Hp System Management Homepage-Software Instrukcja Użytkownika

HP System Management Homepage 7.1User GuideHP-UX, Linux, and Windows Operating SystemsHP Part Number: 509679-008Published: July 2012Edition: 2

Administrator on Windows and root on Linux have administrator access on HP SMH.4. Enter the password that is recognized by the operating system.5. Cli

5. Enter the following product name and the port number information.Add the exceptions listed in the following table to the firewall protection:Table

:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [0:0]:RH-Firewall-1-INPUT - [0:0]-A INPUT -j RH-Firewall-1-INPUT-A FORWARD -j RH-Firewall-1-INPUT-A RH-Firewall-1-

Configuring timeout settings for HP-UXTwo HP SMH timeout settings can be configured:• SMH service timeoutSets the amount of time, in minutes, before t

3. Restart the HP SMH service.Automatically importing certificatesThe Automatically Import Management Server Certificate feature enables you to automa

Signing outYou can sign out of HP SMH, using either of the following options:• In the HP SMH header, click Sign Out.The HP System Management Homepage

3 ScenariosIP BindingYou can use IP Binding for example when a system has multiple IP addresses and you want to limitthe access to HP SMH to particula

4 Navigating the softwareThe HP System Management Homepage (HP SMH) displays all HP Web-enabled SystemManagement Software that provides information. I

Data SourceIndicates which source is populating management data. For instance, WBEM for HPInsight Management WBEM Providers or SNMP for HP Insight Man

◦ Help◦ WebappsThe data frame shows the status for all HP Web-enabled System Management Software andutilities on the system.Information areasDepending

© Copyright 2009, 2012 Hewlett-Packard Development Company, L.P.Legal NoticesConfidential computer software. Valid license from HP required for posses

◦ Number of columns.The number of boxes or columns presented in each line in the list view mode is definedby the display resolution setting. For examp

◦ Dynamic Lists in Pages.A dynamically created list of elements appears for each item you want to add or removeto a page and are available for the fol

Table 3 Icon View (continued)DescriptionIconinstalled or no critical, major, minor or warning items, theComponent Status Summary displays no items.Gen

Table 3 Icon View (continued)DescriptionIconTimeoutsConfigures the values of timeout for SMH. Two timeoutscan be configured: Session timeout and UI ti

HP SMH pages include:• “Signing in” (page 7)• “The Home page” (page 25)• “The Settings page” (page 26)• “The Tasks page” (page 50)• “The Tools page (H

5 The Home pageThe Home page provides the system, subsystem, and status views of the server. The Home pagedisplays groupings of systems and their stat

6 The Settings pageThe Settings page contains links to the settings and configuration pages of the HP SystemManagement Homepage (HP SMH) and other int

Guide, available on the HP Technical Documentation website at http://h18013.www1.hp.com/products/servers/management/agents/documentation.html.To confi

53Box Item OrderingDetermines the order thatitems in boxes are shown. If1Presentation ModeEnables you to set thedefault presentation modeApplySave pag

431Presentation ModeEnables you to set thedefault presentation modeApplySave page data.Box Item OrderingDetermines the order thatitems in boxes are sh

Contents1 Product overview...6Product features...

• “Trusted Management Servers category” (page 41)• “Kerberos Authentication category (Windows only)” (page 41)• “User Groups category” (page 44)• “Han

3. Click the Anonymous/Local Access link.4. Under Anonymous Access, select the box beside Allow Anonymous users access to unsecuredpages.5. Click Appl

7RemoveRemove all checked itemsfrom the list.4AddAdds the combined IP andNetmask address to the list.1Enable BindingWhen checked, indicatesthat bindin

For Linux and Windows, you can set a restricted address at installation. From all operating systems,administrators can set a restricted address from t

3. Click the IP Restricted Login link.4. Select the check box beside the IP addresses you want to remove.5. Click Remove.6. Click Apply to apply the c

that was used with the previous self-signed certificate. This private key is randomly generatedat startup when no key file exists.To create a certific

321ApplyRecord the option into theXML configuration file.Enables Autostart mode.Sets Port 2301 as enabledor disabed.Enable Port 2301Sets Port 2301 as

To disable Port 2301, complete the following steps:1. Select Settings from the menu.2. In the System Management Homepage box, click the Security link.

Session TimeoutTo change the value for Session timeout, complete the following steps:1. Select Settings from the menu2. In the System Management Homep

Add the server name to thelist.verifies the digital signaturebefore allowing access. Ifyou do not want to enable6Server Certificate NameEnable Allremo

UI Timeout...38Trust Mode category...

You must have administrative authority to access this directory.To trust by certificate:1. Select Settings from the menu.2. In the System Management H

Trusted Management Servers categoryCertificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH.The Trusted Management

The process only occurs when the user initially logs in to a Kerberos realm and tries to perform thefirst access to a Kerberos-secured service.1. The

For example, when the clock skew among the machines is too large, the following log messageis written: Thu Jun 25 16:55:09 2009] [error] client2001:db

3. Click the Kerberos Authorization link.4. In the Kerberos Configuration area, select the box beside Enable Kerberos Support.5. In the Group Name tex

system groups are added, the operating system administrator can add operating system users intothese operating system groups.Each HP SMH access level

Checks all checkboxes in thelistings.information providedthrough HP SMH. Thedefault user group,Administrators for Windowsoperating systems and rootfor

6. Click Add. The values entered are added as a new line in the list table.You can continue to add up to five Operator groups by following steps 4 thr

HP SMH uses the root certificate, intermediate certificate, and the Certificate Root List (CRL) of thecertificate to verify the revocation status of t

Add Custom Menu (HP-UX only)To add a custom menu to HP SMH (HP-UX only):1. Select Settings→Menus→Add Custom Menu.2. For Type, specify whether the menu

Custom UI...63Log-based dir

7 The Tasks pageThe Tasks page displays links to routine tasks provided by participating HP Web-enabled SystemManagement Software.If no tasks are prov

8 The Tools page (HP-UX only)The Tools page displays links to system management tools provided by participating HPWeb-enabled System Management Softwa

9 The Logs pageAt a minimum, the Logs page provides the following log categories:• System Management Homepage Log• Httpd Error Log (Windows and Linux)

The Httpd Error Log is available on HP-UX directly but is visible in Windows and Linux by addingthe httpd-error-log tag in the smhpd.xml file.You must

Table 5 Locale names of supported languages (continued)Windows locale nameLinux locale nameLanguagespanishes_ES.UTF-8Spanishfrenchfr_FR.UTF-8Frenchita

10 The Installed Webapps page (Windows and Linux only)The Installed Webapps page contains a list of installed Webapps in the HP System ManagementHomep

11 The Support pageThe Support page provides information about HP Essentials Software and instructions on how toobtain guidance from HP Support and of

321SearchValidates search field andchosen webapp.Webapp to searchSearch termsEnables you to enter searchcriteria.The Help page provides links for the

12 Command Line Interface configurationThe Command Line Interface (CLI) provides users with administrative rights access to set thesevalues through th

The following command configures the local user privileges:smhconfig -l|--localaccess-type[=] administrator | anonymousIP Restricted LoginsIP addresse

1 Product overviewHP System Management Homepage (HP SMH) is a web-based interface that consolidates andsimplifies single system management for HP serv

Trust ModesThe HP SMH trusts HP SIM or HP Insight Manager 7 (IM 7) secure task execution requests andsingle sign on requests with various levels of se

NOTE: Win32DisableAcceptEX is only available on Windows operating systems.Enable/disable SSL v2By default the HP SMH has SSL v2 disabled. Use the foll

UI TimeoutThe UI timeout value represents the maximum amount of time in seconds that the HP SMH userinterface (UI) waits for data requested from webap

Custom UIEnabling custom UI enables you to customize the sign-in and header images as well as adding asmall text in the sign-in page. See the HP SMH R

Icon viewIcon view allows you to set the default view mode to show icons (True) like a desktop File Managerappearance or to show the traditional list

User GroupsUser Groups are a set of policies to access and modify HP SMH functionalities. Only valid existingoperating system groups can be added to t

usersCommand Line Log ReaderThe command line log reading tool provides the users with a command line tool for reading theSMH log messages without usin

The following command displays a list of messages in the range selected by the user.smhlogreader --from VALUE --to VALUEFor example, to display messag

Modify the PATH_TO_CAFILESHP SMH verifies the revocation status of the trusted certificate used for SSO against the rootcertificate, intermediate cert

13 Troubleshooting topicsNOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system.13.1 Access Problems13.13.1.1 SMH D

2 Getting startedTo get started with HP System Management Homepage (HP SMH), use the following informationwhen configuring HP SMH and setting up users

There are two possible solutions in order to be sure the HP SMH shortcut asks forcredentials.Solution 11. Select Tools Internet Options2. Choose the A

13.13.2.7 When I browse to https://ipaddress:2381 on a local machine or a remotemachine running Windows 2003, I don't see the Sign in screen.Inte

Choose one of two ways to avoid security warnings when browsing with IPv6addresses:• Use a DNS name backed by IPv6 addresses.• Add the literal IPv6 ad

2. Click HP System Management Homepage Properties.3. Click the Log On tab.4. Deselect Allow service to interact with desktop.5. Click Apply and then c

By default, new accounts created in Windows operating systems are set to user mustchange the password at next sign in. Deselect this option so the acc

NOTE: You might need to change the Microsoft Internet Information Server (IIS)configuration after you rename a system.This is a security feature added

If the CA returns the certificate data in X.509 format, rename the X.509 certificatefile as cert.pem and place it into the \hp\sslshare directory. Whe

13.13.7.2 Why can't I install HP SMH on my system?The HP SMH install action requires a Java version that requires at least 256 colorsto load.NOTE

14 Service and supportSupport for HP SMH is provided as an adjunct to support of the underlying hardware. The HPSupport pages provide you with a varie

Support and other resourcesInformation to collect before contacting HPBe sure to have the following information available before you contact HP:• Soft

NOTE: HP SMH uses the root certificate, intermediate certificate, and the Certificate RootList (CRL) of the certificate to verify the revocation statu

HP authorized resellersFor the name of the nearest HP authorized reseller, see the following sources:• In the United States, see the HP U.S. service l

www.hp.com/go/hpux-core-docs, select HP-UX System Administration for the latest documentsand for previous versions of the documents, select either HP-

Enter The name of a keyboard key. Note that Return and Enter both refer to thesame key. A sequence such as Ctrl+A indicates that you must hold down th

A HP SMH file locationsTable 10 HP SMH file locationsHP-UXLinuxWindowsDescription/opt/hpsmh/opt/hp/hpsmhSystemDrive\hp\hpsmhHP SMH RootThe root of the

Table 10 HP SMH file locations (continued)HP-UXLinuxWindowsDescription/opt/hpsmh/data/help/opt/hp/hpsmh/data/helpSystemDrive\hp\hpsmh\data\helpHelp Ro

B HP SMH CiphersCiphers used in HP SMHThis appendix provides a list of all the Ciphers used in the HP SMH product.Table 11 Ciphers used in HP SMHDescr

GlossaryAccounts for Users& Groups tool(ugweb)The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts andgroup accoun

performance management, and workload management enable systems administrators to pick thevalue added software required to deliver complete lifecycle m

ticket. The session key for the TGT is encrypted using the user's long-term key, so the passwordis needed to decrypt it from the AS' respons

Secure SocketsLayer (SSL)A standard protocol layer that lies between HTTP and TCP and provides privacy and messageintegrity between a client and serve

1. Navigate to https://hostname:2381/.The first time you browse to this URI, the Security Alert dialog box appears, prompting you toindicate whether t

Web-BasedEnterpriseManagement(WBEM)Is a platform and resource independent DMTF (Distributed Management Task Force) standardthat defines both a common

IndexCcertificatestrust mode, 26trusted management server certificates, 26ciphersHP SMH, 85CLI configurationHP SMH, 58creditsHP SMH, 56Ddocumentation,

WwebappsIntegrated Agents, 55Other Agents, 5592 Index