User Guide: HP Bladesystem PC Blade Enclosure Integrated Administrator For Cci V1.4
User Guide: HP Bladesystem PC Blade Enclosure Integrated Administrator For Cci V1.4
User Guide: HP Bladesystem PC Blade Enclosure Integrated Administrator For Cci V1.4
June 2006
Copyright 2005, 2006 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Microsoft, MS-DOS, Windows, and Windows NT are trademarks of Microsoft Corporation in the U.S. and other countries. Intel, Pentium, Intel Inside, and Celeron are trademarks of Intel Corporation in the U.S. and other countries. Adobe, Acrobat, and Acrobat Reader are trademarks or registered trademarks of Adobe Systems Incorporated. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. This document contains proprietary information that is protected by copyright. No part of this document may be photocopied, reproduced, or translated to another language without the prior written consent of Hewlett-Packard Company.
WARNING: Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information.
User Guide HP BladeSystem PC Blade Enclosure Integrated Administrator for CCI v1.4 Second Edition (June 2006) Document Part Number: 410728-002
Contents
1 Introduction
About This Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Audience Assumptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Symbols In Text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Important Safety Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Symbols On Equipment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Related Documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Getting Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Contact HP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Support and Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 HP Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Reader Comments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
3 Getting Started
Reviewing Configuration Tools and Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Identifying Integrated Administrator Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Determining the Integrated Administrators Initial IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . 32
HP PC Blade Enclosure Integrated Administrator for CCI v1.4 User Guide iii
Contents
Requirements for Local Client Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Default Values for the Integrated Administrator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Determining the IP Address using the Local Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Setting Up the Web-Based User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Additional Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
iv
Contents
Contents
Powering Off the Enclosure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Disabling Network Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Upgrading the Integrated Administrator Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Recovering a Lost Administrator Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Launching Flash Disaster Recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
vi
1
Introduction
About This Guide
This guide provides step-by-step instructions for operation, and reference information for advanced operation, troubleshooting, and future upgrades for the HP PC Blade Enclosure Integrated Administrator for a Consolidated Client Infrastructure (CCI) v1.4 solution.
Audience Assumptions
This guide is intended for users with access to the HP PC Blade Enclosure Integrated Administrator. It assumes that HP blade PCs and related hardware are installed, and that the user has minimal experience working with blade PC systems in a CCI environment.
Symbols In Text
You may find the following symbols in the text of this guide:
WARNING: Text set off in this manner indicates that failure to follow directions in the warning could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information.
this manner Text set off inaid the reader.indicates information intended to clarify a point, provide a helpful tip, or otherwise
Symbols On Equipment
The following symbols may be placed on equipment to indicate the presence of potentially hazardous conditions:
1-1
Introduction
Symbol
Description
This warning symbol, in conjunction with any of the following symbols, indicates the presence of a potential hazard. The potential exists if warnings are not observed. Consult the documentation for specific details. This warning symbol indicates the presence of hazardous energy circuits or electric shock hazards, Refer all servicing to qualified personnel.
This warning symbol indicates the presence of electrical shock hazards. The area contains no user or field serviceable parts. Do not open for any reason.
This warning symbol on or near an RJ-45 receptacle indicates a network interface connection. To reduce the risk of electric shock, fire, or damage to the equipment, do not plug a telephone or telecommunications connector into this receptacle. This warning symbol indicates the presence of a hot surface or component. If this surface is contacted, the potential for in jury exists.
These information symbols indicate that the equipment is powered by multiple power sources.
Information symbol. This symbol (accompanied by the weight in kgs and lbs) indicates that the component exceeds the recommended weight for one individual to handle safely.
Related Documents
For additional information on the topics covered in this guide, refer to the following documentation:
White paper: Network Considerations Guide QuickSpecs Setup and Installation Guide: HP BladeSystem bc1500 Blade PC and PC Blade Enclosure White paper: HP Rack 9000 and 10000 Series installation and best practices Installation Guide: HP BladeSystem PC Blade Switch Command Line Interface Reference Guide: HP BladeSystem PC Blade Switch Embedded Web System User Guide for the HP BladeSystem PC Blade Switch
1-2
Introduction
Getting Help
If you have a question about the HP PC Blade Enclosure and have exhausted the information in this guide, you can get additional information and other help in the following locations:
Contact HP
The Contact HP Web site provides various ways to contact HP, including online chat, email, and telephone. Access this Web site at: http://welcome.hp.com/country/us/en/contact_us.html
HP Web site
The HP Web site has information on this product as well as the latest drivers and flash ROM images. Access the HP Web site at http://www.hp.com.
Reader Comments
HP welcomes your comments on this guide. Go to the following site to send your comments and suggestions: www.hp.com/go/cci.
1-3
Introduction
1-4
2
HP PC Blade Enclosure System Software Features
The HP BladeSystem offers an extensive set of features and optional tools to support effective blade PC management and software deployment. This chapter describes the HP PC Blade Enclosure Integrated Administrator and provides a brief overview of software associated with the system.
2-1
With a Telnet session, all data - including passwords - are passed as clear text.
User administration and security
The Integrated Administrator supports up to 25 users with customizable access rights and login names. Groups are first assigned bays, and then users are given membership to those groups. This group-centered methodology is designed to facilitate user management across blade PCs. Integrated Administrator provides strong security for remote management in distributed IT environments by using industry standard Secure Sockets Layer (SSL) encryption of HTTP data transmitted across the network. SSL encryption (up to 128-bit) ensures that the HTTP information is secure as it travels across the network. You can encrypt all remote console data as well. Integrated Administrator provides secure password encryption, tracking all login attempts and maintaining a record of all login failures. Integrated Administrator also provides the following additional security features:
2-2
User actions logged in the Integrated Administrator System Log Login legal warning
IP Security allows an administrator to define a set of IP addresses that are the only ones allowed to connect to the services provided (SSH, HTTP, HTTPS, TELNET, SNMP). This means that an administrator can make sure only a certain set of machines have access to Integrated Administrator.
Support for SNMP management Support for SNMP trap delivery to a HP Systems Insight Manager console Management processor The HP Systems Insight Manager utility adds support for a new device type, the management processor. All Integrated Administrators (in HP PC Blade Enclosure) on the network are discovered in the HP Systems Insight Manager utility as management processors. The management processors are associated with the blade PCs they manage. Integrated Administrator hyperlinks The HP Systems Insight Manager utility provides a hyperlink on the blade PC device page to launch and connect to Integrated Administrator. Grouping of Integrated Administrator processors All Integrated Administrator management processors can be grouped together logically and displayed on one page in the HP Systems Insight Manager utility. This capability provides access to all Integrated Administrators on the network from one point in HP Systems Insight Manager. For more information on the HP Systems Insight Manager utility, refer to the ProLiant Essentials Foundation Pack documentation that ships with the system or refer to:
http://h18013.www1.hp.com/products/servers/management/hpsim/index.html.
Event Notification
The Integrated Administrator provides real-time event notifications for an enclosure. When an event occurs, the Integrated Administrator notifies connected users by generating an icon that the user can click to view more details.
2-3
Status Information
The Integrated Administrator enables an enclosure administrator to update the rack name, enclosure name, asset tag, time zone, date, and time, as well as observe the status and general information for every component in the enclosure.
Headless operation
HP bc-series blade PCs include VGA, keyboard, mouse, and USB interfaces; however, these blade PCs are designed primarily for headless operation and management with no keyboard or monitor attached.
2-4
2-5
2-6
3
Getting Started
The HP PC Blade Enclosure Integrated Administrator enables monitoring and management of all functions within an enclosure, including functions specific to the blade PCs housed within it. Once configured, the Integrated Administrator provides these features through both a Web-based user interface and CLI. This chapter addresses first-time configuration of the Integrated Administrator after the enclosure is installed and powered up in a rack:
Reviewing configuration tools and information Identifying the Integrated Administrator connectors Determining the Integrated Administrator initial IP address Setting up the Web-based user interface Additional steps Help
Each Integrated Administrator ships with a unique preconfigured Administrator password and host name. If the network uses Dynamic DNS or WINS, you can access the Integrated Administrator using the factory-configured host name.
password are displayed The preconfigured AdministratorSettings Tagand host name attached to theon the Integrated Administrator Default Network (settings tag) interconnect tray.
If the network uses DHCP, an IP address can be automatically assigned to the Integrated Administrator. The blade PC health driver enables the Integrated Administrator to gracefully power down the blade PC and provides the Integrated Administrator with the name as defined within the operating system of the blade PC, thermal condition, status, and operating system for each blade PC.
CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shut down a blade PC. This condition may result in the permanent loss of critical data.
3-1
Getting Started
CAUTION: Do not plug anything into the enclosure link connectors. They are reserved for future use and are not designed to accept a 10/100 Ethernet connector.
1 2
34 5
Description
Management (10/100 Ethernet) connector for remote access through a Web-based user interface, Telnet, or Secure Shell. Console (serial) connector for local access to the command line interface using a laptop computer. Integrated Administrator reset button. Integrated Administrator health LED Enclosure Unit Identification button/LED
Requirements for local client devices Default values for the Integrated Administrator Determining the IP address using the local console
3-2
Getting Started
Bits per second: 9600 Bits: 8 Parity: None Stop bits: 1 Flow control: none Emulation: VT100 Backspace key sends Ctrl-H
If a DHCP server is attached to the network, determine the Integrated Administrator IP address. Type the following command at the command line interface:
SHOW NETWORK
If a DHCP server is not attached to the network, type the following commands sequentially
3-3
Getting Started
You can now access the Integrated Administrator using a Web browser, Secure Shell, Telnet, or SNMP.
If you click Yes, the browser continues to the Login window of Integrated Administrator. The alert message appears each time you access the Integrated Administrator management processor in a browser. If you click No, you are returned to what was previously displayed on your browser. If you click View Certificate, a popup window displays the certificate information. Installing the certificate to your browser prevents the security alert message from displaying in the future. onto the Integrated Administrator rather than To install your own certificateinformation on certificate-related commands inthe automatically Chapter 8, in generated certificate, see the
section Administering Security Certificates.
If the certificate is removed from your browser, the security alert message is displayed again. 2. Install the certificate to your browser: a. Click Install Certificate. The Certificate Manager Import Wizard starts. b. Click Next. c. Click Next for the browser to automatically select the certificate store when the Certificate Store window appears.
3-4
Getting Started
d. Click Finish when the Completing the Certificate Manager Import Manager Wizard window displays. e. Click Yes to confirm the installation of the certificate when the confirmation window displays. 3. The Account Login screen (shown below) prompts you for a user name and password. Use the default user name and password from the settings tag attached to the interconnect tray, and then click Log In.
After the default user name and password have been verified, the summary window appears.
The Integrated Administrator summary window provides general information about the Integrated Administrator, such as the user currently logged on, enclosure name and status, and Integrated Administrator IP address and name.
3-5
Getting Started
Additional Steps
HP recommends performing the following tasks:
Change the Administrator password Set the date and time Name the enclosure and rack Set up groups, users, and access privileges
For detailed instructions on performing these tasks, see the appropriate sections in Chapter 6,
Help
Additional assistance is available by means of the Integrated Administrator help option. These links provide summary information about the features of Integrated Administrator and helpful information for optimizing the operation of Integrated Administrator.
3-6
4
Web Browser Interface
This chapter provides information for navigating the Integrated Administrator Web-based user interface:
Values appearing in the screens of this chapter are for illustrative purposes only.
Accessing the Web-based User Interface
Accessing the Web-based user interface is not supported from the console (serial) connector. To access the Integrated Administrator Web-based user interface with HTTP: 1. Get the DNS name from the settings tag attached to the interconnect tray. 2. Open a Web browser and type the IP address or DNS name for the enclosure to access.
CAUTION: If your network does not provide DHCP and either Dynamic DNS or WINS services, you need to configure a static IP address. See Chapter 3, in section Determining the IP Address using the Local Console.
4-1
Web-Based Navigation
The Web-based user interface displays information and receives input in the following areas:
Top Panel
The following illustration shows the location of the top panel.
The top panel information is displayed at all times, including the following items:
The Integrated Administrator top panel provides real-time event notifications for an enclosure according to two categories: caution and critical. When an event occurs, the Integrated Administrator notifies the user by generating an icon that the user can click to view more details:
Icon Description Caution
Critical
Printable View Opens a separate window that shows information for cutting and pasting purposes. Log Out Logs you out of the Web-based user interface.
4-2
Left Panel
The following illustration shows the location of the left panel.
The left panel displays which screens are available under each tab. Information appearing in the left panel depends on which tab the user chooses from within the top panel.
Deck Panel
The illustration below indicates the position of the deck panel.
The deck panel displays the areas of information provided by the available screens under each tab. Information appearing in the deck panel depends on the option chosen by the user from within the top panel and the left panel.
4-3
Enclosure Tab
The Enclosure tab provides access to the following screens:
Enclosure Information Network Configuration SNMP Configuration Virtual Buttons System Log
Enclosure Information
All users have read access to the information in this screen. The following illustration shows the information presented on the Enclosure Information screen (status area, one of six shown).
The Enclosure Information screen enables an enclosure administrator to update the rack name, enclosure name, asset tag, time zone, date, and time, as well as observe the status and general information for every component in the enclosure. Two buttons appear on the Enclosure Information screen:
Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values.
4-4
The following table describes the information displayed in the areas that comprise the Enclosure Information screen. Enclosure Information Field Descriptions
Field Status Area Enclosure Name Maximum 32 characters including all alphanumeric, dash, and underscore characters. Maximum 32 characters including all alphanumeric, dash, and underscore characters. OK, Degraded, or Failed. Redundant or non-redundant. Name of enclosure. Only enclosure administrators have write access to this field. For the default enclosure name, see Appendix E, Factory Default Settings. Name of rack. Only enclosure administrators have write access to this field. For the default rack name, see Appendix E, Factory Default Settings. Status of the enclosure. Redundant: all fans are functional. Non-redundant: at least one fan is not functional. Status of fans 1 through 4.
Possible Values Description
Rack Name
Fan #1 Fan #4 Fan Spare Number Temperature Power Area Power Subsystem Status Total Capacity Power Supply #1 and #2 Status AC Input #1 and #2 Status Power Supply Spare Number
The spare number for the fans installed in the enclosure. OK, Warm, Caution, or Critical. Redundant or Non-redundant. Enclosure component temperature sensor.
Redundant: both power supplies are functional. Non-redundant: one power supply is not functional. Total capacity of the power supplies. Status of power supply #1 and power supply #2. Status of AC input to power supply #1 and AC input to power supply #2. The spare number for the power supplies installed in the enclosure.
4-5
4-6
* This section of the screen is not available on Linux browsers. If you are using a Linux system, use the command line interface to change the date, time, and time zone.
Only enclosure administrators have access to the Date and Time information. If those fields are not being modified, the Integrated Administrator updates these fields every 20 seconds. If automatic time configuration is enabled, the date and time fields are grayed out and cannot be modified. If you select Other for time zone, use the following window to set a user-defined time zone:
Apply Applies the new time zone. Reset Clears the time zone text box. Cancel Cancels all changes and closes the window.
For more information on accepted time zones, refer to Appendix F, Time Zone Settings.
4-7
Network Configuration
Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values.
CAUTION:
Both the Web and Secure Shell protocols must be enabled to allow access to the Web-based user interface.
The following table describes the information displayed in the areas that comprise the Network Configuration screen.
4-8
Subnet Mask
SNMP Configuration
The SNMP Configuration screen (shown below) enables an enclosure administrator to modify the SNMP settings of an enclosure. These settings are specific to the enclosure and do not affect the network configurations for blade PCs.
4-9
Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values.
The following table describes the information presented on the SNMP Configuration screen: SNMP Configuration Field Descriptions
Field SNMP Status System Name System Location Up to 20 characters including all alphanumeric, dash, underscore, and space characters Up to 20 characters including all alphanumeric, dash, underscore, and space characters Possible Values Enabled or Disabled Description Displays if SNMP is enabled or disabled. The name of the enclosure. The SNMP location of the enclosure For the default SNMP location, see Appendix E, Factory Default Settings. The SNMP contact of the enclosure For the default SNMP location, see Appendix E, Factory Default Settings. System Information Area
System Contact
4-10
Write Community
Add Remove
Virtual Buttons
4-11
The Toggle On/Toggle Off button remotely changes the state of the enclosure Unit Identification LED. The illustration below shows the information presented in the Enclosure Power area of the Virtual Buttons screen:
You can select the appropriate function with the following buttons:
Restart Integrated Administrator Restarts the Integrated Administrator and does not affect the blade PCs. Click Restart Integrated Administrator only at the direction of HP support personnel. Click Apply for these settings to take effect. Power Off Enclosure Attempts a graceful shutdown of the system for 5 minutes, after which time this command powers down all components of the enclosure immediately. Whenever possible, HP recommends that you use the operating system shutdown procedures before powering down a blade PC or enclosure. After the enclosure is powered off, powering on can only occur by local access to the system.
4-12
System Log
The System Log screen (shown below) provides an enclosure administrator with a chronological list of events and fixes associated with the enclosure.
Bays Tab
The Bays tab provides access to the following screens:
Bay List Bay Information Remote Console Virtual Buttons Console Log
4-13
Bay List
The Bay List screen (shown below) enables an enclosure administrator to observe and update the assignment of groups to blade PC bays, as well as monitor the status of each blade PC installed in the enclosure.
Group administrators and group members with permissions can view the blade PC bays assigned to their groups. The following table describes the information presented in the Bay List screen: Bay List Field Descriptions
Field Bay # UID Blade PC Name Possible Values 1-20 Description Blade PC number. Displays a blue circle if the unit identification (UID) LED of the blade is lit. Name of the blade PC in that blade PC bay as defined by the operating system of the blade PC. NOTE: Without the blade PC health driver properly installed, the Integrated Administrator cannot obtain the blade PC name. Assigned to Group Status OK, Degraded, or Failed Name of the group that owns that bay. The status and power state of the blade PC.
4-14
The following table lists permissions that are related to the action buttons of the Bay List screen Bay List Action Buttons and Permissions
Button View/Modify Function Opens the Blade Information screen. Opens the Remote Console screen. Opens the Console Log screen. Opens the View/Modify Group screen. Opens the Bay Assignment dialog box. NOTE: If a blade PC is to be re-assigned, it must be unassigned first. Permissions Enclosure administrators, group administrators, and group members with permissions. Enclosure administrators, and group administrators with permissions. Enclosure administrators, group administrators, and group members with permissions. Enclosure administrators only. Enclosure administrators only.
Bay Information
CAUTION: Be sure the Integrated Administrator displays up-to-date blade PC information by rebooting the blade PC after installing the blade PC health driver.
The Bay Information screen (shown below) enables an enclosure administrator to observe the status and general information for a blade PC in a given blade PC bay. Group administrators and group members with View rights to the blade PC bay can also observe this information.
4-15
To be sure that the Bay Information screen displays the optimal number of possible values, you must have the blade PC health driver installed. The following table describes the information presented on the Bay Information screen for all enclosure administrators and for group members and group with rights to the blade PC bay. Bay List Field Descriptions
Field Status Area Bay Number Blade PC Name Status Thermal Condition Enclosure Name General Area Blade PC Type Blade PC Installed OS Spare Number Serial Number Asset Tag BIOS version CPU # Type CPU # Max Speed Installed RAM NIC #1 and #2 MAC Addresses ##:##:##:##:##:##, where ## ranges from 00 to FF. mm/dd/yy Product name of the blade PC. Operating system installed on the blade PC. Spare number of the blade PC. Serial number of the blade PC. Asset tag number of the blade PC. ROM version on the blade PC. Type of processor on the blade PC. Speed associated with the blade PC processor. Amount of memory installed on the blade PC. MAC address of the NIC 1 interface and the NIC 2 interface. OK, Degraded, or Failed OK, Warm, Caution, or Critical Bay number. Name of blade PC as specified with the blade PC operating system. Status of the blade PC. Thermal condition of the blade. Name of enclosure. For the default enclosure name, see Appendix E, Factory Default Settings. Possible Values Description
4-16
Remote Console
Enclosure administrators and group administrators with access to the bay can click Remote Console to open a remote text-based console (shown below) to the blade PC in the bay.
For information on establishing remote console connectivity, see Chapter 6, section Enabling Remote Console Sessions to Blade PCs.
Virtual Buttons
Enclosure administrators and group administrators with permissions can use the Virtual Buttons screen (shown below) to modify the state of the power state and Unit Identification LED of a blade PC in order to facilitate troubleshooting from a remote location.
4-17
The Virtual Buttons screen enables group administrators and enclosure administrators to reboot, power off, or identify the blade PC with the following items:
The Toggle On/Off button remotely changes the state of the blade PC Unit Identification LED. You can select the appropriate function in the Blade PC Power area using the following radio buttons:
Reboot reboots the blade PC. Power Off attempts a graceful shutdown of the blade PC for 5 minutes, after which time this command powers down the blade PC immediately. Power Off Immediately powers off the blade PC forcefully.
CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shut down a blade PC. This condition can result in the permanent loss of critical data.
Console Log
group members, group administrators, and enclosure administrators can view a console log Onlyblade PC. of a The Console Log screen displays the console log for the specified bay. The console log of the bay is not stored between reboots of the Integrated Administrator, so the information will only include what has taken place since the last power on of the Integrated Administrator. The data captured in the console log is all output from the serial console of the blade PC that occurred while no one was connected to the console. For security reasons, console output during a user connection session is not logged. The Refresh button refreshes the console log for the current blade PC.
Administration Tab
For an explanation of user rights associated with the Integrated Administrator, see Chapter 6, section Enabling Remote Console Sessions to Blade PCs. Under the Administration tab, you can access the following screens:
4-18
User List
The User List screen (shown below) enables an appropriate group administrator or enclosure administrator to observe and update user access to groups and blade PC bays.
The following table lists the permissions related to the action buttons of the User List screen. User List Action Buttons and Permissions
Button View/Modify User Function Opens the View/Modify User screen. Permissions Enclosure administrators can access and modify the information for any user. Users can access and modify the information for own account. Remote User Removes the selected user (unless the account is your own). Only enclosure administrators can execute this command.
4-19
The following table describes the information presented in the User List screen. User List Field Descriptions
Field User Name Full Name Account Type Account Status Group Membership Administrator or User Enabled or Disabled Possible Values Description User login name. User full name. Shows if the user is an enclosure administrator. Shows if the users account is enabled. Shows the groups in which the user has membership.
Group List
The Group List screen (shown below) enables an enclosure administrator to observe and update the assignment of groups and users to blade PC bays.
View/Modify GroupOpens the View/Modify Group screen. Remove GroupRemoves the selected group.
4-20
groups. Enclosure administrators can view and modify the information for allgroups in Group they are administrators and group members can view the information for the which members.
Add User
Only enclosure administrators have access to this area of the Integrated Administrator.
The Add User screen (shown below) enables an enclosure administrator to create a user profile, including group and blade PC bays assignments.
ApplySaves changes made to this screen. CancelRestores all fields on this screen to their original values.
4-21
The following table describes the fields /of the Add User screen. Add User Field Descriptions
Field User Name Possible Values 1-13 characters including alphanumeric, dash, and underscore characters. The user name must begin with a letter. A maximum of 25 users can be created in addition to the reserve accounts. Password Confirm Password Account Type Account Status Full Name (optional) 3-8 characters including all printable characters 3-8 characters including all printable characters Radio buttons (Administrator and User) Radio buttons (Enabled and Disabled) 0-20 characters Accepts only alphanumeric, dash, underscore, and space characters 0-20 characters Accepts only alphanumeric, dash, underscore, and space characters All groups are listed x number of groups (all groups in which the user has membership) A list of all possible groups. A list of all users that are members of the group. Adds the user to the selected groups in the Group Names text box with View rights for group members These groups appear in the Group Membership text box. The user loses View/Modify rights if they previously had them. Add User [View/Modify] >>> Adds the user to the selected groups in the Group Names text box to the group with View/Modify rights for group administrators or view rights for group members. Removes the user from the selected groups in the Group Membership text box. Optional user contact information. Description Login name of the user. NOTE: Administrator, switcha,switchb, and all are reserved names and cannot be used. This restriction is not case-sensitive.
Users password. Users password. Determines if the user has enclosure administrator rights. Determines if the users account is enabled. Full name of user.
Contact Information (optional) Group Names Group Membership Add User [View]>>>
<<<Remove User
4-22
Add Group
Only enclosure administrators have access to this area of the Integrated Administrator.
The Add Group screen (shown below) enables an enclosure administrator to create a group profile, including user and blade PC bays assignments.
Grayed-out check boxes are unavailable because they are already assigned to another group.
Two buttons appear on this screen:
ApplySaves changes made to this screen. CancelRestores all fields on this screen to their original values.
4-23
View/Modify User
You can access the View/Modify User screen by clicking any row in the User List and then clicking View/Modify User. The View/Modify User screen provides the same functions and has the same access as the Add User screen. See the Add User section in this chapter.
4-24
View/Modify Group
You can access the View/Modify Group screen by clicking any row in the Group List and then clicking View/Modify Group. The View/Modify Group screen the provides same functions and has the same access as the Add Group screen. See the Add Group section in this chapter.
Any user can view the Event List. Only enclosure administrators can access the System Log. The messages in the Event List are limited to cautions and critical failures. Refer to the enclosure System Log for information on both failures and fixes. The Event List only displays messages received since the user logged into the Integrated Administrator. The System Log displays every message generated by the enclosure diagnostics. Severity Source Date Time Event Details (the example below indicates a fan failure)
The Event List screen (shown below) provides the following information for each event:
4-25
The Integrated Administrator provides real-time event notifications for an enclosure according to two categories of severity (caution and critical) described in the following table. For detailed information regarding the Event List, including a comprehensive list of event messages, see Appendix D, Event Icons and Details. Event Notification Icons
Icon Description Caution An event that does not prevent the enclosure from operating, maintaining power, or serving its user community
When a caution event occurs, a reasonable guarantee that operability can persist no longer exists.
Critical An event that prevents the continued operation of the enclosure.
Interconnect Tab
The Interconnect Tray screen (shown below) allows anyone to view information about the interconnect tray. It allows enclosure administrators to connect to the remote console of one of the interconnect switches if installed.
The following table describes the information displayed in the areas that comprise the Interconnect Tray screen.
4-26
Switch B Status* Manufacturer Product Name Interconnect Tray Part Number Interconnect Tray Serial Number
Switch Terminal Console Area (only present if an interconnect switch is installed) Switch A button Switch B button* Opens a new window to the remote console of switch A. Opens a new window to the remote console of switch B.
4-27
4-28
5
Command Line Interface
This chapter provides reference material for operating the Integrated Administrator Command Line Interface (CLI). This chapter provides command line related information with the following sections:
Accessing the Command Line Interface Operating the Command Line Interface
General commands General management commands User account commands Enclosure network configuration commands Enclosure management commands Blade PC management commands
For a detailed explanation of the command line conventions used in this document, see Appendix A, Command Line Conventions. For easy reference, the index of this book also provides a comprehensive listing of the commands supported by the Integrated Administrator.
CAUTION: Using Telnet instead of Secure Shell means your remote session, including password, appears in clear text on that network.
3. Type the user name and password into the Login prompt.
5-1
Clears the terminal screen Exits the command line interpreter If a command is given, the usage and help text for the command are shown in a tree format. If no argument is given, all base commands are displayed. Exits the command line interpreter Exits the command line interpreter Pauses the sessions for a fixed period of time. Useful for adding delays to scripts. The <seconds> field can be any whole umber from 1 - to 86400. Once the pause has started, no way exists to continue the session before time runs out, but you can terminate the session and start another one.
None None
5-2
Terminate a Terminal session from the enclosure. This is not a graceful termination. The connected user loses any unsaved work.
Group administrators may only execute thus command for the blade PC bays to which they have access. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command.
CLEAR SSHKEY
Remove the contents of the Secure Shell authorized keys file. After performing this command, you will not be able to login using the public key-based authentication. Opens a remote console connection to switch A or B. A single switch cannot support multiple, simultaneous remote console sessions. Download a CA supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by augmenting the host part in the above format with username:password@host.
DOWNLOAD SSHKEY
Downloads an authorized key file to use with Secure Shell v2, which can contain the public keys for any enclosure administrator. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format with username:password@host. Generates a PKCS#10 certificate request.
Only enclosure administrators may execute this command. Only enclosure administrators may execute this command.
5-3
Sends ICMP echo messages to a remote IP device. If <number> is omitted, only 5 packets are sent. Packets are sent out at 1-second intervals.
The <IP address> must be in the form ###.###.###.### where ### ranges from 0 to 255. None.
Turns event notification on or off. The Integrated Administrator preservers this setting across all logins. Turns EXPERT MODE on or off. When EXPERT MODE is on, the system will not prompt the user to confirm actions. Users should exercise caution when working in EXPERT MODE as many actions are not reversible. Sets the Integrated Administrator back to its factory defaults. The Administrator account password does not change. The Integrated Administrator is restarted after all the changes are made. Note: This command removes all groups, users, and other customization from the memory of the enclosure, and the information is unrecoverable.
None.
SET FACTORY
When SCRIPT MODE is on, the following commands require a password argument: ADD USER, SET USER PASSWORD, or SET PASSWORD. Default values require user interaction. Displays the connection to each bay and switch if one exists. Only one user may connect to each bay and switch at a time. It also shows each user that is currently logged in, the users port number, connect time, and remote system name.
None
Users may not run this command. Group members and group administrators may only see the sessions for bays assigned to groups to which they belong. Enclosure administrators see all sessions None
Displays the key fingerprint of the host SSH pubic key of the Integrated Administrator. This can be used from the serial console to validate the identity of the Integrated Administrator before initializing an SSH connection across a network. Displays the contents of the existing Secure Shell authorized keys file that is being used for enclosure administrator key-based authentication.
SHOW SSHKEY
5-4
Only enclosure administrators may execute this command. A maximum of 20 groups may be added to the system. The <group name> must be unique to all other group names and user names and is case-sensitive. It must be 1-13 characters long and can include alphanumeric, dash, and underscore characters. It must begin with a letter. Note: Administrator, switcha, switchb, and all are reserved names and cannot be used. This restriction is not case-sensitive. See Appendix E, Factory Default Settings. for factory default groups accounts.
Adds a user to the system If a password is not given, the user is prompted for one. If SCRIPT MODE is enabled, the password is not optional and must be provided.
Only enclosure administrators may execute this command. A maximum of 25 users may be added in addition to the reserved accounts. The <user name> must be unique to all other group names and user names and is case-sensitive. It must be 1-13 characters long and can include alphanumeric, dash, and underscore characters. It must begin with a letter. The <password> must be 3-8 characters long and includes all printable characters. If a password is not entered, the user is prompted for one. Note: Administrator, switcha, switchb, and all are reserved names and cannot be used. This restriction is not case-sensitive. See Appendix E, Factory Default Settings. for factory default groups accounts.
Promotes a user to have enclosure administrator permissions. Group membership is not detected in case of enclosure administrator rights are removed at a later time.
Only enclosure administrators may execute this command. The <user name> is case-sensitive.
5-5
Assigns one or more bays to a group. If a bay is already assigned to a group, it must first be unassigned before executing this command.
Only enclosure administrators may execute this command. The <group name> is case-sensitive.
Assigns a user to a group with View rights (for group members) or View/Modify rights (for group administrators) If View or View/Modify is not specified, View is chosen by default. Disables a user account. The user is immediately logged out of the system and prevented from log in until the account us enabled.
Only enclosure administrators may execute this command. The <user name> is case-sensitive. Only enclosure administrators may execute this command. The <user name> is case-sensitive. The administrator account cannot be disabled.
Enables a user account that was previously disabled by the DISABLE USER command
Only enclosure administrators may execute this command. The <user name> is case-sensitive.
Removes a group and automatically unassigns all bays within the group.
Only enclosure administrators may execute this command. The <group name> is case-sensitive.
Removes a user from the system. If ALL is specified, the command is run for all users except the default system accounts.
Only enclosure administrators may execute this command. The <user name> is case-sensitive. Note: Administrator, switcha, and switchb, cannot be removed.
5-6
Only enclosure administrators may execute this command. The <description> must be 0-20 characters long and can include alphanumeric, dash, and underscore characters. the default group description is blank. If spaces are part of the contact information, enclose the information in quotes. The <password> must be 3-8 characters long and can include all printable characters.
Sets the password of the user currently logged into the Integrated Administrator. If a password is not given on the command line, the user is prompted for one. Note: This command is not valid in SCRIPT MODE if password is not specified.
If no <user name> exists, the command modifies the contact info of the user that executed the command.
Only enclosure administrators may modify another users contact information. The <user name> is case-sensitive. The <contact info> must be 0-20 characters long and can include alphanumeric, dash, underscore, and space characters. The default contact information is blank. If spaces are part of the contact information, enclose the information in quotes. Only enclosure administrators may modify another users full name. The <user name> is case-sensitive. The <contact info> must be 0-20 characters long and can include alphanumeric, dash, underscore, and space characters. the default full name is blank. If spaces are part of this information, enclose the information in quotes. Only enclosure administrators may modify another users password. Only the Administrator account may modify the password of the Administrator account. The <user name> is case-sensitive. The <new password> must be 3-8 characters long and can include all printable characters.
Sets a users full name. If no <user name> exists, the command modifies the full name of the user that is currently logged in.
Sets a users password. If you do not supply a password on the command line, you are prompted for one. Note: This command is not valid in SCRIPT MODE if password is not specified.
5-7
Displays the groups description, a list of members with View permission, a list of members with View/Modify permission, number of bays, and a list of each of the bay the group manages. Displays the users full name, contact, whether the user has administrator rights, whether the account is enabled, and the groups for which the user has View or View/Modify permissions. If ALL is entered, this information is given for every user and an asterisk before the user name denotes the current user.
Group members and group administrators only see the groups in which they have membership. Users may not execute this command. The <group name> is case-sensitive. If spaces are part of this information, enclose the information in quotes. Only enclosure administrators may view another users information. The <user name> is case-sensitive. Users who do not have enclosure administrator permissions only see their user information.
UNASSIGN ADMINSTRATOR (RIGHTS) <user name> UNASSIGN USER <user name> <group name>
Only enclosure administrators may execute this command. The Administrator account cannot have enclosure administrator rights taken away. The <user name> is case-sensitive. Only enclosure administrators may execute this command. The <user name> and <group name> are case-sensitive.
5-8
DISABLE SNMP
Disables SNMP support for the Integrated Administrator. Does not clear the SNMP trap receivers that have been configured. SNMP trap receivers can still be added and removed. If SNMP is disabled, Systems Insight Manage agents do not work properly.
DISABLE TELNET
Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255.
DISABLE WEB
Disables HTTP and HTTPS access to the Integrated Administrator. This command prevents access to the Web-based user interface.
Downloads previously saved configuration file from a specific IP host. Downloads a previously saved configuration file from a specific IP host. The files are auto-executed in script mode. The file is not allowed to change the password of the Administrator account. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a user name and password by replacing the host part in the previous format with username:password@host.
ENABLE SECURESH
Only enclosure administrators may execute this command. Only enclosure administrators may execute this command.
ENABLE SNMP
5-9
Enables Telnet access to the Integrated Administrator. Enables HTTP and HTTPS access to the Integrated Administrator. Removes an IP address from the list of systems to receive SNMP traps
Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. Only enclosure administrators may modify another users contact information. The write <community name> must be 0-20 characters long, and the read <community name> must be 1-20 characters long. Both can include alphanumeric, dash, and underscore characters. The default read community name is public. The default write community name is blank.
SET IPCONFIG [DHCP {DYNAMICDN S} | STATIC <IP address> <netmask>] SET SNMP COMMUNITY [READ | WRITE] <community name>
Sets up the Integrated Administrator IP configuration The gateway and DNS addresses are cleared. The optional DYNAMICDNS argument enables Dynamic DNS. Sets the community name for the read or write SNMP community The default names for the read and write community are public and blank, respectively. If a blank write community name is given, SNMP set commands are disabled until a non-empty community name is given.
5-10
Only enclosure administrators may execute this command. The <contact> must be 0-20 characters long and can include alphanumeric, dash, underscore, and space characters. If spaces are part of this information, enclose the information in quotes.
Configures the SNMP location of the enclosure. The default location is blank.
Only enclosure administrators may execute this command. The <contact> must be 0-20 characters long and can include alphanumeric, dash, underscore, and space characters. If spaces are part of this information, enclose the information in quotes. None
SHOW NETWORK
Displays the DHCP state, Dynamic DNS state, IP address, subnet mask, gateway address, primary and secondary DNS addresses, HTTP and HTTPS server status, SNMP status, Secure Shell status, and Telnet status of the enclosure. Displays the SNMP system name, location, and contact, read community name, write community name, and a list of the trap destinations.
SHOW SNMP
5-11
Only enclosure administrators may execute this command. Once deleted, this information cannot be restored. Only enclosure administrators may execute this command.
Performs a graceful shutdown of the enclosure. Each blade is first gracefully shut down. If the FORCE argument is given, the enclosure and all blades are immediately shutdown. Restarts the Integrated Administrator. This does not affect operation of bays in the system. Sets the date of the enclosure with the following definitions: MM: month DD: day hh: hour (24-hour format) mm: minute CC: century YY: year TZ: time zone (case-sensitive) If the time zone is left blank, the current time is left in effect.
RESTART
Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. MM is an integer from 1-12 DD is an integer from 1-31 hh is an integer from 0-23 mm is an integer from 0-59 For a list of time zones, see Appendix F, Time Zone Settings. NTP must be disabled before manually setting the date and time.
Only enclosure administrators may execute this command. The <asset tag> must be 1-31 characters long and can include alphanumeric, dash, and underscore characters. The default enclosure asset tag is blank. To set a blank asset tag, specify the blank value using the quotes.
5-12
Only enclosure administrators may execute this command. The <enclosure name> must be 1-32 characters long and can include alphanumeric, dash, and underscore characters. The default enclosure name is IA-MAC, where MAC is replaced with the actual MAC address.
SET ENCLOSURE UID [ON | OFF] SET RACK NAME <rack name>
Sets the name for the rack where that enclosure resides
Only enclosure administrators may execute this command. The <rack name> must be 1-32 characters long and can include alphanumeric, dash, and underscore characters. The default rack name is UnnamedRack.
Displays the script required to recreate the settings of the enclosure Passwords are not included for any user. Displays the current date, time, and time zone of the internal clock of the enclosure. Displays whether event notification is on or off. Displays the status, redundancy, and partner, speed, part number for the requested fan. If ALL is entered, this information is shown for all fans. Displays the enclosure name, type, part number, serial number, and asset tag; the Integrated Administrator software and hardware version; Integrated Administrator MAC address, and the interconnect tray type, part number, and serial number
SHOW DISPLAY SHOW ENCLOSURE FAN [<fan number> | ALL] SHOW ENCLOSURE INFO
None None
None
5-13
Displays the power supply status, AC input status, capacity, input voltage range #1 (measured in Volts), input voltage range #2 (if necessary, measured in Volts), input frequency range (measured in Hertz), part number, serial number, and hardware revision for the specified power supply if one is specified or for all power supplies if ALL is given. Under an enclosure status heading, this command displays the health, Integrated Administrator health, and unit identification LED of the enclosure. Under a power status heading, this command displays the power status and capacity.
None
None
SHOW ENCLOSURE TEMP SHOW RACK NAME <rack name> SHOW SYSLOG ENCLOSURE
Displays the locale, status (OK, warm, degraded, or failed), temperature in degrees Fahrenheit, and temperature sensors. Shows the name for the rack where the enclosure resides The default rack name is UnnamedRack. Displays the syslog of the enclosure with 22 lines per screen. Typing q quits the command, any other key shows the next screen if more information exists to display. Typing c continuously displays the System Log without page breaks.
None
None
Displays the manufacturer, product name, part number, serial number, and spare number of the interconnect tray.
None
5-14
Downloads a new image from a blade over the network and uses the image to update the firmware of the enclosure.
Only enclosure administrators may execute this command. URL can be any of the following: http://host/path tftp://host/path ftp://username:password @host/path ftp://host/path where host is a fully qualified domain name or an IP address and path is the pathname of the flash image to download
Upload the current runtime configuration to the specified FTP or TFTP server.
Clears the setting for the IPL to be passed to the blade at the next reboot. The FIRST argument resets the IPL for all subsequent reboots. The ONCE argument resets the IPL for the next reboot only. The Always argument resets the IPL for every reboot. This command is only valid for present blades. This command may require a firmware update for the BIOS ROM of certain HP blade PCs.
Terminates a Terminal session from the enclosure. This is not a graceful termination. The connected user loses any unsaved work. Opens a remote console session to the blade PC with that blade PC bay number. A blade PC can only support one remote console session at a time.
Enclosure administrators may execute this command for blade PC bays and the interconnect switch. Only enclosure and group administrators may execute this command.
5-15
REBOOT BAY <bay number> {[ , | - ] <bay number>} {FORCE} {[PXE | HDD | RBSU]}
5-16
Displays the following fields: Assigned to group, type, name, installed operating system, part number, serial number, asset tag, BIOS version, all CPU types and associated maximum speeds, memory, NIC #1 MAC, and NIC #2 MAC. If no blade PC is in the bay, the user is shown the assigned to group and the blade PC type.
Group members and group administrators only see information for the bays in their groups.
SHOW BAY LIST [ALL | <group name>] SHOW BAY STATUS [ALL | <bay number> {[ , | - ] <bay number>}] SHOW SYSLOG BAY <bay number>
Displays the assigned to group, remote console user, and blade PC name for each bay in a particular group if a group name is specified or all bays if ALL is specified Displays the power (On or Off), assigned to group, remote console user, health (OK, CPU failure, or power module failure), thermal (OK, warm, degraded, or failed), and Unit Identification LED (On or Off) for the blade PC. Displays the syslog of the specified blade with 22 lines per screen. Typing q quits the command; any other key shows the next screen if more information is available to display. The system log of the blade PC is not stored between reboots, so the information only includes what has taken place since the last power on of the Integrated Administrator. Typing c continuously displays the System Log without page breaks.
Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups.
Group members and group administrators only see information for the bays in their groups.
5-17
Fan Inserted Fan Removed Fan Status Change Power Supply Inserted Power Supply Overload Power Supply Redundancy Change Power Supply Removed Power Supply Status Change Restart Event Thermal Status Change Bay Event Messages Bay Event Blade Inserted Blade Removed Blade Status Change
5-18
General Commands Pauses the sessions for a fixed period of time. Useful for adding delays to scripts. The <seconds> field can be any whole number from 1 86400. Once the pause has started, no way exists to continue the session before time runs out, but you can terminate the session and start another one. Terminates a Terminal session from the enclosure This is not a graceful termination. The connected user loses any unsaved work. CLEAR SSHKEY Removes the contents of the Secure Shell authorized keys file. After performing this command, you will not be able to login using public key-based authentication. Downloads a CA supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by augmenting the host part in the above format with username:password@host. Only enclosure administrators may execute this command. All None
5-19
General Management Commands (Continued) Downloads an authorized key file to use with Secure Shell v2 which can contain the public keys for any enclosure administrator. Supported protocols are http, ftp, and tftp. Format the url as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format with username:password@host. Generates a PKCS#10 certificate request Only enclosure administrators may execute this command.
GENERATE CERTIFICATE REQUEST GENERATE CERTIFICATE SELFSIGNED PING {<number>} [<IP address> | <server name>] SET DISPLAY EVENTS [ON | OFF] SET EXPERT {MODE} [ON | OFF]
All
All
Sends ICMP echo messages to a remote IP device If <number> is omitted, only 5 packets are sent. Packets are sent out at 1-second intervals. Turns event notification on or off
All
All
Turns EXPERT MODE on or off. When EXPERT MODE is turned on, the system will not prompt the user to confirm actions. Users should exercise caution when working in EXPERT MODE as many actions are not reversible. Sets the Integrated Administrator back to its factory defaults The password of the Administrator account does not change. The Integrated Administrator is restarted after all the changes are made. Note: This command removes all groups, users, and other customization from the memory of the enclosure, and the information is unrecoverable.
None
SET FACTORY
All
5-20
General Management Commands (Continued) When SCRIPT MODE is on, all prompting and verifications of entries cease. If SCRIPT MODE is on, the following commands require a password argument: ADD USER, SET USER PASSWORD, or SET PASSWORD. An enclosure administrator must change the password so that the user can log in to the system. Default values are used for any parameters that would normally require user interaction. SHOW EXPERT {MODE}: SHOW SESSIONS Displays the current EXPERT MODE setting for the current user. Displays the connection to each bay and switch if one exists. Only one user may connect to each bay and switch at a time. It also shows the users that are currently logged in, their port number, connect time, and remote system name. SHOW SSHFINGERPRINT Displays the key fingerprint of the host SSH public key for the Integrated Administrator. This can be used from the serial console to validate the identity of the Integrated Administrator before initializing an SSH connection across a network. Displays the contents of the existing Secure Shell authorized keys file that is being used for enclosure administrator key-based authentication. Downloads a previously saved configuration file from a specific IP host. The file is auto-executed in SCRIPT MODE. The file is not allowed to change the password of the Administrator account. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format with username:password@host. None None All All
SHOW SSHKEY
5-21
Enclosure Management Commands Displays the script required to recreate the settings of the enclosure. Passwords are not included for any user. SHOW ENCLOSURE FAN [<fan number> | ALL] SHOW ENCLOSURE POWERSUPPLY [<power supply number> | ALL] Displays the status, redundancy, partner, speed, and part number for the requested fan. The command line adds the fan partner. The command line adds the input voltage ranges, input frequency range, serial number, and hardware revision. The command line adds the Integrated Administrator health. All All
Displays the status of the power supply, AC input status, capacity, input voltage range #1 (measured in Volts), input voltage range #2 (measured in Volts), input frequency range (measured in Hertz), part number, serial number, and hardware revision for the specified power supply if one is specified or for all power supplies if ALL is given.
Under an enclosure status heading, this command displays the health of the enclosure, Integrated Administrator health, and unit identification LED. Under a power status heading, this command displays the power status and capacity.
UPDATE IMAGE <URL> UPLOAD CONFIG <url> CLEAR SESSION BAY <bay number> CLEAR BAY BOOT [FIRST | ONCE] [ALL | <bay number> {[ , | - ] <bay number>}]
Downloads a new image from a server over the network and uses the image to update the firmware of the enclosure. Uploads the current runtime configuration to the specified FTP or TFTP server. Terminates a Terminal session from the enclosure.
All All
Clears the setting for the IPL to be passed to the blade at the next reboot. The FIRST argument resets the IPL for all subsequent reboots. The ONCE argument resets the IPL for the next reboot only. This command is only valid for present blades. This command may require a firmware upgrade for the BIOS ROM of certain HP blade PCs.
5-22
Enclosure Management Commands (Continued) Generates an NMI on the specified blade. Then consequences of an NMI are operating system specific. Powers on the specified blade PC. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional book arguments may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument forces the blade to abandon the regular boot order and forces a boot using the specified method. Sends a request to the blade PC to perform a graceful shutdown. The blade PC is then powered on. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional boot arguments may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument with force the blade to abandon the regular boot order and force a boot using the specified method. SET BAY BOOT FIRST [HDD | PXE] <bay number> {[ , | ] <bay number>} SET BAY BOOT ONCE [HDD | PXE | RBSU] <bay number> {[ , | - ] <bay number>} SHOW BAY LIST [ALL | <group name>] Sets the IPL for each subsequent reboot. This setting is only valid for present blades and is cleared if a blade is removed. This command may require a firmware upgrade of the BIOS. Sets the boot device to be used on the next boot of the bay(s) specified. This setting is only valid on present blades and is cleared if the blade is removed. This command may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Displays the assigned to group, remote console user, and blade PC name for each bay in a particular group if a group name is specified or all bays if ALL is specified. Only enclosures and administrators may execute this command Allows for optional boot argument Allows for optional boot argument All
REBOOT BAY <bay number> {[ , | - ] <bay number>} {FORCE} {[PXE | HDD | RBSU]}
5-23
Enclosure Management Commands (Continued) Displays the syslog of a specified blade with 22 lines per screen. Typing q quits the command; any other key shows the next screen if more information is available to display. The system log of the blade PC is not stored between reboots, so the information only includes what has taken place since the last power on of the Integrated Administrator. Typing c displays the System Log continuously without page breaks. ADD IPMANAGER <IP address> DISABLE ALERTMAIL Adds an IP address to the list of clients allowed to connect to Integrated Administrator. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. All
DISABLE IPSECURITY
DISABLE NTP
Disables automatic updates of the date and time to the Integrated Administrator.
ENABLE ALERTMAIL
ENABLE IPSECURITY
ENABLE NTP
5-24
Enclosure Management Commands (Continued) Removes the IP address from the list of clients allowed to connect to Integrated Administrator. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command.
Sets the e-mail address of the alert recipient, the domain name, and the mail server address.
Sets the IP address of the primary and secondary NTP servers. Also sets the frequency of the updates.
Displays the DHCP state, Dynamic DNS state, IP address, subnet mask, gateway address, primary and secondary DNS addresses, MAC address, HTTP and HTTPS server status, SNMP status, Secure Shell status, Telnet status, NTP status, NTP primary and secondary server address, NTP poll interval, NTP last update time, IP security configuration, AlertMail status, AlertMail mailbox, SMTP server address and sender domain of the enclosure. Allows modification of the serial number reported by the enclosure information.
5-25
5-26
6
Setting Up the System
This chapter explains the levels of user rights recognized by the Integrated Administrator and provides detailed procedures to configure the management functions provided by the Integrated Administrator.
Changing the Administrator password Modifying enclosure and rack names Modifying the asset tag number Modifying the date and time Adding a group Adding a user
Adding mailbox address Adding SMTP server address Adding Sender Domain Enabling AlertMail Disabling AlertMail Adding IP address Enabling IP Security Disabling IP Security Adding primary NTP server Adding secondary NTP server Setting the poll interval Enabling NTP Disabling NTP
Setting up IP Security
6-1
Entering a community string Modifying the system location Modifying the system contact information Adding trap targets Removing trap targets
For a detailed explanation of the command line conventions used in this document, see Appendix A, in section Command Line Conventions. These procedures are supported by the Web-based user interface and the CLI unless otherwise noted. of these For more on can perform Mosttask, see tasks are limited to a subset of users.the section informationthat who in this chapter. each the User Permissions section and describing task
User Permissions
The group-centered approach of Integrated Administrator to user permissions facilitates the maintenance of user groups and groups of blade PC bays. This approach operates according to the following principles:
A blade PC bay is assigned exclusively to one group only. A group can be assigned many blade PC bays. A user can have various permission levels within any number of groups. Access to a blade PC by users or groups depends on the rights assigned to the blade PC bay in which the blade PC is installed.
Use the following table to distinguish the various permission levels available from the HP PC Blade Enclosure Integrated Administrator.
6-2
Administrator
Enclosure administrators may maintain blade PC bay privileges, manage the enclosure, manage blade PC bays, and create and maintain groups. One special enclosure administrator account (named Administrator) cannot be deleted, disabled, or stripped of enclosure administrator permissions. No other enclosure administrator may change the password to this account. Enclosure administrators cannot disable or delete their own accounts.
Group Administrator
User
View/Modify
Group administrators may manage blade PC bay data for groups in which they are administrators. Group administrators may view blade PC bay data for groups in which they are members. Group administrators may modify their profile (not their privileges) and view enclosure data.
Group member
User
View
Group members may view blade PC bay data for groups in which they are members. Group members may modify their profile (not their privileges) and view enclosure data.
User
User
Users may modify their profile (not their privileges) and view enclosure data.
6-3
3. Click the Administrator user name in the user list. 4. Click View/Modify User. The View/Modify User screen displays. 5. Click Change Password. 6. Type in the new Administrator password in the Password and Confirm password fields. 7. Click OK. To change the default Administrator password using the CLI, type:
SET USER PASSWORD Administrator <new password>
The user name (Administrator) is case-sensitive. The <new password> must be 3-8 characters long and can include all printable characters.
Modifying Enclosure and Rack Names
To modify the enclosure name or rack name using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Enclosure Information in the left panel. 3. Click the Enclosure Name field of the Status area. 4. Type the enclosure name. 5. Click the Rack Name field of the Status area. 6. Type the rack name.
7. Click Apply. To modify the enclosure name or rack name using the CLI, enter the following commands sequentially: SET ENCLOSURE NAME <enclosure name>
6-4
<enclosure name> must Theunderscore characters. be 1-32 characters long and includes all alphanumeric, the dash, and the The default enclosure name is IA-XXXXXXXXXXXX where XXXXXXXXXXXX is replaced with the actual MAC address: SET RACK NAME <rack name> <rack name> must be maximum characters long and includes The underscore characters.aThe defaultof 32 name is UnnamedRack. all alphanumeric, dash, and rack
6. Click Apply. To modify the asset tag number using the CLI, type:
SET ENCLOSURE ASSET {TAG} <asset tag>
tag> must 1-31 characters long and The <asset The defaultbeenclosure asset tag is blank.includes alphanumeric, dash, and underscore characters.
6-5
On a Linux system, this information can only be modified using the CLI.
1. Click the Enclosure tab. 2. Click Enclosure Information in the left panel. 3. Scroll down to the Date and Time area. 4. Select the proper time zone from the pull-down list. 5. Click the Date or Time field. 6. Type the date or time.
7. Click Apply. To modify the date and time settings using the CLI, type:
SET DATE MMDDhhmm{{CC}YY} {TZ}
where:
MM: month DD: day hh: hour (24-hour time, an integer from 0-23) mm: minute CC: century YY: year TZ: timezone
zone is left If the time Appendix F,blank, the current time zone is left in effect. For a list of supported time zones, see Time Zone Settings.
6-6
Adding groups with access to specific blade PC bays in an enclosure Adding users with certain permissions within specific groups
Adding a Group
user accounts Restricted default names of group andand user names (Administrator, switcha, and switchb) are not case-sensitive. Nondefault group are case-sensitive. For more information on the Web-based user interface screens for this function, see Chapter 4, in section Group List. For information on using the CLI, see Chapter 5, in section User Account Commands. To create a group using the Web-based user interface: 1. Click the Administration tab. 2. Click Add Group in the left panel. 3. Type the group name and description in the fields. 4. Select bays for the group by selecting the appropriate check boxes.
If a blade PC bay is gray, that blade PC bay is inaccessible because it already belongs to another group.
6-7
5. To add existing users to this group: a. Select users in the User Names area.
b. Click Add User [View] or Add User [View/Modify]. For more information on permission levels, see the User Permissions section in this chapter. 6. Click Apply. To create a group using the CLI, type the following commands sequentially:
ADD GROUP <group name>
6-8
user names and The <group name> must be unique to all other group names andall alphanumeric is case-sensitive. It must be 1-13 characters long and can include characters, the dash, and the underscore.
SET GROUP {DESCRIPTION} <group name> <description>
0-20 The <description> must bespaces.characters long and can include all alphanumeric characters, the dash, the underscore, and
ASSIGN BAY [ALL | <bay number> {[ , | - ]<bay number>}] <group name> ASSIGN USER <user name> <group name> {[VIEW | MODIFY]}
and name> are case-sensitive. The Administrator account cannot be The <usera name> The <group setting is View. added to group. default
Adding a User
Restricted default names of group and user accounts are not case-sensitive. Nondefault group and user names are case-sensitive.
For information on permission levels, see the User Permissions section in this chapter. To create a user using the Web-based user interface: 1. Click the Administration tab. 2. Click Add User in the left panel. 3. Type the user information in the appropriate field. For information on Account Type, see the User Permissions section in this chapter.
6-9
The Account Type setting determines whether the holder has management permissions. The optional Full Name and Contact Informationaccountprovide the account holders name and fields a readily accessible means of contact in case of emergency. 4. To assign the user to an existing group: a. Select groups in the Group Names area.
b. Click Add User [View] or Add User [View/Modify]. For more information on permission levels, see the User Permissions section in this chapter.
5. Click Apply.
6-10
To add a user using the CLI, type the following commands sequentially:
ADD USER <user name> {<password>}
name> must be unique to all case-sensitive. The <user 1-13 characters long and can other user names and group names and isdash, and the It must be include all alphanumeric characters, the underscore. The <password> must be 3-8 characters long and includes all printable characters.
ASSIGN ADMINISTRATOR {RIGHTS} <user name> SET USER FULLNAME {<user name>} <full name>
name> must be The <fullunderscore, and 0-20 characters long and can include all alphanumeric characters, the dash, the spaces.
SET USER CONTACT {<user name>} <contact info>
The <contact info> must be 0-20 characters long and can include all alphanumeric characters, the dash, the underscore, and spaces.
ASSIGN USER <user name> <group name> {[VIEW | MODIFY]}
Setting Up AlertMail
AlertMail enables users to receive system events by e-mail instead of using SNMP traps. AlertMail is completely independent from SNMP and both can be enabled at the same time. AlertMail uses standard SMTP commands to communicate with an SMTP capable mail server. AlertMail Commands
Function Add an e-mail address using command line interface Add an SNMP server address
Command
SET ALERTMAIL MAILBOX <email address> SET ALERTMAIL SMTPSERVER <ip address> SET ALERTMAIL SENDERDOMAIN <domain name> ENABLE ALERTMAIL DISABLE ALERTMAIL
* For security reasons, some SMTP servers will only forward mail if the senders domain is set properly. You may need to set this parameter to match the network domain.
HP PC Blade Enclosure Integrated Administrator for CCI v1.4 User Guide 6-11
E-mail Alerts
AlertMail, if enabled, will send out alerts by e-mail for the following events:
Enclosure boot message IA reboot message Fan status change Fan inserted Fan removed Enclosure thermal status change Power supply status change Power supply inserted Power supply removed Power subsystem redundancy change Blade inserted Blade removed Blade status change Blade thermal change Blade fault
can take up to 60 seconds before the will send If the enclosure has a switch installed, it Events generated within this period ofsystemwill be sent out an AlertMail after a system boot up. time out when the switch has come online. All e-mails have the following header: Subject: HP AlertMail-SEQ: <SEVERITY> SUBJECT Date: Date in standard format From: Enclosure ENCLOSURE-NAME <enclosure-name@domain> To: RECEIVER MAILBOX Where SEVERITY is one of the following:
6-12
Example e-mail: ----SAMPLE START---Subject: HP AlertMail-010: (CRITICAL) Power Supply #1: Failed Date: Wed, 23 Apr 2003 15:02:22 +0200 From: Enclosure IA-00508BEBA571 <IA-00508BEBA571@hp.com> To: user@userdomain X-OS: HP Integrated Administrator X-Priority: 1 Content-Type: text/plain; charset=us-ascii EVENT (26 May 07:09): Power Supply #1 Status has changed to: Failed Enclosure, IA-00508BEBA571, has detected that a power supply in bay 1 has changed from status OK to Failed. The power supply should be replaced with the appropriate spare part. You can ensure that the center wall assembly is operating correctly by swapping the two power supplies. Make sure that there are no bent pins on the power supply connectors before reinserting and that each power supply is fully seated. An amber LED on the power supply indicates either an over-voltage, over-temperature, or loss of AC power event has occurred. A blinking LED on the power supply indicates a current limit condition. Enclosure Status: Degraded Enclosure Management URL: <https://16.181.75.213/> - PLEASE DO NOT REPLY TO THIS EMAIL ----SAMPLE END----
Setting Up IP Security
IP security allows an administrator to define a set of IP addresses that are the only ones allowed to connect to the services provided (SSH, HTTP, TELNET, SNMP). This means that an administrator can make sure only a certain set of machines have access to Integrated Administrator. You can enter a maximum of five IP addresses. IP Security Commands
Function Add an IP address Remove an IP address Enable IP security Disable IP security
Command
ADD IPMANAGER <ipaddress> REMOVE IPMANAGER <ip address> REMOVE IPSECURITY DISABLE IPSECURITY
6-13
SET NTP POLL <seconds> SET NTP PRIMARY <ip address> SET NTP SECONDARY <ip address> SET NTP SECONDARY NONE ENABLE NTP DISABLE NTP
* If an NTP poll interval is not set, it will default to 720 seconds. The minimum time is 60 seconds and the maximum time is 9999 seconds.
6-14
The write <community name> must be 0-20 characters long and the read <community name> must be 1-20 characters long. Both community names support all alphanumeric characters, the underscore, and the dash characters. The default read community name is public, and the default write community name is blank.
The SNMP protocol can be disabled in the Network Configuration area of the Web-based user interface.
To modify the system location information using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 3. Set the cursor in the System Location field and type the appropriate information. 4. Click Apply. To modify the system location information using the CLI, type:
SET SNMP LOCATION <location>
The <location> field must be 0-20 characters long and supports all the alphanumeric characters, the underscore, the dash, and spaces with quotes.
6-15
The <contact> field must be 0-20 characters long and supports all the alphanumeric characters, the underscore, the dash, and spaces with quotes.
The <IP address> must be in the form ###.###.###.###, where ### ranges from 0 to 255. The Integrated Administrator only supports v1 traps and directs the traps to SNMP port 162 by default. You can add a maximum of eight IP addresses to receive SNMP traps.
The <IP address> must be in the form ###.###.###.###, where ### ranges from 0 to 255.
6-16
7
Performing Common Administrative Tasks
This chapter explains the following Integrated Administrator management functionalities:
Opening a remote console session to a blade PC Accessing ROM-Based Setup Utility for a blade PC Reviewing the activity for a blade PC Powering off the blade PC
CAUTION: Without the blade PC health driver, the Integrated Administrator cannot gracefully shutdown a blade PC.
Identifying a blade PC using the Unit Identification LED Reviewing the activity for the enclosure Identifying the enclosure using the Unit Identification LED Generating an enclosure summary Identifying problem components Modifying a users rights to blade PC bays Disabling and deleting user accounts
Managing users
7-1
4. Click Remote Console. The Remote Console screen displays. 5. Click Remote Console to open a new window that enables you to connect to the blade PC terminal interface. To access the remote console using the CLI, type:
CONNECT BAY <bay number>
7-2
CAUTION: Without the blade PC health driver, the Integrated Administrator cannot reboot a blade PC.
b. If the blade PC is off, select Power On at the bottom of the screen; otherwise, select Reboot at the bottom of the screen. c. Click Apply and return to the remote console session. 7. When prompted, press F10 for ROM-Based Setup Utility: a. Press Esc. b. Press the 0 key. 8. To exit RBSU: a. Press Esc. b. When prompted, press F10, press the Esc key and the 0 key to confirm. 9. To close the remote console session: a. Press the Ctrl + Shift + _ keys. b. Press the D key. To access the RBSU for a blade PC using the command line interface:
CAUTION: Without the blade PC health driver, the Integrated Administrator cannot reboot a blade PC.
1. If the blade PC is running the Windows 2000 operating system, reboot the blade PC by entering the following commands sequentially:
REBOOT BAY <bay number> Yes
3. When prompted, press the F10 key for ROM-Based Setup Utility for Blade PCs: a. Press Esc. b. Press the 0 key. 4. To exit RBSU: a. Press Esc. b. When prompted, press F10, press the Esc key and the 0 key to confirm. 5. To close the remote console session: a. Press the Ctrl + Shift + _ keys. b. Press the D key.
4. Click Console Log under Bay Information. To view the system log for a blade PC using the CLI, type:
SHOW SYSLOG BAY <bay number>
Entering q any screen more is availablequits the command. Typingof theother key shows the nextbetweenifreboots,information to display. The system log blade PC is not stored so the information only includes what has taken place since the last power-on of the Integrated Administrator.
CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shutdown a blade PC. This condition may result in the permanent loss of critical data. CAUTION: Rebooting or powering off the blade PC removes all power from the blade PC and ends all open sessions.
a PC This task can only be performed for thegiven bladebay. bay by enclosure administrators and group administrators with access rights to blade PC To reboot or power off the blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Click the blade PC whose power state to modify. 4. Click Virtual Buttons at the bottom of the screen. 5. Click Reboot, Power Off or Power Off Immediately.
6. Click Apply.
7-4 HP PC Blade Enclosure Integrated Administrator for CCI v1.4 User Guide
When the blade PC power is off, the Power Off button text becomes Power On. To reboot the blade PC using the CLI, type:
REBOOT BAY <bay number> {[ , | - ] <bay number>} {FORCE} {[PXE | HDD | RBSU]}
command request This reboots thesends aPC. to the blade PC in a given bay to perform a graceful shutdown and then blade To power off the blade PC (immediately or otherwise) using the CLI, type:
POWEROFF BAY <bay number> {[ , | - ] <bay number>} {FORCE}
If the FORCE argument is invoked, the blade PC powers down immediately and could lose data or become unstable.
Identifying a Blade PC Using the Unit Identification LED
task given blade You can perform thisaccessonly fortoathe blade PCPC bay by enclosure administrators and group administrators with rights bay. The virtual button for the Unit Identification LED of the blade PC physically changes the state of the Unit Identification LED on the front panel of the blade PC from off to on, or vice-versa. The Unit Identification LED illuminates bright blue and is designed to help a technician quickly identify a specific blade PC in the data center. To change the state of a Unit Identification LED of for a blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Click the blade PC whose Unit Identification LED you wish to toggle. 4. Click Virtual Buttons at the bottom of the screen. 5. Click Toggle ON or Toggle OFF depending on the current state of the Unit Identification LED for the blade PC.
7-5
To change the state of the Unit Identification LED for a blade PC using the CLI, type:
SET BAY UID <bay number> {[ , | - ] <bay number>} [ON | OFF]
User account modifications Group modifications Bay assignment modifications Valid and invalid login attempts System failures System status changes Blade insertion and removals DHCP, Dynamic DNS, and WINS messages Updates to the Integrated Administrators firmware
Enclosure administrators can view events in the enclosure by accessing the System Log. In contrast to the Event List, no other users can access the System Log. For more information on how the Event List differs from the System Log, see the Identifying Problem Components section in this chapter. To view the System Log using the Web-based user interface: 1. Click the Enclosure tab.
7-6
3. To update the System Log, click Refresh. 4. To clear the System Log, click Clear Log. The Integrated Administrator prompts you to confirm this decision. To view the System Log of the enclosure using the CLI, type:
SHOW SYSLOG ENCLOSURE
7-7
To change the state of the Unit Identification LED for the enclosure using the CLI, type:
SET ENCLOSURE UID [ON | OFF]
To obtain the enclosure information using the CLI, enter the following commands as needed:
SHOW ENCLOSURE FAN [<fan number> | ALL]
This command displays the status, redundancy, partner, speed, and part number for one or all fans in the enclosure.
7-8 HP PC Blade Enclosure Integrated Administrator for CCI v1.4 User Guide
This command displays the enclosure name and enclosure type; the software and hardware version of the Integrated Administrator; the part number, serial number, and asset tag number of the enclosure; the MAC address of the Integrated Administrator; and the type, part number, and serial number of the interconnect tray.
SHOW ENCLOSURE POWERSUPPLY [<power supply number> | ALL]
This command displays the status, AC input status, capacity, input voltage range #1 (Volts), input voltage range #2 (Volts), input frequency range (Hz), part number, serial number, and hardware revision for one or all power supplies in the enclosure.
SHOW ENCLOSURE STATUS
This command displays the status of enclosure health, Integrated Administrator health, and the Unit Identification LED under the heading enclosure status, and displays the status and capacity of the power supplies of the enclosure under the heading power status.
SHOW ENCLOSURE TEMP
This command displays the location, status (OK, warm, degraded, or failed), and temperature (degrees Fahrenheit and Celsius) for all the temperature sensors of the enclosure.
If the enclosure enters a degraded state at any time, the Web-based user interface of the Integrated Administrator alerts the user with icons along the top of the deck panel.
7-9
Identify the degraded components in the enclosure and their respective part numbers in the following ways:
Opening the enclosure system log Opening the event list - the event list differs from the system log in the following ways:
Any user can view the event list. Only enclosure administrators can access the system log. The messages in the event list are limited to cautions and critical failures. Refer to the enclosure system log for information on fixes. The event list only displays messages received since the user logged into the Integrated Administrator. The system log displays every message generated by the enclosure diagnostics.
Clicking on the Caution or Critical icon along the top of the deck panel
This action opens the event list. By highlighting an item in the event list and clicking View Event Details, you can access the area within the Integrated Administrator that provides detailed information about that degraded component. you click the Caution As soon as are corrected or not. or Critical icon, that icon disappears whether the degraded conditions To identify a degraded component using the System Log from the Web-based user interface: 1. Click on the Enclosure tab. 2. Click on System Log in the left panel.
3. Go to the appropriate area in the Integrated Administrator for the spare number of the degraded component.
7-10
To identify a degraded component using the event list from the Web-based user interface: 1. Click the Event List tab.
2. Click the degraded item in the event list. 3. Click View Event Details at the bottom of the screen.This action opens the page in the Integrated Administrator that displays information about the degraded component. To identify a degraded component using the Caution or Critical icons along the top of the deck panel from the Web-based user interface, click an icon. This action opens the event list. By highlighting an item in the event list and clicking View Event Details, you can access the area within the Integrated Administrator that provides detailed information about that degraded component.
7-11
To identify a degraded component using the CLI: 1. Type: SET DISPLAY EVENTS [ON | OFF] Choosing the on option for this command ensures that all users are able to see failures as they occur while they are logged into the Integrated Administrator. 2. Type the appropriate commands:
SHOW ENCLOSURE FAN [<fan number> | ALL]
This command displays the status, redundancy, partner, speed, and part number for one or all fans in the enclosure.
SHOW ENCLOSURE INFO
This command displays the enclosure name, type, part number, serial number, and asset tag number; the Integrated Administrator software and hardware version; the MAC address of the Integrated Administrator, and the interconnect tray type, part number, and serial number.
SHOW ENCLOSURE POWERSUPPLY [<power supply number> | ALL]
This command displays the status, AC input status, capacity, input voltage range #1 (Volts), input voltage range #2 (Volts), input frequency range (Hz), part number, serial number, and hardware revision for one or both power supplies in the enclosure.
SHOW ENCLOSURE STATUS
This command displays the status of enclosure health, Integrated Administrator health, and the Unit Identification LED under the heading enclosure status, and displays the status and capacity of the power supplies of the enclosure under the heading power status.
SHOW ENCLOSURE TEMP
This command displays the location, status (OK, warm, degraded, or failed), and temperature (degrees Fahrenheit or Celsius) for all the temperature sensors of the enclosure.
7-12
Managing Users
Creating a new group for the user with the updated access rights to the blade PC bays Modifying the rights to blade PC bays for a group to which the user has membership
3. Click on the group whose rights you wish to modify. 4. Click View/Modify Group.
7-13
5. Select the appropriate check boxes for the available blade PC bays that reflects the updated rights you wish to give the group. Grayed-out check boxes are unavailable because they are already assigned to another group. 6. Click Apply. To modify rights to blade PC bays for an existing group using the CLI, choose from among the following commands:
If a blade PC bay is currently assigned to a group, this command re-assigns the bay from its current group to the new group.
Only enclosure administrators may execute this command. Group accounts can be deleted, but cannot be disabled.
To disable a user account using the Web-based user interface: 1. Click the Administration tab. 2. Click on User List in the left panel. 3. Select the user whose account you wish to disable from the user list. 4. Click View/Modify User.
7-14
5. Set the account status to Disabled. 6. Click Apply. To disable a user account using the CLI, type:
DISABLE USER <user name>
When this command is executed, the user is immediately logged out of the system and prevented from logging in until the account is enabled.
7-15
4. Click Remove User. To delete a user account using the CLI, type:
REMOVE USER [ALL | <user name>]
If ALL is specified, the command deletes all the user accounts except the Administrator account. The Administrator account cannot be removed.
7-16
4. Click Remove Group. To delete a group account using the CLI, type:
REMOVE GROUP [ALL | <group name>]
7-17
7-18
8
Performing Advanced Functions
This chapter provides an explanation of the following advanced tasks you can perform using the Integrated Administrator. These procedures are supported by the Web-based user interface and the CLI unless otherwise noted:
Key-Based SSH Authentication Configuring a Blade PC Boot Order Powering off the enclosure Disabling network protocols to the Integrated Administrator Upgrading the firmware of the Integrated Administrator Recovering a lost Administrator password Launching flash disaster recovery
The Integrated Administrator does not support this task using the Web-based user interface.
To set up several enclosures with the same configuration, configure one enclosure (such as add all user accounts, add all groups, and assign bays) and then replicate that configuration on the other enclosures. To replicate the configuration of the Integrated Administrator using the CLI: 1. Login as Administrator on the first enclosure. 2. Type: UPLOAD CONFIG <url>. This command uploads the current runtime configuration to the specified TFTP or FTP server. If your FTP server does not allow anonymous uploading, specify an FTP username and password using the syntax: ftp://username:password@ftpserver/filename
8-1
3. Edit the uploaded configuration file using a text editor to customize the configuration (such as user names, passwords, and network settings) for the other enclosures.
Step 4 only applies if the other enclosures have been configured previously. For security reasons, passwords are never replicated in the configuration file.
4. Restore the factory defaults on each of the other enclosures to clear any previous configuration: a. Login as Administrator on an enclosure to which you intend to replicate the configuration. b. Type: SET FACTORY. This command sets the Integrated Administrator back to its factory default settings, although the password of the Administrator account does not change. The Integrated Administrator is restarted after all the changes are implemented. IMPORTANT: Only the Administrator account may execute this command. 5. Download the configuration to each of the other enclosures: a. Log in as Administrator on an enclosure to which you intend to replicate the configuration. b. Type: DOWNLOAD CONFIG <url>. The Integrated Administrator does not check the configuration file for errors, but auto-executes the file in script mode. The file is not allowed to change the password of the Administrator account. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, specify a user name and password by replacing the host part in the above format with username:password@host.
Step c applies only if you did not set user account passwords in the configuration file.
c. Set the password for each user account. For commands, see Chapter 5, in section User Account Commands.
The Integrated Administrator does not support these tasks using the Web-based user interface.
Creating a Certificate Request
To create a security certificate using the CLI, type: GENERATE CERTIFICATE REQUEST This command generates a PKCS#10 certificate request. This certificate request can be sent to your certification authority (CA) to obtain a PKCS#7 certificate file to use below. To create a self-signed security certificate using the CLI, type: GENERATE CERTIFICATE
SELFSIGNED
This command generates a self-signed PKCS#7 certificate to replace the existing SSL certificate. This certificate is signed with the current name of the enclosure and will be valid for 10 years. Users who do not have a certificate authority (CA) may use this certificate as a replacement.
8-2
This command downloads a CA supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as: protocol://host/path/file If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format: username:password@host
To view any current installed authorized SSH keys, type: SHOW SSHKEY This command shows any keys currently installed on the Integrated Administrator that are authorized to log in using an enclosure administrator account.
SSHFINGERPRINT
To view the fingerprint of the Integrated Administrator host key, type: SHOW This command shows the fingerprint of the host key for the Integrated Administrators. Users may compare this fingerprint with the fingerprint displayed by their SSH client when connecting to the Integrated Administrators to guarantee the authenticity of the Integrated Administrator connection. Users who need guaranteed authenticity will want to use the Integrated Administrator serial console to obtain the SSH fingerprint for the first time.
To clear any currently installed authorized SSH keys, type: CLEAR SSHKEY This command clears any authorized keys currently installed on the Integrated Administrator that are authorized to log in. After this command has been issued, all users have to enter a valid password in order to log in.
To download and install one or more SSH keys, type: DOWNLOAD SSHKEY <URL> This command downloads and install a file containing one or more SSH keys which are authorized to log into the Integrated Administrator. The new file will replace any existing keys.
Supported protocols are http, ftp and tftp. Format the URL as: protocol://host/path/file. If your ftp server does not support anonymous logins, you can specify a username and password by replacing the host part (in previous format) with: username:password@host. The Integrated Administrator supports multiple SSH keys in one downloaded file. Max file size for SSH keys is 16K. Key-based SSH logins has an advantage for use with scripting as well. Remote commands can be sent to any Integrated Administrator after installing the appropriate authorized key without having to enter a password between each command. Using the OpenSSH package, the user can send commands using the following syntax: ssh user@host command You can group together commands to perform a series of actions. To view the health status of the enclosure and all blades with a single command, type:
8-3
By having an authorized key file installed on the Integrated Administrator, the user can combine these without having to enter a password between each command sent to the Integrated Administrator.
During the next reboot, this will set the specified blade PC boot order to use the given boot device first. This has the same effect as changing the Standard Boot Order (IPL) setting in the RBSU on the blade PC. To set a blade PC boot order for the next boot only, type:
SET BAY BOOT [ONCE | ALWAYS] [HDD | PXE | RBSU] [ALL | <bay number> {[,|-] <bay number>}]
This will force the specified blade PC to boot to the specified media on the next boot only. The RBSU setting will make the blade PC(s) boot into the RBSU which can be viewed with the Remote Console functionality. The HDD setting forces the blade PC to boot from the hard drive first, and the PXE setting forces it to boot from the integrated NIC first. To reset blade boot order settings which have not yet taken effect, type:
CLEAR BAY BOOT [FIRST | ONCE | ALWAYS] [ALL | <bay number> {[,|-] <bay number>}]
This will clear changes to the specified blade PC boot order that were made with the SET BAY BOOT command. It only affects pending changes so if the blade PC has been rebooted since the SET BAY BOOT command, this command will have no effect. The POWERON BAY and REBOOT BAY commands have been extended to allow an argument which sets blade PC boot order for that boot only. These settings are the same as the SET BAY BOOT ONCE command. To determine if any boot order changes are pending for a specific blade, use the SHOW BAY INFO command. The Pending Boot Order: status line will show any pending changes to the boot order, either one-time or permanent.
8-4
CAUTION: Powering off the enclosure removes all power from the blade PCs and ends all open sessions. After powering off the enclosure, you can only power on the enclosure if you have physical access to the enclosure.
To power off the enclosure using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Virtual Buttons in the left panel.
3. Click Power Off. 4. Click Apply. To power off the enclosure using the CLI, type: POWEROFF ENCLOSURE This command attempts to perform a graceful shutdown of the enclosure by powering off each blade PC and then powering off the enclosure. After 5 minutes, the command powers down all components of the system immediately if they are not already powered off.
CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shutdown a blade PC. This condition may result in the permanent loss of critical data.
8-5
3. Select the appropriate radio buttons in the Protocols area. 4. Click Apply. To modify the supported communications protocols of the enclosure using the CLI, choose from among the following commands:
To disable http/https communication, type: DISABLE WEB Disabling http/https causes the users to lose access to the Web-based user interface. To disable automatic time updates, type: DISABLE NTP To disable SNMP communication, type: DISABLE SNMP To disable Secure Shell communication, type: DISABLE SECURESH Disabling Secure Shell causes the users to lose access to the Web-based user interface. To disable telnet communication, type: DISABLE TELNET
http://host/path
8-6
...where host is a fully qualified domain name or an IP address and path is the pathname of the flash image to download. Refer to the documentation associated with the firmware upgrade for detailed information.
3. Open a terminal emulation application. 4. Press and hold the enclosure Unit Identification button (1) and press the Integrated Administrator Reset button (2) simultaneously on the rear panel of the blade PC to place the enclosure in Lost Password/Flash Disaster Recovery mode.
5. When the serial console prompt appears, press the L key. This command boots the system in Lost Password mode, which resets the Administrator password to the factory default and displays it on the console.
8-7
DHCP server TFTP server A connection to the Integrated Administrator serial console Integrated Administrator ROM image file on the TFTP server
any valid The filename of the ROM image of the Integrated Administratorbecan bevalid imageASCII filename. The ROM image of the Integrated Administrator can any that supports the update image" facility in the operating system. The Integrated Administrator will automatically enter Flash Recovery mode when a corrupted image is detected. Flash Recovery mode can also be manually initiated.
2. Press and hold the enclosure Unit Identification button (1) and press the Integrated Administrator Reset button (2) simultaneously on the rear panel of the blade PC to place the enclosure in Lost Password/Flash Disaster Recovery mode.
8-8
IP address of the TFTP server Filename of the ROM on the TFTP server
The Integrated Administrator then downloads and verifies the ROM and updates the flash memory.
8-9
8-10
A
Command Line Conventions
The following table lists the conventions used by the Command Line Interface (CLI). CLI Conventions
Symbol <lower case> UPPER CASE [] {} |
Description
Devotes input to be keyed in Denotes input to be keyed in as shown Denotes choices to be made where a choice is mandatory Denotes choices to be made where a choice is optional Separates input options Used to enclose arguments that contain spaces
For example, the following command requires the user to input whether the Integrated Administrator is operating in a DHCP or Static network environment.
SET IPCONFIG [DHCP {DYNAMICDNS} | STATIC <IP address> <netmask> ]
Specifying Dynamic DNS is optional for executing this command for the DHCP environment, but specifying the IP address and netmask are required for executing this command for the static environment.
A-1
A-2
B
Error Messages
The messages provided in this appendix are divided into the following categories:
Warning Messages
This section provides a comprehensive list of warning messages specific to the major components of the Integrated Administrator. These warning messages advise you that you have implemented a configuration change or prompt you to confirm whether you wish to proceed with your requested action.
Changing an SNMP value with the SNMP protocol disabled Attempting to set a blank Read Community string Attempting to power off the enclosure Attempting to restart the Integrated Administrator Attempting to clear the system log Attempting to enable IP Security
B-1
Error Messages
This blade has been powered off. All open sessions will be closed. Are you sure that you want to power off the blade immediately? This process may result in the loss of any unsaved data on the blade.
Error Messages
Enclosure Error Messages
Enclosure Error Messages
Error Message The maximum number (8) of trap destinations has been reached. The trap destination of ###.###.###.### is already on the list. Enter a new value. An error occurred while clearing the system log. Please try again. Cause Attempting to add a 9th trap destination Attempting to add a duplicate trap destination Attempting to clear the system log Valid Input N/A N/A
N/A
B-2
Error Messages
This user name already exists. Please select a different user name.
The Password fields are empty. Please enter a value in each password field. The Password field is empty. Please enter a password. The Confirm Password field is empty. Please enter a password. The password must be at least 3 characters in length. Please enter a new password. The passwords do not match. Please try again. The maximum number (25) of users exists on the system.
Attempting to create a user with a blank password Attempting to create a user with a blank Password field Attempting to create a user with a blank Confirm Password field Attempting to create a user with a password that is less than 3 characters long Different strings in the Password and Confirm Password fields Attempting to create a 26th user
B-3
Error Messages
The maximum number (20) of groups exists on the system. The Password fields are empty. Please enter a value in each password field. The Password field is empty. Please enter a password. The Confirm Password field is empty. Please enter a password. The password must be at least 3 characters in length. Please enter a new password. The passwords do not match. Please try again. NTP Poll-Interval has to be between 60 and 9999 seconds.
Attempting to create a 21st group Attempting to create a user with a blank password Attempting to create a user with a blank Password field Attempting to create a user with a blank Confirm Password field Attempting to create a user with a password that is less that 3 characters long Different strings in the Password and Confirm Password fields Attempting to set an NTP poll interval that is not between 60 and 9999 seconds. Attempting to enter an IP address that is not in the correct format. Attempting to set an NTP server address, but the address entered is not an NTP server.
Invalid NTP address supplied. IP address should be in ###.###.###.### format where ### is between 0 and 255. ###.###.###.### is not a valid NTP server.
B-4
Error Messages
N/A
N/A
N/A
N/A
N/A
Invalid IP address supplied. IP address should be in ###.###.###.### or ###.###.###.###/## format where ### is between 0 and 255 and ## is between 0 and 32. Invalid e-mail address supplied. Address should be in user@domain.tld format.
###.###.###.### where ### is between 0 and 255 and ## is between 0 and 32. E-mail addresses formatted user@domain.tld and containing a maximum of 64 characters. E-mail addresses formatted user@domain.tld and containing a maximum of 64 characters.
B-5
Error Messages
B-6
C
Troubleshooting
This appendix provides troubleshooting information for the Integrated Administrator that ships as part of the HP PC Blade Enclosure. Use it to find details about solving performance problems that may arise when viewing or managing enclosure, blade PC, or user information using the Integrated Administrator. For information on LEDS, switches, and troubleshooting information for the HP PC Blade Enclosure, refer to the HP PC Blade Enclosure Setup and Installation Guide. Integrated Administrator Troubleshooting
Problem My Web browser flickers when I view the Integrated Administrator applet. My Web browser is not supported by the Integrated Administrator. I am having general browser problems. Possible Solution Be sure the client browser has at least 16-bit color depth.
Be sure to use a supported Web browser. For the most up-to-date information on supported Web browsers, please view the customer advisories located at: www.hp.com/go/cci For the most recent tips regarding the Integrated Administrator, refer to the customer advisories on the following Web site: www.hp.com/support
C-1
Troubleshooting
The Integrated Administrator supports up to 48 concurrent sessions. Be sure the number of sessions has not reached this threshold and check with an enclosure administrator to be sure your account is not disabled. The Event list only displays negative events that happen during the users login session. Although repairs are not listed here, the user may highlight the event and click on View/Modify to see the present event status. The user can also view the System Log of the enclosure.
C-2
D
Event Icons and Details
The Integrated Administrator provides real-time event notifications for an enclosure according to two categories: caution and critical. When an event occurs, the Integrated Administrator notifies the user by generating an icon that the user can click to view more details: Event Notification Icons
Icon Description CautionAn event that does not prevent the enclosure from operating, maintaining power, or serving its user community When a Caution event occurs, a reasonable guarantee that operability can persist no longer exists. CriticalAn event that prevents the continued operation of the enclosure When a Critical event occurs, the inoperability of the enclosure is imminent.
The following table provides a comprehensive list of event messages in a format that reflects the display of the Integrated Administrator. Event Details
Severity Source Enclosure Date <date> Time <time> Event Details The enclosure has experienced a failure.
Enclosure
<date>
<time>
Enclosure
<date>
<time>
Power supply # has experienced a failure. The enclosure temperature has exceeded the critical threshold. Blade # has experienced a failure.
Enclosure
<date>
<time>
Blade in bay #
<date>
<time>
D-1
Enclosure
<date>
<time>
Enclosure
<date>
<time>
Enclosure
<date>
<time>
The redundancy of the power supplies is in an unknown state. The power supplies are no longer redundant. Power supply # is in a degraded state. The enclosure temperature has exceeded the caution threshold. Blade # is in a degraded state.
Enclosure
<date>
<time>
Enclosure
<date>
<time>
Enclosure
<date>
<time>
Blade in bay #
<date>
<time>
Blade in bay #
<date>
<time>
D-2
E
Factory Default Settings
This appendix provides the factory default settings for the following components of the HP PC Blade Enclosure Integrated Administrator.
Enclosure
The following table provides the default values in the Integrated Administrator for fields related to the blade PC enclosure. Default Enclosure Values
Field Name Default Value IA-XXXXXXXXXXXX where XXXXXXXXXXXX is the MAC address of the Integrated Administrator Rack Name Asset Tag Time Zone UnnamedRack Blank CST6CDT
Users
The Integrated Administrator provides the following default users:
The switcha and switchb accounts are used when accessing the optionally installed interconnect switch console.
Groups
No default groups are in the Integrated Administrator.
HP PC Blade Enclosure Integrated Administrator for CCI v1.4 User Guide E-1
Network
The Integrated Administrator ships with the following default values assigned: Default Network Values
Field DHCP Dynamic DNS Default Value Enabled Enabled
Protocol
The following table provides the default values in the Integrated Administrator for fields related to network interface protocols: Default Network Values
Field HTTP SSH TELNET SNMP SNMP location SNMP contact READ community WRITE community NTP IP Security AlertMail Default Value On On On On (blank) (blank) Public (blank) Disabled Disabled Disabled
E-2
F
Time Zone Settings
This appendix provides a comprehensive list of time zones supported by the HP PC Blade Enclosure Integrated Administrator. These time zones are organized into the following categories:
Universal
The following table provides the Universal time zone settings supported by the Integrated Administrator.
CAUTION: For the Integrated Administrator to recognize GMT time zones, the Etc. string must precede them.
F-1
Africa
The following table provides the African time zone settings supported by the Integrated Administrator. African Time Zone Values
Africa:Abidjan
Africa:Ceuta Africa:Conakry Africa:Dakar Africa:Dar_es_Salaam Africa:Djibouti Africa:Douala Africa:El_Aaiun Africa:Freetown Africa:Gaborone Africa:Harare Africa:Johannesburg Africa:Kampala Africa:Khartoum Africa:Kigali
Africa:Kinshasa Africa:Lagos Africa:Libreville Africa:Lome Africa:Luanda Africa:Lubumbashi Africa:Lusaka Africa:Malabo Africa:Maputo Africa:Maseru Africa:Mbabane Africa:Mogadishu Africa:Monrovia Africa:Nairobi
Africa:Ndjamena Africa:Niamey Africa:Nouakchott Africa: Ouagadougou Africa:Porto-Novo Africa:Sao_Tome Africa:Timbuktu Africa:Tripoli Africa:Tunis Africa:Windhoek Egypt Libya ---
Africa:Accra Africa:Addis Ababa Africa:Algiers Africa:Asmera Africa:Bamako Africa:Bangui Africa:Banjul Africa:Bissau Africa:Blantyre Africa:Brazzaville Africa:Bujumbura Africa:Cairo Africa:Casablanca
F-2
Asia
The following table provides the Asian time zone settings supported by the Integrated Administrator. Asian Time Zone Values Asia:Aden Asia:Almaty Asia:Amman Asia:Anadyr Asia:Aqtau Asia:Aqtobe Asia:Ashgabat Asia:Ashkhabad Asia:Baghdad Asia:Bahrain Asia:Baku Asia:Bangkok Asia:Beirut Asia:Bishkek Asia:Brunei Asia:Calcutta Asia:Chungking Asia:Colombo Asia:Dacca Asia:Damascus Asia:Dhaka Asia:Dili Asia:Dubai Asia:Dushanbe Asia:Gaza Asia:Harbin Asia:Hong_Kong Asia:Hovd Asia:Irkutsk Asia:Istanbul Asia:Jakarta Asia:Jayapura Asia:Jerusalem Asia:Kabul Asia:Kamchatka Asia:Karachi Asia:Kashgar Asia:Katmandu Asia:Krasnoyarsk Asia:Kuala_Lumpur Asia:Kuching Asia:Kuwait Asia:Macao Asia:Magadan Asia:Manila Asia:Muscat Asia:Nicosia Asia:Novosibirsk Asia:Omsk Asia:Phnom_Penh Asia:Pyongyang Asia:Qatar Asia:Rangoon Asia:Riyadh Asia:Riyadh87 Asia:Riyadh88 Asia:Riyadh89 Asia:Saigon Asia:Samarkand Asia:Seoul Asia:Shanghai Asia:Singapore Asia:Taipei Asia:Tashkent Asia:Tbilisi Asia:Tehran Asia:Tel_Aviv Asia:Thimbu Asia:Thimphu Asia:Tokyo Asia:Ujung_Pandang Asia:Ulaanbaatar Asia:Ulan_Bator Asia:Urumqi Asia:Vientiane Asia:Vladivostok Asia:Yakutsk Asia:Yekaterinburg Asia:Yerevan Hongkong Iran Israel Japan Mideast:Riyadh87 Mideast:Riyadh88 Mideast:Riyadh89 PRC ROC ROK Singapore Turkey
--
F-3
Europe
The following table provides the European time zone settings supported by the Integrated Administrator. European Time Zone Values Eire Europe:Amsterdam Europe:Andorra Europe:Athens Europe:Belfast Europe:Belgrade Europe:Berlin Europe:Bratislava Europe:Brussels Europe:Bucharest Europe:Budapest Europe:Chisinau Europe:Copenhagen Europe:Dublin Europe:Gibraltar Europe:Helsinki Europe:Istanbul Europe:Kaliningrad Europe:Kiev Europe:Lisbon Europe:Ljubljana Europe:London Europe:Luxembourg Europe:Madrid Europe:Malta Europe:Minsk Europe:Monaco Europe:Moscow Europe:Nicosia Europe:Oslo Europe:Paris Europe:Prague Europe:Riga Europe:Rome Europe:Samara Europe:San_Marino Europe:Sarejevo Europe:Simferopol Europe:Skopje Europe:Sofia Europe:Stockholm Europe:Tallinn Europe:Tirane Europe:Tiraspol Europe:Uzhgorod Europe:Vaduz Europe:Vatican Europe:Vienna Europe:Vilnius Europe:Warsaw Europe:Zagreb Europe:Zaporozhye Europe:Zurich GB GB-Eire Poland Portugal
F-4
Oceania
The following table provides the Oceanic time zone settings supported by the Integrated Administrator. Oceanic Time Zone Values Atlantic:Azores Atlantic:Bermuda Atlantic:Canary Atlantic:Cape_Verde Atlantic:Faeroe Atlantic:Jan_Mayen Atlantic:Madeira Atlantic:Reykjavik Atlantic:South_Georgia Atlantic:St_Helena Atlantic:Stanley Australia:ACT Australia:Adelaide Australia:Brisbane Australia:Broken_Hill Australia:Canberra Australia:Darwin Australia:Hobart Australia:LHI Australia:Lindeman Australia:Lord_Howe Australia:Melbourne Pacific:Marquesas Pacific:Midway Pacific:Nauru Pacific:Niue Pacific:Norfolk Pacific:Noumea Pacific:Pago_Pago Pacific:Palau Australia:North Australia:NSW Australia:Perth Australia:Queensland Australia:South Australia:Sydney Australia:Tasmania Australia:Victoria Australia:West Australia:Yancowinna Iceland Indian:Antananarivo Indian:Chagos Indian:Christmas Indian:Cocos Indian:Comoro Indian:Kerguelen Indian:Mahe Indian:Maldives Indian:Mauritius Indian:Mayotte Indian:Reunion Pacific:Pitcairn Pacific:Ponape Pacific:Port_Moresby Pacific:Rarotonga Pacific:Saipan Pacific:Samoa Pacific:Tahiti Pacific:Tarawa Kwajalein NZ NZ-CHAT Pacific:Apia Pacific:Auckland Pacific:Chatham Pacific:Easter Pacific:Efate Pacific:Enderbury Pacific:Fakaofo Pacific:Fiji Pacific:Funafuti Pacific:Galapagos Pacific:Gambier Pacific:Guadalcanal Pacific:Guam Pacific:Honolulu Pacific:Johnston Pacific:Kiritimati Pacific:Kosrae Pacific:Kwajalein Pacific:Majuro Pacific:Tongatapu Pacific:Truk Pacific:Wake Pacific:Wallis Pacific:Yap US:Hawaii US:Samoa --
F-5
Polar
The following table provides the polar time zone settings supported by the Integrated Administrator. Polar Time Zone Values Antarctica:Casey Antarctica:Davis Antarctica:DumontDUrville Antarctica:Mawson Antarctica:McMurdo Antarctica:Palmer Antarctica:South_Pole Antarctica:Syowa Antarctica:Vostok Arctic:Longyearbyen
The Americas
The following table provides the American time zone settings supported by the Integrated Administrator. American Time Zone Values America:Adak America:Anchorage America:Anguilla America:Antigua America:Araguaina America:Aruba America:Asuncion America:Atka America:Barbados America:Belem America:Belize America:Boa_Vista America:Bogota America:Boise America:Buenos_Aires America:Cambridge_Bay America:Cancun America:Caracas America:Catamarca America:Cayenne America:Chihuahua America:Cordoba America:Costa_Rica America:Cuiaba America:Curacao America:Dawson America:Dawson_Creek America:Denver America:Detroit America:Dominica America:Edmonton America:Eirunepe America:El_Salvador America:Ensenada America:Fort_Wayne America:Fortaleza America:Glace_Bay America:Godthab America:Goose_Bay America:Grand_Turk America:Guatemala America:Guayaquil America:Guyana America:Halifax America:Havana America:Hermosillo America:Indiana:Indianapolis America:Indiana:Knox America:Indiana:Marengo America:Indiana:Vevay America:Indianapolis America:Inuvik America:Iqaluit America:Jamaica America:Jujuy America:Juneau America:Kentucky:Louisville America:Kentucky:Monticello America:Knox_IN America:La_Paz
F-6
American Time Zone Values (continued) America:Chicago America:Louisville America:Maceio America:Managua America:Manaus America:Martinique America:Mazatlan America:Mendoza America:Menominee America:Merida America:Mexico_City America:Miquelon America:Monterrey America:Montevideo America:Montreal America:Montserrat America:Nassau America:New_York America:Nipigon America:Nome America:Noronha America:Panama America:Pangnirtung America:Paramaribo America:Phoenix America:Port_of_Spain America:Port-au-Prince America:Porto_Acre America:Porto_Velho America:Puerto_Rico America:Guadeloupe America:Rainy_River America:Rankin_Inlet America:Recife America:Regina America:Rio_Branco America:Rosario America:Santiago America:Santo_Domingo America:Sao_Paulo America:Scoresbysund America:Shiprock America:St_Johns America:St_Kitts America:St_Lucia America:St_Thomas America:St_Vincent America:Swift_Current America:Tegucigalpa America:Thule America:Thunder_Bay America:Tijuana America:Tortola America:Vancouver America:Virgin America:Whitehorse America:Winnipeg America:Yakutat America:Yellowknife Brazil:Acre America:Los_Angeles Brazil:DeNoronha Brazil:East Canada:Central Canada:Eastern Canada:East-Saskatchewan Canada:Mountain Canada:Newfoundland Canada:Pacific Canada:Saskatchewan Canada:Yukon Chile:Continental Chile:EasterIsland Cuba Jamaica Mexico:BajaNorte Mexico:BajaSur Mexico:General US:Alaska US:Aleutian US:Arizona US:Central US:Eastern US:East-Indiana US:Indiana-Starke US:Michigan US:Mountain US:Pacific ---
F-7
F-8
G
Open Source Availability
The Integrated Administrator is based on embedded Linux and contains numerous Open Source components. In compliance with Open Source licensing, HP has made the source code of all Open Source components used available at the following URL:
opensource.hp.com
To locate the Integrated Administrator project, consult the list of all projects.
G-1
G-2
Index
Index
10/100 Ethernet connector 32 802.1Q VLAN 25 error messages B3 identifying 75 powering off 74 RBSU 72 user rights 713 warning messages B2 boot order, blade PC 84 buttons enclosure unit identification 32 Reset 32
A
accessing remotely 51 ROM-Based Setup Utility 72 Web-based user interface 41 activity, blade PC 73 adding group 423, 67 trap targets 616 user 421, 69 administering security certificates 82 administration error messages B3 warning messages B2 Administration tab 418 administrative tasks 71 advanced functions 81 African time zones F2 AlertMail 22, 611, E2 alerts email 22 SNMP 22 America time zones F6 Asian time zones F3 ASR-2 24 asset tag 46, E1 asset tag number 65 authentication 83 Automatic Server Recovery 24 Automatic System Recovery 24
C
certificate request 82 CLI 51 accessing locally 52 blade PC bay management commands 515 command line event messages 518 commands 52 enclosure management commands 512 enclosure network configuration commands 59 exclusive commands 519 general management commands 53 operating 52 user account commands 55 command line event messages 518 command line interface 51, A1 commands 52 community string 615 components, rear panel 32 configuration network 48 replicating 81 replication 81 SNMP 49 configuring blade PC boot order 84 SNMP support 614 connector 32 connectors 32 console connector 52 console log 418 creating certificate request 82 group 713 customizing enclosure settings 63
B
bay information 415 bay list 414 bays 71 Bays tab 413 bits 33 bits per second 33 blade PC activity 73 bay management commands 515 bays 71 boot order 84
Index-1
www.hp.com
User Guide
Index
D
date and time 66 deck panel 43 default groups E1 settings E1 users E1 values for the Integrated Administrator 33 deleting group accounts 716 user accounts 714 details D1 device requirements 33 DHCP 23 disabling network protocols 86 user accounts 714 downloading security certificate 83 Dynamic Host Configuration Protocol 23
European time zones F4 event details D1 event icons D1 Event List tab 425 event notification 23
F
fan status 45 firmware upgrading 86 flash disaster recovery 88 flow control 33
G
general commands 52 general management commands 53 generating, enclosure summary 78 getting started 31 group adding 423, 67 creating 713 modifying 713 settings E1 view/modify 425 group accounts, deleting 716 group list 420 grouping, Integrated Administrator processors 23
E
e-mail alerts 22, 612 emulation 33 enabling, remote console sessions 611 enclosure activity 76 error messages B2 identifying 77 information 44 management commands 512 managing 76 names 64 network configuration commands 59 powering off 85 settings E1 settings, customizing 63 summary 78 warning messages B1 Enclosure Self Recovery 24 enclosure summary 78 Enclosure tab 44 enclosure unit identification button 32 encryption 22 entering a community string 615 error messages B1 Administration B3 blade PC bay B3 enclosure B2 ESR 24 Ethernet connector 32
Index-2
H
headless operation 24 health LED 32 help 36 HP Blade Enclosre Management System and Utilities 25 HP Systems Insight Manager 22, 23, 24 HTTP E2 hyperlinks 23
I
icons D1 identifying blade PC 75 enclosure 77 problem components 79 IEEE 802.1Q VLAN 25 initial IP address 32 Integrated Administrator components 32 defined 21 features 21 function 31 Integrated Administrator hyperlinks 23 Interconnect tab 426
www.hp.com User Guide
Index
interconnect tray type 46 Internet Explorer C2 IP address 32, 33 initial 32 local console 33 IP Security E2 IP security 613
O
Oceania time zones F5 Open Source G1
P
parity 33 password, recovering 87 permissions, user 62 Polar time zones F6 power subsystem status 45 powering off blade PC 74 enclosure 85 problem components 79 Proliant Essentials Rapid Deployment Pack 24 protocol settings E2 protocols 86
J
Java Virtual Machine C2
K
key-based SSH authentication 83
L
launching flash disaster recover 88 LED 75, 77 left panel 43 local console 33 location 615 log 413
R
rack names 64 Rapid Deployment Pack 24 RBSU 24, 72 read community 411, E2 rear panel components 32 recovering password 87 remote access 22 console 417 session 71 sessions 611 removing trap targets 616 replicating configuration 81 requirements, local devices 33 Reset button 32 reviewing blade PC activity 73 reviewing configuration tools and information 31 RMON 25 ROM-Based Setup Utility 24, 72
M
management processor 23 management system and utilities 25 managing blade PC bays 71 enclosure 76 users 713 modifying asset tab number 65 date and time 66 enclosure and rack names 64 group 713 groups 425 system contact information 615 system location 615 user rights to blade PC bays 713 users 424
N
names 64 navigation 42 Netscape C2 network configuration 23, 48 protocols 86 settings E2 Network Time Protocol 23, 614 NTP 23, 614, E2 number of users supported 22
S
Secure Sockets Layer 22 security 22 setting up IP 613 security certificate 82 downloading 83 serial connector 32 setting up AlertMail 611 IP security 613 NTP 614 the system 61
Index-3
www.hp.com
User Guide
Index
user accounts 67 Web-based user interface 34 settings default E1 time zone F1 SNMP 25, E2 alerts 22 configuration 49 support 614 software tools 24 SSH E2 SSH authentication 83 SSL 22 status information 24 stop bits 33 summary 78 symbols equipment 11 text 11 system contact information 615 location 615 log 413 setup 61
permissions 62 security 22 setting up 67 settings E1 view/modify 424 user list 419 users, managing 713 utilities 25 utility, HP Systems Insight Manager 23, 24
V
view group 425 user 424 virtual buttons 411, 417
W
warning messages B1 administration B2 blade PC B2 enclosure B1 Web-based user interface accessing 41 navigation 42 setting up 34 write community 411, E2
T
targets 616 TELNET E2 time 66 time zone settings F1 time zones Africa F2 America F6 Asia F3 Europe F4 Oceania F5 Polar F6 top panel 42 total capacity 45 trap targets 616 troubleshooting C1
U
Unit Identification LED 75, 77 universal time F1 upgrading firmware 86 user account adding 421, 69 administration 22 commands 55 disabling and deleting 714
Index-4 www.hp.com User Guide