Beruflich Dokumente
Kultur Dokumente
Copyright 2010 - 2012 EMC Corporation. All rights reserved. Published May, 2012 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date regulatory document for your product line, go to the Technical Documentation and Advisories section on EMC Powerlink. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners.
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Revision History
Revision History
Table 1
Revision History
Revision History
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
1
Overview
UIM/P installation and configuration tasks overview.............................................. 6 Gathering application information............................................................................... 7 Information needed during installation ...................................................................... 8
Overview
Overview
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Overview
Vblock installers Builds Vblocks from the infrastructure components, such as UCS and CLARiiON. This user also configures the switches required for Vblocks to function. Application administrators Installs and configures UIM/P, and sets up other users.
Note: Application administrators might not use the application after the initial setup.
Infrastructure administrators Domain experts and infrastructure service manager, who: Creates Vblock profiles Performs Vblock discovery Creates the blade, storage, and logical identity pools Defines the grades Configures service offerings for users to create and provision the services It is possible to have four different Infrastructure Administrators: UCS (Server) administrator, Storage administrator, Network administrator, and Infrastructure service administrator, or a combination of the four.
Application Deployment Team Summary Role Vblock installer Application administrator Infrastructure administrator Name Email Phone
Overview
Powerlink or another location specified by EMC the DVD included in the UIM/P physical kit
The deployment files for the UIM/P appliance include an OVF file (Open Virtualization Format) file and its related VMDK (Virtual Machine Disk) file(s). Due to Powerlink file size limitations and potential issues when copying large files to a Windows machine, the VMDK file is split into several separate files on Powerlink. The OVF file is included in the first VMDK file. Place these files in a location accessible to your vSphere Client, such as a local file share or URL.
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
2
Installing UIM/P
Installing UIM/P........................................................................................................... Starting the appliance ................................................................................................... Verifying the installation .............................................................................................. Services used by Unified Infrastructure Manager/Provisioning...........................
10 12 13 14
Installing UIM/P
Installing UIM/P
Installing UIM/P
To install the UIM/P appliance: 1. Open vSphere Client, and connect to the vCenter Server managing your VMware environment. 2. From the File menu, select Deploy OVF Template. 3. In the Source step, browse to the location of the UIMP_OVF10.ovf file or type in the URL. 4. Click Next.
IMPORTANT To minimize installation time, install the UIM/P appliance from within the same local area network (LAN) shared by your VMware ESX or ESXi servers. Installation time should take approximately 5 to 15 minutes, while installation across a WAN could take 2 hours or more. 5. In the OVF Template Details step, review the details of the loaded OVF file, and click Next. 6. In the End User License Agreement step, review the End User License Agreement. Click Accept, and then Next to continue. 7. In the Name and Location step: a. Type a Name for the UIM/P appliance. For example, UIMP. b. Select a unique Inventory Location for the UIM/P appliance within your VMware environment. c. Click Next. 8. In the Host/Cluster step: a. Select a host or cluster where the UIM/P appliance will run. b. Click Next. 9. In the Resource Pool step: a. Select a resource pool (associated with the cluster/host) where the UIM/P appliance will run. This step may not be necessary if a resource pool has not been predefined. b. Click Next. 10. In the Datastore step: a. Select a datastore to hold the appliance images for UIM/P. b. Click Next. 11. In the Disk Format step: a. Select the storage space provisioning method: Thin provisioned format on demand expansion of available storage, used for newer datastore file systems Thick provisioned format appliance storage that is allocated immediately and reserved as a block b. Click Next.
10
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Installing UIM/P
12. In the Network Mapping step: a. For Network 1, select a destination network for the management VLAN used for console access to UIM/P as well as Vblock management communication. b. For Network 2, select a destination network for the private VLAN used for the operating system installation VLAN (UimOsInstallVlan) on Vblock servers. c. Click Next. 13. In the Properties step: a. Set Appliance IP Address to a static IP address for the UIM/P appliance. For example, 192.168.1.25. b. Set Netmask to the netmask applied to IP addresses in the network. For example, 255.255.255.0. c. Set Gateway IP Address to the gateway IP address for hosts in the network. For example, 192.168.1.1. d. Set OS Install VLAN IP Address to the destination network IP address for the VLAN ID assigned to the operating system installation VLAN (UimOsInstallVlan). For example, 10.0.0.1. e. Set OS Install VLAN Netmask to the destination netmask IP address for the VLAN ID assigned to the operating system installation VLAN (UimOsInstallVlan). For example, 255.255.255.0. f. Check the box for OS Install VLAN DHCP Server to enable the embedded DHCP server on the OS Install VLAN network interface.
Note: The OS Install VLAN DHCP Server or an externally configured DHCP server is required to install ESX or ESXi operating systems on the servers during service provisioning. Check this box to enabled the DHCP server installed with UIM/P, or refer toConfiguring a third-party DHCP server on page 16 to use a third party DHCP server for ESX or ESXi installation.
g. Set Appliance Fully Qualified Hostname to the fully qualified host name of the appliance. For example, uimp.acme.com. h. Set License Key to the license key provided to you for UIM/P.
Note: The license key entered for step h must be entered as one line with no spaces or carriage returns. If upgrading from a previous release, you must convert your license key to the new format using the steps found in Handling an expired license key on page 38.
i. Set the Company Name. j. Set the Division. k. Set Email Notification From-Address to the email address where the job notifications will be sent from. l. Set SMTP Server to a static IP address for the UIM/P appliance. For example, 192.168.1.51. m. Set DNS Server(s) to a comma-separated list of domain name servers (DNS) available in the network. For example, 192.168.1.51,192.168.1.52.
Note: You must independently register the hostname for your appliance with your domain name servers (DNS). UIM/P does not validate hostnames. Hostnames not registered with the corresponding DNS may prevent normal operation of UIM/P.
Installing UIM/P
11
Installing UIM/P
n. (Optional) Set Search Domain(s) to a space-separated list of domains used in the network. For example, acme.com mdl.acme.com. o. Set Create a password for the root Linux user on the appliance to the password for the root user of the UIM/P appliance. This password is used to log into the console of the UIM/P appliance in the vSphere Client, or to SSH into the appliance. p. Set Timezone to the timezone of the UIM/P appliance. For example, US/Eastern. 14. In the Ready to Complete step, review the list of properties, and click Finish. 15. After installation is complete, click Close.
To login to UIM/P: 1. Open a browser. 2. Navigate to https://<Hostname>/, where <Hostname> is the fully qualified hostname of the UIM/P appliance. The UIM/P login screen is displayed. 3. Enter your username and password. The UIM/P dashboard is displayed.
Note: The default username for UIM/P is sysadmin, and the default password is sysadmin.
12
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Installing UIM/P
To ensure the Vblock was configured correctly during deployment: 1. From the UIM/P console, Administration view, Vblocks tab, add and discover a Vblock. 2. Once successfully discovered, select the Vblock from the list and click Validate setup. 3. Check the alert icon in the first column of the Vblock table to verify the Vblock was successfully configured. If a warning or failed alert is displayed, click the icon to open the Setup Validation dialog box to view the specific details. 4. Repeat step 1 through step 3 for each Vblock.
13
Installing UIM/P
UIM/P services Service uim-service-wrapper uim-database uim-sonicmq apache2 uim-dsa uim-cc-jboss uim-slm-tomcat uim-device-services uim-watchdog uim-smi-s-provider emc-homebase-serverdb emc-homebase-server uim-configuration uim-healthcheck Description UIM/P wrapper script PostgreSQL database server SonicMQ JMS server Apache HTTP web server UIM/P device services adaptor JBoss application server Apache Tomcat server UIM/P device communication server UIM/P watchdog service EMC SMI Provider EMC HomeBase server database EMC HomeBase server UIM/P virtual appliance configuration service UIM/P Health Check service Note: The healthcheck service is turned off by default.
To view the active services used by UIM/P, use the service uim-service-wrapper status command. To start the services used by UIM/P, use the service uim-service-wrapper start command. To stop the services used by UIM/P, use the service uim-service-wrapper stop command. To restart the services used by UIM/P, use the service uim-service-wrapper restart command.
14
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
3
Configuring
Post installation configuration steps .......................................................................... 16 Configuring consoles .................................................................................................... 18 Configuring users, groups, and permissions ............................................................ 24
Configuring
15
Configuring
5. Type the number next to the jmx-user account and press Enter. 6. Type a new password for the account. The JBoss JMX Console is now enabled and may be accessed by using a browser to navigate to https://<IP Address>:8880/jmx-console, where <IP Address> is the IP address or hostname of the UIM/P appliance. At the login screen, type the newly created username and password.
Prepare the UIM/P appliance for operating system (ESX or ESXi) installation during service provisioning
Importing the VMware ESX/ESXi media To configure the VMware ESX/ESXi media so it is available to UIM/P: 1. Download the VMware ESX/ESXi media to the /tmp directory. 2. To load the media onto the appliance, run the uim_loadesx.sh script, located in the /opt/ionix-uim/tools/ directory. For example, /opt/ionix-uim/tools/uim_loadesx.sh -i /tmp/ESX-4.0.0-update1-208167.iso. 3. (Optional) When the load is complete, delete the VMware ESX/ESXi media from the appliance. To delete the VMware ESX/ESXi media from the appliance, run the uim_remove_esx.sh script, located in the the /opt/ionix-uim/tools/ directory. For example, /opt/ionix-uim/tools ./uim_remove_esx.sh. Configuring a third-party DHCP server UIM/P requires the use of a DHCP server to perform operating system installations as part of its service provisioning process. By default, the UIM/P installation process configures the DHCP server included with RedHat Enterprise Linux to perform this function. Optionally, an administrator can choose to disable the default DHCP server and enable a third-party DHCP server to use during installation.
16
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
Note: The DHCP server configured during installation is setup to offer leases exclusively on the private OS Installation VLAN so that it will not interfere with any pre-existing DHCP servers already running in your environment.
Disabling the DHCP service If the DHCP Service was not disabled during the installation of Unified Infrastructure Manager, it must be disabled before configuring a third-party DHCP server. To disable the DHCP Service: 1. Open a command prompt. 2. Type the following commands: service dhcpd stop insserv -r dhcpd Configuring a DHCP service The following configuration options must be set within the third-party DHCP server.
Boot filename: /pxelinux.0 Boot server: <IP address>, where <IP address> is the IP address for the UIM/P server blade operating system install interface. The third-party DHCP server must be set to offer leases on the UimOsInstallVlan.
17
Configuring
Configuring consoles
Verifying Unified Infrastructure Manager/Provisioning is running
To verify UIM/P is running: 1. Open a browser. 2. Navigate to https://<IP Address>/, where <IP Address> is the IP address or hostname of the UIM/P appliance. The UIM/P login screen is displayed. 3. Enter your username and password. The UIM/P dashboard is displayed. 4. Click on Administration. The UIM/P is running properly if no errors are displayed.
18
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
Certificates
Use the following sections when working with certificates in UIM/P. Importing the EMC CA certificate The UIM/P console uses a security certificate that is not trusted by default when using Internet Explorer or Mozilla Firefox. Before accessing UIM/P for the first time, the EMC Certificate Authority certificate must be imported into your browser as a trusted CA certificate. Importing the EMC CA certificate into Internet Explorer 1. Type the following URL into the Internet Explorer address bar: https://<hostname>/ca.crt, where <hostname> is the fully qualified hostname of the UIM/P appliance. A certificate error appears. 2. Click Continue to this website. 3. Click Save to save the certificate. 4. Click Open to open the ca.cer file. The Certificate dialog window displays. 5. Click Install Certificate. The Certificate Import Wizard opens. 6. Click Next. The certificate store wizard appears. 7. Select Automatically, and click Next. 8. Select Place all certificates in the following store, and click Browse. 9. Select Trusted Root Certificate Authorities, and click OK. 10. Click Next to continue. 11. Click Finish at the summary screen. 12. If a security warning appears, click Yes to continue with the installation of the certificate. 13. Click OK at the import successful window. 14. Close and reopen Internet Explorer for the certificate changes to take effect. Importing the EMC CA certificate into Mozilla Firefox 1. Enter the following URL into the Mozilla Firefox address bar: https://<hostname>/ca.crt, Where <hostname> is the fully qualified hostname of the UIM/P appliance. A certificate error is displayed. 2. Select I Understand the Risks, and click Add Exception. The Add Security Exception window appears. 3. Click Get Certificate. 4. Click Confirm Security Exception. 5. Depending on the version of Firefox, either a Downloading Certificate window, or an Opening ca.crt window is displayed.
If a Downloading Certificate window displays, skip to Step 12 on page 20. If a Opening ca.crt window is displayed, continue to Step 6 on page 19.
6. Save the ca.crt file to your local computer. Note the location where the file is saved. 7. Do one of the following:
Configuring consoles
19
Configuring
For Windows consoles, select Tools >Options from the Firefox menus. For Linux consoles, select Edit >Preferences from the Firefox menus.
8. Click Advanced. 9. Click View Certificates. 10. Click Import. 11. Select the ca.crt file that you downloaded in Step 5 on page 19. The Downloading Certificate window displays. 12. Select the Trust this CA to identify web sites check box, and click OK. Enabling HTTPS communication between Unified Computer System Manager and UIM/P To enable communication between Unified Computer System Manager (UCS Manager) and UIM/P: 1. Export the UCS Manager certificate. 2. Install the UCS Manager certificate in UIM/P. To export the UCS Manager certificate using Mozilla Firefox 1. Type the URL to access UCS Manager: https://<ucsm-ipaddress>, where <ucsm-ipaddress> is the IP address of the server on which UCS Manager is running. 2. If this is the first time you are running the UCS Manager, accept the UCS Manager certificate. 3. In a browser running the UCS Manager, open the Tools menu and select Options > Advanced > Encryption > View Certificate >Servers.
Note: If the Certification Manager is not available, install Cert Viewer Plus through Mozilla Firefox Add-ons menu.
4. Select the UCS Manager server from the list of certificates, and click Export. 5. Keep the defaults, or select a new path and filename for the certificate file and select X.509 Certificate PEM in the Save as type drop-down list and click Save. 6. Ensure that the extension for the saved file is .crt. for example, UIM_HOME\temp\ucsnamecertification.crt 7. Continue to install the certificate in UIM/P as described in To install the certificate in Unified Infrastructure Manager/Provisioning on page 21. To export the UCS Manager certificate using Microsoft Internet Explorer 1. Enter the URL to access UCS Manager: https://<ucsm-ipaddress>, where <ucsm-ipaddress> is the IP address of the server on which UCS Manager is running. 2. If this is the first time you are running the UCS Manager, accept the UCS Manager certificate. 3. Click on the Certificate Warning button next to the address bar. 4. Click View Certificates. 5. Click Install Certificate, and Next. 6. Click the Place all certificates in the following store radio button, and click Browse.
20
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
7. Click Trusted Publishers, Ok, Next, and Finish. 8. In the browser running UCS Manager select Tools > Internet Options > Content. 9. Click Publishers and select Trusted Publishers. 10. Select the UCS Manager server from the list of certificates, and click Export. 11. Select Next in the Certificate Export Wizard. 12. Select the DER encoded binary X.509 (.CER) format, and click Next. 13. Enter a path and filename on your local machine for the exported certificate file. 14. Ensure the settings are correct, and click Finish. The file is exported as a CER file, for example, UCS_HOME/temp/ucsnamecertification.cer 15. Transfer the file to the UIM/P appliance. 16. To convert the CER file to a CRT file, run the following command on the file you copied to the UIM/P appliance in step 15: openssl x509 -inform DER -in <filename>.cer -out <filename>.crt 17. Continue to install the certificate in UIM/P as in To install the certificate in Unified Infrastructure Manager/Provisioning on page 21. To install the certificate in Unified Infrastructure Manager/Provisioning 1. Depending on your internet browser, export the UCS certificate file as described. 2. Copy the exported certificate (.crt file) to the /opt/ionix-uim/conf/CA directory on the UIM/P appliance. 3. From the command prompt on the UIM/P appliance, change directories to /opt/ionix-uim/conf/CA. 4. Run the following Perl script to install the UCS Manager certificate in UIM/P by typing: ./cert_hash.pl.
Configuring consoles
21
Configuring
Disabling the certificate hostname validation If you are accessing the UIM/P appliance over HTTPS with a URL that contains something other than the actual appliance hostname, you must disable the certificate hostname validation in Java on each Windows console. The certificate is generated at install time with the hostname, as defined on the UIM/P appliance. To disable the certificate hostname validation in Java: 1. Open the Control Panel window. 2. Double-click the Java icon. 3. Click the Advanced tab at the top of the window. 4. Click the + icon next to Security to expand the security drop-down list. 5. Clear the Warn if site certificate does not match hostname check box. 6. Click OK. SSL Configuration CA-signed certificates UIM/P allows you to use certificates that are signed by a Certificate Authority (CA). An automated utility is available for generating a private key and certificate signing request (CSR), as well as installing and configuring the CA-signed certificate into Tomcat and Apache. To enable the CA-signed SSL certificate in UIM/P: 1. Log into the appliance as the root user. If you have already received the CA-signed certificate, skip to step 3. 2. Generate a Private Key and Certificate Signing Request (CSR). a. Type cd /opt/ionix-uim/tools/ssl, and then press Enter. b. Type the following command, and press Enter: perl ssl-utility.pl keygen c. Follow the screen prompts. You are asked for general security information about the location of the appliance, and the hostname; such as country, state, locality, and organization name. Any field you do not complete can be left blank, or you can enter a period (.) into that field. The utility generates the following files: server.key which is the private key server.csr which is the certificate signing request (CSR) 3. Send the CSR file to your preferred Certificate Authority (CA). The CA then returns the signed certificate. 4. Save this file to /opt/ionix-uim/tools/ssl.
22
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
Installing the private key and certificate To install the private key and certificate in UIM/P: 1. Log into the appliance as the root user. 2. Type cd /opt/ionix-uim/tools/ssl, and press Enter: 3. Type the following command and press Enter: perl ssl-utility.pl install <private key file> <certificate file> For example: perl ssl-utility.pl install appliance.key certnew.cer
Note: Running the perl ssl-utility.pl -keygen script also creates a backup of the private key file, certificate file, and the keystore files for Jboss, Tomcat, and SLM. The files are placed in the /opt/ionix-uim/backup directory.
The installer prompts you to confirm installation of the private key and certificate. 4. Type Y and press Enter. You are prompted to enter a password to protect the private key and Java keystore. This password must be at least six characters. 5. Type a password and press Enter. After the utility completes, all the product services are restarted, and a message is displayed indicating the SSL configuration is complete.
Configuring consoles
23
Configuring
User A User can view data information in UIM/P, and perform basic operations. A User cannot perform service lifecycle operations such as provisioning, activation, deactivation, decommissioning, blade releases, and cannot launch the Unified Infrastructure Manager Configuration Center. UIM-ServiceAdmin A Service Administrator has the same permissions as a User plus the ability to perform lifecycle operations. A Service Administrator cannot launch the UIM/P Configuration Center. UIM-SystemAdmin A System Administrator has the same permissions as a Service Administrator but can also launch the Unified Infrastructure Manager Configuration Center.
24
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
Creating users System users are authorized to access the application for the purpose of network configuration and maintenance. To create users: 1. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. 2. Click the arrow next to the icon in the right corner of the title bar, and select Configuration Center to access the interface. 3. From the menu bar access Tools > System Administration. 4. In the navigation pane, expand Global > User Management, and click System Users. 5. Click Add, which is displayed in the bottom right side of the window. 6. Type the user ID and e-mail. 7. (Optional) Type the users first name, last name, and phone number. 8. (Optional) Type the users authentication method: External TACACS+ server This is the default. Users are validated against the TACACS+ server. The user is entered into the TACACS+ server before attempting to log into the application. Native Registry The user's access is validated by the native registry. This authentication requires a password be created for the user. The combination of the user ID and the password provides access to the application. RADIUS A protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. LDAP Server A protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. LDAPS Server A secure protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. 9. If authentication is performed using Native Registry: a. Type a unique password for the user. b. Confirm the password by retyping it in the Confirm Password field, and click Apply. 10. To create more users, click Apply and repeat step 6- step b on page 25. Otherwise, click OK. 11. (Optional) After the users are created, add the user to a group or assign permissions to the user. If you add a user to a group, by default, the user inherits the permissions assigned to the group.
25
Configuring
Creating groups Groups are containers for creating relationships between users and other groups. For example, system administrators can create groups for users that have the same permissions. Users, and groups within a group, inherit the permissions of the containing group. To create a group: 1. From the menu bar, select Tools > System Administration. 2. In the navigation pane, select Global > User Management > System Groups. 3. Click Add in the Add Group dialog box. 4. Type a Group Name. 5. Optionally, type a description of the group. 6. Select the members to add to the group from the list of Available Members.
Note: If no members are available, the users or groups may not have been created yet. After clicking OK, the group is saved, and can be edited later to include members created after the group.
7. Click Add to add the members to the group, or Add All to add all the users to the group. 8. Click OK. 9. Continue to assign permissions to the group.
6. When you have finished selecting the permissions, click Apply and Close.
26
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Configuring
4. Save and close the /etc/ssh/sshd_config file. 5. Restart the SSHD service using the following command:
service sshd restart
27
Configuring
28
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
4
Migrating
Migrating
29
Migrating
30
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
5
Upgrading
Upgrading
31
Upgrading
1. Take a snapshot of the UIM/P appliance using the vSphere Client: a. Open the vSphere Client, and connect to the vCenter Server managing your appliance. b. Right-click the UIM/P appliance, and select Snapshot > Take Snapshot.
IMPORTANT A snapshot of the UIM/P appliance is important in order to prevent loss of data and allow proper rollback if an error occurs during the upgrade. 2. Download the UIMP-3.1.1.0.xxx-Update-Media.iso file to the server where you are running the vSphere Client. 3. Use vSphere Client to mount the UIMP-3.1.1.0.xxx-Update-Media.iso file on your UIM/P 3.0.x or 3.1 appliance. 4. In a supported browser, type the following URL into the address bar: https://<hostname>:5480, where <hostname> is the fully qualified hostname of your UIM/P 3.0.x or 3.1 appliance. 5. Log in as the root user. 6. Click the Update tab. 7. Click the Check Updates button, to find updates on the mounted update media.
Note: If an update failure occurs, a message is recorded in the /opt/ionix-uim/logs/appliance-update.log file.
8. Click the Install Updates button. Installation can take up to 30 minutes to complete.
Note: A reboot may be required after updating the UIM/P appliance. To reboot, click the System tab at the top of the UIM/P appliance management webpage, then click Actions, and then Reboot. The reboot may take 10 minutes to complete.
32
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
Upgrading
33
Upgrading
34
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
6
Uninstalling
Uninstalling
35
Uninstalling
36
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide
A
Maintaining the Appliance
Licensing ............................................................................................. Backup and restore ............................................................................ Log files ............................................................................................... Reconfiguring the appliance ............................................................ Changing the default pull operation............................................... Database vacuum ............................................................................... Password management ..................................................................... Archiving data ....................................................................................
38 40 42 44 45 48 51 53
37
Licensing
When installing UIM/P, one or more license keys are required.
More devices are managed than are licensed. The time limit of the license key has expired.
38
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
39
40
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
To restore a UIM/P Data Image: 1. Run the restore.pl script located in /opt/ionix-uim/tools/ directory using the perl restore.pl command. 2. Pass the full path of the Data Image file to the script. For example, perl restore.pl /opt/ionix-uim/data-image/backupimage-UIM2.0.860.CS.Apr-14-2010-21.40.tgz
41
Log files
Table 5 on page 42 provides a brief description of the common log files for UIM/P.
Table 5
Log file locations and contents Location /opt/ionix-uim/logs/appliance-update.log /opt/ionix-uim/slm/logs/slm.log /opt/ionix-uim/jboss/server/vc-server/log/server.log /opt/ionix-uim/db/controldb/logs/server.postmaster /opt/ionix-uim/logs/autodisc.log /opt/ionix-uim/logs/commmgr.log /opt/ionix-uim/logs/configuration.log /opt/ionix-uim/logs/daemon.log /opt/ionix-uim/logs/backup.log /opt/ionix-uim/logs/migration.log /opt/ionix-uim/logs/restore.log /opt/ionix-uim/logs/smieventreceiver.log /opt/ionix-uim/logs/sonicmq.log /opt/ionix-uim/logs/ssxfrcgi.log /opt/ionix-uim/logs/syssyncm.log /opt/ionix-uim/logs/syssyncs.log /opt/ionix-uim/logs/sysmons.log /opt/ionix-uim/logs/sysmonm.log /opt/ionix-uim/logs/ucsmeventreceiver.log /opt/ionix-uim/logs/session.log /opt/ionix-uim/logs/healthcheck-0.log /opt/emc/ECIM/ECOM/log/EMCProvider-<date>.log Contents Appliance Update log Service Lifecycle Manager log JBoss server log PostgreSQL database log Autodiscovery log Device communication log Appliance reconfiguration log Controldaemon log Data backup log Data migration output log Data restore log SMI Provider events receiver log SonicMQ server log SysSync Transfer CGI log SysSync Master log SysSync Slave log System Monitor Slave log System Monitor Master log UCSM events receiver log Device session log Healthcheck service log EMC SMI Provider log
42
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
43
company name division email notification from-address SMTP server license key appliance fully qualified hostname appliance IP address
gateway IP address netmask DNS server(s) search domain(s) OS install VLAN IP address OS install VLAN netmask Timezone
To reconfigure the appliance using vSphere: 1. Open vSphere Client, and connect to the vCenter Server managing your VMware environment. 2. Right-click the appliance name and select Power Off. 3. Right-click the UIM/P appliance and select Edit Settings. 4. In the Virtual Machine Properties window, select the Options tab. 5. Select Properties. 6. Change the properties in the right-hand side of the window, then click OK. 7. Right-click the appliance name and select Power On.
44
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
To change the default pull operation to pull all known device information: 1. Log into the JMX Console. a. Open a browser and navigate to the following address: https://<applianceip>:8880/jmx-console b. Enter the username and password for the JMX Console. The default username is jmx-user and the default password is sysadmin. 2. Locate the vc --> VoyenceControlConfig section. 3. Locate the java.lang.String setConfigItem() method and provide the following values for the parameters: For parameter 1: config.server For parameter 2: Set the value to one of the following. com.powerup.configmgr.server.services.scheduler.pullafter push This is the default option for pull after a push. com.powerup.configmgr.server.services.scheduler.pullafter autodisc This is the default option for pull after an auto discovery. com.powerup.configmgr.server.services.scheduler.pullafter devservernotif This is the default option for pull after a cut-through. com.powerup.configmgr.server.services.scheduler.pullafter singledeviceautodisc This is the default option for pull after a single device auto discovery. com.powerup.configmgr.server.services.scheduler.pullafter remedy This is the default option for pull after a remedy.
45
For parameter 3: Set the value to one of the following. NONE indicates the default post operation will perform no pull. PULL_CONFIGS indicates the default post operation will perform a pull of the configuration files. PULL_ALL indicates the default post operation will perform a pull of all known device information. 4. Click Invoke.
Note: This will temporarily change the value. If JBoss is restarted, the value will be restored to its default.
5. To make the new value permanent: a. Click Back to MBean View at the top of the page, to return to the list of methods. b. Locate the java.lang.String saveAll() method. c. Click Invoke. 6. To verify your setting: a. Click Back to MBean View at the top of the page, to return to the list of methods. b. Locate the listAll() method. c. Click Invoke.
Note: For a change to pull after push or a change to pull after auto discovery, the Java Swing Client must be closed and reopened to view the changes to future jobs.
46
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
47
Database vacuum
To recover lost disk space created by updating or deleting rows in a database table, a database vacuum must be performed on a regular basis.
48
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
To run a database vacuum on all database tables: 1. Log into the appliance as a user with administrator privileges. 2. Log into the database as the pgdba user using the su pgdba command. 3. Type psql voyencedb voyence to navigate to the psql prompt, and press Enter. 4. Type service uim-service-wrapper stop to stop all of the services. 5. Type service controldb start to start the database services. 6. Run the database vacuum. Type vacuum full; to run the database vacuum, and press Enter.
Note: The database vacuum may take several minutes or hours depending on the size of your database.
49
50
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
Password management
Use the following sections when working with passwords in UIM/P.
To automatically generate random passwords for all non-interactive system accounts in UIM/P: 1. Log into the appliance as the root user. 2. Go to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter. 3. Type A to automatically generate new passwords for all accounts, and press Enter. To change a password for a single non-interactive system account in UIM/P: 1. Log into the appliance as the root user. 2. Navigate to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter.
51
3. Type C to change a single password, and then press Enter. A list of usernames appears. 4. Press the number corresponding to the user for which you want to change the password, and press Enter. 5. Type the new password, and press Enter. To synchronize all non-interactive system account passwords for the UIM/P appliance: 1. Log into the appliance as the root user. 2. Go to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter. 3. Type S to sync all passwords for the appliance, and press Enter.
52
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-
Archiving data
Use the following sections when archiving data in UIM/P.
Common Event Log (CEL) events Scheduler Jobs Device Configuration Revisions
Archive Moves selected data from the application schema to the archive schema, resulting in better application performance. Purge Removes selected data from the archive schema, resulting in smaller database backups. Restore Moves selected data from the archive schema back into the application schema. Prune Removes selected data directly from the application schema, resulting in better application preformance and smaller database backups.
Note: Purging and pruning the database is useful only to improve performance and to shrink the size of the database backups. Purging and pruning the database does not decrease the size of the database. Only running a full database vacuum will decrease the database size. See Database vacuum on page 48 for more information.
53
Usage The archive utility is located in the /opt/ionix-uim/tools/ directory. To run the utility: 1. Open a command prompt and go to the /opt/ionix-uim/tools/ directory using the cd /opt/ionix-uim/tools command. 2. Run the perl archive-utility.pl script by using the perl archive-utility.pl <command> <type> <arguments> command, where: <command> is archive, purge, restore, or prune <type> is events, jobs, or revisions <arguments> contains the required arguments defined below Arguments The following are the required arguments for the <ARGUMENTS> value, when using the perl archive-utility.pl script.
The events type requires two arguments: Type of event (device, system, security, or all) Number of days to retain (for example, 1, 2, 3)
The jobs type requires one argument: Number of days to retain (for example, 1, 2, 3) The revisions type requires one argument: Number of revisions to retain per device (for example 1, 2, 3)
Note: Depending on the time of day the script is run, the events and jobs arguments may return different values.
Examples The following examples show the usage for the perl archive-utility.pl script.
perl archive-utility.pl archive events all 14 perl archive-utility.pl archive jobs 30 perl archive-utility.pl archive revisions 5 perl archive-utility.pl purge jobs 90 perl archive-utility.pl purge events system 30 perl archive-utility.pl restore jobs 45
54
EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-