HP System Management Homepage Installation Guide HP-UX, Linux and Windows Systems HP Part Number: 438862-009 Published: March 2008 Edition: 16
© Copyright 2004 - 2008 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents About this document..........................................................................................................5 Intended audience..................................................................................................................................5 New and changed information in this edition.......................................................................................5 Typographic conventions...............................................................
6 Installing HP SMH using the ProLiant Remote Deployment Utility...........................33 Installing remotely on Windows using ProLiant Remote Deployment Utility....................................34 7 Installing HP SMH using the HP Smart-Update Manager (HPSUM)......................37 Installing HP SMH remotely on Windows using HP Smart-Update Manager (HPSUM)...................38 To preconfigure the HP SMH component:.......................................................................................
About this document Intended audience The HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux, andMicrosoft® Windows® operating systems. This installation guide is for system administrators who are installing HP SMH.
Chapter 12 Chapter 13 “Logging in and logging out of HP SMH” (page 63) “Uninstalling HP SMH” (page 67) Related information This section lists the HP SMH documentation and related HP documentation. HP SMH documentation For more information regarding HP SMH, refer to the following sources: 6 • HP System Management Homepage Release Notes The release notes provide documentation for what's new with the release, features and change notifications, system requirements, and known issues.
home at http://www.hp.com/go/softwaredepot and search for System Management Homepage. • HP ProLiant Essentials software page manage. This web page is at http://www.hp.com/servers/ Related documentation For more information relating to HP SMH, refer to the following sources. They are available on the Instant Information DVD and on the HP Technical Documentation web site at http:// docs.hp.com. • HP-UX 11i Installation and Update Guides (v1, B.11.11; v2, B.11.23; v3 B.11.
Manufacturing Part Number Supported Operating Systems Supported Versions Edition Number Publication Date 438862-001 Linux and Windows See “Installation requirements” (page 11). 7 January 2007 381372-008 HP-UX HP-UX 11i v2 (B.11.23), HP-UX 11i v1 (B.11.11) 6 December 2006 381372-007 HP-UX HP-UX 11i v2 (B.11.23), HP-UX 11i v1 (B.11.11) 5 September 2006 381372-006-en HP-UX, Linux, and Windows For HP-UX: HP-UX 11i v2 (B.11.23), HP-UX 11i v1 (B.11.11).
1 Product overview The HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems. HP SMH aggregates and displays data from Web Agents and other HP Web-enabled System Management Software that includes HP Insight Diagnostics, the Array Configuration Utility, and the HP Software Version Control Agents.
2 Installation requirements This chapter provides requirements for the HP-UX, Linux, and Windows systems to run HP System Management Homepage (HP SMH): • • • • • • • “Supported operating systems” (page 11) “Supported browsers” (page 12) “RPMs supported on the x86 platform” (page 13) “RPMs supported on the AMD64 and EM64T platform” (page 13) “RPMs supported on the Itanium platform” (page 14) “Verifying system requirements” (page 15) “Obtaining the HP SMH software” (page 15) — — “HP media” (page 15) “HP web
• • • • • • • • • • • • • • • • • • • • • • • • • SUSE Linux Enterprise Server 9 for AMD64 and Intel EM64T, Service Pack 4 SUSE Linux Enterprise Server 9 for Itanium Linux, Service Pack 4 SUSE Linux Enterprise Server 9 for x86, Service Pack 3 SUSE Linux Enterprise Server 9 for AMD64 and Intel EM64T, Service Pack 3 SUSE Linux Enterprise Server 9 for Integrity Linux, Service Pack 3 Novell Open Enterprise Server (OES) with Service Pack 1 or later ESX 3.0 ESX 3.0.1 ESX 3.0.2 ESX 3.
• • Mozilla 1.5, 1.6, 1.7 Firefox 1.0.2, 1.5, 2.0 NOTE: Installation of HP SMH does not require a browser. The HP Web-enabled System Management Software is hardware-dependent. For the installation to complete successfully, your system must support at least 256 colors. RPMs supported on the x86 platform HP SMH supports the following Red Hat Package Managers (RPM) for each of the Linux operating systems on the x86 platform. Operating system RPM SUSE Linux Enterprise Server 10 (x86) • • • • glibc 2.3.
RPMs supported on the Itanium platform HP SMH supports the following RPMs for each of the Linux operating systems on the Itanium platform. Operating system 14 RPM Red Hat Enterprise Linux 4.0 and 5.0 (Integrity platforms) • • • • • • • • glibc-2.3.4 j2sdk-1-4-2 (version 2.1.7 and earlier) jrockit-R27.1.0-jdk1.5.0 net-snmp-utils-5.1.2-11.EL4.6hp net-snmp-perl-5.1.2-11.EL4.6hp openssl-0.9.7a-43.8 or greater pam-0.77-66.14 or greater perl-5.8.
NOTE: The AMD64 is an AMD Opteron processor. The EM64T is an Intel Xeon processor with Extended Memory 64 Technology. The x86 is an Intel Pentium III/IV/Xeon 32-bit processor. The IPF is an Intel Itanium 64-bit processor. Verifying system requirements Before installation begins, the installation utility verifies whether: • • • • For HP-UX, Linux, and Windows, the operating system meets the minimum requirements.
3 Initial setup You can install HP System Management Homepage (HP SMH) on systems running HP-UX, Linux, and Windows. Additionally, you can install HP SMH locally using the Windows ProLiant Support Pack or the Linux RPM (Red Hat Package Manager), or remotely with optional preconfiguration using the ProLiant Remote Deployment Utility or the Linux Deployment Utility.
4 Installing on HP-UX This chapter provides steps to install HP System Management Homepage (HP SMH) on the HP-UX Operating Environments (OEs): • • • • • • • • “System Administration Management Tool changes: SAM and HP SMH” (page 19) “Installing on HP-UX” (page 19) “Installation requirements” (page 20) “Installing HP SMH and dependent applications” (page 20) “Using the Applications media” (page 22) “Using Software Depot” (page 22) “Configuring HP SMH” (page 23) “Patching or updating the software” (page 25)
Installation requirements To install HP SMH, your system must meet the minimum requirements. The following list provides a general review of requirements. For detailed information regarding minimum requirements, see Chapter 2: “Installation requirements” (page 11). • HP-UX 11i v1 (B.11.11) for HP Servers and Workstations HP-UX 11i v2 (B.11.23) for HP Integrity Servers and HP 9000 Servers HP-UX 11i v3 (B.11.
Product Bundle Path Status Release HP-UX Software Distributor HP-UX 11i v1, v2, v3 HPUXBaseAux for /usr/lib/sw/wbem/ Recommended: Certain HP SMH HP-UX 11i v1 and v2. plugins, such as SwMgmtMin for Property Pages found HP-UX 11i v3. on the Home page require it. LAN Provider for Ethernet LAN interfaces WBEMP-LAN-00 HP-UX 11i v1, v2, v3 /opt/lanprovider/ Recommended: Certain HP SMH plugins, such as Property Pages found on the Home page require it.
Using the Applications media To install HP SMH and other HP Applications, you must have root privileges. These instructions assume you are installing from a DVD. 1. Mount the Applications DVD. To install software from the Applications DVD, you must mount the DVD as a file system that HP-UX 11i can access: a. Determine the DVD device name. Use the ioscan -funC disk command to list disk devices, including the DVD devices. b. Create a mount point for the Applications DVD, if one does not yet exist.
7. Use the swinstall command to install the product to your system: swinstall -s /var/temp/ depot_filename.depot bundlename For example: swinstall -s \ /var/temp/SysMgmtHomepage_A2214_HP-UX_B.11.23_IA+PA.depot SysMgmtWeb TIP: After the installation is complete, you can start using HP SMH immediately. Configuring HP SMH The HP SMH configuration is based on environment variables and tags that are set by the /opt/hpsmh/lbin/envvars, /opt/hpsmh/conf.common/smhpd.xml and /opt/hpsmh/conf/timeout.conf files.
Variable Description Script TIMEOUT_SMH The TIMEOUT_SMH environment /opt/hpsmh/conf/timeout.conf variable defines the HP SMH server timeout in minutes. If it is defined and lower than the HP SMH session timeout, the HP SMH server will be stopped three minutes after the HP SMH session timeout. If it is defined and greater than the HP SMH session timeout, then the HP SMH server is stopped after the time period has elapsed without any user activity.
Syntax: smhstartconfig [ -a {on|off} -b {on|off} ] [ -t {on|off} ] Options: -a {on|off} -b {on|off} -t {on|off} Enable/disable the autostart URL mode. Enable/disable the automatic startup on boot mode. Set the Tomcat startup mode where: on off Start Tomcat when HP SMH starts. Start Tomcat on demand (default). If no options are specified, then smhstartconfig displays the current startup mode. The smhstartconfig command does not accept -a on and -b on options simultaneously.
5 Installing on Windows This chapter provides steps to install HP System Management Homepage (HP SMH) on the Windows operating system.
7. Select the level of security you want to provide from one of the following trust modes: a. Trust By Certificate i. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows trusted certificate files to be added to the Trusted Certificate List. ii. Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Add File dialog box appears.
Note: The HP SIM server's certificate name cannot contain the following characters: ~, !, `, @, #, $, %, ^, &, *, (, ), +, =, ", :, ', <, >, ?, ,, |, and ;. iv. v. Click Add to add the name of a certificate of HP Systems Insight Manager server you want to trust. Click Next. The IP Binding dialog box appears.
10. Select IP Restricted Login, and click Next. The IP Address to Include dialog box appears. This dialog box enables you to specify the IP address or IP address ranges to grant login access permission. If there are IP addresses in the Inclusion list, then only those IP addresses are enabled for login privileges. If there are no IP addresses in the Inclusion list, then login privileges are permitted to all IP addresses that are not in the Exclusion list.
NOTE: Do not copy or import certificates when using the setup.exe /r option. Generating a setup.iss file To generate your own setup.iss, run the following command: 1. 2. 3. setup.exe /r The HP SMH Installation interface appears and records your selections. The setup.iss file is placed into the Windows directory. You can move this file to the location of your choice. Installing silently using the CLI To install silently using the CLI, use the following command: setup.exe /s /f1
Configuring HP SMH The HP SMH configuration is based on environment variables and tags that are set by the %SystemDrive%\hp\hpsmh\conf\smhpd.xml, file. To change the default configuration, you can modify the files to properly set the value of the following variables and tags. Variable Description Script 15 The tag defines the %SystemDrive%\hp\hpsmh\conf\smhpd.xml HP SMH session timeout in minutes.
6 Installing HP SMH using the ProLiant Remote Deployment Utility This chapter provides steps to install HP System Management Homepage (HP SMH) on the Windows operating system using the ProLiant Remote Deployment Utility. • “Installing remotely on Windows using ProLiant Remote Deployment Utility” (page 34) The previous chapter provides steps to install HP SMH in-place on the Windows operating system.
Installing remotely on Windows using ProLiant Remote Deployment Utility To preconfigure the HP SMH component: 1. 2. 3. Under All configurable components, right-click on the HP System Management Homepage component and select Configure. The Welcome wizard appears. Click Next. The Operating System Group dialog box appears providing you with an option to add the groups and select the Operating level. To add HP SMH groups: a. In the Group Name field, enter a name for the group.
7. Select the level of security you want to provide from one of the following trust modes: a. Trust By Certificate i. Select Trust By Certificate. ii. Click Next. The Trusted Certificates dialog box appears. The Trusted Certificates dialog box allows trusted certificate files to be added to the Trusted Certificate List. iii. Click Browse to select the certificate file. After the certificate file is selected, the certificate data appears on the screen. iv. Click Add.
ii. Click Next. The IP Binding dialog box appears. Note: The Trust All option leaves your system vulnerable to security attacks and sets up HP SMH to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and everyone in the network is trusted. 8. Select IP Binding to enable the Subnet IP Address and NetMask. The IP Binding dialog box enables you to bind to specific IP addresses that match a specific Subnet IP Address or NetMask.
7 Installing HP SMH using the HP Smart-Update Manager (HPSUM) This chapter provides steps to install HP System Management Homepage (HP SMH) on the Windows operating system using the HP Smart-Update Manager (HPSUM). • • “Installing HP SMH remotely on Windows using HP Smart-Update Manager (HPSUM)” (page 38) “To preconfigure the HP SMH component:” (page 38) The previous chapter provides steps to install HP SMH using the ProLiant Remote Deployment Utility.
Installing HP SMH remotely on Windows using HP Smart-Update Manager (HPSUM) 1. 2. 3. 4. To start the deployment, run HPSUM.EXE. The Inventory Progress screen is displayed while the HP Smart-Update Manager builds an inventory of available updates. The Select Installation Host(s) screen appears when the inventory process is complete. If you want to install HP SMH on the local server, check the Local Host checkbox and click Next. If you want to install HP SMH on remote server(s): a.
2. 3. In the Group Name field, enter the name of an operating system group that you want to assign (for example, vcadmin). In the Operating Level field, select the appropriate level for the new group from the dropdown list. Note: The default Administrators Groups always have administrative access. 4. Click Add to assign the group. The new group appears under the operating system group to which it was assigned. Note: You can add up to five entries per operating system group. 5. 6. Click Next.
software to the wrong system. This option verifies only the HP SIM server's certificate name submitted. NOTE: HP strongly recommends using the Trust by Certificate option because the other options are less secure. The server name option must meet the following criteria: — — — — Each server's certificate name must be less than 64 characters. The overall length of the server's certificate name list is 1,024 characters.
10. The IP Restricted Login enables the HP System Management Homepage to restrict login access based on the IP address of a system. You can set address restriction at installation time or by it can be set by administrators from the IP Restricted Login page • • • If an IP address is excluded, it is excluded even if it is also listed in the included box. If there are IP addresses in the inclusion list, then only those IP addresses are allowed login access with the exception of localhost.
8 Installing in-place on Linux This chapter provides steps to install HP System Management Homepage (HP SMH) in-place on Linux x86 systems and x86_64 systems. • “Installation for Linux on x86 and x86_64” (page 43) — — — “Installing HP SMH on Linux x86 systems” (page 43) “Installing HP SMH on x86_64” (page 43) “Configuring HP SMH” (page 43) The next chapter provides steps to install HP SMH in-place on Linux systems using the Linux Deployment Utility.
To configure HP SMH settings: 1. Enter the following command to start the configuration: perl /opt/hp/hpsmh/hpSMHSetup.pl Enter the following command to start the configuration for Itanium systems: perl /opt/hp/hpsmh/hpSMHSetup.sh The Welcome screen appears, indicating that you can configure security and access parameters on the following screens. 2.
4. Configure Local and Anonymous Access. The following options are available: • Enter 1 to enable Anonymous Access. Caution: HP does not recommend the use of anonymous access. • • • Enter 2 to disable Anonymous Access. Enter 3 to disable Local Access. Enter 4 to enable Local Access - Anonymous. Local Access enables you to locally gain access to HP SMH without being challenged for authentication. Any local user has access limited to unsecured pages without being challenged for a username and password.
a. Trust by Certificate i. To add a certificate file: A. Enter 1. You are prompted for the certificate location. B. Enter the file path of the trusted certificates to be added to the Trusted Certificates List. Press Enter when you are finished. For example: I. II. File: /home/ServerName/cert1.pem . Press Enter. The cert1.pem is added to the Trusted Certificates List. If the certificate file does not exist, a message appears indicating that /home/ServerName/cert1.pem does not exist. C. ii.
c. Trust All i. Enter 3 to Trust All. Trust Mode: Trust All appears. ii. Enter n for next. The IP Binding screen appears. d. Modify Certificate List Enter 4 to Modify Certificate List. 8. Bind IP addresses that match a subnet and netmask. The following options are available: a. Enable IP Binding i. Enter 1 to enable the IP Binding, which sets it to ON. IP Binding: ON appears. ii. Enter n to go to the next screen. The following options are available: To add an IP address: A.
9. Configure HP SMH to restrict login access based on the IP address of the system from which the login is attempted. The following options are available: a. Enter 1 to enable an IP Restricted Login, which sets it to ON. IP Restricted Login:ON appears. To enable the IP Restricted Login: i. ii. Enter 1. IP Restricted Login is set to ON. Press n for next. The Set IP Address Restrictions screen appears. To add IP addresses to the Inclusion List: A. Enter 1 for Include Login Restriction IP Address. B.
10. Enter n to go to the next screen. The configuration completes, and a message appears indicating that HP SMH is successfully set up. The HP SMH service is stopped and started automatically. 11. Verify HP SMH is configured and working properly by navigating to it and verifying that it displays correctly.
9 Installing directly on Linux Installing in-place on Linux Itanium This chapter provides steps to install HP System Management Homepage (HP SMH) in-place on Linux Itanium. • “Installation for Linux Itanium” (page 51) — — “Installing HP SMH on Linux Itanium systems” (page 51) “Configuring HP SMH” (page 51) The next chapter provides steps to install HP SMH in-place on Linux systems using the Linux Deployment Utility.
3. The Operating System Groups screen enables you to add operating system groups to HP SMH. Add or delete operating system groups in HP SMH. The following options are available: a. To add groups: i. At the prompt, enter 1 to add a group. The Add Operating System Groups screen displays the operating system group lists. Note: You can add up to five entries per group. Enter one of the following options to assign the operating system group to the Administrator Group List: • Enter 1 for Administrator.
5. 6. 7. Enter n to go to the next screen or enter p to go to the previous screen. Enter n to go to the next screen. The Trust Mode screen appears. Configure the HP SMH trust mode. Enter 1 for Trust by Certificate. The line with 1 Trust by Certificate (selected) becomes yellow. The following options are available: Trust by Certificate, Trust by Name, Trust All and Modify Certificate List. a. Trust by Certificate i. To add a certificate file: A. Enter 1. You are prompted for the certificate location. B.
b. Trust by Name i. Enter 2 to Trust by Name. The line with 2 Trust by Certificate (selected) becomes yellow. ii. Enter 4 to Modify Server Name list. To add an HP Systems Insight Manager server's certificate name: A. Enter 1. You are prompted to add an HP Systems Insight Manager server's certificate name. B. Enter the name of the certificate of HP Systems Insight Manager server to be trusted and press Enter. The certificate name appears in the Trusted Server Names list.
9. Configure HP SMH to restrict login access based on the IP address of the system from which the login is attempted. The following options are available: a. Enter 1 to enable an IP Restricted Login, which sets it to ON. IP Restricted Login:ON appears. To enable the IP Restricted Login: i. ii. Enter 1. IP Restricted Login is set to ON. Press n for next. The Set IP Address Restrictions screen appears. To add IP addresses to the Inclusion List: A. Enter 1 for Include Login Restriction IP Address. B.
10. Enter n to go to the next screen. The configuration completes, and a message appears indicating that HP SMH is successfully set up. The HP SMH service is stopped and started automatically. 11. Verify HP SMH is configured and working properly by navigating to it and verifying that it displays correctly.
10 Installing in-place on Linux using Linux Deployment Utility This chapter provides steps to install HP System Management Homepage (HP SMH) in-place on the Linux operating system using the Linux Deployment Utility.
6. In the Please enter the Operating System (OS) Group Names for user-level access. (Max five names, separated by semicolon or space) field, enter the operating system group name for user-level access. Note: You can enter up to five operating system group names for user-level access. Separate the group names with a semicolon (;) or space. 7. In the Allow Local Access field, enter YES to allow local access or NO to disallow local access. 8.
Installing HP SMH without preconfiguration You can install the HP SMH component without any configurations by clicking Install. You can configure HP SMH settings at any time by logging into HP SMH with root privileges.
11 Initializing the software for the first time After HP System Management Homepage (HP SMH) has been installed and configured for the first time, a process to create a private key and corresponding self-signed Base64-encoded certificate is initiated. This certificate is a Base64-encoded PEM file. Key and certificate information • • • In HP-UX, both public and private keys for HP SMH are stored in the /var/opt/hpsmh/sslshare directory. The files are called file.pem (private key) and cert.
12 Logging in and logging out of HP SMH This chapter provides browser and command line instructions for logging in to and out of HP System Management Homepage (HP SMH).
1. Navigate to https://hostname:2381/. To avoid an active scripting error, HP recommends that you add the HP SMH URL to Internet Explorer's Trusted Sites. To add HP SMH to Internet Explorer's Trusted Sites: a. b. c. d. e. f. g. From Internet Explorer, click Tools ⇒ Internet Options. Click the Security tab. The Security tab appears. Select the Trusted sites icon. Click Sites.... The Trusted sites dialog box appears. In the Add this website to the zone field, enter https://hostname:2381/ and click Add.
Logging in with Mozilla and Firefox To log in to HP SMH with Mozilla and Firefox: 1. Navigate to https://hostname:2381/. If you are using Mozilla or Firefox to browse to an HP-UX system, then you can use port 2381 if you changed the default configuration to have autostart disabled and start on boot enabled. If you keep the default-installed configuration, you can use the following URI: http://hostname:2301/ By default, HP-UX is installed with the autostart feature enabled.
• • • In the System Management Homepage banner, for HP-UX click Sign Out and for Linux and Windows click logout. Close every instance of the web browser that you use to log in to HP SMH. You can stop HP SMH from the HP-UX command line: /opt/hpsmh/lbin/hpsmh stop This will not stop the mini-daemon smhstartd, but will stop the HP-UX Apache-based web server. The next time you contact HP SMH through http://hostname:2301, the HP-UX Apache-based web server will again start up on port 2381 (https).
13 Uninstalling HP SMH This chapter provides instructions on how to uninstall HP System Management Homepage (HP SMH) from HP-UX, Linux, and Windows systems. It also provides instruction on how to uninstall it manually.
Uninstalling manually for Windows and Linux systems Uninstalling manually duplicates the actions of the HP SMH uninstaller, which can be accessed through Add/Remove Programs in the Control Panel. Use this procedure if you want to completely uninstall HP SMH, and the uninstaller has been inadvertently removed or corrupted. Note: Items marked if present are present if there is an existing HP SMH 2.0.1 or 2.0.2 installation.
Uninstalling manually for HP-UX systems This section describes how to manually uninstall HP SMH on an HP-UX system. CAUTION: Manually uninstalling HP-UX SMH is not recommended. When it is necessary to uninstall HP-UX SMH, HP recommends using the swremove command, as described in “Uninstalling from an HP-UX system” (page 67). The following procedure manually uninstalls HP SMH on an HP-UX system. 1. Stop the HP SMH service. 2.
Index D Linux IA_32, 43 Linux x86_64, 43 operating systems, 11 ProLiant Remote Deployment Utility, 33 requirements, 11, 15 RPMs on AMD64 and EM64T, 13 RPMs on Itanium, 14 RPMs on x86, 13 web browsers, 12 Windows, 27, 33, 37 Itanium RPMs, 14 document organization, 5 documentation, 6 L A audience, 5 C console install Linux, 43 console Installation Linux system preparation, 51 F features new, 5 G getting started, 17 H HP Smart-Update Manager install, 37 HP SMH HP Smart-Update Manager install, 37 HP-UX
setup, 17 software, 15, 61 T typographic conventions, 5 U uninstalling, 67 W web browsers, supported, 12 web sites, 15 Windows install, 27 install HP Smart-Update Manager, 37 install ProLiant Remote Deployment Utility, 33 72 Index
