Sie sind auf Seite 1von 54

EMC Ionix Unified Infrastructure Manager/Provisioning

Version 3.1 Service Pack 1

Software Installation and Configuration Guide

EMC Corporation Corporate Headquarters: Hopkinton, MA 01748-9103


1-508-435-1000 www.EMC.com

Copyright 2010 - 2012 EMC Corporation. All rights reserved. Published May, 2012 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date regulatory document for your product line, go to the Technical Documentation and Advisories section on EMC Powerlink. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners.

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Revision History

Revision History
Table 1

Table 1 on page 3 lists the revision history of this document.


Revision history Revision Date May 21, 2012 Description of change Initial GA release.

Revision History

Revision History

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

1
Overview

This chapter presents these topics:


UIM/P installation and configuration tasks overview.............................................. 6 Gathering application information............................................................................... 7 Information needed during installation ...................................................................... 8

Overview

Overview

UIM/P installation and configuration tasks overview


Below is the recommended sequence to follow when installing EMC Ionix Unified Infrastructure Manager/Provisioning (UIM/P). 1. Review the minimum system requirements in the EMC Ionix Unified Infrastructure Manager/Provisioning Support Matrix. 2. Follow the steps in the EMC Ionix Unified Infrastructure Manager/Provisioning Configuration Requirements for Vblock Platforms and Infrastructure Services Guide before starting the steps in this guide. 3. Review Information needed during installation on page 8 to ensure that you have all the items needed to complete the UIM/P installation. 4. Install UIM/P by using the steps found in Chapter 2, Installation. 5. Configure UIM/P by using the steps found in Chapter 3, Configuring.

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Overview

Gathering application information


The user roles for installing and configuring UIM/P are:

Vblock installers Builds Vblocks from the infrastructure components, such as UCS and CLARiiON. This user also configures the switches required for Vblocks to function. Application administrators Installs and configures UIM/P, and sets up other users.

Note: Application administrators might not use the application after the initial setup.

Infrastructure administrators Domain experts and infrastructure service manager, who: Creates Vblock profiles Performs Vblock discovery Creates the blade, storage, and logical identity pools Defines the grades Configures service offerings for users to create and provision the services It is possible to have four different Infrastructure Administrators: UCS (Server) administrator, Storage administrator, Network administrator, and Infrastructure service administrator, or a combination of the four.

Table 2 on page 7 can be used to track application modeling team information.


Table 2

Application Deployment Team Summary Role Vblock installer Application administrator Infrastructure administrator Name Email Phone

Appliance Information Summary


Table 3 on page 7 can be used to track appliance information.
Table 3

Appliance information summary Hostname IP address Platform Owner Support

Gathering application information

Overview

Information needed during installation


Before installing UIM/P, gather the following information: 1. E-mail address where the job notifications are to be sent:______________________ 2. License keys for UIM/P:__________________________________________________ 3. The fully qualified domain name (FQDN) or IP address for the outbound SMTP mail server:____________________________________________________________ 4. The fully qualified hostname of the appliance: _____________________________ 5. The VLAN netmask assigned to the operating system installation VLAN (UimOsInstallVlan):_____________________________________________________ 6. The VLAN IP address assigned to the operating system installation VLAN (UimOsInstallVlan):_____________________________________________________ 7. The VLAN ID assigned to the operating system installation VLAN (UimOsInstallVlan):_____________________________________________________ 8. The management VLAN name and VLAN ID used for connectivity between the UIM/P application and the Vblock devices, UIM/P clients, and other application services:________________________________________________________________ 9. The IP address for the network interface used for ESX or ESXi installations on blades:_________________________________________________________________ 10. The IP address for the network interface used for management between the UIM/P appliance and UIM/P clients:______________________________________ 11. The netmask for the UIM/P appliance: _____________________________________ 12. The gateway IP address for the UIM/P appliance: ___________________________ 13. The files that are included with the UIM/P distribution: a. UIMP_OVF10.ovf b. UIMP_OVF10.mf c. system.vmdk d. UIMP-3.1.0.0.xxx-Update-Media.iso

Obtaining deployment files


The UIM/P deployment files are obtained by downloading the files from:

Powerlink or another location specified by EMC the DVD included in the UIM/P physical kit

The deployment files for the UIM/P appliance include an OVF file (Open Virtualization Format) file and its related VMDK (Virtual Machine Disk) file(s). Due to Powerlink file size limitations and potential issues when copying large files to a Windows machine, the VMDK file is split into several separate files on Powerlink. The OVF file is included in the first VMDK file. Place these files in a location accessible to your vSphere Client, such as a local file share or URL.

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

2
Installing UIM/P

This chapter presents the following topic:


Installing UIM/P........................................................................................................... Starting the appliance ................................................................................................... Verifying the installation .............................................................................................. Services used by Unified Infrastructure Manager/Provisioning...........................

10 12 13 14

Installing UIM/P

Installing UIM/P

Installing UIM/P
To install the UIM/P appliance: 1. Open vSphere Client, and connect to the vCenter Server managing your VMware environment. 2. From the File menu, select Deploy OVF Template. 3. In the Source step, browse to the location of the UIMP_OVF10.ovf file or type in the URL. 4. Click Next.

IMPORTANT To minimize installation time, install the UIM/P appliance from within the same local area network (LAN) shared by your VMware ESX or ESXi servers. Installation time should take approximately 5 to 15 minutes, while installation across a WAN could take 2 hours or more. 5. In the OVF Template Details step, review the details of the loaded OVF file, and click Next. 6. In the End User License Agreement step, review the End User License Agreement. Click Accept, and then Next to continue. 7. In the Name and Location step: a. Type a Name for the UIM/P appliance. For example, UIMP. b. Select a unique Inventory Location for the UIM/P appliance within your VMware environment. c. Click Next. 8. In the Host/Cluster step: a. Select a host or cluster where the UIM/P appliance will run. b. Click Next. 9. In the Resource Pool step: a. Select a resource pool (associated with the cluster/host) where the UIM/P appliance will run. This step may not be necessary if a resource pool has not been predefined. b. Click Next. 10. In the Datastore step: a. Select a datastore to hold the appliance images for UIM/P. b. Click Next. 11. In the Disk Format step: a. Select the storage space provisioning method: Thin provisioned format on demand expansion of available storage, used for newer datastore file systems Thick provisioned format appliance storage that is allocated immediately and reserved as a block b. Click Next.

10

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Installing UIM/P

12. In the Network Mapping step: a. For Network 1, select a destination network for the management VLAN used for console access to UIM/P as well as Vblock management communication. b. For Network 2, select a destination network for the private VLAN used for the operating system installation VLAN (UimOsInstallVlan) on Vblock servers. c. Click Next. 13. In the Properties step: a. Set Appliance IP Address to a static IP address for the UIM/P appliance. For example, 192.168.1.25. b. Set Netmask to the netmask applied to IP addresses in the network. For example, 255.255.255.0. c. Set Gateway IP Address to the gateway IP address for hosts in the network. For example, 192.168.1.1. d. Set OS Install VLAN IP Address to the destination network IP address for the VLAN ID assigned to the operating system installation VLAN (UimOsInstallVlan). For example, 10.0.0.1. e. Set OS Install VLAN Netmask to the destination netmask IP address for the VLAN ID assigned to the operating system installation VLAN (UimOsInstallVlan). For example, 255.255.255.0. f. Check the box for OS Install VLAN DHCP Server to enable the embedded DHCP server on the OS Install VLAN network interface.
Note: The OS Install VLAN DHCP Server or an externally configured DHCP server is required to install ESX or ESXi operating systems on the servers during service provisioning. Check this box to enabled the DHCP server installed with UIM/P, or refer toConfiguring a third-party DHCP server on page 16 to use a third party DHCP server for ESX or ESXi installation.

g. Set Appliance Fully Qualified Hostname to the fully qualified host name of the appliance. For example, uimp.acme.com. h. Set License Key to the license key provided to you for UIM/P.
Note: The license key entered for step h must be entered as one line with no spaces or carriage returns. If upgrading from a previous release, you must convert your license key to the new format using the steps found in Handling an expired license key on page 38.

i. Set the Company Name. j. Set the Division. k. Set Email Notification From-Address to the email address where the job notifications will be sent from. l. Set SMTP Server to a static IP address for the UIM/P appliance. For example, 192.168.1.51. m. Set DNS Server(s) to a comma-separated list of domain name servers (DNS) available in the network. For example, 192.168.1.51,192.168.1.52.
Note: You must independently register the hostname for your appliance with your domain name servers (DNS). UIM/P does not validate hostnames. Hostnames not registered with the corresponding DNS may prevent normal operation of UIM/P.

Installing UIM/P

11

Installing UIM/P

n. (Optional) Set Search Domain(s) to a space-separated list of domains used in the network. For example, acme.com mdl.acme.com. o. Set Create a password for the root Linux user on the appliance to the password for the root user of the UIM/P appliance. This password is used to log into the console of the UIM/P appliance in the vSphere Client, or to SSH into the appliance. p. Set Timezone to the timezone of the UIM/P appliance. For example, US/Eastern. 14. In the Ready to Complete step, review the list of properties, and click Finish. 15. After installation is complete, click Close.

Starting the appliance


To start UIM/P after installation: 1. In the vSphere Client, right-click the appliance name. For example, UIMP. 2. Select Power On. The status displays in the Recent Tasks bar.
Note: UIM/P can take 5 to 10 minutes to start the first time.

Logging into the UIM/P appliance


Note: If acessing the UIM/P appliance for the first time, you must first import the EMC CA certificate using the steps found in Importing the EMC CA certificate on page 19.

To login to UIM/P: 1. Open a browser. 2. Navigate to https://<Hostname>/, where <Hostname> is the fully qualified hostname of the UIM/P appliance. The UIM/P login screen is displayed. 3. Enter your username and password. The UIM/P dashboard is displayed.
Note: The default username for UIM/P is sysadmin, and the default password is sysadmin.

12

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Installing UIM/P

Verifying the installation


To verify the installation of UIM/P: 1. In the vSphere Client, navigate to the VMs and Templates view. 2. Expand the tree in the left-hand panel and find the resource pool you selected for the UIM/P appliance. The new appliance is listed under the resource pool. For example, UIMP. 3. Verify the Unified Infrastructure Manager/Provisioning services are running as described in Verifying the UIM/P services are running on page 13. 4. Validate the Vblock configurations as described in Validate Vblock configuration on page 13.

Verifying the UIM/P services are running


To verify the UIM/P services are running properly: 1. Run the service uim-service-wrapper status command on the UIM/P appliance. A uim-service-wrapper service is running message displays. 2. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. The services are running properly if the UIM/P dashboard is displayed.

Validate Vblock configuration


Note: Complete details for adding, discovering, and validating a Vblock are described in the EMC Ionix Unified Infrastructure Manager/Provisioning Configuration Requirements for Vblock Platforms and Infrastructure Services Guide.

To ensure the Vblock was configured correctly during deployment: 1. From the UIM/P console, Administration view, Vblocks tab, add and discover a Vblock. 2. Once successfully discovered, select the Vblock from the list and click Validate setup. 3. Check the alert icon in the first column of the Vblock table to verify the Vblock was successfully configured. If a warning or failed alert is displayed, click the icon to open the Setup Validation dialog box to view the specific details. 4. Repeat step 1 through step 3 for each Vblock.

Verifying the installation

13

Installing UIM/P

Services used by Unified Infrastructure Manager/Provisioning


UIM/P uses the services described in Table 4 on page 14.
Table 4

UIM/P services Service uim-service-wrapper uim-database uim-sonicmq apache2 uim-dsa uim-cc-jboss uim-slm-tomcat uim-device-services uim-watchdog uim-smi-s-provider emc-homebase-serverdb emc-homebase-server uim-configuration uim-healthcheck Description UIM/P wrapper script PostgreSQL database server SonicMQ JMS server Apache HTTP web server UIM/P device services adaptor JBoss application server Apache Tomcat server UIM/P device communication server UIM/P watchdog service EMC SMI Provider EMC HomeBase server database EMC HomeBase server UIM/P virtual appliance configuration service UIM/P Health Check service Note: The healthcheck service is turned off by default.

Using the uim-service-wrapper service


The uim-service-wrapper service is a wrapper script that starts, stops, or restarts all the UIM/P services in the proper order. The running services can also be viewed by using the uim-service-wrapper script.

To view the active services used by UIM/P, use the service uim-service-wrapper status command. To start the services used by UIM/P, use the service uim-service-wrapper start command. To stop the services used by UIM/P, use the service uim-service-wrapper stop command. To restart the services used by UIM/P, use the service uim-service-wrapper restart command.

14

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

3
Configuring

This chapter presents the following topics:


Post installation configuration steps .......................................................................... 16 Configuring consoles .................................................................................................... 18 Configuring users, groups, and permissions ............................................................ 24

Configuring

15

Configuring

Post installation configuration steps


After installing UIM/P, you must perform the following initial configuration tasks to prepare the application for use.

Enabling JBoss JMX Console access


By default, the JBoss JMX Console is configured with a randomly generated password. The password must be set using the /opt/ionix-uim/tools/password-change.pl utility. To enable access: 1. Log into the appliance as the root user. 2. Change directories to /opt/ionix-uim/tools. 3. Run the password-change.pl utility by using the perl password-change.pl command. 4. To change a single account password, press c then Enter. A list of available accounts is generated by the utility.
Note: To change the master administrator jmx-user password, see Resetting the system administrator credentials on page 51.

5. Type the number next to the jmx-user account and press Enter. 6. Type a new password for the account. The JBoss JMX Console is now enabled and may be accessed by using a browser to navigate to https://<IP Address>:8880/jmx-console, where <IP Address> is the IP address or hostname of the UIM/P appliance. At the login screen, type the newly created username and password.

Prepare the UIM/P appliance for operating system (ESX or ESXi) installation during service provisioning
Importing the VMware ESX/ESXi media To configure the VMware ESX/ESXi media so it is available to UIM/P: 1. Download the VMware ESX/ESXi media to the /tmp directory. 2. To load the media onto the appliance, run the uim_loadesx.sh script, located in the /opt/ionix-uim/tools/ directory. For example, /opt/ionix-uim/tools/uim_loadesx.sh -i /tmp/ESX-4.0.0-update1-208167.iso. 3. (Optional) When the load is complete, delete the VMware ESX/ESXi media from the appliance. To delete the VMware ESX/ESXi media from the appliance, run the uim_remove_esx.sh script, located in the the /opt/ionix-uim/tools/ directory. For example, /opt/ionix-uim/tools ./uim_remove_esx.sh. Configuring a third-party DHCP server UIM/P requires the use of a DHCP server to perform operating system installations as part of its service provisioning process. By default, the UIM/P installation process configures the DHCP server included with RedHat Enterprise Linux to perform this function. Optionally, an administrator can choose to disable the default DHCP server and enable a third-party DHCP server to use during installation.
16

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

Note: The DHCP server configured during installation is setup to offer leases exclusively on the private OS Installation VLAN so that it will not interfere with any pre-existing DHCP servers already running in your environment.

Disabling the DHCP service If the DHCP Service was not disabled during the installation of Unified Infrastructure Manager, it must be disabled before configuring a third-party DHCP server. To disable the DHCP Service: 1. Open a command prompt. 2. Type the following commands: service dhcpd stop insserv -r dhcpd Configuring a DHCP service The following configuration options must be set within the third-party DHCP server.

Boot filename: /pxelinux.0 Boot server: <IP address>, where <IP address> is the IP address for the UIM/P server blade operating system install interface. The third-party DHCP server must be set to offer leases on the UimOsInstallVlan.

Consult your third-party DHCP server documentation to set these parameters.

Setting up the profile


When completing system administrative tasks at the command line interface, you must first source the profile to set up your environment. The command to source the profile is: . /etc/voyence.conf This command expands the required environmental variable.

Post installation configuration steps

17

Configuring

Configuring consoles
Verifying Unified Infrastructure Manager/Provisioning is running
To verify UIM/P is running: 1. Open a browser. 2. Navigate to https://<IP Address>/, where <IP Address> is the IP address or hostname of the UIM/P appliance. The UIM/P login screen is displayed. 3. Enter your username and password. The UIM/P dashboard is displayed. 4. Click on Administration. The UIM/P is running properly if no errors are displayed.

Configuring Windows Vista and Windows 7 to allow cut-throughs


To allow Windows Vista and Windows 7 to accept Telnet style links and forward those requests to putty.exe: 1. Ensure there is 512 MB of memory free for the UIM/P console on Windows Vista or Windows 7. 2. Download putty.exe, and place it in C:\Windows\system32 for Windows Vista, or C:\Windows\SysWOW64 for Windows 7, or another directory in the %PATH% environment variable. 3. Download the win-telnet-fix.reg file from http://<UIMP_appliance_IP_address>/win-telnet-fix.reg, where <UIMP_appliance_IP_address> is the IP address of the UIM/P appliance. 4. Double-click the win-telnet-fix.reg file. When asked to merge into the Windows Registry, select Yes.

Enabling SAML authentication


If enabled, you can log into UIM/P by using Security Assertion Markup Language (SAML) authentication. To enable SAML authentication in UIM/P: 1. Log into the appliance as the root user. 2. Navigate to the /opt/ionix-uim/tools directory. 3. Type perl enableSaml.pl to run the enable SAML utility, and press Enter.

18

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

Certificates
Use the following sections when working with certificates in UIM/P. Importing the EMC CA certificate The UIM/P console uses a security certificate that is not trusted by default when using Internet Explorer or Mozilla Firefox. Before accessing UIM/P for the first time, the EMC Certificate Authority certificate must be imported into your browser as a trusted CA certificate. Importing the EMC CA certificate into Internet Explorer 1. Type the following URL into the Internet Explorer address bar: https://<hostname>/ca.crt, where <hostname> is the fully qualified hostname of the UIM/P appliance. A certificate error appears. 2. Click Continue to this website. 3. Click Save to save the certificate. 4. Click Open to open the ca.cer file. The Certificate dialog window displays. 5. Click Install Certificate. The Certificate Import Wizard opens. 6. Click Next. The certificate store wizard appears. 7. Select Automatically, and click Next. 8. Select Place all certificates in the following store, and click Browse. 9. Select Trusted Root Certificate Authorities, and click OK. 10. Click Next to continue. 11. Click Finish at the summary screen. 12. If a security warning appears, click Yes to continue with the installation of the certificate. 13. Click OK at the import successful window. 14. Close and reopen Internet Explorer for the certificate changes to take effect. Importing the EMC CA certificate into Mozilla Firefox 1. Enter the following URL into the Mozilla Firefox address bar: https://<hostname>/ca.crt, Where <hostname> is the fully qualified hostname of the UIM/P appliance. A certificate error is displayed. 2. Select I Understand the Risks, and click Add Exception. The Add Security Exception window appears. 3. Click Get Certificate. 4. Click Confirm Security Exception. 5. Depending on the version of Firefox, either a Downloading Certificate window, or an Opening ca.crt window is displayed.

If a Downloading Certificate window displays, skip to Step 12 on page 20. If a Opening ca.crt window is displayed, continue to Step 6 on page 19.

6. Save the ca.crt file to your local computer. Note the location where the file is saved. 7. Do one of the following:

Configuring consoles

19

Configuring

For Windows consoles, select Tools >Options from the Firefox menus. For Linux consoles, select Edit >Preferences from the Firefox menus.

8. Click Advanced. 9. Click View Certificates. 10. Click Import. 11. Select the ca.crt file that you downloaded in Step 5 on page 19. The Downloading Certificate window displays. 12. Select the Trust this CA to identify web sites check box, and click OK. Enabling HTTPS communication between Unified Computer System Manager and UIM/P To enable communication between Unified Computer System Manager (UCS Manager) and UIM/P: 1. Export the UCS Manager certificate. 2. Install the UCS Manager certificate in UIM/P. To export the UCS Manager certificate using Mozilla Firefox 1. Type the URL to access UCS Manager: https://<ucsm-ipaddress>, where <ucsm-ipaddress> is the IP address of the server on which UCS Manager is running. 2. If this is the first time you are running the UCS Manager, accept the UCS Manager certificate. 3. In a browser running the UCS Manager, open the Tools menu and select Options > Advanced > Encryption > View Certificate >Servers.
Note: If the Certification Manager is not available, install Cert Viewer Plus through Mozilla Firefox Add-ons menu.

4. Select the UCS Manager server from the list of certificates, and click Export. 5. Keep the defaults, or select a new path and filename for the certificate file and select X.509 Certificate PEM in the Save as type drop-down list and click Save. 6. Ensure that the extension for the saved file is .crt. for example, UIM_HOME\temp\ucsnamecertification.crt 7. Continue to install the certificate in UIM/P as described in To install the certificate in Unified Infrastructure Manager/Provisioning on page 21. To export the UCS Manager certificate using Microsoft Internet Explorer 1. Enter the URL to access UCS Manager: https://<ucsm-ipaddress>, where <ucsm-ipaddress> is the IP address of the server on which UCS Manager is running. 2. If this is the first time you are running the UCS Manager, accept the UCS Manager certificate. 3. Click on the Certificate Warning button next to the address bar. 4. Click View Certificates. 5. Click Install Certificate, and Next. 6. Click the Place all certificates in the following store radio button, and click Browse.

20

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

7. Click Trusted Publishers, Ok, Next, and Finish. 8. In the browser running UCS Manager select Tools > Internet Options > Content. 9. Click Publishers and select Trusted Publishers. 10. Select the UCS Manager server from the list of certificates, and click Export. 11. Select Next in the Certificate Export Wizard. 12. Select the DER encoded binary X.509 (.CER) format, and click Next. 13. Enter a path and filename on your local machine for the exported certificate file. 14. Ensure the settings are correct, and click Finish. The file is exported as a CER file, for example, UCS_HOME/temp/ucsnamecertification.cer 15. Transfer the file to the UIM/P appliance. 16. To convert the CER file to a CRT file, run the following command on the file you copied to the UIM/P appliance in step 15: openssl x509 -inform DER -in <filename>.cer -out <filename>.crt 17. Continue to install the certificate in UIM/P as in To install the certificate in Unified Infrastructure Manager/Provisioning on page 21. To install the certificate in Unified Infrastructure Manager/Provisioning 1. Depending on your internet browser, export the UCS certificate file as described. 2. Copy the exported certificate (.crt file) to the /opt/ionix-uim/conf/CA directory on the UIM/P appliance. 3. From the command prompt on the UIM/P appliance, change directories to /opt/ionix-uim/conf/CA. 4. Run the following Perl script to install the UCS Manager certificate in UIM/P by typing: ./cert_hash.pl.

Configuring consoles

21

Configuring

Disabling the certificate hostname validation If you are accessing the UIM/P appliance over HTTPS with a URL that contains something other than the actual appliance hostname, you must disable the certificate hostname validation in Java on each Windows console. The certificate is generated at install time with the hostname, as defined on the UIM/P appliance. To disable the certificate hostname validation in Java: 1. Open the Control Panel window. 2. Double-click the Java icon. 3. Click the Advanced tab at the top of the window. 4. Click the + icon next to Security to expand the security drop-down list. 5. Clear the Warn if site certificate does not match hostname check box. 6. Click OK. SSL Configuration CA-signed certificates UIM/P allows you to use certificates that are signed by a Certificate Authority (CA). An automated utility is available for generating a private key and certificate signing request (CSR), as well as installing and configuring the CA-signed certificate into Tomcat and Apache. To enable the CA-signed SSL certificate in UIM/P: 1. Log into the appliance as the root user. If you have already received the CA-signed certificate, skip to step 3. 2. Generate a Private Key and Certificate Signing Request (CSR). a. Type cd /opt/ionix-uim/tools/ssl, and then press Enter. b. Type the following command, and press Enter: perl ssl-utility.pl keygen c. Follow the screen prompts. You are asked for general security information about the location of the appliance, and the hostname; such as country, state, locality, and organization name. Any field you do not complete can be left blank, or you can enter a period (.) into that field. The utility generates the following files: server.key which is the private key server.csr which is the certificate signing request (CSR) 3. Send the CSR file to your preferred Certificate Authority (CA). The CA then returns the signed certificate. 4. Save this file to /opt/ionix-uim/tools/ssl.

22

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

Installing the private key and certificate To install the private key and certificate in UIM/P: 1. Log into the appliance as the root user. 2. Type cd /opt/ionix-uim/tools/ssl, and press Enter: 3. Type the following command and press Enter: perl ssl-utility.pl install <private key file> <certificate file> For example: perl ssl-utility.pl install appliance.key certnew.cer
Note: Running the perl ssl-utility.pl -keygen script also creates a backup of the private key file, certificate file, and the keystore files for Jboss, Tomcat, and SLM. The files are placed in the /opt/ionix-uim/backup directory.

The installer prompts you to confirm installation of the private key and certificate. 4. Type Y and press Enter. You are prompted to enter a password to protect the private key and Java keystore. This password must be at least six characters. 5. Type a password and press Enter. After the utility completes, all the product services are restarted, and a message is displayed indicating the SSL configuration is complete.

Configuring consoles

23

Configuring

Configuring users, groups, and permissions


The UIM/P Configuration Center is a tool provided with UIM/P for creating and managing UIM/P users and user privileges, and also provides domain experts access to the raw configurations of infrastructure devices discovered with Vblock platforms.
Note: Refer to the EMC Ionix Unified Infrastructure Manager/Provisioning Configuration Requirements for Vblock Platforms and Infrastructure Services Guide for more information about using the Configuration Center to access the raw configurations of infrastructure devices discovered with Vblock platforms.

Configure the system administrator e-mail


When installing UIM/P, e-mail must be allowed to relay through the internal e-mail servers from the sysadmin users account. To configure the sysadmin users e-mail address for UIM/P: 1. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. 2. Click the arrow next to the icon in the right corner of the title bar, and select Configuration Center to access the interface. 3. Select System Administration from the Tools menu. 4. Select System Administration > Global > User Management > System Users from the navigation pane. 5. Select the sysadmin user, and click Edit . 6. Type a valid e-mail address in the E-mail field, and click OK. The e-mail address must be valid for your domain. For example, sysadmin@mycompany.com. 7. Click Close to exit the System Administration window.

Create users and groups


The default username and password provided for an initial login has full privileges by default. All other users must be created for access to the application. When entered into the system and assigned privileges, the user is given access to specific networks and devices. When a user is created, the user is either assigned permissions as a single user, or included in either the UIM-ServiceAdmin or UIM-SystemAdmin group.

User A User can view data information in UIM/P, and perform basic operations. A User cannot perform service lifecycle operations such as provisioning, activation, deactivation, decommissioning, blade releases, and cannot launch the Unified Infrastructure Manager Configuration Center. UIM-ServiceAdmin A Service Administrator has the same permissions as a User plus the ability to perform lifecycle operations. A Service Administrator cannot launch the UIM/P Configuration Center. UIM-SystemAdmin A System Administrator has the same permissions as a Service Administrator but can also launch the Unified Infrastructure Manager Configuration Center.

24

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

Creating users System users are authorized to access the application for the purpose of network configuration and maintenance. To create users: 1. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. 2. Click the arrow next to the icon in the right corner of the title bar, and select Configuration Center to access the interface. 3. From the menu bar access Tools > System Administration. 4. In the navigation pane, expand Global > User Management, and click System Users. 5. Click Add, which is displayed in the bottom right side of the window. 6. Type the user ID and e-mail. 7. (Optional) Type the users first name, last name, and phone number. 8. (Optional) Type the users authentication method: External TACACS+ server This is the default. Users are validated against the TACACS+ server. The user is entered into the TACACS+ server before attempting to log into the application. Native Registry The user's access is validated by the native registry. This authentication requires a password be created for the user. The combination of the user ID and the password provides access to the application. RADIUS A protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. LDAP Server A protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. LDAPS Server A secure protocol for carrying authentication, authorization, and configuration information between a network access server which authenticates its links, and a shared authentication server. 9. If authentication is performed using Native Registry: a. Type a unique password for the user. b. Confirm the password by retyping it in the Confirm Password field, and click Apply. 10. To create more users, click Apply and repeat step 6- step b on page 25. Otherwise, click OK. 11. (Optional) After the users are created, add the user to a group or assign permissions to the user. If you add a user to a group, by default, the user inherits the permissions assigned to the group.

Configuring users, groups, and permissions

25

Configuring

Creating groups Groups are containers for creating relationships between users and other groups. For example, system administrators can create groups for users that have the same permissions. Users, and groups within a group, inherit the permissions of the containing group. To create a group: 1. From the menu bar, select Tools > System Administration. 2. In the navigation pane, select Global > User Management > System Groups. 3. Click Add in the Add Group dialog box. 4. Type a Group Name. 5. Optionally, type a description of the group. 6. Select the members to add to the group from the list of Available Members.
Note: If no members are available, the users or groups may not have been created yet. After clicking OK, the group is saved, and can be edited later to include members created after the group.

7. Click Add to add the members to the group, or Add All to add all the users to the group. 8. Click OK. 9. Continue to assign permissions to the group.

Assigning system permissions


System permissions define the actions that a user or group can perform at the system level. System level permissions are independent of the networks or workspaces associated with a user or group. For example, by granting a user or group Job Approve permissions at the system level, the user or group can approve jobs submitted for any network within the application. To assign system permissions: 1. From the menu bar, select Tools > System Administration. 2. In the navigation pane, select Global > User Management > System Users or System Groups. 3. Select a user or group from the right-hand pane, and click Permissions. 4. Click System Permissions from the Access Control Administration window. 5. Select the permissions to grant to the user or the group.
Note: Selecting System Administrator permissions, grants the user or group all system permissions and all permissions associated with Network, Workspace, and Device. The EMC Ionix Unified Infrastructure Manager/Provisioning Configuration Center Online User Guide contains more information about permissions.

6. When you have finished selecting the permissions, click Apply and Close.

26

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Configuring

Disabling remote root user login


By default, the root user can log into the UIM/P appliance remotely using SSH. To disable remote root access, follow these steps. 1. Log into the UIM/P appliance through vSphere as the root user. 2. Open the /etc/ssh/sshd_config file for editing. 3. Add the following line to the bottom of the file:
PermitRootLogin no

4. Save and close the /etc/ssh/sshd_config file. 5. Restart the SSHD service using the following command:
service sshd restart

Configuring users, groups, and permissions

27

Configuring

28

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

4
Migrating

This chapter presents the following topics:

Migrating Unified Infrastructure Manager/Provisioning ...................................... 30

Migrating

29

Migrating

Migrating Unified Infrastructure Manager/Provisioning


Data migration is done automatically when upgrading from Unified Infrastructure Manager/Provisioning (UIM/P) 3.0.x or 3.1 to Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1.
Note: UIM/P 3.1 Service Pack 1 only supports a migration path from UIM/P 3.0.x or 3.1. If you have an earlier version than UIM/P 3.0 you must first upgrade to UIM/P 3.0.

30

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

5
Upgrading

This chapter presents the following topics:

Upgrading Unified Infrastructure Manager/Provisioning .................................... 32

Upgrading

31

Upgrading

Upgrading Unified Infrastructure Manager/Provisioning


This section describes how to upgrade Unified Infrastructure Manager/Provisioning 3.0.x or 3.1 to Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1. If you have an earlier version than UIM/P 3.0 you must first upgrade to UIM/P 3.0.
Note: This procedure must be completed for each UIM/P appliance.

1. Take a snapshot of the UIM/P appliance using the vSphere Client: a. Open the vSphere Client, and connect to the vCenter Server managing your appliance. b. Right-click the UIM/P appliance, and select Snapshot > Take Snapshot.

IMPORTANT A snapshot of the UIM/P appliance is important in order to prevent loss of data and allow proper rollback if an error occurs during the upgrade. 2. Download the UIMP-3.1.1.0.xxx-Update-Media.iso file to the server where you are running the vSphere Client. 3. Use vSphere Client to mount the UIMP-3.1.1.0.xxx-Update-Media.iso file on your UIM/P 3.0.x or 3.1 appliance. 4. In a supported browser, type the following URL into the address bar: https://<hostname>:5480, where <hostname> is the fully qualified hostname of your UIM/P 3.0.x or 3.1 appliance. 5. Log in as the root user. 6. Click the Update tab. 7. Click the Check Updates button, to find updates on the mounted update media.
Note: If an update failure occurs, a message is recorded in the /opt/ionix-uim/logs/appliance-update.log file.

8. Click the Install Updates button. Installation can take up to 30 minutes to complete.
Note: A reboot may be required after updating the UIM/P appliance. To reboot, click the System tab at the top of the UIM/P appliance management webpage, then click Actions, and then Reboot. The reboot may take 10 minutes to complete.

9. Log out of the console by selecting Logout user root.


Note: To ensure your browser reloads any updated flexui files, restart the browser and clear the browser cache before accessing the UIM/P console.

32

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

Upgrading

Post upgrade configuration


After upgrading, ensure the following configuration steps are completed. Enable vCloud Director After migration, synchronization with vCloud Director is not re-enabled by default. vCloud Director must be enabled on the services you want to continue syncing with vCloud.

Upgrading Unified Infrastructure Manager/Provisioning

33

Upgrading

34

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

6
Uninstalling

This chapter presents the following topic:

Uninstalling Unified Infrastructure Manager/Provisioning .................................. 36

Uninstalling

35

Uninstalling

Uninstalling Unified Infrastructure Manager/Provisioning


To uninstall the UIM/P appliance: 1. Open a vSphere Client, and connect to the vCenter server managing your appliance. 2. Right-click the UIM/P appliance in the left pane of the Inventory > VMs and Templates window of the vSphere Client, and select Power > Power Off. 3. After the UIM/P appliance is powered off, right-click the appliance and select Delete from Disk.

36

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Configuration Guide

A
Maintaining the Appliance

This appendix presents the following topics:


Licensing ............................................................................................. Backup and restore ............................................................................ Log files ............................................................................................... Reconfiguring the appliance ............................................................ Changing the default pull operation............................................... Database vacuum ............................................................................... Password management ..................................................................... Archiving data ....................................................................................

38 40 42 44 45 48 51 53

Maintaining the Appliance

37

Maintaining the Appliance

Licensing
When installing UIM/P, one or more license keys are required.

Installing a license key


The UIM/P license key is initially installed during the installation process. You cannot install UIM/P without a valid license key. When working with license key files, the formatting of the key is important. If using copy and paste to enter license keys, ensure no erroneous characters or extra lines are contained in the pasted license key.

Reviewing license details


To review your license details: 1. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. 2. Click the arrow next to the icon in the right-hand corner of the title bar, and select Configuration Center to access the interface. 3. Select About from the Help menu.

Installing a new license key


To install a new license key after a license key has expired or become invalid, follow the steps in Reconfiguring the appliance on page 44.

Handling an expired license key


A warning to lock all accounts or disable the product may appear if:

More devices are managed than are licensed. The time limit of the license key has expired.

If a warning appears, go to http://Powerlink.EMC.com, and select Support.

38

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Product serial number


Each key has a product serial number associated with it. This serial number appears in the UIM/P Configuration Center, and can be used to reference your particular license. You might be requested to provide your serial number when opening an issue with UIM/P Support. To view your product serial number: 1. Log into the UIM/P appliance using the steps found in Logging into the UIM/P appliance on page 12. 2. Click the arrow next to the icon in the right-hand corner of the title bar, and select Configuration Center to access the interface. 3. Select About from the Help menu.

Maintaining the Appliance

39

Maintaining the Appliance

Backup and restore


This section describes the backup and restore processes.
Note: A backup rotation is set up automatically when UIM/P is installed.

Creating a data image


A Data Image is a compressed, time-stamped archive of both the datafiles and database. To create a UIM/P Data Image: 1. Run the backup.pl script located in the /opt/ionix-uim/tools directory by using the perl backup.pl command. 2. The backup script creates a backup-image-VERSION.AS|DS|CS.DATE.tgz file in /opt/ionix-uim/data-image/.

40

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Restoring a data image


Note: The version and configuration of the UIM/P products that are installed when a data image is created must match the version and configuration of those that are installed when the data image is restored.

To restore a UIM/P Data Image: 1. Run the restore.pl script located in /opt/ionix-uim/tools/ directory using the perl restore.pl command. 2. Pass the full path of the Data Image file to the script. For example, perl restore.pl /opt/ionix-uim/data-image/backupimage-UIM2.0.860.CS.Apr-14-2010-21.40.tgz

Maintaining the Appliance

41

Maintaining the Appliance

Log files
Table 5 on page 42 provides a brief description of the common log files for UIM/P.
Table 5

Log file locations and contents Location /opt/ionix-uim/logs/appliance-update.log /opt/ionix-uim/slm/logs/slm.log /opt/ionix-uim/jboss/server/vc-server/log/server.log /opt/ionix-uim/db/controldb/logs/server.postmaster /opt/ionix-uim/logs/autodisc.log /opt/ionix-uim/logs/commmgr.log /opt/ionix-uim/logs/configuration.log /opt/ionix-uim/logs/daemon.log /opt/ionix-uim/logs/backup.log /opt/ionix-uim/logs/migration.log /opt/ionix-uim/logs/restore.log /opt/ionix-uim/logs/smieventreceiver.log /opt/ionix-uim/logs/sonicmq.log /opt/ionix-uim/logs/ssxfrcgi.log /opt/ionix-uim/logs/syssyncm.log /opt/ionix-uim/logs/syssyncs.log /opt/ionix-uim/logs/sysmons.log /opt/ionix-uim/logs/sysmonm.log /opt/ionix-uim/logs/ucsmeventreceiver.log /opt/ionix-uim/logs/session.log /opt/ionix-uim/logs/healthcheck-0.log /opt/emc/ECIM/ECOM/log/EMCProvider-<date>.log Contents Appliance Update log Service Lifecycle Manager log JBoss server log PostgreSQL database log Autodiscovery log Device communication log Appliance reconfiguration log Controldaemon log Data backup log Data migration output log Data restore log SMI Provider events receiver log SonicMQ server log SysSync Transfer CGI log SysSync Master log SysSync Slave log System Monitor Slave log System Monitor Master log UCSM events receiver log Device session log Healthcheck service log EMC SMI Provider log

42

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

JBoss application server logs


The JBoss application server logs are located in /opt/ionix-uim/jboss/server/vc-server/log.

Enabling session logging and full debugging


By default, session and debug logging are disabled (turned off). Session and debug logging can consume a significantly large amount of disk space. Turn on session and debug logging only when needed. To enable session logging and full debugging: 1. Run the . /etc/voyence.conf; /opt/ionix-uim/cgi-bin/cflist.cgi |sed 's/^POP .*/& CM_DEBUGSESSION=1/g' |/opt/ionix-uim/cgi-bin/cfwrite.cgi command. 2. Open the logs.cfg file in the /opt/ionix-uim/conf/logs.cf directory. 3. Locate and uncomment the following line: #*:log(0-9):file(10x1000000). Remove the prompt (#) at the beginning of the line. 4. Save, and exit. 5. Run the /etc/init.d/voyence restart command.

Disabling session logging and full debugging


To disable session logging and full debugging in UIM/P: 1. Run the . /etc/voyence.conf; /opt/ionix-uim/cgi-bin/cflist.cgi |sed 's/CM_DEBUGSESSION=1/CM_DEBUGSESSION=0/g' |/opt/ionix-uim/cgi-bin/cfwrite.cgi command. 2. Open the logs.cfg file in the /opt/ionix-uim/conf/logs.cf directory. 3. Locate and comment out the following line: *:log(0-9):file(10x1000000). Add a prompt (#) at the beginning of the line. 4. Save, and exit. 5. Run the /etc/init.d/voyence restart command.

Maintaining the Appliance

43

Maintaining the Appliance

Reconfiguring the appliance


The following properties can be reconfigured on the appliance:
Table 6

Reconfigurable appliance properties Reconfigurable appliance properties

company name division email notification from-address SMTP server license key appliance fully qualified hostname appliance IP address

gateway IP address netmask DNS server(s) search domain(s) OS install VLAN IP address OS install VLAN netmask Timezone

To reconfigure the appliance using vSphere: 1. Open vSphere Client, and connect to the vCenter Server managing your VMware environment. 2. Right-click the appliance name and select Power Off. 3. Right-click the UIM/P appliance and select Edit Settings. 4. In the Virtual Machine Properties window, select the Options tab. 5. Select Properties. 6. Change the properties in the right-hand side of the window, then click OK. 7. Right-click the appliance name and select Power On.

44

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Changing the default pull operation


Note: Push jobs or discovery profiles created before the change will not have the new setting. However, jobs and profiles created after the changes will have the new settings.

To change the default pull operation to pull all known device information: 1. Log into the JMX Console. a. Open a browser and navigate to the following address: https://<applianceip>:8880/jmx-console b. Enter the username and password for the JMX Console. The default username is jmx-user and the default password is sysadmin. 2. Locate the vc --> VoyenceControlConfig section. 3. Locate the java.lang.String setConfigItem() method and provide the following values for the parameters: For parameter 1: config.server For parameter 2: Set the value to one of the following. com.powerup.configmgr.server.services.scheduler.pullafter push This is the default option for pull after a push. com.powerup.configmgr.server.services.scheduler.pullafter autodisc This is the default option for pull after an auto discovery. com.powerup.configmgr.server.services.scheduler.pullafter devservernotif This is the default option for pull after a cut-through. com.powerup.configmgr.server.services.scheduler.pullafter singledeviceautodisc This is the default option for pull after a single device auto discovery. com.powerup.configmgr.server.services.scheduler.pullafter remedy This is the default option for pull after a remedy.

Maintaining the Appliance

45

Maintaining the Appliance

For parameter 3: Set the value to one of the following. NONE indicates the default post operation will perform no pull. PULL_CONFIGS indicates the default post operation will perform a pull of the configuration files. PULL_ALL indicates the default post operation will perform a pull of all known device information. 4. Click Invoke.
Note: This will temporarily change the value. If JBoss is restarted, the value will be restored to its default.

5. To make the new value permanent: a. Click Back to MBean View at the top of the page, to return to the list of methods. b. Locate the java.lang.String saveAll() method. c. Click Invoke. 6. To verify your setting: a. Click Back to MBean View at the top of the page, to return to the list of methods. b. Locate the listAll() method. c. Click Invoke.
Note: For a change to pull after push or a change to pull after auto discovery, the Java Swing Client must be closed and reopened to view the changes to future jobs.

46

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Changing the default session timeout


To change the default session timeout for a UIM/P console: 1. Edit the /opt/ionix-uim/slm/webapps/flexui/EMCIonixUIMSettings.xml file. 2. Search for and change the value for the sessionTimeout variable.
Note: The default sessionTimeout value is 30 minutes. Setting sessionTimeout to 0 indicates no timeout will occur.

3. Save and close the file.

Maintaining the Appliance

47

Maintaining the Appliance

Database vacuum
To recover lost disk space created by updating or deleting rows in a database table, a database vacuum must be performed on a regular basis.

Searching for database tables to clean


To search the UIM/P database for tables to clean: 1. Log into the appliance as a user with administrator privileges. 2. Log into the database as the pgdba user using the su pgdba command. 3. Type psql voyencedb voyence to navigate to the psql prompt, and press Enter. 4. Run a database query (Query1). Type select * from voyence.cm_calculate_table_sizes; to run Query1, and press Enter. 5. Run a database query (Query2). Type select * from voyence.cm_total_db_size; to run Query2, and press Enter. 6. Compare Query1 and Query2. The first few tables in Query 1 account for most of the size of the database returned by Query 2. If the first few tables in the output of Query1 appear to be very large, these tables must be cleaned by using a database vacuum. Although running the database vacuum on the first few tables is the most beneficial, it is advisable to clean the entire database. See Running a full database vacuum on page 49 or Running a partial database vacuum on page 50 for information about how to run a database vacuum. 7. Log out of the database using the following commands. voyencedb=# \q -bash-3.2$ exit

48

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Running a full database vacuum


Note: For a full database vacuum, stop all application services and run the database vacuum during a period of down time.

To run a database vacuum on all database tables: 1. Log into the appliance as a user with administrator privileges. 2. Log into the database as the pgdba user using the su pgdba command. 3. Type psql voyencedb voyence to navigate to the psql prompt, and press Enter. 4. Type service uim-service-wrapper stop to stop all of the services. 5. Type service controldb start to start the database services. 6. Run the database vacuum. Type vacuum full; to run the database vacuum, and press Enter.
Note: The database vacuum may take several minutes or hours depending on the size of your database.

7. Type service uim-service-wrapper start to restart all services.

Maintaining the Appliance

49

Maintaining the Appliance

Running a partial database vacuum


To run a database vacuum on one database table: 1. Log into the appliance as a user with administrator privileges. 2. Log into the database as the pgdba user by using the su pgdba command. 3. Type psql voyencedb voyence to navigate to the psql prompt, and press Enter. 4. Run the database vacuum. a. Type vacuum <table_name>, where <table_name> is the name of the table to be vacuumed. b. Press Enter.
Note: The database vacuum may take several minutes/hours depending on the size of your database.

5. Repeat step 4 for each table you want to clean up.

50

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Password management
Use the following sections when working with passwords in UIM/P.

Resetting the system administrator credentials


1. Log into the appliance as the root user. 2. Navigate to the /opt/ionix-uim/tools directory. 3. Type perl password-change.pl, and press Enter. 4. Type R, and press Enter to reset the system administrator credentials.
Note: Resetting the system administrator credentials enables the system administrator account and sets the account password to sysadmin.

Changing non-interactive system account passwords in Unified Infrastructure Manager/Provisioning


Note: The following user accounts are non-interactive system accounts for UIM/P.

To automatically generate random passwords for all non-interactive system accounts in UIM/P: 1. Log into the appliance as the root user. 2. Go to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter. 3. Type A to automatically generate new passwords for all accounts, and press Enter. To change a password for a single non-interactive system account in UIM/P: 1. Log into the appliance as the root user. 2. Navigate to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter.

Maintaining the Appliance

51

Maintaining the Appliance

3. Type C to change a single password, and then press Enter. A list of usernames appears. 4. Press the number corresponding to the user for which you want to change the password, and press Enter. 5. Type the new password, and press Enter. To synchronize all non-interactive system account passwords for the UIM/P appliance: 1. Log into the appliance as the root user. 2. Go to the /opt/ionix-uim/tools directory. Type perl password-change.pl to run the password change utility, and press Enter. 3. Type S to sync all passwords for the appliance, and press Enter.

52

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Maintaining the Appliance

Archiving data
Use the following sections when archiving data in UIM/P.

Database archive utility


The Database Archive Utility allows the user to archive, restore, and purge particular types of data that may grow to a very large size under normal operating conditions. Archiving and purging improves application performance by lowering the amount of data that needs to be processed. There are three types of data to archive in UIM/P:

Common Event Log (CEL) events Scheduler Jobs Device Configuration Revisions

The Database Archive Utility has these operation modes:

Archive Moves selected data from the application schema to the archive schema, resulting in better application performance. Purge Removes selected data from the archive schema, resulting in smaller database backups. Restore Moves selected data from the archive schema back into the application schema. Prune Removes selected data directly from the application schema, resulting in better application preformance and smaller database backups.

Note: Purging and pruning the database is useful only to improve performance and to shrink the size of the database backups. Purging and pruning the database does not decrease the size of the database. Only running a full database vacuum will decrease the database size. See Database vacuum on page 48 for more information.

Maintaining the Appliance

53

Maintaining the Appliance

Usage The archive utility is located in the /opt/ionix-uim/tools/ directory. To run the utility: 1. Open a command prompt and go to the /opt/ionix-uim/tools/ directory using the cd /opt/ionix-uim/tools command. 2. Run the perl archive-utility.pl script by using the perl archive-utility.pl <command> <type> <arguments> command, where: <command> is archive, purge, restore, or prune <type> is events, jobs, or revisions <arguments> contains the required arguments defined below Arguments The following are the required arguments for the <ARGUMENTS> value, when using the perl archive-utility.pl script.

The events type requires two arguments: Type of event (device, system, security, or all) Number of days to retain (for example, 1, 2, 3)

The jobs type requires one argument: Number of days to retain (for example, 1, 2, 3) The revisions type requires one argument: Number of revisions to retain per device (for example 1, 2, 3)

Note: Depending on the time of day the script is run, the events and jobs arguments may return different values.

Examples The following examples show the usage for the perl archive-utility.pl script.

perl archive-utility.pl archive events all 14 perl archive-utility.pl archive jobs 30 perl archive-utility.pl archive revisions 5 perl archive-utility.pl purge jobs 90 perl archive-utility.pl purge events system 30 perl archive-utility.pl restore jobs 45

54

EMC Ionix Unified Infrastructure Manager/Provisioning 3.1 Service Pack 1 Software Installation and Con-

Das könnte Ihnen auch gefallen