HP System Management Homepage Installation Guide HP-UX, Linux, and Windows Systems HP Part Number: 381372-009 Published: February 2007 Edition: 8
© Copyright 2004 - 2007 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents About this document..........................................................................................................5 Intended audience..................................................................................................................................5 New and changed information in this edition.......................................................................................5 Typographic conventions...............................................................
6 Installing HP SMH using the ProLiant Remote Deployment Utility...........................31 Installing remotely on Windows using ProLiant Remote Deployment Utility....................................32 7 Installing in-place on Linux..........................................................................................35 Installation for Linux on x86 and x86_64..............................................................................................35 Installing HP SMH on Linux x86 systems.........
About this document Intended audience The HP System Management Homepage (HP SMH) is a Web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux, and Microsoft Windows operating systems. This installation guide is for system administrators who are installing HP SMH.
Related information This section lists the HP SMH documentation and related HP documentation. HP SMH documentation For more information regarding HP SMH, refer to the following sources: 6 • HP System Management Homepage Release Notes The release notes provide documentation for what's new with the release, features and change notifications, system requirements, and known issues. The release notes are available on the HP Technical Documentation Web site at http://docs.hp.com.
Related documentation For more information relating to HP SMH, refer to the following sources. They are available on the Instant Information DVD and on the HP Technical Documentation Web site at http:// docs.hp.com. • HP-UX 11i Installation and Update Guides (v1, B.11.11; v2, B.11.23; v3 B.11.31) instructions on how to install or update to HP-UX. • HP-UX 11i Release Notes (v1, B.11.11; v2, B.11.23; v3 B.11.31) Describe new features and functionality changes for HP-UX 11i, including information on HP SMH.
1 Product overview The HP System Management Homepage (HP SMH) is a Web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems. HP SMH aggregates and displays data from Web Agents and other HP Web-enabled System Management Software that includes HP Insight Diagnostics, the Array Configuration Utility, and the HP Software Version Control Agents.
2 Installation requirements This chapter provides requirements for the HP-UX, Linux, and Windows systems to run HP System Management Homepage (HP SMH): • • • • • • • “Supported operating systems” (page 11) “Supported browsers” (page 12) “RPMs supported on the x86 platform” (page 12) “RPMs supported on the AMD64 and EM64T platform” (page 13) “RPMs supported on the Itanium platform” (page 13) “Verifying system requirements” (page 15) “Obtaining the HP SMH software” (page 15) — — “HP media” (page 15) “HP Web
NOTE: For Linux, the Lightweight Directory Access Protocol (LDAP) is supported on SUSE Linux Enterprise Server 9 and eDir is upported on Novell Open Enterprise Server (OES). For Windows, the SmartStart CD requires that all systems have a minimum of 256 MB of RAM. The HP-UX 11i v1 (B.11.11) Operating Environments are for PA-RISC systems only, while the HP-UX 11i v2 (B.11.23) Operating Environments (September 2004 and later) include PA-RISC and Itanium systems.
Red Hat Enterprise Linux 3 (x86) • • • • glibc v2.3.2 pam 0.75-51 or greater perl 5.8.0 or greater zlib 1.1.4-8.1 or greater Red Hat Enterprise Linux 4.0 (x86) • • • • glibc 2.3.3-36 pam 0.77-47 or greater perl 5.8.0 or greater zlib 1.2.1-3 or greater RPMs supported on the AMD64 and EM64T platform HP SMH supports the following RPMs for each of the Linux operating systems on the AMD64 and EM64T platform. Operating system RPM SUSE Linux Enterprise Server 9 (AMD64 and EM64T) • • • • glibc 2.3.
Red Hat Enterprise Linux 3.0 (Integrity platforms) • • • • • • • • glibc v2.3.2 jrockit-j2se 8.1.1.1-2 or greater (Intel Itanium only) net-snmp-5.0.9-2.30E.19hp net-snmp-perl-5.0.9-2.30E.19hp openssl 0.9.7a-22.1 or greater pam 0.75-51 or greater perl 5.8.0 or greater zlib 1.1.4-8.1 or greater SUSE Linux Enterprise Server 9 for Integrity Linux • • • • • • • glibc-2.3.3 or greater j2sdk-1-4-2 or greater openssl-0.9.7d-15 or greater net-snmp-5.1-80.16hp pam-0.77-221 perl-5.8.3 zlib-1.2.
NOTE: The AMD64 is an AMD Opteron processor. The EM64T is an Intel Xeon processor with Extended Memory 64 Technology. The x86 is an Intel Pentium III/IV/Xeon 32-bit processor. The IPF is an Intel Itanium 64-bit Processor. Verifying system requirements Before installation begins, the installation utility verifies whether: • • • • For HP-UX, Linux, and Windows, the operating system meets the minimum requirements.
3 Initial setup You can install HP System Management Homepage (HP SMH) on systems running HP-UX, Linux, and Windows. Additionally, you can install HP SMH locally using the Windows ProLiant Support Pack or the Linux RPM (Red Hat Package Manager), or remotely with optional preconfiguration using the ProLiant Remote Deployment Utility or the Linux Deployment Utility.
4 Installing on HP-UX This chapter provides steps to install HP System Management Homepage (HP SMH) on the HP-UX Operating Environments (OEs): • • • • • • “Installation requirements” (page 19) “Installing HP SMH and dependent applications” (page 20) “Using the Applications media” (page 21) “Using Software Depot” (page 22) “Configuring HP SMH” (page 22) “Patching or updating the software” (page 24) System Administration Management Tool Changes: SAM and HP SMH HP-UX System Administration Manager (SAM) is de
• HP-UX 11i v1 (B.11.11) for HP Servers and Workstations HP-UX 11i v2 (B.11.23) for HP Integrity Servers and HP 9000 Servers HP-UX 11i v3 (B.11.31) for HP Integrity Servers and HP 9000 Server • • • Mozilla or Firefox browser Administrator privileges on system Dependent applications (see next section) Installing HP SMH and dependent applications HP SMH requires several applications, but some applications are optional. You might already have these applications installed on your system.
• • • docs.hp.com for instructions on how to install and update HP-UX, including recommended and default-installed HP application bundles. See “Using the Applications media” (page 21). You can use swinstall to install or update the bundles (for example, hpuxwsApache and hpuxwsTomcat) using the HP-UX 11i v1 (B.11.11), HP-UX 11i v2 (B.11.23), and HP-UX 11i v3 (B.11.31) media. See “Using the Applications media” (page 21). You can go to the Software Depot Home at http://www.hp.
TIP: After the installation is complete, you can start using HP SMH immediately. Using Software Depot To install HP SMH and other HP Applications, you must have root privileges. 1. 2. 3. 4. 5. 6. 7. Go to the Software Depot Home at http://www.hp.com/go/softwaredepot. Find the product that you want to download. Each product has a Web page with information and download links. Click the Receive for Free link. Fill out the registration form. Review any installation instructions.
Configuring the startup mode HP SMH supports three startup modes: • Autostart URL This mode is the default setting for startup. You can start HP SMH by using a Web browser and navigating to http://hostname:2301/. If autostart is configured as the default, there is a daemon listening on http://hostname:2301 only (nothing is listening on port 2381 so that port will fail).
Patching or updating the software HP may issue patches to HP SMH. If this is the case, you can adopt a proactive patch management strategy and regularly check the standard patch resources: • • IT Resource Center (ITRC) at http://itrc.hp.com Standard HP-UX patch bundles on the OE and Applications media, and the ITRC For a detailed guide on how to patch your HP-UX system, see the Patch Management User Guide for HP-UX 11.x Systems on the HP Technical Documentation Web site at http://docs.hp.com.
5 Installing on Windows This chapter provides steps to install HP System Management Homepage (HP SMH) on the Windows operating system. • • “Installing HP SMH in-place on Windows” (page 25) “Installing HP SMH for Windows silently” (page 28) The next chapter provides steps to install HP SMH on the Windows operating system using the ProLiant Remote Deployment Utility: • “Installing HP SMH using the ProLiant Remote Deployment Utility” (page 31) Installing HP SMH in-place on Windows 1. 2. 3.
7. Select the level of security you want to provide from one of the following trust modes: a. Trust By Certificate i. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows trusted certificate files to be added to the Trusted Certificate List. ii. Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Add File dialog box appears.
Note: The server name cannot contain the following characters: ~, !, `, @, #, $, %, ^, &, *, (, ), +, =, ", :, ', <, >, ?, ,, |, and ;. iv. v. Click Add to add the name of a server you want to trust. Click Next. The IP Binding dialog box appears. Note: If you click Next without adding any server names to the list, an error message appears, indicating that if you do not specify any trusted server names, HP Systems Insight Manager cannot access the HP Web-based Agents on this system.
10. Select IP Restricted Login, and click Next. The IP Address to Include dialog box appears. This dialog box enables you to specify the IP address or IP address ranges to grant login access permission. If there are IP addresses in the Inclusion list, then only those IP addresses are enabled for login privileges. If there are no IP addresses in the Inclusion list, then login privileges are permitted to all IP addresses that are not in the Exclusion list.
NOTE: Do not copy or import certificates when using the setup.exe /r option. Generating a setup.iss file To generate your own setup.iss, run the following command:: 1. 2. 3. setup.exe /r The HP SMH Installation interface appears and records your selections. The setup.iss file is placed into the Windows directory. You can move this file to the location of your choice. Installing silently using the CLI To install silently using the CLI, use the following command: setup.exe /s /f1
6 Installing HP SMH using the ProLiant Remote Deployment Utility This chapter provides steps to install HP System Management Homepage (HP SMH) on the Windows operating system using the ProLiant Remote Deployment Utility. • “Installing remotely on Windows using ProLiant Remote Deployment Utility” (page 32) The previous chapter provides steps to install HP SMH in-place on the Windows operating system.
Installing remotely on Windows using ProLiant Remote Deployment Utility To preconfigure the HP SMH component: 1. 2. 3. Under All configurable components, right-click on the HP System Management Homepage component and select Configure. The Welcome wizard appears. Click Next. The Operating System Group dialog box appears providing you with an option to add the groups and select the Operating level. To add HP SMH groups: a. In the Group Name field, enter a name for the group.
7. Select the level of security you want to provide from one of the following trust modes: a. Trust By Certificate i. Select Trust By Certificate. ii. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows trusted certificate files to be added to the Trusted Certificate List. iii. Click Browse to select the certificate file. After the certificate file is selected, the certificate data appears on the screen. iv. Click Add.
Note: The Trust All option leaves your system vulnerable to security attacks and sets up HP SMH to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and everyone in the network is trusted. 8. Select IP Binding to enable the Subnet IP Address and NetMask. The IP Binding dialog box enables you to bind to specific IP addresses that match a specific Subnet IP Address or NetMask. It restricts the subnet you want to manage. a. b. c.
7 Installing in-place on Linux This chapter provides steps to install HP System Management Homepage (HP SMH) in-place on Linux x86 systems and x86-64 systems. NOTE: For information regarding installing HP SMH on Integrity platforms, refer to HP Integrity Essentials Foundation Pack for Linux 1.0 User Guide at http://docs.hp.com.
A message appears indicating that HP SMH installed successfully with default configuration values. Configuring HP SMH After HP SMH is installed, you can configure the settings. If you are migrating from Management HTTP Server, the Management HTTP Server settings are retained. However, the retained settings are configurable. To configure HP SMH settings: 1. Enter the following command to start the configuration: perl /usr/local/hp/hpSMHSetup.
3. The Operating System Groups screen enables you to add operating system groups to HP SMH. Add or delete operating system groups in HP SMH. The following options are available: a. To add groups: i. At the prompt, enter 1 to add a group. The Add Operating System Groups screen displays the operating system group lists. Note: You can add up to five entries per group. Enter one of the following options to assign the operating system group to the Administrator Group List: • Enter 1 for Administrator.
5. 6. 38 Enter n to go to the next screen or enter p to go to the previous screen. Enter n to go to the next screen. The Trust Mode screen appears.
7. Configure the HP SMH trust mode. Enter 1 to Trust by Certificate. Trust Mode: Trust by Certificate appears. The following options are available: Trust by Certificate, Trust by Name, and Trust All. a. Trust by Certificate i. To add a certificate file: A. Enter 1. You are prompted for the certificate location. B. Enter the file path of the trusted certificates to be added to the Trusted Certificates List. Press Enter when you are finished. For example: I. II. File: /home/ServerName/cert1.pem .
iii. Enter n for next. The Trust Mode Settings screen appears. c. 8. Trust All i. Enter 3 to Trust All. Trust Mode: Trust All appears. ii. Enter n for next. The IP Binding screen appears. Bind IP addresses that match a subnet and netmask. The following options are available: a. Enable IP Binding i. Enter 1 to enable the IP Binding, which sets it to ON. IP Binding: ON appears. ii. Enter n to go to the next screen. The following options are available: To add an IP address: A. Enter 1 to add an IP address.
9. Configure HP SMH to restrict login access based on the IP address of the system from which the login is attempted. The following options are available: a. Enter 1 to enable an IP Restricted Login, which sets it to ON. IP Restricted Login:OFF appears. To enable the IP Restricted Login: i. ii. Enter 1. IP Restricted Login is set to ON. Press n for next. The Set IP Address Restrictions screen appears. To add IP addresses to the Inclusion List: A. Enter 1 for Include Login Restriction IP Address. B.
10. Enter n to go to the next screen. The configuration completes, and a message appears indicating that HP SMH is successfully set up. The HP SMH service is stopped and started automatically. 11. Verify HP SMH is configured and working properly by navigating to it and verifying that it displays correctly.
8 Installing in-place on Linux using Linux Deployment Utility This chapter provides steps to install HP System Management Homepage (HP SMH) in-place on the Linux operating system using the Linux Deployment Utility.
6. In the Please enter the Operating System (OS) Group Names for user-level access. (Max five names, separated by semicolon or space) field, enter the operating system group name for user-level access. Note: You can enter up to five operating system group names for user-level access. Separate the group names with a semicolon (;) or space. 7. In the Allow Local Access field, enter YES to allow local access or NO to disallow local access. 8.
Installing HP SMH without preconfiguration You can install the HP SMH component without any configurations by clicking Install. You can configure HP SMH settings at any time by logging into HP SMH with root privileges.
9 Initializing the software for the first time After HP System Management Homepage (HP SMH) has been installed and configured for the first time, a process to create a private key and corresponding self-signed Base64-encoded certificate is initiated. This certificate is a Base64-encoded PEM file. Key and certificate information • • • In HP-UX, both public and private keys for HP SMH are stored in the /var/opt/hpsmh/sslshare directory. The files are called file.pem (private key) and cert.
10 Logging in and logging out of HP SMH This chapter provides browser and command line instructions for logging in to and out of HP System Management Homepage (HP SMH). • • • • • “Logging in Windows XP” (page 49) “Logging in with Internet Explorer” (page 49) “Logging in with Mozilla” (page 50) “Logging in from the HP-UX command line” (page 51) “Logging out” (page 51) Logging in Windows XP If HP SMH is installed on a Windows XP system, the following security option must be enabled to log into HP SMH: 1. 2.
You can find procedures on how to change the configuration variables in the previous chapters of this guide. 2. The first time you browse to this link, the Security Alert dialog box appears, asking you to indicate whether to trust the server. If you do not import the certificate, the Security Alert appears every time you browse to HP SMH.
3. Enter the user name that is recognized by the operating system. If you have not yet added user groups into HP SMH security settings, then users must log in with an operating system account in the Administrators group for Windows or the operating system group root (which in turn contains the user root by default) for HP-UX and Linux. If the credentials cannot be authenticated, the user is denied access.
11 Uninstalling HP SMH This chapter provides instructions on how to uninstall HP System Management Homepage (HP SMH) from HP-UX, Linux, and Windows systems. It also provides instruction on how to uninstall it manually.
Uninstalling manually for Windows systems Uninstalling manually duplicates the actions of the HP SMH uninstaller, which can be accessed through Add/Remove Programs in the Control Panel. Use this procedure if you want to completely uninstall HP SMH, and the uninstaller has been inadvertently removed or corrupted. Note: Items marked if present are present if there is an existing HP SMH 2.0.1 or 2.0.2 installation.
Index C RPMs on Itanium, 13 RPMs on x86, 12 Web browsers, 12 Windows, 25, 31 Itanium RPMs, 13 console install Linux, 35 L A audience, 5 D document organization, 5 documentation, 6 F features new, 5 G Linux install, 35 Linux Deployment Utility install, 43 Linux IA_32 install, 35 Linux x86_64 install, 35 logging in, 49 logging out, 49 getting started, 17 M H manpages, 6 media, 15 HP SMH HP-UX install, 19 install requirements, 11, 15 Linux Deployment Utility install, 43 Linux install, 35, 43 logg
W Web browsers, supported, 12 Web sites, 15 Windows install, 25 install ProLiant Remote Deployment Utility, 31 56 Index