Hp System Management Homepage-Software Uživatelský manuál

HP System Management Homepage 7.2User GuideHP-UX, Linux, and Windows Operating SystemsHP Part Number: 509679-009Published: February 2013Edition: 1

Administrator on Windows and root on Linux have administrator access on HP SMH.4. Enter the password that is recognized by the operating system.5. Cli

5. Enter the following product name and the port number information.Add the exceptions listed in the following table to the firewall protection:Table

:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [0:0]:RH-Firewall-1-INPUT - [0:0]-A INPUT -j RH-Firewall-1-INPUT-A FORWARD -j RH-Firewall-1-INPUT-A RH-Firewall-1-

Configuring timeout settings for HP-UXTwo HP SMH timeout settings can be configured:• SMH service timeoutSets the amount of time, in minutes, before t

3. Restart the HP SMH service.Automatically importing certificatesThe Automatically Import Management Server Certificate feature enables you to automa

Signing outYou can sign out of HP SMH, using either of the following options:• In the HP SMH header, click Sign Out.The HP System Management Homepage

3 ScenariosIP BindingYou can use IP Binding for example when a system has multiple IP addresses and you want to limitthe access to HP SMH to particula

4 Navigating the softwareThe HP System Management Homepage (HP SMH) displays all HP Web-enabled SystemManagement Software that provides information. I

Data SourceIndicates which source is populating management data. For instance, WBEM for HPInsight Management WBEM Providers or SNMP for HP Insight Man

◦ Help◦ WebappsThe data frame shows the status for all HP Web-enabled System Management Software andutilities on the system.Information areasDepending

© Copyright 2009, 2013 Hewlett-Packard Development Company, L.P.Confidential computer software. Valid license from HP required for possession, use or

◦ Number of columns.The number of boxes or columns presented in each line in the list view mode is definedby the display resolution setting. For examp

◦ Dynamic Lists in Pages.A dynamically created list of elements appears for each item you want to add or removeto a page and are available for the fol

Table 3 Icon View (continued)DescriptionIconinstalled or no critical, major, minor or warning items, theComponent Status Summary displays no items.Gen

Table 3 Icon View (continued)DescriptionIconTimeoutsConfigures the values of timeout for SMH. Two timeoutscan be configured: Session timeout and UI ti

HP SMH pages include:• “Signing in” (page 7)• “The Home page” (page 25)• “The Settings page” (page 26)• “The Tasks page” (page 50)• “The Tools page (H

5 The Home pageThe Home page provides the system, subsystem, and status views of the server. The Home pagedisplays groupings of systems and their stat

6 The Settings pageThe Settings page contains links to the settings and configuration pages of the HP SystemManagement Homepage (HP SMH) and other int

Guide, available on the HP Technical Documentation website at http://h18013.www1.hp.com/products/servers/management/agents/documentation.html.To confi

53Box Item OrderingDetermines the order thatitems in boxes are shown. If1Presentation ModeEnables you to set thedefault presentation modeApplySave pag

431Presentation ModeEnables you to set thedefault presentation modeApplySave page data.Box Item OrderingDetermines the order thatitems in boxes are sh

Contents1 Product overview...6Product features...

• “Trusted Management Servers category” (page 41)• “Kerberos Authentication category (Windows only)” (page 41)• “User Groups category” (page 44)• “Han

3. Click the Anonymous/Local Access link.4. Under Anonymous Access, select the box beside Allow Anonymous users access to unsecuredpages.5. Click Appl

7RemoveRemove all checked itemsfrom the list.4AddAdds the combined IP andNetmask address to the list.1Enable BindingWhen checked, indicatesthat bindin

For Linux and Windows, you can set a restricted address at installation. From all operating systems,administrators can set a restricted address from t

3. Click the IP Restricted Login link.4. Select the check box beside the IP addresses you want to remove.5. Click Remove.6. Click Apply to apply the c

that was used with the previous self-signed certificate. This private key is randomly generatedat startup when no key file exists.To create a certific

321ApplyRecord the option into theXML configuration file.Enables Autostart mode.Sets Port 2301 as enabledor disabed.Enable Port 2301Sets Port 2301 as

To disable Port 2301, complete the following steps:1. Select Settings from the menu.2. In the System Management Homepage box, click the Security link.

Session TimeoutTo change the value for Session timeout, complete the following steps:1. Select Settings from the menu2. In the System Management Homep

Add the server name to thelist.verifies the digital signaturebefore allowing access. Ifyou do not want to enable6Server Certificate NameEnable Allremo

UI Timeout...38Trust Mode category...

You must have administrative authority to access this directory.To trust by certificate:1. Select Settings from the menu.2. In the System Management H

Trusted Management Servers categoryCertificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH.The Trusted Management

The process only occurs when the user initially logs in to a Kerberos realm and tries to perform thefirst access to a Kerberos-secured service.1. The

For example, when the clock skew among the machines is too large, the following log messageis written: Thu Jun 25 16:55:09 2009] [error] client2001:db

3. Click the Kerberos Authorization link.4. In the Kerberos Configuration area, select the box beside Enable Kerberos Support.5. In the Group Name tex

these operating system groups. The Administrator is unable to add groups in SMH if one of theadded group is deleted from the OS. However, the Administ

Users with Administratoraccess can view all6Group Name Enable AllChecks all checkboxes in thelistings.information providedthrough HP SMH. Thedefault u

5. Click the Operator radio button beside Type.6. Click Add. The values entered are added as a new line in the list table.You can continue to add up t

HP SMH uses the root certificate, intermediate certificate, and the Certificate Root List (CRL) of thecertificate to verify the revocation status of t

Add Custom Menu (HP-UX only)To add a custom menu to HP SMH (HP-UX only):1. Select Settings→Menus→Add Custom Menu.2. For Type, specify whether the menu

Custom UI...63Log-based dir

7 The Tasks pageThe Tasks page displays links to routine tasks provided by participating HP Web-enabled SystemManagement Software.If no tasks are prov

8 The Tools page (HP-UX only)The Tools page displays links to system management tools provided by participating HPWeb-enabled System Management Softwa

9 The Logs pageAt a minimum, the Logs page provides the following log categories:• System Management Homepage Log• Httpd Error Log (Windows and Linux)

The Httpd Error Log is available on HP-UX directly but is visible in Windows and Linux by addingthe httpd-error-log tag in the smhpd.xml file.You must

Table 5 Locale names of supported languages (continued)Windows locale nameLinux locale nameLanguagespanishes_ES.UTF-8Spanishfrenchfr_FR.UTF-8Frenchita

10 The Installed Webapps page (Windows and Linux only)The Installed Webapps page contains a list of installed Webapps in the HP System ManagementHomep

11 The Support pageThe Support page provides information about HP Essentials Software and instructions on how toobtain guidance from HP Support and of

321SearchValidates search field andchosen webapp.Webapp to searchSearch termsEnables you to enter searchcriteria.The Help page provides links for the

12 Command Line Interface configurationThe Command Line Interface (CLI) provides users with administrative rights access to set thesevalues through th

The following command configures the local user privileges:smhconfig -l|--localaccess-type[=] administrator | anonymousIP Restricted LoginsIP addresse

1 Product overviewHP System Management Homepage (HP SMH) is a web-based interface that consolidates andsimplifies single system management for HP serv

Trust ModesThe HP SMH trusts HP SIM or HP Insight Manager 7 (IM 7) secure task execution requests andsingle sign on requests with various levels of se

NOTE: Win32DisableAcceptEX is only available on Windows operating systems.Enable/disable SSL v2By default the HP SMH has SSL v2 disabled. Use the foll

UI TimeoutThe UI timeout value represents the maximum amount of time in seconds that the HP SMH userinterface (UI) waits for data requested from webap

Custom UIEnabling custom UI enables you to customize the sign-in and header images as well as adding asmall text in the sign-in page. See the HP SMH R

Icon viewIcon view allows you to set the default view mode to show icons (True) like a desktop File Managerappearance or to show the traditional list

User GroupsUser Groups are a set of policies to access and modify HP SMH functionalities. Only valid existingoperating system groups can be added to t

usersCommand Line Log ReaderThe command line log reading tool provides the users with a command line tool for reading theSMH log messages without usin

The following command displays a list of messages in the range selected by the user.smhlogreader --from VALUE --to VALUEFor example, to display messag

13 Troubleshooting topicsNOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system.13.1 Access Problems13.13.1.1 Why c

8. On the Profile screen, check all the three rules: domain, private, and publiccheckboxes.9. Enter the Name the rule in the Name field and Descriptio

2 Getting startedTo get started with HP System Management Homepage (HP SMH), use the following informationwhen configuring HP SMH and setting up users

browser (not recommended) or alter the browser security settings to allow cookies(both stored and per-session) and allow active scripting.13.13.2.5 My

Explorer 7 fails to handle IPv6 URLs since the Internet Explorer parser uses a colonas the separator of the IP address and the Port number. For exampl

or SMH failed to verify it against CRL. In such a case, you have tomanually log in to SMH.To use a CA Certificate for SSO, follow the prerequisites li

2. Select Options →Security→Credentials→Trusted Systems.3. Select Trusted Certificates tab.4. Click Import.5. Browse to select root CA certificate fil

The command prompt window messages do not affect the performance orfunctionality of the server or of SMH and can be ignored.Any ProLiant or Integrity

account groups to different levels of access for HP SMH. The HP SMH online helpdescribes this process in detail.NOTE: This does not apply to HP-UX.13.

Verify whether there is an underscore "_" defined in your server's computer name.If there is, remove it or use "-" (dash) ins

by selecting Settings→HP System Management Homepage→Security→Local ServerCertificate.If the CA returns the certificate data in X.509 format, rename th

1. $/etc/init.d/hpsmhd stop2. $rpm --oldpackage -U hpsmh-old version.rpm13.13.7.2 Why can't I install HP SMH on my system?The HP SMH install acti

14 Service and supportSupport for HP SMH is provided as an adjunct to support of the underlying hardware. The HPSupport pages provide you with a varie

NOTE: HP SMH uses the root certificate, intermediate certificate, and the Certificate RootList (CRL) of the certificate to verify the revocation statu

Support and other resourcesInformation to collect before contacting HPBe sure to have the following information available before you contact HP:• Soft

The service also provides access to software updates and reference manuals in electronic form asthey are made available from HP.With this service, Ins

SMH. The installation guide is available on the HP Technical Documentation website at http://www.hp.com/go/hpux-core-docs, select HP-UX System Adminis

Key The name of a keyboard key. Return and Enter both refer to thesame key.Term A term or phrase that is defined in the body text of the document,not

A HP SMH file locationsTable 10 HP SMH file locationsHP-UXLinuxWindowsDescription/opt/hpsmh/opt/hp/hpsmhSystemDrive\hp\hpsmhHP SMH RootThe root of the

Table 10 HP SMH file locations (continued)HP-UXLinuxWindowsDescription/opt/hpsmh/data/help/opt/hp/hpsmh/data/helpSystemDrive\hp\hpsmh\data\helpHelp Ro

B HP SMH CiphersCiphers used in HP SMHThis appendix provides a list of all the Ciphers used in the HP SMH product.Table 11 Ciphers used in HP SMHDescr

15 Documentation feedbackHP is committed to providing documentation that meets your needs. To help us improve thedocumentation, send any errors, sugge

GlossaryAccounts for Users& Groups tool(ugweb)The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts andgroup accoun

performance management, and workload management enable systems administrators to pick thevalue added software required to deliver complete lifecycle m

1. Navigate to https://hostname:2381/.The first time you browse to this URI, the Security Alert dialog box appears, prompting you toindicate whether t

ticket. The session key for the TGT is encrypted using the user's long-term key, so the passwordis needed to decrypt it from the AS' respons

Secure SocketsLayer (SSL)A standard protocol layer that lies between HTTP and TCP and provides privacy and messageintegrity between a client and serve

Web-BasedEnterpriseManagement(WBEM)Is a platform and resource independent DMTF (Distributed Management Task Force) standardthat defines both a common

IndexCcertificatestrust mode, 26trusted management server certificates, 26ciphersHP SMH, 86CLI configurationHP SMH, 58creditsHP SMH, 56Ddocumentation,

WwebappsIntegrated Agents, 55Other Agents, 5594 Index