HP System Management Homepage 6.
© Copyright 2009 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents 1 Introduction...............................................................................................9 Product features......................................................................................................................................9 HP SIM..................................................................................................................................................9 Integrated Management Tools..................................................
Storage..........................................................................................................................................32 SysMgmtPlus...................................................................................................................................32 6 The Settings Page.....................................................................................33 SNMP Webagent Box..............................................................................................
12 Command Line Interface Configuration......................................................71 Command Line Interface Configuration....................................................................................................71 Anonymous Access..........................................................................................................................71 Local Access............................................................................................................................
List of Tables 2-1 4-1 4-2 6-1 9-1 9-2 12-1 12-2 13-1 10 A-1 B-1 Firewall exceptions..........................................................................................................................17 Status icons....................................................................................................................................28 Icon View......................................................................................................................................
1 Introduction HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems.
HP SMH provides Graphical User Interface (GUI), Terminal User Interface (TUI) and Command Line Interface (CLI) for managing HP-UX. You can access these interfaces using the smh command (/usr/sbin/smh). You can also use the sam(1M) command, which behaves the same as the smh(1M) command, but the deprecation message is displayed in the beginning. Most applications for performing administration tasks are now available through the web-based GUI interface and the enhanced TUI.
• ESX 3.0.2 • ESX 3.5 • ESX 4.0 • Novell Open Enterprise Server (OES) • XEN HP Integrity servers • Windows Server 2008 for Itanium-based systems, 64-bit • Windows Server 2008 R2 for Itanium-based systems, 64-bit • Red Hat Enterprise Linux 5.0 Update 1 • Red Hat Enterprise Linux 4.0 Update 6 • SUSE Linux Enterprise Server (SLES) 10 Service Pack 1 • SUSE Linux Enterprise Server (SLES) 9 Service Pack 4 HP-UX • HP-UX 11i v3 (B.11.
• Internet Explorer 8.0 (HP SMH 6.0 or later) • Mozilla 1.7.13 • Firefox 2.0.0.x • Firefox 3.0 • Firefox 3.5 • Mozilla Firefox 1.5.0.x NOTE: Installation of HP SMH does not require a browser. The HP Web-enabled System Management Software is hardware-dependent. For the installation to complete successfully, your system must support at least 256 colors. Obtaining HP SMH software HP media • HP-UX 11i v3 (B.11.31) Operating Environment DVD, February 2007 or later • HP-UX 11i v3 (B.11.
2 Getting Started To get started with HP System Management Homepage (HP SMH), use the following information when configuring HP SMH and setting up users and security properly. To configure HP SMH: • On HP-UX operating environments, HP SMH is installed with default settings. You can change the configuration by modifying the environment variables and tag values set in the following files: • /opt/hpsmh/lbin/envvars • /opt/hpsmh/conf.common/smhpd.xml • /opt/hpsmh/conf/timeout.
1 2 User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name sign-in to HP SMH. Clear. Erases user name and password input fields. 5 Question mark. Show/hide tooltip box. If an error occurs on a sign-in attempt, you are returned to the Sign In page. A configuration mechanism enables the administrator to customize the image and the message in the Sign In page.
appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser. NOTE: To implement or install your own generated certificates into each managed system, you can install a certificate authority Root Certificate into each browser to be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not appear.
Administrator on Windows and root on HP-UX or Linux have administrator access on HP SMH. 4. 5. Enter the password that is recognized by the operating system. Click Sign In. The System Management Homepage appears. Starting HP SMH from HP SIM To start HP SMH by signing in to HP SIM with a Web browser: 1. Navigate to https://hostname:50000/. The first time you browse to this link, the Security Alert dialog box appears, asking if you want to trust the server.
By default, the HP SMH management server for HP-UX starts only on demand. It does not run continually. A daemon listens on port 2301 to start an instance of the management server. Configuring Firewall Settings Windows Some operating systems including Windows XP with Service Pack 2 and Windows Server 2003 SBS implement a firewall that prevents browsers from accessing the ports required for the Version Control Repository Manager access.
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT The following displays the new value in the iptables firewall rules for Red Hat Enterprise Linux 4 and 5 that allows access to HP
5. Click Next. A dialog box appears asking you to confirm your intention to save settings and active firewall. 6. Click Continue. The firewall is configured and your settings are saved. Configuring Timeout Settings for HP-UX Two HP SMH timeout settings can be configured: • SMH service timeout Sets the amount of time, in minutes, before the HP SMH server stops. • SMH session timeout Sets the amount of time, in minutes, before an HP SMH GUI session stops.
Automatically Importing Certificates The Automatically Import Management Server Certificate feature enables you to automatically import the HP SIM certificate when accessing the HP SMH from an HP SIM system. NOTE: 1 2 Your login must have administrative access to HP SMH to automatically import the HP SIM certificate. User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name sign-in to HP SMH.
• In the HP SMH banner, click Sign Out. The HP System Management Homepage Sign in page appears. • Close every instance of the Web browser used to sign in to HP SMH.
3 Scenarios IP Binding You can use IP Binding for example when a system has multiple IP addresses and you want to limit the access to HP SMH to particular networks or subnets: • For infrastructure (IPv4 and IPv6) • Multiple subnets • Security • Bandwidth For more information, see “IP Binding Category”.
4 Navigating the Software The HP System Management Homepage (HP SMH) displays all HP Web-enabled System Management Software that provides information. In addition, HP SMH displays various categories (in boxes) that have icons defining the status of the items. The HP SMH main page is divided into two major areas: the header and the standard container. • Header Frame The header frame is constantly visible regardless of the page you are viewing and contains the following four subareas: • Master header.
• Data Frame. The standard container contains the sections or pages as: • Boxes • Icons • Pages as configurations • Support • Help • Webapps The data frame shows the status for all HP Web-enabled System Management Software and utilities on the system.
• • If Local Access is enabled, the Current User displays hpsmh_local_anonymous or hpsmh_local_administrator, depending on what level of access has been enabled, and local access appears below user type. • If user type is local_access_administrator, no signin or signout link appears. Boxes. Boxes display webapps results in a list of items with their result status. • An overall status icon represents the worst status of items inside the box and appears in the title bar along with the title.
• • Dynamic Lists in Pages. A dynamically created list of elements appears for each item you want to add or remove to a page and are available for the following pages: • IP Binding • IP Restricted Login • Trust Mode • Kerberos Authentication • User Groups Legend: This is a link that displays a floating box listing all possible statuses of installed webapps. Table 4-1 Status icons Icon Status Critical Major Minor Warning Normal Disabled Unknown Informational • Management Processor.
Table 4-2 Icon View Icon Description Overall Status Summary The Overall Status Summary displays links to all subsystems that have a critical, major, minor, or warning status, which the integrated HP Web-enabled System Management Software provides. If there are no agents installed or no critical, major, minor or warning items, the Overall Status Summary displays no items. Generic Icon The generic icon is provided when a webapp does not have an icon.
Icon Description User Groups Allows an authorized user to configure which group of users has access to HP SMH and their respective access level. Kerberos Users Allows an authorized user to configure which users have Kerberos authenticated access to HP SMH and their respective access level. UI Properties Controls options for the appearance of HP SMH.
5 The Home Page The Home page provides the system, subsystem, and status views of the server. The Home page displays groupings of systems and their status. The information on the Home page is provided by the integrated agents or management utilities. For HP-UX operating systems, the Home page includes information provided by integrated Web-Based Enterprise Management (WBEM) property pages and management utilities.
Operating System The Operating System category contains links that show basic operating system configuration, usage, state, and other information. Network The Network category contains links that display basic network system configuration, usage, state, and other information. Software The System Software category contains links that display information about the Software Distributor bundles and products, including patch products. NOTE: This category is not available on Linux Itanium.
6 The Settings Page The Settings page contains links to the settings and configuration pages of the HP System Management Homepage (HP SMH) and other integrated management tools found on the Tools page. SNMP Webagent Box Provides links that enable you to configure HP Web-enabled System Management Software agents. • SMH Data Source Category • SNMP Configuration Category agents. • UI Options Category Sets options for HP SMH Data Source.
1. 2. 3. Select Settings from the menu. In the SNMP Webagent box, click the UI Options link. Remove the check in the check box beside Show Help Icons to no longer display inline help icons. Select the check box beside Show Help Icons to display the inline help icons. 4. Click Save and Apply Changes. System Management Homepage Box The System Management Homepage Box provides links that enable you to configure HP SMH settings.
To set UI Properties, complete the following steps: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the UI Properties link. From the Presentation Mode list, Select List or Icon. From the Box ordering list, select By status or By name. From the Box item ordering dropdown list, select either By status or By name. To use a custom image and custom warning, complete the following steps: a.
NOTE: 7. HP SMH service timeouts is only applicable to HP-UX systems. Click Apply. NOTE: Each user is able to set their preferences for a session. Individual user preferences take precendence over settings in UI properties.
1 2 Allow Anonymous users access to unsecured pages. Turn on automatic logon in HP System Management Homepage 3 Anonymous Access Enables a user to access the HP SMH without logging in. If Anonymous is selected, any user, local or remote, has access to unsecured pages without being challenged for a username and password. 4 5 Apply Save page data. Enables a Administrator to access the HP SMH without logging in. To enable anonymous access: 1. 2. 3. 4. 5. Select Settings from the menu.
IP Binding Category IP Binding specifies the IP addresses that HP SMH accepts requests from and controls the nets and subnets that requests are processed. Administrators can configure HP SMH to only bind to addresses specified in the IP Binding window. Five subnet IP addresses and netmasks can be defined. An IP address on the server is bound if it matches one of the entered IP Binding addresses after the mask is applied. HP SMH on Windows and Linux supports both IPv4 and IPv6 addresses.
5. 6. Click Remove. Click Apply to apply the configurations. Each IP address and netmask must consist of four octets with values between 0 and 255 (the same for each netmask). Netmasks must start with the number 1 in the highest bit and continue with all number 1s until they switch to all number 0s (for example, 255.255.0.0, 192.0.0.0, 255.192.0.0).
6. 7. Click Add to add the configurations. Click Apply to apply the configurations. To remove IP addresses from the list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the IP Restricted Login link. Select the check box beside the IP addresses you want to remove. Click Remove. Click Apply to apply the configurations.
for the new imported certificate that was used with the previous self-signed certificate. This private key is randomly generated at startup when no key file exists. To create a certificate: 1. 2. 3. 4. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Local Server Certificate link. Replace the default values in the Organization or Organizational Unit fields in the Create PKCS #10 Data box with your values, up to 64 characters.
1 Enable Port 2301 Sets Port 2301 as enabled or disabed. 2 Apply Record the option into the XML configuration file. To enable or disable Port 2301, complete the following steps: 1. 2. 3. 4. 5. Select Settings from the menu In the System Management Homepage box, click the Security link. Click the Port 2301 link. In the Configuration box, check Enable Port 2301 to enable Port 2301 or remove the check to Disable Port 2301. Click Apply.
1 Session timeout The session timeout value represents the amount of time in minutes that a user can remain inactive in an SMH session. If a user logs in and remains inactive for an amount of time greater than that specified by session timeout, the user is redirected to the Sign In page in their next interaction with the user interface. 2 3 Allow users to keep session alive 4 Apply Records the chosen values into the XML configuration file.
1. 2. 3. 4. 5. Select Settings from the menu In the System Management Homepage box, click the Security link. Click the Timeouts link. In the UI timeout (seconds) textbox, enter a value between 10 and 3600 seconds. Click Apply. Trust Mode Category The Trust Mode link provides options to enable you to select the security required by your system. Some situations require a higher level of security than others.
System Management Homepage Box 45
1 Trust by Certificate Sets HP SMH to accept configuration changes only from HP SIM servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before allowing access.
Configuring Trust Mode For HP-UX, the imported HP SMH certificates are stored in the /opt/hpsmh/certs directory. For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory. For Windows, the imported HP SIM certificates are stored in the systemdrive: \hp\hpsmh\certs directory. You must have administrative authority to access this directory. To trust by certificate: 1. 2. 3. 4. Select Settings from the menu. In the System Management Homepage box, click the Security link .
Trusted Management Servers Category Certificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH. The Trusted Management Servers link enables you to manage your certificates in the Trusted Certificates List.
System Management Homepage Box 49
1 Trust by Certificate Sets HP SMH to accept configuration changes only from HP SIM servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before allowing access.
To import a certificate to the trusted certificates list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Trusted Management Servers link. In the Add Certificate area, click the Import Certificate Data radio button. Copy and paste the Base64-encoded certificate into the textbox. Click Import. To add a certificate from a server: 1. 2. 3. 4. 5. 6. Select Settings from the menu.
Timestamps are used in Kerberos to avoid replication attacks. The clock skew among machines cannot exceed a specific limit. 2. 3. 4.
5. In the Group Name textbox, enter a name in the group@REALM format or REALM\group Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 6. 7. Click the Administrator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add groups with administrative access by following steps 5 through 7. 8. Click Apply.
7. Click Add. The values entered are added as a new line in the list table. You may continue to add groups with user access by following steps 5 through 7. 8. Click Apply. To remove a Kerberos User: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Kerberos Authorization link. Select the check box beside the Group Name in the dynamic list that you want to remove from HP SMH. Click Remove. Click Apply.
1 Group Name 4 All user groups must exist in the HP System Management Homepage host system. Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 2 3 Users with User access can view most information provided through HP SMH. Some web applications restrict viewing of critical information from individuals with User access.
Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 5. 6. Click the Administrator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add up to five Administrator groups by following steps 4 through 6. 7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply.
7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply. To remove a User Group: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the User Groups link. Select the check box beside the Group Names in the dynamic list that you want to remove from SMH. Click Apply.
Only HP SMH users with Administrator authorization can create menus and can run custom menus that are set to run as the "root" user. For HP SMH users with Operator or User authorization, the custom menus they are allowed to run are run as the user id of the user logged in. These custom menus are stored and managed in the /opt/hpsmh/data/htdocs/xlaunch/custom-menus.js file, which can be manually copied from one system to other systems.
7 The Tasks Page The Tasks page displays links to routine tasks provided by participating HP Web-enabled System Management Software. If no tasks are provided by HP Web-enabled System Management Software, the Tasks page is not visible.
8 The Tools Page (HP-UX Only) The Tools page displays links to system management tools provided by participating HP Web-enabled System Management Software. For HP-UX, the Tools page provides an entry point into management tools that are analogous to the System Administration Manager (SAM) main page, also known as the SAM Functional Area Launcher (or FAL). For HP-UX this also includes categories and menus for several X-based management applications.
9 The Logs Page At a minimum, the Logs page provides the following log categories: • System Management Homepage Log • Httpd Error Log (Windows and Linux) • System Management Homepage Error Log (HP-UX) Logs contained in the installed HP Web-enabled System Management Software can appear on this page. For example, if the HP Version Control Agent is installed, a link to the Version Control Agent log appears on the Logs page.
The Httpd Error Log is available on HP-UX directly but is visible in Windows and Linux by adding the httpd-error-log tag in the smhpd.xml file. You must have administrative access to HP SMH to access the Httpd Error Log. For HP SMH 3.
Language Linux locale name Windows locale name Simplified Chinese zh_CN.UTF-8 chinese-simplified Traditional Chinese zh_TW.UTF-8 chinese-traditional The following table contains the suffixes of the log_messages.
10 The Installed Webapps Page The Installed Webapps page contains a list of installed Webapps in the HP System Management Homepage (HP SMH). It contains links to the following HP Web-enabled System Management Software: Integrated Agents Lists Webapps names. Participants are agents that contribute information contained in HP SMH. If no HP Web-enabled System Management Software is installed that provides this information, an informative message appears.
11 The Support Page The Support page provides information about HP Essentials Software and instructions on how to obtain guidance from HP Support and official forums. This page also provides the following links for help outside the HP System Management Homepage server domain. • Insight Essentials Software Information • Integrity Essentials Software Information • Support Links In the case of HP-UX, the support link opens the IT Resource Center (ITRC) home page.
1 Search terms 2 Webapp to search Enables you to enter search criteria. 3 Search Validates search field and chosen webapp. The Help page provides links for the following: • System Management Homepage Help Contains information about the HP SMH infrastructure and its configuration and log pages. The remaining entries link to help systems associated with the webapps installed on the system (those that provide a help system). • Credits Displays information regarding open source licensing and credits.
12 Command Line Interface Configuration Command Line Interface Configuration The Command Line Interface (CLI) provides users with administrative rights access to set these values through the command line. You can use the CLI to modify configuration options, including the required security checks that allow the configuration options to be changed.
smhconfig -i|--ip-restricted-include [=] IPLIST The following is an example of how IPLIST is formatted: 122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 IP Address Exclusion Perform the IP address restricted command as follows: smhconfig -e|--ip-restricted-exclude [=] IPLIST The following is an example of how IPLIST is formatted: 122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 NOTE: IPv4 and IPv6 address ranges are supported.
Restart service Restart the HP SMH on completion of applying the new configuration settings. smhconfig -r|--restart Reject Program Admin Login Reject or accept and HP Web-enabled System Management Software or VCA login request. smhconfig -j|--reject-prog-admin-login [=] true|false Win32DisableAcceptEX AcceptEX() is a Microsoft WinSock v2 API that provides performance improvements over the use of the BSD style accept() API in specific circumstances.
Maximum Number of Sessions By default, HP SMH supports 128 user sessions. This number can be lowered to 32 or raised to 500 using the session-maximum setting. smhconfig -S|--session-maximum [=] maximum-number-of-sessions Session Timeout The default session timer is set to 15 minutes. The session timeout can be set as low as 1 minute or as high as 60 minutes. The default session timer is set to 15 minutes. The session timeout can be set as low as 6 minute or as high as 120 minutes.
Custom UI Enabling custom UI enables you to customize the signin and header images as well as adding a small text in the signin page. See the HP SMH README.txt in the hpsmh/data/htdocs/custom_ui directory in the HP SMH install path. smhconfig -c|--custom-ui [=] True | False Httpd Error Log The httpd error log option enables you to determine if it is possible to view the httpd error_log log file through the user interface.
NOTE: --user-kerberos is only available on Windows operating systems. User Groups User Groups are a set of policies to access and modify HP SMH functionalities. Only valid existing operating system groups can be added to the group list. To add groups into HP SMH user types, complete the following: Administrators HP SMH.
Command Line Log Reader The command line log reading tool provides the users with a command line tool for reading the SMH log messages without using the UI. The command is: smhlogreader [options] where, the [options] are: -h|--help, displays the help message. -f|--file FILE, FILE represents a path to a file. --from FROM, FROM: to display a range of messages, this option describes the ID of the first message. --to TO, TO: to display a range of messages, this option describes the ID of the last message.
The following command allows the user to use a properly-formatted log file as an input and also backs up the log files.
13 Troubleshooting Troubleshooting Access Problems Browser Problems Installation Problems IP Address Problems Sign In Problems Security Problems Other Problems NOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system. 1 Access Problems 1.1 1.2 SMH Documentation Unclear on Treatment of securetty. The HP System Management Homepage (HP SMH) does not use /etc/securetty. See login(1) for details on /etc/securetty. After entering a hostname on Linux, HP SMH does not start.
Mozilla browsers share sessions when launched separately. Separate sessions are shared in Mozilla when launched from the desktop. However they are not shared in Internet Explorer. 2.4 I get security messages or partially displayed pages when browsing into HP SMH from Internet Explorer running on Windows 2003. Internet Explorer 6.0 on Windows 2003 Server has different default security settings.
To use IPv6 addresses, you need the following browsers: • Windows OS • Linux OS Internet Explorer 7 Mozilla Firefox Note: Internet Explorer 6 cannot handle IPv6 addresses. For more information, see http:// blogs.msdn.com/ie/archive/2007/02/20/ipv6-uris-in-ie7.aspx and the Microsoft support page at http://support.microsoft.com/kb/325414. When browsing secure pages, Internet Explorer 7 might ask you to add the page to its Trusted Site Zone. Even clicking Add, the message returns.
The command prompt window messages do not affect the performance or functionality of the server or of SMH and can be ignored. Any ProLiant or Integrity server configured with Windows 2000 Server or Windows Server 2003 (any edition) and HP SMH Version 2.1.3 (or later) when SMH is allowed to interact with the desktop can be affected. To prevent HP SMH from interacting with the server desktop, perform the following: 1. 2. 3. 4. 5. 6.
5.8 When I use Internet Explorer 6.0 in Windows and browse through the management server to a system that was discovered by IP address, I cannot sign in to HP SMH. If anonymous access is enabled, I get through anonymously but the user name is incorrect. or When I use Internet Explorer 6.0 in Windows and browse through the management server to a device that was discovered by IP address, the detailed certificate information does not appear in the text box of the Automatic Import Certificate screen.
configure the firewall with exceptions to allow browsers to access the ports used by HP SIM and Version Control Repository Manager. HP recommends the following actions: 1. 2. 3. 4. 5. Select Start→Settings Control Panel. Double-click Windows Firewall to configure the firewall settings. Select Exceptions. Click Add Port. Enter the product name and the port number.
a. b. c. d. Select Request a certificate. Select Advanced certificate request. Select Submit a certificate request by using a base. Press the Ctrl+ V keys to paste the PKCS #10 data into the field. 4. From your Windows 2003 certificate authority system complete the following: a. Click Start→All Programs→Administrative Tools→Certification Authority. b. Click CA (Local) ⇒ W2003CA/certsrv ⇒ where W2003CA is the name of your Windows 2003 certificate authority system. c. Issue the pending request certificate.
To successfully downgrade HP SMH from 3.x to 2.x, stop the HP SMH service and then execute the downgrade by completing the following steps: 1. $/etc/init.d/hpsmhd stop 2. $rpm --oldpackage --U hpsmh-old version.rpm 7.2 Why can't I install HP SMH on my system? The HP SMH install action requires a Java version that requires at least 256 colors to load. NOTE: 7.3 7.4 7.5 7.6 This applies to Windows only.
Keeping good records of your configuration can significantly speed up the troubleshooting process.
Support and other resources Intended Audience HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux, and Microsoft® Windows® operating systems. This user guide is for system administrators who use HP SMH.
Related Documents HP SMH documentation For more information about HP SMH, see the following sources: • HP System Management Homepage Release Notes The release notes provide documentation for what's new with the release, features and change notifications, system requirements, and known issues. The release notes are available on the HP Technical Documentation website at http://docs.hp.com.
A HP SMH file locations File locations Table A-1 HP SMH file locations Description HP SMH Root The root of the HP SMH installation. Windows SystemDrive\hp\hpsmh Linux /opt/hp/hpsmh HP SMH Executable The HP SystemDrive\hp\hpsmh\bin\hpsmhd.exe /opt/hp/hpsmh/sbin/hpsmhd SMH binary. A webapp can use detection of this file's pressence to verify that HP SMH is installed on the system. HP-UX /opt/hpsmh /opt/hpsmh/lbin Certificate and Key files The certificate and private key files used by HP SMH.
B HP SMH Ciphers Ciphers used in HP SMH This appendix provides a list of all the Ciphers used in the HP SMH product. Table B-1 Ciphers used in HP SMH Cipher SSLProtocol Syntax Description SSLProtocol [+|-]protocol Configure usable SSL ... protocol flavors Directive used in HP SMH SSLProtocol all -SSLv2 Description Enable SSLv3 and TLSv1, but not SSLv2. NOTE: All includes SSLv3, TLSv1, and SSLv2.
Glossary Accounts for Users & Groups tool (ugweb) The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts and group accounts on the local system. This tool can also be used to manage user accounts on a NIS system. The ugweb tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH. AS See Kerberos Authentication Server. CA See certificate authority.
performance management, and workload management enable systems administrators to pick the value added software required to deliver complete lifecycle management of their hardware assets. To obtain more information about HP SIM, go to http://www.hp.com/go/hpsim. HP Version Control Agent (VCA) An Insight Management Agent that is installed on a system to enable the customer to see the HP software installed on that server.
Kernel Configuration tool (kcweb) The HP-UX Kernel Configuration (kcweb) tool is used to manage kernel tunables, modules and alarms. The Kernel Configuration tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH MIT Massachusetts Institute of Technology. multihomed Multiple names set to a certificate. parMgr See Partition Manager.
server, so the client can be assured it is communicating with the system that the system claims to be. It is application protocol independent. Secure Task Execution (STE) Secure execution of a task from a managed system. This feature of HP SMH ensures that the user requesting the task has the appropriate rights to perform the task and encrypts the request to protect data from snooping.
products is the HP-UX implementation of the DMTF (Distributed Management Task Force) WBEM standard.
Index C certificates trust mode, 33 trusted management server certificates, 33 ciphers HP SMH, 93 CLI configuration HP SMH, 71 credits HP SMH, 69 MIT Kerberos user groups, 33 N navigating HP SMH, 25 O operating systems, supported, 10 overview getting started, 13 D P documentation, 90 pages HP SMH, 30 E error log, 63 examples scenarios, 23 R F S file locations HP SMH, 91 SAM log, 63 scenarios examples, 23 HP SMH, 23 security alternative name certificate, 33 anonymous, 33 HP SMH, 33 IP Binding, 3
U UI Options HP SMH, 33 UI Properties HP SMH, 33 User Preferences HP SMH, 33 W web browsers, supported, 11 webapps Integrated Agents, 67 Other Agents, 67 websites, 12 102 Index
