HP System Management Homepage User Guide HP-UX, Linux, and Windows Operating Systems HP Part Number: 509679-005 Published: March 2011 Edition: 1
© Copyright 2009, 2011 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents 1 Product overview........................................................................................9 Product features......................................................................................................................................9 HP SIM..................................................................................................................................................9 2 Getting started..............................................................
SNMP Configuration category (Windows and Linux only).....................................................................29 UI Options category (Windows and Linux only)...................................................................................29 System Management Homepage box......................................................................................................30 User-specific display settings.............................................................................................
IP Binding............................................................................................................................................68 Trust Modes..........................................................................................................................................68 Restart service.......................................................................................................................................69 Reject Program Admin Login (Windows and Linux only)...
List of Tables 2-1 4-1 4-2 6-1 6-2 9-1 9-2 12-1 12-2 13-1 A-1 B-1 Firewall exceptions..........................................................................................................................15 Status icons....................................................................................................................................24 Icon View......................................................................................................................................
1 Product overview HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems.
2 Getting started To get started with HP System Management Homepage (HP SMH), use the following information when configuring HP SMH and setting up users and security properly. To configure HP SMH: • On HP-UX operating environments, HP SMH is installed with default settings. You can change the configuration by modifying the environment variables and tag values set in the following files: • /opt/hpsmh/lbin/envvars • /opt/hpsmh/conf.common/smhpd.xml • /opt/hpsmh/conf/timeout.
1 2 User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name and password for signing-in to HP SMH. Clear. Erases user name and password input fields. 5 Question mark. Show/hide tooltip box. If an error occurs on a sign-in attempt, you are returned to the Sign In page. A configuration mechanism enables the administrator to customize the image and the message in the Sign In page.
might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser. 2. Click Yes. The Sign In page appears. If you enabled Anonymous access during installation, then System Management Homepage appears. 3. Enter your user name that is recognized by the operating system. NOTE: HP SMH initially only allows access to the root user. If the user credentials cannot be authenticated, the user is denied access.
might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser. 2. Click Yes. The Sign In page appears. 3. 4. 5. 6. 7. 8. 9. Enter your user name that is recognized by the operating system. Enter the password that is recognized by the operating system. Click Sign In. Select Tools→System Information→System Management Homepage. Select a target system from the list.
Table 2-1 Firewall exceptions Product Port Number HP SMH Insecure Port: 2301 HP SMH Secure Port: 2381 6. 7. Click OK to save your settings and close the Add a Port dialog box. Click OK to save your settings and close the Windows Firewall dialog box. Linux Configuring firewalls varies, depending on the version of Linux installed.
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT -A RH-Firewall-1-INPUT -p 51 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2301 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m
1. 2. Copy the existing /opt/hpsmh/conf/timeout.conf file into a different directory. Edit the timeout.conf file: a. Open /opt/hpsmh/conf/timeout.conf with a text editor. b. Modify the following line to specify a value greater than 9 minutes. TIMEOUT-SMH=30 c. 3. Save and close the file. Restart the HP SMH service. Configuring SMH Session Timeout The HP SMH session timeout setting enables you to configure the HP SMH GUI timeout in minutes.
NOTE: 1 2 Your login must have administrative access to HP SMH to automatically import the HP SIM certificate. User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name and password for signing in to HP SMH. Clear. Erases user name and password input fields. 5 6 Question mark. Show/hide tooltip box. Automatically import management server certificate.
3 Scenarios IP Binding You can use IP Binding for example when a system has multiple IP addresses and you want to limit the access to HP SMH to particular networks or subnets like: • For infrastructure (IPv4 and IPv6) • Multiple subnets • Security • Bandwidth For more information, see “IP Binding category”.
4 Navigating the Software The HP System Management Homepage (HP SMH) displays all HP Web-enabled System Management Software that provides information. In addition, HP SMH displays various categories (in boxes) that have icons defining the status of the items. The HP SMH main page is divided into two major areas: the header and the standard container. • Header Frame The header frame is constantly visible regardless of the page you are viewing and contains the following four subareas: • Master header.
• Data Frame. The standard container contains the sections or pages as: • Boxes • Icons • Pages as configurations • Support • Help The data frame shows the status for all HP Web-enabled System Management Software and utilities on the system.
• • If Local Access is enabled, the Current User displays hpsmh_local_anonymous or hpsmh_local_administrator, depending on what level of access has been enabled, and local access appears below user type. • If user type is local_access_administrator, no signin or signout link appears. Boxes. Boxes display webapps results in a list of items with their result status. • An overall status icon represents the worst status of items inside the box and appears in the title bar along with the title.
• • Dynamic Lists in Pages. A dynamically created list of elements appears for each item you want to add or remove to a page and are available for the following pages: • IP Binding • IP Restricted Login • Trust Mode • User Groups Legend: This is a link that displays a floating box listing all possible statuses of installed webapps. Table 4-1 Status icons Icon Status Critical Major Minor Warning Normal Disabled Unknown Informational • Management Processor.
Table 4-2 Icon View Icon Description Component Status Summary The Overall System Health Status displays links to all subsystems that have a critical, major, minor, or warning status, which the integrated HP Web-enabled System Management Software provides. If there are no agents installed or no critical, major, minor or warning items, the Overall System Health Status displays no items. Generic Icon The generic icon is provided when a webapp does not have an icon.
Icon Description User Groups Allows an authorized user to configure which group of users has access to HP SMH and their respective access level. Kerberos Users Allows an authorized user to configure which users have Kerberos authenticated access to HP SMH and their respective access level. UI Properties Controls options for the appearance of HP SMH.
5 The Home page The Home page provides the system, subsystem, and status views of the server. The Home page displays groupings of systems and their status. The information on the Home page is provided by the integrated agents or management utilities. For HP-UX operating systems, the Home page includes information provided by integrated Web-Based Enterprise Management (WBEM) property pages and management utilities.
Network The Network category contains links that display basic network system configuration, usage, state, and other information. Software The System Software category contains links that display information about the Software Distributor bundles and products, including patch products. NOTE: This category is not available on Linux Itanium. Storage The Storage category contains links that show basic storage system configuration, usage, state, and other information.
6 The Settings Page The Settings page contains links to the settings and configuration pages of the HP System Management Homepage (HP SMH) and other integrated management tools found on the Tools page. SNMP webagent box Provides links that enable you to configure HP Web-enabled System Management Software agents. • SMH Data Source category (Windows and Linux only) • SNMP Configuration category (Windows and Linux only) Management Software agents.
To configure the UI Options, complete the following steps: 1. 2. 3. Select Settings from the menu. In the SNMP Webagent box, click the UI Options link. Remove the check in the check box beside Show Help Icons to no longer display inline help icons. Select the check box beside Show Help Icons to display the inline help icons. 4. Click Save and Apply Changes.
1 Presentation Mode 3 Enables you to set the default presentation mode by selecting from a list. The Presentation Mode has two options: List View and Icon View. 2 5 Determines the order of items shown. If you order by name, the items appear alphabetically. If you order by status, items appear from worst (critical), to best (normal). Box Ordering Determines the order that the boxes are shown. If you order by name, the items appear alphabetically.
Default display settings The default display settings controls how HP SMH appears and are common for all users. • List view • Icon view • Box and box item ordering type: 1 • By name • By status Presentation Mode Enables you to set the default presentation mode by selecting from a list. The Presentation Mode has two options: List View and Icon View. 2 Box Ordering 3 Box Item Ordering Determines the order that items in boxes are shown. If you order by name, the items appear alphabetically.
1. Place the image and text files in the following directories: • SMHBaseDir/data/htdocs/custom_ui/logo0.jpg (for the loading screen image) • SMHBaseDir/data/htdocs/custom_ui/logo1.jpg (for the master header image) • SMHBaseDir/data/htdocs/custom_ui/warning1.txt (for the warning text) All three files must be present to view custom images and warning text. 2. 5. Click the check box beside Use custom text and images. Click Apply.
1 2 Allow Anonymous users access to unsecured pages. Turn on automatic logon in HP System Management Homepage 3 Anonymous Access Enables a user to access the HP SMH without logging in. If Anonymous is selected, any user, local or remote, has access to unsecured pages without being challenged for a username and password. 4 5 Apply Save page data. Enables a Administrator to access the HP SMH without logging in. To enable anonymous access: 1. 2. 3. 4. 5. Select Settings from the menu.
IP Binding category IP Binding specifies the IP addresses that HP SMH accepts requests from and controls the nets and subnets that requests are processed. Administrators can configure HP SMH to only bind to addresses specified in the IP Binding window. Five subnet IP addresses and netmasks can be defined. An IP address on the server is bound if it matches one of the entered IP Binding addresses after the mask is applied. HP SMH on HP-UX, Windows, and Linux supports both IPv4 and IPv6 addresses.
5. 6. Click Remove. Click Apply to apply the configurations. Each IP address and netmask must consist of four octets with values between 0 and 255 (the same for each netmask). Netmasks must start with the number 1 in the highest bit and continue with all number 1s until they switch to all number 0s (for example, 255.255.0.0, 192.0.0.0, 255.192.0.0).
NOTE: When you enter the IP address or the IP address range, ensure that your system IP is not in the restricted IP range. 5. 6. 7. Select the Restrict or Permit radio button. Click Add to add the configurations. Click Apply to apply the configurations. To remove IP addresses from the list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the IP Restricted Login link. Select the check box beside the IP addresses you want to remove.
• After the certificate authority returns the PKCS #7 data, the final step is to import this into HP SMH. • After the PKCS #7 data is imported, the original \hp\sslshare\cert.pem certificate file for Windows, /opt/hpsmh/sslshare/cert.pem file for HP-UX, and /opt/hp/sslshare/cert.pem (/etc/opt/hp/sslshare/cert.pem in HP SMH 2.1.3 and later on Linux x86 and x86-64) is overwritten with the system certificate from the PKCS #7 data envelope.
1. 2. 3. 4. 5. Select Settings from the menu In the System Management Homepage box, click the Security link. Click the Port 2301 link. In the Configuration box, clear the Enable Port 2301 check box. Click Apply. Port 2301 (Windows only) The Port 2301 link provides options to enable or disable Port 2301. The default value, enabled, which preserves the compatibility with HP Web-enabled System Management Software. 1 Enable Port 2301 Sets Port 2301 as enabled or disabed.
1 Session timeout The session timeout value represents the amount of time in minutes that a user can remain inactive in an SMH session. If a user logs in and remains inactive for an amount of time greater than that specified by session timeout, the user is redirected to the Sign In page in their next interaction with the user interface.
4. 5. In the UI timeout (seconds) textbox, enter a value between 10 and 3600 seconds. Click Apply. Trust Mode category The Trust Mode link provides options to enable you to select the security required by your system. Some situations require a higher level of security than others.
The Settings Page
1 Trust by Certificate Sets HP SMH to accept configuration changes only from HP SIM servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before allowing access.
Configuring Trust Mode For HP-UX, the imported HP SMH certificates are stored in the /opt/hpsmh/certs directory. For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory. For Windows, the imported HP SIM certificates are stored in the systemdrive: \hp\hpsmh\certs directory. You must have administrative authority to access this directory. To trust by certificate: 1. 2. 3. 4. Select Settings from the menu. In the System Management Homepage box, click the Security link .
Trusted Management Servers category Certificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH. The Trusted Management Servers link enables you to manage your certificates in the Trusted Certificates List. Note the following: To import a certificate to the trusted certificates list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Trusted Management Servers link.
1. 2. 3. 4. 5. The user logs in to the system (client) using his or her domain username and password. The user’s password is hashed, and this hash becomes the user’s secret key. When the user tries to access a service, a message informs the AS that the user wants to access that service. If the user is in the AS database, two messages are sent back to the client: a. A Client/TGS session key is encrypted with the user’s secret key, which is used in the communication with the TGS. b.
Situation HTTP error code The user has a Kerberos credential, and the clock skew is within the desired limits, but the user is not listed in the allowed Kerberos users list in the SMH configuration file. 401 Message ERROR: Kerberos login failure; Authorization Required. When an authentication error occurs, the system administrator should check the SMH HTTP server error log to obtain more information about the error.
5. In the Group Name textbox, enter a name in the group@REALM format or REALM\groupname. Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 6. 7. Click the Operator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add groups with operator access by following steps 5 through 7. 8. Click Apply. To remove a Kerberos Operator: 1. 2.
a result, all accounts in each operating system user group have the access to HP SMH specified in the User Groups window. NOTE: All user groups must exist in the HP System Management Homepage host system. The Windows administrators group, the Linux root group, and the HP-UX root group have administrative access to the HP SMH. For HP-UX, only the root user is assigned to the Administrators class. Not every user in the root group is assigned.
1 Group Name 4 All user groups must exist in the HP System Management Homepage host system. Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 2 3 Users with User access can view most information provided through HP SMH. Some web applications restrict viewing of critical information from individuals with User access.
Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 5. 6. Click the Administrator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add up to five Administrator groups by following steps 4 through 6. 7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply.
7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply. To remove a User Group: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the User Groups link. Select the check box beside the Group Names in the dynamic list that you want to remove from SMH. Click Apply.
NOTE: 8. 9. Only HTML help pages are supported. If you want to specify an icon for the menu, enter the complete path to the icon in the Icon Path box. For Run as root, select the check box on the right to specify that the command runs as the root user. If selected, only HP SMH users with Administrator privileges are allowed to run this menu. Only HP SMH users with Administrator authorization can create menus and can run custom menus that are set to run as the "root" user.
7 The Tasks Page The Tasks page displays links to routine tasks provided by participating HP Web-enabled System Management Software. If no tasks are provided by HP Web-enabled System Management Software, the Tasks page is not visible. System This category provides four built-in tasks. These tasks enable you to easily run commands on a system without having to start a telnet/ssh session to the server. This section describes the tasks that are available.
8 The Tools Page (HP-UX only) The Tools page displays links to system management tools provided by participating HP Web-enabled System Management Software. For HP-UX, the Tools page provides an entry point into management tools that are analogous to the System Administration Manager (SAM) main page, also known as the SAM Functional Area Launcher (or FAL). For HP-UX this also includes categories and menus for several X-based management applications.
9 The Logs Page At a minimum, the Logs page provides the following log categories: • System Management Homepage Log • SAM Log Viewer (HP-UX only) • System Management Homepage Error Log Logs contained in the installed HP Web-enabled System Management Software can appear on this page. For example, if the HP Version Control Agent is installed, a link to the Version Control Agent log appears on the Logs page.
The Httpd Error Log is available on HP-UX directly but is visible in Windows and Linux by adding the httpd-error-log tag in the smhpd.xml file. You must have administrative access to HP SMH to access the Httpd Error Log. For HP SMH 3.
Language Linux locale name Windows locale name Simplified Chinese zh_CN.UTF-8 chinese-simplified Traditional Chinese zh_TW.UTF-8 chinese-traditional The following table contains the suffixes of the log_messages.
10 The Installed Webapps Page (Windows and Linux only) The Installed Webapps page contains a list of installed Webapps in the HP System Management Homepage (HP SMH). It contains links to the following HP Web-enabled System Management Software: Integrated Agents Lists Webapps names. Participants are agents that contribute information contained in HP SMH. If no HP Web-enabled System Management Software is installed that provides this information, an informative message appears.
11 The Support Page The Support page provides information about HP Essentials Software and instructions on how to obtain guidance from HP Support and official forums. This page also provides the following links for help outside the HP System Management Homepage server domain. • Support Links This link opens the IT Resource Center (ITRC) home page. • Forum Links This link opens the IT Resource Center (ITRC) Forums page.
The Help page provides links for the following: • System Management Homepage Help Contains information about the HP SMH infrastructure and its configuration and log pages. The remaining entries link to help systems associated with the webapps installed on the system (those that provide a help system). • Credits Displays information regarding open source licensing and credits. To access HP SMH help, complete the following steps: 1. 2. Click Help. Click the System Management Homepage Help link.
12 Command Line Interface configuration The Command Line Interface (CLI) provides users with administrative rights access to set these values through the command line. You can use the CLI to modify configuration options, including the required security checks that allow the configuration options to be changed. NOTE: --kerberos, --user-kerberos, --operator-kerberos, --admin-kerberos, --max-threads and --win32-disable-acceptex options are only available on Windows operating systems.
122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 IP Address Exclusion Perform the IP address restricted command as follows: smhconfig -e|--ip-restricted-exclude [=] IPLIST The following is an example of how IPLIST is formatted: 122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 NOTE: For systems running on Windows and Linux, IPv4 and IPv6 address ranges are supported.
Restart service Restart the HP SMH on completion of applying the new configuration settings. smhconfig -r|--restart Reject Program Admin Login (Windows and Linux only) Reject or accept and HP Web-enabled System Management Software or VCA login request. smhconfig -j|--reject-prog-admin-login [=] true|false Win32DisableAcceptEX AcceptEX() is a Microsoft WinSock v2 API that provides performance improvements over the use of the BSD style accept() API in specific circumstances.
Maximum Number of Sessions (Windows and Linux only) By default, HP SMH supports 128 user sessions. This number can be lowered to 32 or raised to 500 using the session-maximum setting. smhconfig -S|--session-maximum [=] maximum-number-of-sessions Session Timeout For systems running on Windows and Linux, the default session timer is set to 15 minutes. The session timeout can be set as low as 1 minute or as high as 60 minutes. For systems running on HP-UX, the default session timer is set to 15 minutes.
Multihomed certificate alternative names list You can set the name for the certificate through the multihomed option. It is important to restart the hpsmhd service when running smhconfig with multihomed values using a single command on the console (--restart option). smhconfig -u|--multihomed [=] NAMELIST smhconfig -u|--multihomed [=] NAMELIST --restart NAMELIST must be a semicolon-separated list of IP addresses and hostnames.
NOTE: Enabling the Autostart mode enables port 2301. Httpd Error Log The httpd error log option enables you to determine if it is possible to view the httpd error_log log file through the user interface. smhconfig -p|--httpd-error-log [=] True | False Icon View Icon view allows you to set the default view mode to show icons (True) like a desktop File Manager appearance or to show the traditional list (False) that displays items in boxes.
NOTE: --user-kerberos is only available on Windows operating systems. User Groups User Groups are a set of policies to access and modify HP SMH functionalities. Only valid existing operating system groups can be added to the group list. To add groups into HP SMH user types, complete the following: Administrators HP SMH.
Command Line Log Reader The command line log reading tool provides the users with a command line tool for reading the SMH log messages without using the UI. The command is: smhlogreader [options] where, the [options] are: -h|--help, displays the help message. --version, displays the HP SMH version. -f|--file FILE, FILE represents a path to a file. --from FROM, FROM: to display a range of messages, this option describes the ID of the first message.
For example, to display messages the recent five messages, the user should use the following command: smhlogreader --from 1 --to 5 • File-based command line log reading The smhlogreader CLI allows the user to use a properly-formatted log file as an input. The following command allows the user to use a properly-formatted log file as an input and also backs up the log files.
13 Troubleshooting topics Access Problems Browser Problems Installation Problems IP Address Problems Sign In Problems Security Problems Other Problems NOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system. 13.1 Access Problems 13.13.1.1 13.13.1.2 SMH Documentation Unclear on Treatment of securetty. The HP System Management Homepage (HP SMH) does not use /etc/securetty. See login(1) for details on /etc/securetty.
Mozilla browsers share sessions when launched separately. Separate sessions are shared in Mozilla when launched from the desktop. However they are not shared in Internet Explorer. 13.13.2.4 13.13.2.5 13.13.2.6 13.13.2.7 I get security messages or partially displayed pages when browsing into HP SMH from Internet Explorer running on Windows 2003. Internet Explorer 6.0 on Windows 2003 Server has different default security settings.
Note: Internet Explorer 6 cannot handle IPv6 addresses. For more information, see http:// blogs.msdn.com/ie/archive/2007/02/20/ipv6-uris-in-ie7.aspx and the Microsoft support page at http://support.microsoft.com/kb/325414. When browsing secure pages, Internet Explorer 7 might ask you to add the page to its Trusted Site Zone. Even clicking Add, the message returns.
The command prompt window messages do not affect the performance or functionality of the server or of SMH and can be ignored. Any ProLiant or Integrity server configured with Windows 2000 Server or Windows Server 2003 (any edition) and HP SMH Version 2.1.3 (or later) when SMH is allowed to interact with the desktop can be affected. To prevent HP SMH from interacting with the server desktop, perform the following: 1. 2. 3. 4. 5. 6. 13.13.5.
13.13.5.8 By default, new accounts created in Windows operating systems are set to user must change the password at next sign in. Deselect this option so the account can be used to sign in to HP SMH. When I use Internet Explorer 6.0 in Windows and browse through the management server to a system that was discovered by IP address, I cannot sign in to HP SMH. If anonymous access is enabled, I get through anonymously but the user name is incorrect. or When I use Internet Explorer 6.
13.6 Security Problems 13.13.6.1 After updating my Windows XP system with Service Pack 2, I cannot access HP SIM or HP Version Control Repository Manager. What happened? Windows XP Service Pack 2 implements a software firewall that prevents browsers from accessing the ports required for HP SIM and Version Control Repository Manager access. To resolve this issue, configure the firewall with exceptions to allow browsers to access the ports used by HP SIM and Version Control Repository Manager.
13.13.6.6 Certificate. The HP Systems Insight Manager Certificate Data field is used to trust HP SIM servers with HP SMH. Why can't I use a Windows 2003 CA to grant my third-party certificate into HP SMH? To use a Windows 2003 CA to create a certificate for HP SMH: 1. Create the PKCS #10 data packet by clicking Settings→HP SMH→Security→Local Server Certificate page. 2. Press the Ctrl+ C keys to copy the data into a buffer. 3.
14 Service and Support Support for HP SMH is provided as an adjunct to support of the underlying hardware. The HP Support pages provide you with a variety of product, service, and support-related resources for HP SMH. • Access HP SMH on the Software Depot home. Go to http://www.hp.com/go/softwaredepot and select Security and manageability. Look for the HP System Management Homepage link. The support for Linux Integrity is found by selecting the Linux link on Software Depot home.
Support and other resources Intended Audience HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux, and Microsoft® Windows® operating systems. This user guide is for system administrators who use HP SMH. Typographic Conventions find(1) Book Title Linked Title http://www.hp.com Command user input computer output Enter term variable value attrib= HP-UX manpage.
Documentation website at http://www.hp.com/go/hpux-core-docs, select HP-UX 11i v3 for the latest documents and for previous versions of the documents, select either HP-UX 11i v1 or HP-UX 11i v2. Also, for Linux and Windows operating system releases, the user guide is available at the HP SMH web page at http://h18013.www1.hp.com/products/servers/management/agents/documentation.html. • Next generation single-system management on HP-UX 11i v2 (B.11.
A HP SMH file locations Table A-1 HP SMH file locations Description HP SMH Root The root of the HP SMH installation. Windows SystemDrive\hp\hpsmh Linux /opt/hp/hpsmh HP SMH Executable The HP SystemDrive\hp\hpsmh\bin\hpsmhd.exe /opt/hp/hpsmh/sbin/hpsmhd SMH binary. A webapp can use detection of this file's pressence to verify that HP SMH is installed on the system. HP-UX /opt/hpsmh /opt/hpsmh/lbin Certificate and Key files The certificate and private key files used by HP SMH.
B HP SMH Ciphers Ciphers used in HP SMH This appendix provides a list of all the Ciphers used in the HP SMH product. Table B-1 Ciphers used in HP SMH Cipher SSLProtocol Syntax Description SSLProtocol [+|-]protocol Configure usable SSL ... protocol flavors Directive used in HP SMH SSLProtocol all -SSLv2 Description Enable SSLv3 and TLSv1, but not SSLv2. NOTE: All includes SSLv3, TLSv1, and SSLv2.
Glossary Accounts for Users & Groups tool (ugweb) The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts and group accounts on the local system. This tool can also be used to manage user accounts on a NIS system. The ugweb tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH. CA See certificate authority. caution A note to indicate that failure to follow directions could result in damage to equipment or loss of information.
value added software required to deliver complete lifecycle management of their hardware assets. To obtain more information about HP SIM, go to http://www.hp.com/go/hpsim. HP Version Control Agent (VCA) An Insight Management Agent that is installed on a system to enable the customer to see the HP software installed on that server. The HP Version Control Agent can be configured to point to a HP Version Control Repository Manager, allowing easy version comparison and software update from the repository.
NOTE: At this time, HP System Management Homepage does not support Partition Manager. pdweb See Peripheral Device tool. Peripheral Device tool (pdweb) The HP-UX Peripheral Device (pdweb) tool can be used to easily and quickly view I/O devices and OLRAD cards. It helps manage hot pluggable PCI slots on systems that support adding and replacing cards without rebooting. On all HP-UX systems, pdweb displays the I/O devices and can be used to (re)create device files for a selected device.
SSH See Secure Shell. SSL See Secure Sockets Layer. status type Systems of specified status type (Critical, Failed/Major, Degraded/Minor, Normal, and Unknown) as defined by HP SMH. STE See Secure Task Execution. survey utility An agent (or online service tool) that gathers and delivers hardware and operating system configuration information. This information is gathered while the server is online.
Index C O certificates trust mode, 29 trusted management server certificates, 29 ciphers HP SMH, 91 CLI configuration HP SMH, 67 credits HP SMH, 65 overview getting started, 11 HP SMH, 9 D reference troubleshooting, 85 resources, 87 documentation, 87 E error log, 59 examples scenarios, 19 F file locations HP SMH, 89 G getting started sign in, 11 H home HP SMH, 27 HP SMH ciphers, 91 L languages HP SMH, 59 logs error log, 59 HP SMH, 59 SAM log, 59 System Management Homepage log, 59 M manpages, 87
W webapps Integrated Agents, 63 Other Agents, 63 98 Index
