation of the new version.
Troubleshooting Note: If noted, a topic may apply to the HP-UX, Linux, or Windows operating system only. Browser Problems When I use Internet Explorer 6.0 in Windows, why do I see warnings in the Security Alert dialog box when I log in to the System Management Homepage? Solution: There are two possible warnings that might be seen including: ● Warning #1: The name on the security certificate is invalid or does not match the name of the site.
Troubleshooting Why does the browser prompt to accept cookies when accessing a system? Solution: Browser cookies are required to keep track of user state and security. Cookies must be enabled in the browser and prompting for acceptance of cookies should be disabled.
Troubleshooting this issue, you must configure the firewall with exceptions to allow browsers to access the ports used by HP Systems Insight Manager and Version Control Repository Manager. HP recommends the following actions: 1. Select Start->Settings Control Panel. 2. Double-click Windows Firewall to configure the firewall settings. 3. Select Exceptions. 4. Click Add Port. You must enter the product name and the port number.
Troubleshooting IP Address Problems Is there an easier way to access the local system with my browser without having to find out its IP address? Solution: Yes. You can access the local system at https://localhost:2381 or https://127.0.0.1:2381. For HP-UX, you can access the local system at http://hostname:2301 if you kept the default setting of autostart enabled. Note: The word localhost does not work in all languages.
Troubleshooting you can change the password through the operating system before logging in to the System Management Homepage. Why doesn't my password work after I upgraded my Web Managed Products? Solution: System Management Homepage 2.0 and greater uses operating system accounts whereas previous versions used three static accounts (administrator, operator, and user).
Troubleshooting 2. Click Security. 3. Select Local Intranet. 4. Click Sites → Advanced. 5. In Add this Web site to the zone, enter the IP address of the System Management Homepage system. For example, enter https://ipaddress . 6. Click Add. 7. Click OK. 8. Click OK. 9. Click OK. The changes are saved. After updating my Windows XP system with Service Pack 2, I am unable to access the HP Version Control Repository Manager.
Troubleshooting account username and password. However, I can log in if I browse to my system using my IP address, http://my-ip-address:2301. Solution: Verify whether there is an underscore "_" defined in your server 's computer name. If there is, remove it or use - instead of _. You should be able to log in using system name. Note: You may need to change the Microsoft Internet Information Server (IIS) configuration after you rename a system.
Troubleshooting This configuration leaves the default SP2 security enhancements intact, but will allow traffic over the ports indicated above. These ports are required for HP Systems Insight Manager and Version Control Repository Manager to run. Ports 2301 and 2381 are required for the Version Control Repository Manager and ports 280 and 50000 are required by HP Systems Insight Manager. The secure and insecure ports must be added for each product to enable proper communication with the applications.
Troubleshooting ● Select Request a certificate. ● Select Advanced certificate request. ● Select Submit a certificate request by using a base. ● Press the Ctrl+ V keys to paste the PKCS#10 data into the field. 4. From your Windows 2003 Certificate Authority system: ● Click Start->All Programs->Administrative Tools->Certification Authority. ● Click CA (Local) ⇒ W2003CA/certsrv ⇒ where W2003CA is the name of your Windows 2003 Certificate Authority system. ● Issue the pending request certificate. 5.
Troubleshooting the System Management Homepage RPM in verbose (non-silent) mode, and any missing RPM packages are listed. Why can I not access the System Management Homepage after I installed some McAfee products? Solution: McAfee has announced (through its Web site) an incompatibility that might render its own products and several Web-based products unusable. The list of incompatible products includes the HP System Management Homepage. This incompatibility can be seen on Windows 2000.
Troubleshooting ● Access the HP ProLiant Server Management Software page at http://www.hp.com/servers/manage. You will find a wealth of Systems Management Products and service-related information. ● Access the HP System Management Homepage page at http://software.hp.com. ● Access the HP IT Resource Center for maintenance and support, forums, and training and education of HP products at http://itrc.hp.com. ● Contact the HP Support Forum to get answers to your HP product questions at http://forums.itrc.
Glossary caution A note to indicate that failure to follow directions could result in damage to equipment or loss of information. certificate An electronic document that contains a subject's public key and identifying information about the subject. The certificate is signed by a Certification Authority (CA) to bind the key and subject identification together.
Glossary The HP Version Control Agent can be configured to point to a HP Version Control Repository Manager, allowing easy version comparison and software update from the repository. HP Version Control Repository Manager An Insight Management Agent that allows a customer to manage HP-provided software stored in a user-defined directory/repository. HP Web-enabled System Management Software Software that manages HP Web-enabled products.
Glossary one system to another, and it provides authentication and secure communications over insecure channels. Secure Sockets Layer A standard protocol layer that lies between HTTP and TCP and provides privacy and message integrity between a client and server. A common use of SSL is to provide authentication of the server, so the client can be assured it is communicating with the system that the system claims to be. It is application protocol independent.
Glossary version control A feature that checks the versions of HP operating system drivers, HP Systems Insight Manager Agents, HP utilities, and firmware on the user's system. It compares them with the Version Control Database (VCDB) of current software and firmware versions. Version control then indicates that the software is up to date or that an upgrade is available and provides reasons for upgrading. Version information appears as a system link for a system.
Index C certificates auto import certificate, 8 trust mode, 21 trusted management server certificates, 23 credits System Management Homepage, 15 G getting started login, 5 logout, 8 H home System Management Homepage, 13 L logs System Management Homepage, 29 System Management Homepage legacy log, 30 System Management Homepage log, 29 N navigating System Management Homepage, 10 O settings System Management Homepage, 15 System Management Homepage anonymous access, 20 credits, 15 getting started, 5 home,
