Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
 HP VSE Management Software Version 4.1 Installation and Update Guide for HP-UX > Chapter 3 Installation

Prepare for Installation
» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Index

spacerspacerspacer
spacer
spacer
  		 
 

For a description of HP SIM patch requirements, see the HP Systems Insight Manager 5.3 Installation and Configuration Guide for HP-UX at http://docs.hp.com/en/418810-004/.

Verify that your CMS and managed systems meet the VSE Management Software system requirements described in “System Requirements”.

Look for any updates to the requirements or installation instructions in the HP VSE Management Software Version 4.1 Release Notes for HP-UX. The latest version of this doccument can be downloaded from http://docs.hp.com/en/vse.html.

Establish common WBEM credentials on the CMS and on the managed systems to allow authenticated access to WBEM data. The VSE Management Software uses WBEM connections to obtain information from the managed systems. To avoid having to maintain multiple WBEM user accounts and passwords, HP recommends that you use one of the following WBEM authentication models:

  • Global Sign-In Credentials  Global credentials apply to all systems and enable you to configure default, system-wide, protocol-wide credentials. To set global sign-in credentials select Options->Security->Credentials->Global Credentials-> from the HP SIM menu..

    You must enter root (or Administrator) level user credentials for the sign-in credentials to be used by the Configure or Repair Agents feature.

    To list the current credentials for a system, select Options->Security->Credentials->System Credentials-> from the HP SIM menu..

  • WBEM Certificate-Based Authentication   You can configure WBEM authentication for a single system or a selected set of systems by selecting Options->Security->Credentials->System Credentials-> from the HP SIM menu and using the advance settings WBEM/WMI tab. To authenticate through a certificate instead of using a WBEM user account and password, select Use certificate instead. Online help for this option is available in HP SIM. Online help for certificates in general can be found in the HP SIM help system under the Networking and Security topic.

    NOTE: On all HP-UX managed systems, HP WBEM Services for HP-UX version A.02.05 or later is required in order to use certificate-based WBEM authentication.

For more information about WBEM security configuration in HP SIM, see the HP white paper Understanding HP Systems Insight Manager security, available from the Information Library link at http://www.hp.com/go/hpsim.

Preinstallation Steps for Linux Managed Systems

On managed systems running Red Hat Enterprise Linux, disable SELinux to avoid conflicts with the WBEM providers and agent software.

In order for Linux managed systems to be correctly discovered by HP SIM, you must install WBEM and the required WBEM providers from the HP Integrity Essentials Foundation Pack for Linux Management CD. Download and install the contents of this CD using Procedure 3-2.

Procedure 3-2 Download and Install Linux Management Software

  1. On the HP Open Source and Linux website at http://hp.com/go/integritylinux, click the HP Integrity Essentials Foundation Pack for Linux link.

  2. Click the Download for HP Integrity Essentials Foundation Pack for Linux link.

  3. Click the HPIEFPL - Support Pack link.

    The HP Integrity Essentials Foundation Pack for Linux - Support Pack page has installation requirements and instructions.

  4. Click Receive for Free and select the appropriate software specification.

    After entering information in the required fields, click Next to download the software.

  5. Install the software according to the instructions included on the HP Integrity Essentials Foundation Pack for Linux - Support Pack page or in the docs directory contained in the tar file.

  6. Make sure that the tog-pegasus package is installed and running on the system.

  7. On Red Hat Enterprise Linux, you might need to modify the file /etc/Pegasus/access.conf to allow WBEM access using your designated WBEM user name and password. Perform the following steps to configure this file. In this example, your designated WBEM user name is assumed to be wbemuser.

    1. Look for the following line in this file: 

      -: ALL EXCEPT pegasus:wbemNetwork

    2. Change this line to either of the following options: 

      # Allow access only from user 'wbemuser':
-: ALL EXCEPT wbemuser pegasus:wbemNetwork

# Allow access by all users:
+: ALL EXCEPT :wbemNetwork

    3. If tog-pegasus is not running, start it by executing the following command: 

      # /etc/init.d/tog-pegasus start

OpenSSH on Linux managed systems must be configured for use by HP SIM. Normally you can use the same procedure that is used to configure OpenSSH for HP SIM on HP-UX managed systems, as described in “Install VSE Agent Software on Managed Systems”. However, if you are using SUSE Linux Enterprise Server 9, you must first manually configure OpenSSH to use password authentication.

IMPORTANT: SUSE Linux Enterprise Server 9 ships with SSH configured to use PAM authentication instead of password authentication. Password authentication is required in order for the mxagentconfig to configure OpenSSH for use by HP SIM.

On managed systems running SUSE Linux Enterprise Server 9, change to password authentication using Procedure 3-3.

Procedure 3-3 Configure SUSE Linux for Password Authentication

  1. Configure the following lines in /etc/ssh/sshd_config on the managed system: 

      PasswordAuthentication yes
  #UsePAM yes

  2. Retrieve the process ID of the running sshd from the file /var/run/sshd.pid.

  3. Restart sshd by executing the following command: 

    # kill -SIGHUP pid

    where pid is the sshd process ID.

Preinstallation Steps for Microsoft Windows Managed Systems

On Windows managed systems OpenSSH is not installed by default, but it can be installed from the HP Smart Setup installation media (version 4.5 or later). Use Procedure 3-4 to install OpenSSH and configure it for use with HP SIM. You can then install the VSE agent software and WMI/WBEM providers from HP SIM using the procedure described in “Install VSE Agent Software on Managed Systems”.

Procedure 3-4 Install and Configure OpenSSH for Windows

  1. Follow the instructions in the HP Smart Setup CD to install OpenSSH Services on the Windows managed system. During installation you must specify the user name and password for the account that runs the OpenSSH service. The Administrator account is typically used for this.

    NOTE: During installation, OpenSSH automatically imports your local user accounts into its password file. If additional accounts are added later, you must reinstall OpenSSH or use the sshuser command to import the new user account information into OpenSSH.

  2. Reboot the Windows managed system to enable SSH communication.

  3. Configure OpenSSH for use with HP SIM by executing the following command on the CMS: 

    # mxagentconfig -a -n node-hostname -u Administrator -p password

    where node-hostname is the name of the system as it is known by HP SIM. If the system administrator user account on your managed system is not Administrator, substitute your administrator user name in the preceding command. You can use multiple -n options to perform this operation on more than one managed system.

    NOTE: This step can be performed within HP SIM by selecting the managed systems to configure, then selecting Configure->Configure or Repair Agents... from the HP SIM menu bar. On the Configure or Repair Settings page, select Configure secure shell (SSH) access.

  4. If you are using Partition Manager to manage Windows systems, you must also create a user account named root on those Windows systems. Partition Manager uses this user name for remote execution of nPartition commands through OpenSSH. Add this user to the Administrators group in Windows, then add this user to OpenSSH using the sshuser command.

    To configure remote connections from the CMS using the root account, execute the following command on the CMS:

    # mxagentconfig -a -n node-hostname -u root -p root-password

OpenSSH is now configured for connections from the CMS (with host-based authentication), using either the Administrator or root account. Partition Manager uses the root account for remote command execution.



Chapter 3 Installation
  		 


Before Upgrading from a Previous Version  
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2006-2008 Hewlett-Packard Development Company, L.P.