HP Confidential SMS Inventory Tool for HP ProLiant and Integrity Update User Guide October 2006 (Second Edition) Part Number 391346-002
HP Confidential © Copyright 2006 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
HP Confidential Contents Overview..................................................................................................................................... 6 Introduction .............................................................................................................................................. 6 About this guide........................................................................................................................................ 7 Benefits ...................
HP Confidential Tracking software update deployment ........................................................................................................ 32 Advanced topics......................................................................................................................... 34 Running the setup wizard from the command line ........................................................................................
HP Confidential Setup log file ................................................................................................................................ 69 Sync and scan tool log files ............................................................................................................ 69 Common error messages .......................................................................................................................... 69 hpCplVerify.exe utility ...................................
HP Confidential Overview In this section Introduction ............................................................................................................................................. 6 About this guide....................................................................................................................................... 7 Benefits ...................................................................................................................................................
HP Confidential cannot be guaranteed or supported by HP. You must perform adequate testing to ensure that your chosen combination of individual components will integrate in your environment. • Manage distributions of specific components from within ProLiant and Integrity Support Packs. The inventory tool simplifies the process of installing a single software module (a driver update, for example) to a group of servers. • Monitor component installation and results.
HP Confidential Features The SMS Inventory Tool for HP ProLiant and Integrity Update includes the following main features: • Expansion of previously available features to include full software deployment through SMS • User-initiated scan of an operational environment for HP servers • Ability to identify and define the HP servers that will be members of a management collection • Sort and view HP servers by model (ProLiant servers only) or Windows® operating system version • Scan HP servers to inven
HP Confidential The inventory tool also supports SMS client functionality on the following HP Integrity servers: • HP Integrity rx1620 Server • HP Integrity rx2620 Server • HP Integrity rx4640 Server • HP Integrity rx5670 Server • HP Integrity rx7620 Server • HP Integrity rx7640 Server • HP Integrity rx8620 Server • HP Integrity rx8640 Server • HP Integrity Superdome series servers • HP Integrity Virtual Machine Server NOTE: Running the scan tool on an unsupported server will generate a
HP Confidential • 550-MHz Intel® Celeron® processor or equivalent processor • 256 MB RAM • Hard disk space • 10 MB—Installation directory • 20 MB—Installation log files • 12.5 MB—Scan tool • 30 MB—Scan tool log files • CD-ROM or DVD-ROM drive • NIC • Windows® 2000-compatible VGA • Microsoft® SMS 2003 SP1 or SP2 with all applicable hotfixes • One of the following supported database applications: • • Microsoft® SQL Server 7.
HP Confidential Related documents For more information on topics discussed in this guide, see the following resources: • HP SIM user documentation from the HP Management CD • Insight Management Agents for Microsoft® Windows® user documentation from the HP Management CD • SMS Inventory Tool for HP ProLiant and Integrity Update Setup and Installation Guide • SMS 2003 SP1 Supported Configurations product documentation • Systems Management Server 2003 for Windows Administrator's Guide • Microsoft SQ
HP Confidential Category Description SMS site server The machine at a particular site that is responsible for managing that site and channeling all SMS information to and from the site. An SMS site can include one or more domains and can be a parent, a child, or both: • A parent site contains information on all associated child sites and can manage certain operations at these child sites. • A child site receives information from and reports information to a parent.
HP Confidential Software components In this section Inventory tool components ....................................................................................................................... 13 Packages .............................................................................................................................................. 14 Advertisements.......................................................................................................................................
HP Confidential Packages The inventory tool installer creates the package, HP Updates, to deploy the sync tool and the scan tool.
HP Confidential Advertisements Advertisements for the sync tool and the scan tool can be enabled during installation. If these options are enabled, the following advertisements are created: • HP Updates advertisement (on page 15) • HP Updates Sync advertisement (on page 15) HP Updates advertisement The HP Updates advertisement distributes the scan tool to the SMS clients. By default, this advertisement runs weekly on the HP Updates collection (on page 15) to take inventory of the HP software.
HP Confidential scan tool is properly running by checking status of the advertisement and reviewing the software update reports. See "Using the scan tool (on page 36)" and "Software update reports (on page 25)" for more information. HP Updates Sync collection The HP Updates Sync collection is the default collection for advertising the sync tool. During installation, you can advertise the sync tool to its default collections.
HP Confidential • HP Integrity Virtual Machine servers Reports In addition to the standard SMS reports, HP specific reports are also installed during installation. These reports contain information specific to each supported HP server within the SMS environment. See "Software update reports (on page 25)" for more information about using these reports.
HP Confidential Installation In this section Installation overview ............................................................................................................................... 18 Installation overview SMS 2003 and the inventory tool are both highly complex software systems that rely on many distributed components and network-based external resources to function correctly.
HP Confidential Using the software In this section Identifying HP servers to manage ............................................................................................................. 19 Modifying the list of scanned systems ....................................................................................................... 19 Running the hpCplVerify.exe utility on Itanium servers................................................................................. 22 Scanning managed servers .....
HP Confidential 1. In the SMS Administrator console, select Systems Management Server>Site Database>Collections. 2. Right-click HP Updates collection, and select Properties. The HP Updates Collection Properties dialog box appears. 3. In the Membership Rules tab, right-click Collection Query, and select Properties.
HP Confidential 4. Select Limit to collection, and then click Browse. IMPORTANT: This collection can also be configured by using the Collection Query membership rule. The membership rule is a query statement that can be modified to add or remove computers from the collection. To run the scan tool on the systems specified by this query statement, set the collection limiting option to Not collection limited. 5. Select the collection to scan, and click OK.
HP Confidential NOTE: Listing HP Integrity servers by operating system will not differentiate between Microsoft® Windows Server™ 2003 Enterprise Edition or Microsoft® Windows Server™ 2003 Datacenter Edition. 6. In the Query Rule Properties dialog box, click OK. 7. In the HP Updates Collection Properties dialog box, click OK. Running the hpCplVerify.exe utility on Itanium servers Users of the initial release of Windows Server™ 2003 for 64-bit Itanium-based Systems must first run the hpCplVerify.
HP Confidential To modify the HP updates collection, see "Identifying HP servers to manage (on page 19)" for more information. NOTE: Running the scan tool on an unsupported server will generate an error code. See "Troubleshooting (on page 69)" for more information.
HP Confidential 1. Create the folder C:\HPBinaries on a local system or network (C:\HPBinaries is an example; there are no restrictions on the folder name). 2. Create the folder C:\HPBinaries\Catalog. This folder stores the HP manifest catalog. 3. Create the folder C:\HPBinaries\Components. 4. Create the folder C:\HPBinaries\Components\ProLiant. This folder stores manually downloaded components for ProLiant updates.
HP Confidential Software update reports The inventory tool installer creates several HP specific software reports that can be used to view information about software, firmware, and support pack updates for HP ProLiant and Integrity servers. Multiple reports are linked together to enable easy access to related information.
HP Confidential • Compliance report for HP ProLiant Support Pack updates—Lists all HP ProLiant Support Pack updates that have been reported as Requested or Compliant by at least one server • Compliance report for HP Integrity Support Pack updates—Lists all HP Integrity Support Pack updates that have been reported as Requested or Compliant by at least one server • Compliance report for a specific HP ProLiant Support Pack update—Lists all servers that have reported the given HP ProLiant Support Pack upda
HP Confidential 2. Right-click Software Updates, and select All Tasks>Distribute Software Updates. 3. Click Next. The Specify a Software Update Type page appears. 4.
HP Confidential • 5. HP Integrity Support Pack Follow the remaining on-screen steps to authorize the desired HP Updates.
HP Confidential 6. Modify the program properties of the package created to ensure that the platform requirement for the program is set appropriately.
HP Confidential Filtering updates using the DSUW The DSUW has filtering capabilities to eliminate unnecessary updates from displaying on the screen. To locate specific updates, enter part of the update name in the box under the Product column. For example, to locate all Windows Server™ 2003 updates, enter W2003 in the box under the Product column. Obtaining information about updates Additional information about each update is available on the HP website. To view details about a particular update: 1.
HP Confidential 1. From the Software Updates Status screen of the DSUW, select the component, and click Properties. 2. Verify the appropriate folder structure exists. See "SMS site server without an FTP connection (on page 23)" for more information.
HP Confidential 3. Search for the appropriate components or support packs on the HP website (http://www.hp.com) using the entry in the Program field (in the format CP00xxxx or PSPxxx). 4. Download and extract the .exe files. 5. Copy the downloaded files to the appropriate Components folder created during installation. 6. Click Import to import the update from a local or network shared folder. IMPORTANT: Do not modify the properties for any of the updates imported.
HP Confidential NOTE: When using the log files to troubleshoot an error condition or failure, you must view the log files from each system where the condition occurred. Additionally, the various status messages generated can be used to determine what occurred. To view the status messages in the SMS Administrator console: 1. In the SMS Administrator console, expand Systems Management Server>Site Database>System Status. 2.
HP Confidential Advanced topics In this section Running the setup wizard from the command line....................................................................................... 34 Switching between the Internet and network share to obtain HP catalog and components............................... 35 Using the scan tool ................................................................................................................................. 36 Using the sync tool ..................................
HP Confidential Command line Description WEBDOWNLOADSYNC[1,0] 0—The sync tool obtains the HP manifest catalog from a network shared folder 1—The sync tool obtains the HP manifest catalog from the HP website CATALOG_SRC_SYNC The location from which the sync tool obtains the HP manifest catalog CREATEADV[1,0] 0—Do not create advertisements for the sync tool and scan tool during installation 1—Create advertisements for the sync tool and scan tool during installation SYNC_DEST_FOLDER= Dest
HP Confidential Using the scan tool The scan tool is a software inventory tool deployed by SMS and targets servers within the SMS environment. The scan tool performs automated, periodic scans of SMS clients for installed and missing software, firmware, and ProLiant and Integrity Support Pack updates. The scan tool uses information available from the HP catalog to determine the state of the system.
HP Confidential Command line parameter Description ScanType (optional) This optional entry defines the type of components that the scan tool reports. If not specified, the scan tool scans all supported components. This entry can be specified multiple times to select multiple component types.
HP Confidential Scan tool status The status of the scan tool is returned back to the SMS site server, and the success of HP Updates can be verified by verifying the advertisement status. In the case of a failure, review the file hpscan.log from the target system to determine the cause of failure. The log file is stored in the default SMS log file location.
HP Confidential Resource User group or account SMS package source folder • Local administrators • Full control • System • Modify • Read and execute • List folder contents • Read • Write • Read • Read and execute • List folder contents SMS package source folder Distribution package (SMS object) SMS Admins Access rights granted • Local administrators • Administer • System • Create • Delegate • Delete • Distribute • Manage folders • Modify • Read Required access
HP Confidential Resource Access rights granted Distribution package (SMS object) • Administer • Create • Delegate • Delete • Distribute • Manage folders • Modify • Read • Administer • Create • Delegate • Delete • Distribute • Manage folders • Modify • Read Software updates (SMS object) User group Local administrators Local administrators The following table lists the access rights required for each component when the setup program runs on an SMS site server with a local
HP Confidential Resource Access rights required Software updates (SMS object) • Administer • Create • Delegate • Delete • Distribute • Manage • Folders • Modify • Read User group Local administrators Default access rights for resources used by the sync tool The following table lists the resources used by the sync tool and the access rights granted to those resources by user group or account type.
HP Confidential Resource User group or account Access rights granted SMS Provider WMI SMS Admins • Execute • Provider write • Enable account • Remote enable • Execute • Provider write • Enable account • Full write • Partial write • Remote enable • Read security • Edit security SMS Provider WMI SMS Provider database Local administrators SMS Admins Distribution package (SMS object) • • SMS updates (SMS object) Database access—Permit Local administrators • Administer Syst
HP Confidential Resource Access rights How to obtain access rights Registry keys that hold proxy authentication information Read Add the sync tool user account to the resource permission list on the SMS site server.
HP Confidential Providing WMI permissions for the remote sync host machine 1. On the SMS site server desktop, right-click My Computer, and select Manage. The Computer Management window appears. 2. Click Local Users and Groups. 3. Double-click Groups, right-click Administrators, and select Add To Group. The Administrators Properties window appears. 4. Click Add. The Select Users, Computers, or Groups window appears. 5. Click Object Types, and then select the type of computer. 6. Click OK. 7.
HP Confidential 2. In the right pane, right-click the HP Updates Sync advertisement, and select All Tasks>Disable Program. Viewing update details with Resource Explorer After the scan tool runs on an HP ProLiant or Integrity server, Resource Explorer displays the Extended Software Updates node, and the hardware inventory cycle reports the status of the HP software updates. To view details about the HP software updates in Resource Explorer: 1.
HP Confidential 2. Right-click the appropriate system, select All Tasks from the menu, and then click Start Resource Explorer. The Resource Explorer window opens. 3. Expand Hardware, and then click Extended Software Updates. The details about the software updates installed on the HP server display. TIP: Scroll left to see more software update details, including the Status field. The Extended Software Updates node displays the details of the software updates.
HP Confidential 2. In the details pane, right-click HP Updates Sync, and select Properties. The HP Updates Sync Program Properties window appears. 3. In the General tab, select the appropriate action from the After Running field.
HP Confidential The entire package of an HP ProLiant or Integrity Support Pack update can be installed before a reboot is necessary. The HP installer installs all software updates and then returns a specific exit code, indicating to SMS that a restart of the server is required. SMS then reboots the server. CAUTION: Be sure that only one advertisement targets any one server at a time.
HP Confidential 1. In the Properties window, click Advanced. The Advanced Security Settings window appears. 2. Click domain\synchostmachinename in the Permission entries list box. 3. Select Replace permission entries on all child objects with entries shown here that apply to child objects, and then click OK. Providing WMI permissions for the sync host machine NOTE: The following procedures are based on the Windows 2003 operating system and are slightly different when using Windows 2000. 1.
HP Confidential 2. In the details pane, right-click HP Updates Sync, and select Properties. The HP Updates Sync Program Properties window appears. 3. Click the Environment tab, and then select Whether or not a user is logged on. 4. Select Run with administrative rights, and click OK.
HP Confidential IMPORTANT: Do not select Use Software Installation Account. This option is only applicable for legacy clients. IMPORTANT: Do not select Allow users to interact with this program. The sync tool does not have a user interface. The sync tool runs under the sync host machine account (system account), which belongs to the SMS Admin group on the SMS site server. Providing access to the sync host machine to update the SMS database 1.
HP Confidential 2. Right-click Software Updates, and select Properties. The Software Updates Properties window appears. 3. Click the Security tab, and select Object Class Security Right Properties (the yellow star icon). 4. Enter domain\synchostmachinename$ in the User name text box. 5. Select all of the checkboxes under Permissions, and then click OK twice. Setting permissions on the HP Updates package object 1. In the SMS Administrator console, click Site Database>Packages. 2.
HP Confidential 5. Select all of the checkboxes under Permissions, and then click OK twice. Updating distribution points 1. In SMS Administrator console, click Site Database>Packages.
HP Confidential 2. Right-click HP Updates, and select All Tasks>Update Distribution Points. 3. Click Yes. Running the HP Updates Sync advertisement 1. In the SMS Administrator console, click Site Database>Advertisements.
HP Confidential 2. In the right pane, right-click HP Updates Sync, and select All Tasks>Re-run Advertisement. 3. Click Yes. Configuring updates after deployment Some software updates require configuration to ensure proper function of the component. The components run at default settings and must be configured to enable full functionality. You can use Remote Desktop to connect to the client for component configuration.
HP Confidential 2. Advertise the scan tool to the target system. 3. Using Resource Explorer ("Viewing update details with Resource Explorer" on page 45) or software update reports (on page 25), verify that the desired version of the component is reported as Applicable. 4. Use the DSUW to authorize the desired component: a. At the Software Updates Status screen, click Properties. b. Add /f to the end of the Parameters field. c. Click OK to continue. 5.
HP Confidential Using the hpSMSTool utility Uninstalling the inventory tool does not remove HP specific SMS database and WMI elements installed by the setup wizard. The hpSMSTool utility removes these elements and refreshes the data collection processes of the sync tool and the scan tool. The -reset command can be used if problems are encountered during the initial installation. IMPORTANT: The hpSMSTool utility requires Windows® Script Host 5.6 or later.
HP Confidential Command Environment Description -lsState This command can be run on an This command lists all patch states from the specified SMS site server or SMS client server and prompts the specified target server (if not server. specified, then localhost) to list each patch states from WMI namespace /root/CIMV2 for WMI class instances of Win32_PatchState_Extended.
HP Confidential Command Environment Description -rmSMSall Uninstall the HP Update software This command removes all HP SMS data instances, before using this command on including installed WMI instances, such as public keys, the SMS site server. return codes, and reports. The command can be used to remove all remaining data instances after uninstalling HP Update kits.
HP Confidential HP Insight Inventory Collector In this section Introduction to Collect ............................................................................................................................. 60 Enabling SMS Hardware Inventory cycle to obtain Collect .MIF files ............................................................ 60 Collect command line options .................................................................................................................. 60 .
HP Confidential • The SMS directory where the client places the .MIF files (If this directory is not specified, Collect outputs the inventory tables to the screen.) • The items to be inventoried (If the items are not specified, Collect will perform a complete inventory.) • The Collect help screen The following table contains the command line options: Option Name Description Table collected /F Output file • Specifies the name of the single .MIF output file created by the SMS client.
HP Confidential File name Inventory table Compaq0.MIF ("Compaq0.mif inventory tables" on page 62) • CPU attributes • EISA/PCI slots • System attributes • Memory module attributes • Portable batteries • Portable docking station • Portable PC card slots Compaq1.MIF ("Compaq1.mif inventory tables" on page 64) IDE devices (not supported in HP servers) Compaq2.MIF ("Compaq2.mif inventory tables" on page 64) Video monitor (not supported in HP servers) Compaq3.MIF ("Compaq3.
HP Confidential Inventory table Type Description EISA/PCI slot Slot number Slot where the particular board is installed Board EISA/PCI ID Board ID; typically three characters to denote the vendor followed by an alphanumeric ID Board name Vendor's name for the board; formatted per EISA/PCI specifications Board revision Revision level of the board Product name Full name of the system (for example, HP ProLiant 7000) Flash ROM Flash ROM installed (Yes/No) System partition HP Utilities partition
HP Confidential Inventory table Portable docking station PC card slot Type Description Serial number Battery serial number Asset tag Battery asset tag Chemistry Battery chemistry (for example, lithium) Dock status Dock status (Docked/Unlocked) Model name Model name of attached docking station Serial number Serial number of attached docking station Asset tag Docking station asset tag ROM revision Revision date of the docking station ROM Index Index of the particular slot Slot location
HP Confidential Inventory table Type Description Frequency range Horizontal and vertical frequency range supported by the monitor Fault management support Presence of fault management support (Yes/No) Manufacturer ID Manufacturer of the monitor EDID version EDID version used by the monitor Compaq3.mif inventory tables The following table contains the contents of the inventory tables in the file Compaq3.mif.
HP Confidential Inventory table Type Description Hot pluggable Specifies if drive is hot-pluggable (Yes/No) Serial number Serial number of the drive Compaq5.mif inventory tables The following table contains the contents of the inventory tables in the file Compaq5.mif.
HP Confidential Inventory table Type Description Description Text description of the software (for example, HP Insight Management Service) Version Software version Compaq8.mif inventory tables The following table contains the contents of the inventory tables in the file Compaq8.mif.
HP Confidential Inventory table Fibre Channel host controller Cluster node information Cluster interconnect information Type Description Drive size Size in MB of the physical drive Firmware revision level Firmware revision level of the physical drive Serial number Serial number of the physical drive Host controller slot Identifies physical slot where HP Fibre Channel host controller resides Model Model name of controller card Worldwide name User-specified string that can be used to further
HP Confidential Troubleshooting In this section Viewing the log files ............................................................................................................................... 69 Common error messages......................................................................................................................... 69 Known issues .........................................................................................................................................
HP Confidential Known issues The following sections contain information about known issues with SMS Inventory Tool for HP ProLiant and Integrity Update 1.2. The previous version of the scan tool is executed after uninstalling and reinstalling the inventory tool Issue: A previous version of the scan tool is executed after uninstalling and reinstalling the inventory tool.
HP Confidential Smart Component information is not available without a direct Internet connection Issue: Smart Component information is not available when the SMS server is connected through a DMZ (a computer acting as a buffer between the server and the outside public network) to the FTP site. The HTML file containing the software component information is referenced to the FTP site URL.
HP Confidential Errors and inconsistencies for compliance and requested status in Reports and the DSUW Issue: Compliant and Requested status in HP Reports show incorrect information because of NULL SMS database entries. The incorrect status also reports in the DSUW. When an HP compliance report runs, a list of software components displays with columns "Requested" and "Compliant," indicating the number of non-compliant and compliant clients, respectively, for a particular software update.
HP Confidential Acronyms and abbreviations ASR Automatic Server Recovery DMZ demilitarized zone computer DSUW Distribute Software Updates Wizard HTTP hypertext transfer protocol MIF Management Information Format OS operating system SIM Systems Insight Manager SMS System Management Server SNMP Simple Network Management Protocol SP1 Service Pack 1 SP2 Service Pack 2 SP4 Service Pack 4 Acronyms and abbreviations 73
HP Confidential SQL structured query language WMI Windows Management Instrumentation Acronyms and abbreviations 74
HP Confidential Index benefits 7 collections, list of 15 collections, renaming existing 15 command line options 36, 38 command line syntax, Collect utility 60 command line syntax, HP Insight Inventory Collector 60 command line syntax, scan tool 36 command line syntax, sync tool 38 Compaq0.MIF inventory tables 62 Compaq1.MIF inventory tables 64 Compaq2.MIF inventory tables 64 Compaq3.MIF inventory tables 65 Compaq4.MIF inventory tables 65 Compaq5.MIF inventory tables 66 Compaq6.
HP Confidential HP Insight Inventory Collector 7, 14, 60 HP Insight Inventory Collector, command line syntax 60 HP Insight Inventory Collector, inventory tables 61 HP manifest catalog 23, 24, 35 HP manifest catalog, managing downloads 23, 24, 35 HP manifest catalog, obtaining with an Internet connection 23, 35 HP manifest catalog, obtaining with the sync tool 24, 35 HP Servers collection 16 HP Updates (expedited) program 14 HP Updates (pre-production) collection 15 HP Updates advertisement 15, 22 HP Update
HP Confidential secondary site 11 servers, identifying 19 servers, modifying list of scanned 19 servers, scanning for 19, 22 servers, supported 8, 9, 10 setup log 69 setup wizard, running from command line 34 site hierarchy 11 Smart Components, information not available 71 Smart Components, log 69, 71 SMS client server 11 SMS client server, supported models 10 SMS client server, system requirements 10 SMS database, updating MIF files 60 SMS platform support 9 SMS site hierarchy 11 SMS site server 11 SMS si
