HP WBEM Services Version A.02.05, Release Notes HP-UX Manufacturing Part Number: B8465-90036 December 2007 U.S.A. © Copyright 2007 Hewlett-Packard Development Company, L.P. All rights reserved.
Legal Notices © Copyright 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. The information contained herein is subject to change without notice.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: THE ABOVE COPYRIGHT NOTICE AND THIS PERMISSION NOTICE SHALL BE INCLUDED IN ALL
Except as contained in this notice, the name of a copyright holder shall not be used in advertising or otherwise to promote the sale, use or other dealings in this Software without prior written authorization of the copyright holder. -------------------------------------------------------------------------All trademarks and registered trademarks mentioned herein are the property of their respective owners.
HP WBEM Services Version A.02.05, Release Notes 1 HP WBEM Services Version A.02.
HP WBEM Services Version A.02.05, Release Notes Announcement Announcement The following information is for Version A.02.05 of HP WBEM Services. HP WBEM Services for HP-UX is available from http://software.hp.com. As the HP-UX implementation of the DMTF WBEM standard, the HP WBEM Services product enables management solutions that deliver increased control of enterprise resources at reduced cost.
HP WBEM Services Version A.02.05, Release Notes Announcement The product includes a set of providers that allow management applications to access information about managed resources in the operating environment. HP WBEM Services makes it easier for software developers to create management applications that manage HP-UX systems, and makes HP Servers and workstations easier for system administrators to manage.
HP WBEM Services Version A.02.05, Release Notes What’s in This Version What’s in This Version HP WBEM Services for HP-UX version A.02.05.08 is now being released to support HP-UX 11i v1, 11i v2 and 11i v3. HP WBEM Services for HP-UX version A.02.05 is based on OpenPegasus 2.5 source base and CIM Schema 2.9. The following are key differentiators from HP WBEM Services A.02.00 to A.02.
HP WBEM Services Version A.02.05, Release Notes What’s in This Version HP WBEM Services Version A.02.
HP WBEM Services Version A.02.05, Release Notes Product Documentation Product Documentation • HP WBEM Services Administrator’s Guide, Second Edition B8465-90017 available from http://docs.hp.com/en/netsys.html. • Release Notes for this version and for previous versions of HP WBEM Services are available from http://docs.hp.com/en/netsys.html. After installation, refer to the man pages for your system. Man pages are summarized in the Administrator’s Guide.
HP WBEM Services Version A.02.05, Release Notes Security Security HP WBEM Services supports four connection points • HTTP port • HTTPS (HTTP Secure) port • HTTPS port for Export Connections • a Unix domain socket for local connections HP WBEM Services uses dedicated ports for CIM-XML traffic. The ports 5988 (HTTP TCP/IP communication) and 5989 (HTTPS TCP/IP communication) are dedicated for CIM-XML communications between CIM Clients and the CIM Server.
HP WBEM Services Version A.02.05, Release Notes Security To disable the Export HTTPS port, use the cimconfig command to set the planned value of the configuration property enableSSLExportClientVerification to false and restart the CIM Server. Local User Authentication The CIM Server automatically authenticates local connections - that is connections established using the connectLocal method in the CIMClient interface.
HP WBEM Services Version A.02.05, Release Notes Security Remote User Authentication The CIM Server can authenticate remote users by: • HTTP Basic Authentication • Certificate Based Authentication (CBA) The following table details each remote authentication option in greater detail. Table 1-2 Remote User Authentication Methods Certificate Based Authentication (CBA) HTTP Basic Authentication Description The cimserver requests the client certificate while HTTPS connection is in progress.
HP WBEM Services Version A.02.05, Release Notes Security Table 1-2 Remote User Authentication Methods (Continued) Certificate Based Authentication (CBA) HTTP Basic Authentication For more information, see...
HP WBEM Services Version A.02.05, Release Notes Security More about using HTTP Basic Authentication The /etc/pam.conf file is the configuration file for PAM. The /etc/pam.conf file contains a list of services and each service is mapped to a corresponding service module. When a service is requested, its associated module is invoked. WBEM Services will default to the authentication mechanism specified in the OTHER directive of the /etc/pam.conf file.
HP WBEM Services Version A.02.05, Release Notes Security More about using Client Certificate-Based Authentication Before making use of CBA, you must do the following: 1. Enable Certificate Based Authentication (CBA) using the cimconfig command. By default, CBA is disabled. Refer to the cimconfig(1M) and cimtrust(1M) man pages for more information. 2. Use the cimtrust command to include client certificates from the trust store in the cimserver and associate that certificate with a system user. 3.
HP WBEM Services Version A.02.05, Release Notes Security Certificate Verification CIM Clients The CIM Client Interface supports the trust store and verification callback function as the mechanisms for server certificate verification. The CIM Client applications can use one or both of these mechanism to verify the server certificate. wbemexec Client The wbemexec command provides a command-line interface to a CIM server. For more information about the wbemexec command, see the wbemexec man page.
HP WBEM Services Version A.02.05, Release Notes Security Managing Certificates During the install process, if /etc/opt/hp/sslshare/cert.pem and/or /etc/opt/hp/sslshare/file.pem files are found on the system, the following messages will be generated in the install log: NOTE: /etc/opt/hp/sslshare/cert.pem - SSL Certificate file already exists. New certificates are not created. The existing files, /etc/opt/hp/sslshare/cert.pem and /etc/opt/hp/sslshare/file.
HP WBEM Services Version A.02.05, Release Notes Security • Scenario 2: Using custom certificates: If using either self-signed or root-signed 512-bit or 1024-bit encryption certificates, it is strongly recommended that you create new certificates with 2048-bit encryption. If using CA certificates that are using 2048-bit encryption, it is recommended that you keep them. If the CA certificates are not using 2048-bit encryption, it is recommended that you get new CA certificates with 2048-bit encryption.
HP WBEM Services Version A.02.05, Release Notes Standards Conformance Standards Conformance This version of the HP WBEM Services product complies with the following standards: • CIM Operations over HTTP, Version 1.1 • Representation of CIM in XML, Version 2.1 • CIM Specification, Version 2.2 • CIM Schema, Version 2.9 For more information about the DMTF WBEM and CIM standards, go to: http://www.dmtf.org.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Compatibility Information and Installing Requirements HP-UX 11i v1, 11i v2, or 11i v3 must be installed before installing HP WBEM Services A.02.05.xx. Table 1-3 Software requirements and OS platform/version compatibility: HP-UX Version WBEM Version WBEM Provider Compatibility 11i v1 A.02.05 A.02.05.01 A.02.05.04 A.02.05.06 A.02.05.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements • For HP-UX 11i v1 install Strong Random Number Generator depot KRNG11i. • Disk space required to install: HP WBEM Services requires the following disk space to install: / 5 MB /opt 48 MB /var 58 MB /usr 1 MB Depending on the number of CIM objects to be stored in the CIM Repository, additional disk space may be needed for the /var/opt/wbem directory.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements WBEM Provider Compatibility The following tables detail, based on HP-UX version, the product bundle and WBEM version information. Use the tables to determine which bundle is compatible with your version of HP-UX. Use the swlist command to view your product bundle version number.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-4 details HP-UX 11i v1 with product bundle and WBEM version compatibility information. Use the swlist command to view your product bundle version number. NOTE Unless otherwise indicated, the table column titled “Product Version” indicates support for the listed or later versions.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-4 Product Tag HP-UX 11i v1 WBEM Solution Compatibility Table (Continued) Product Title Product Version SFM-CORE HPUX System Fault Management A.04.00.04 PRM-Sw-Lib HP PRM Software Libraries C.03.02 IOTree-Provider WBEM Provider for PCI Slots B.11.11.04 EMS-Core EMS Core Product A.04.20.11 WBEMP-FS HP-UX File System CIM Provider B.11.11.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-5 details HP-UX 11i v2 with product bundle and WBEM version compatibility information. Use the swlist command to view your product bundle version number. NOTE Unless otherwise indicated, the table column titled “Product Version” indicates support for the listed or later versions.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-5 HP-UX 11i v2 WBEM Solution Compatibility Table (Continued) Product Tag Product Title Product Version vmProvider WBEM Provider for Integrity VM A.03.00.76 SFM-CORE HPUX System Fault Management B.04.00.06 PRM-Sw-Lib HP PRM Software Libraries C.03.02 SGWBEMProviders HP Serviceguard WBEM Providers A.02.00.00 EMS-Core EMS Core Product A.04.20.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-6 details HP-UX 11i v3 with product bundle and WBEM version compatibility information. Use the swlist command to view your product bundle version number. NOTE Unless otherwise indicated, the table column titled “Product Version” indicates support for the listed or later versions.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Table 1-6 HP-UX 11i v3 WBEM Solution Compatibility Table (Continued) Product Tag Product Title Product Version SFM-CORE HPUX System Fault Management C.01.00.29 PRM-Sw-Lib HP PRM Software Libraries C.03.02.02 SGWBEMProviders HP Serviceguard WBEM Providers A.01.00.01 EMS-Core EMS Core Product A.04.20 WBEMP-FS HP-UX File System CIM Provider B.11.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Compatibility Starting with the A.02.05 release, HP WBEM Services for HP-UX will support an option that allows a WBEM Provider (i.e., the management instrumentation) to run as the user who issued the management request. Prior to this release, all WBEM Providers executed in a privileged context. With the release of HP WBEM Services A.02.05.
HP WBEM Services Version A.02.05, Release Notes Compatibility Information and Installing Requirements Alternative 2: To support running in the “Requestor” context, developers need to ensure that their Provider has been written to allow multiple instances of the Provider to run at the same time (in different user contexts). In some cases, the Provider may need to coordinate the actions of the Provider instances.
HP WBEM Services Version A.02.05, Release Notes Installing HP WBEM Services Installing HP WBEM Services You need to log in to the system as root (uid=0) to install the HP WBEM Services software. Software is available in Software Depot (SD) format as a single SD depot. Before installing the software, be sure your system meets the software and hardware requirements described in the section titled “Compatibility Information and Installing Requirements.
HP WBEM Services Version A.02.05, Release Notes Installing HP WBEM Services The following files are installed. Do not move these files! /etc/opt/wbem (directory) /opt/wbem/mof/CIM29 MOF files. /opt/wbem (directory) /opt/wbem/bin commands, executables /opt/wbem/lbin Executables that are not intended to be used directly by customers. /opt/wbem/lib Shared libraries. /opt/wbem/mx Reserved. /opt/wbem/providers/lib Links to shared libraries for providers.
HP WBEM Services Version A.02.05, Release Notes Installing HP WBEM Services After installing the HP WBEM Services product, the CIM Server is in a running state. For HP-UX, there are 7 providers bundled with HP WBEM Services.
HP WBEM Services Version A.02.05, Release Notes Installing HP WBEM Services Running the HP WBEM Services CIM Server After installation, the HP WBEM Services CIM Server process (cimserver) is active. To restart it, first stop cimserver with the cimserver -s command. Use the cimserver command, with no options to start the cimserver daemon on the system where the command is issued. Once the CIM Server has been installed, the CIM Server will be automatically started as part of the system reboot process.
HP WBEM Services Version A.02.05, Release Notes Patches, Fixes and Known Problems in this Version Patches, Fixes and Known Problems in this Version The following sections detail the known problems, required patches, and fixes for this release of HP WBEM Services. Required and Recommended Patches Table 1-3 lists patches that are required or recommended for HP WBEM Services Version A.02.05. This list is subject to change without notice.
HP WBEM Services Version A.02.05, Release Notes Patches, Fixes and Known Problems in this Version Fixes Unless listed in the Known Problems and Workarounds section, all previous WBEM Services A.02.00 known problems have been fixed in WBEM Services A.02.05. Table 1-8 Identifier Defects Fixed in HP WBEM Services A.02.05 Description Defects fixed in HP WBEM Services A.02.05 version A.02.05.
HP WBEM Services Version A.02.05, Release Notes Patches, Fixes and Known Problems in this Version Known Problems and Workarounds The following are known problem and suggested workaround for the A.02.05 version of HP WBEM Services. Failure to configure WBEM-CORE fileset (Updating from A.02.00.08 and earlier to A.02.05 and later) • What is the problem? Use of the usePAMAuthentication configuration option will result in failure to configure the WBEM-CORE fileset during an update of the WBEM Services.
HP WBEM Services Version A.02.05, Release Notes Software Availability in Native Languages Software Availability in Native Languages HP WBEM Services is available only in English.
