IBM XIV Storage System Management Tools: User Guide€¦ · GUI certificate management in server mode . . . 30 Importing a certificate into the Multi-System Manager trust store.....30

IBM XIV Storage SystemManagement ToolsVersion 4.2

User Guide

SC27-4230-04

��

NoteBefore using this information and the product it supports, read the information in “Notices” on page 67.

This edition applies to Management Tools version 4, release 1, modification 0 of IBM XIV Storage System and to allsubsequent releases and modifications until otherwise indicated in new editions.

© Copyright IBM Corporation 2013.US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contractwith IBM Corp.

Contents

Figures . . . . . . . . . . . . . . . v

About this guide . . . . . . . . . . viiWho should use this guide . . . . . . . . . viiConventions used in this guide . . . . . . . viiPublications and related information . . . . . . viiGetting information, help, and service . . . . . . xOrdering publications . . . . . . . . . . . xSending your comments . . . . . . . . . . x

Chapter 1. Introduction . . . . . . . . 1Definitions . . . . . . . . . . . . . . . 1Management Tools specifications . . . . . . . 3

Chapter 2. Installing the ManagementTools . . . . . . . . . . . . . . . . 5Installing the Multi-System Manager virtualappliance . . . . . . . . . . . . . . . 5Installing the Multi-System Manager . . . . . . 6

Step 1 . . . . . . . . . . . . . . . 6Step 2 . . . . . . . . . . . . . . . 7Step 3 . . . . . . . . . . . . . . . 7Step 4 . . . . . . . . . . . . . . . 11Step 5 . . . . . . . . . . . . . . . 12The installation is complete . . . . . . . . 14

Initializing the inventory . . . . . . . . . . 15Installing another Multi-System Manager . . . . 18

Chapter 3. Upgrading the Multi-SystemManager . . . . . . . . . . . . . . 19Upgrading the Multi-System Manager . . . . . 19Upgrading the Multi-System Manager from the GUI 21Rolling-back the Multi-System Manager upgrade . . 22

Chapter 4. Backing up and restoringthe Multi-System Manager . . . . . . 23Backing up the Multi-System Manager . . . . . 23Restoring the Multi-System Manager . . . . . . 24

Chapter 5. Managing the XIV andMulti-System Manager certificates . . . 27GUI certificate management in direct mode. . . . 27

Importing certificates into the local truststore . . 27Removing certificates from the local truststore . . 28Handling errors of XIV systems certificates . . . 28

GUI certificate management in server mode . . . 30Importing a certificate into the Multi-SystemManager trust store. . . . . . . . . . . 30Removing a certificate from the Multi-SystemManager trust store. . . . . . . . . . . 31

Handling certificate errors on the Multi-SystemManager trust store. . . . . . . . . . . 31Handling the Multi-System Manager certificate 32

Managing XIV systems certificates . . . . . . . 33Importing a PKCS#12 certificate of an XIV system 33Importing certificate . . . . . . . . . . 35Removing a certificate . . . . . . . . . . 37Renaming an XIV system certificate . . . . . 37Regenerating a CSR for an XIV system certificate 37Updating a certificate of an XIV system . . . . 38

Managing the Multi-System Manager certificate . . 38Replacing the Multi-System Manager certificate 38

Chapter 6. Operating the Multi-SystemManager . . . . . . . . . . . . . . 41Root user operations . . . . . . . . . . . 41

Selecting an operation from the root user menu 41Server configuration options. . . . . . . . 42Gathering the server logs . . . . . . . . . 43Displaying the audit log . . . . . . . . . 43Displaying the upgrade logs. . . . . . . . 44Managing inventory options. . . . . . . . 45Managing the certificates . . . . . . . . . 49Backing up the server database . . . . . . . 52Changing the root password. . . . . . . . 55Changing the maintenance password . . . . . 55Changing the manager access code . . . . . 55Starting and stopping the Multi-System Managerservice . . . . . . . . . . . . . . . 56Replacing the Multi-System Manager certificate 56Changing the communication ports . . . . . 56Upgrading the Multi-System Manager . . . . 57Rebooting the Multi-System Manager host . . . 58Shutting down the VM . . . . . . . . . 59

Maintenance user operations . . . . . . . . 59Performing maintenance tasks . . . . . . . 59

Chapter 7. Multisystem configuration 61Multi system configuration of user-relatedinformation . . . . . . . . . . . . . . 61

Adding a user on multiple systems . . . . . 61Editing, deleting or changing the password of auser . . . . . . . . . . . . . . . . 62

Mass copy-paste configuration . . . . . . . . 63

Notices . . . . . . . . . . . . . . 67Trademarks . . . . . . . . . . . . . . 69

Index . . . . . . . . . . . . . . . 71

© Copyright IBM Corp. 2013 iii

iv IBM XIV Storage System Management Tools: User Guide

Figures

1. IBM XIV Multi-System Manager . . . . . . 12. Multi-System ManagerPrimary Management

Server . . . . . . . . . . . . . . 153. The Certificate Details screen. . . . . . . 164. Multi-System Manager Access Code . . . . 165. The Remember Me checkbox. . . . . . . 176. Cross site high availability . . . . . . . 187. Upgrading the Multi-System Manager from the

GUI . . . . . . . . . . . . . . . 218. The Multi-System Manager is upgraded 229. Importing certificates into the local truststore 27

10. Handling errors of XIV systems certificates 2911. Trusting a certificate . . . . . . . . . 3012. The Manager Configuration screen . . . . . 31

13. Handling certificate errors on the Multi-SystemManager trust store . . . . . . . . . . 32

14. Handling certificate errors on the Multi-SystemManager trust store . . . . . . . . . . 32

15. Handling the Multi-System Manager certificate 3316. The Certificate Management screen . . . . 3417. The Import Certificate screen. . . . . . . 3418. The Generate CSR screen . . . . . . . . 3519. The newly generated certificate is awaiting

authentication. . . . . . . . . . . . 3620. The Import Certificate screen. . . . . . . 3721. The Update Certificate screen . . . . . . 3822. Replacing the Manager Certificate . . . . . 3923. Replacing the Manager Certificate . . . . . 39

© Copyright IBM Corp. 2013 v

vi IBM XIV Storage System Management Tools: User Guide

About this guide

This document describes how to install and use the IBM XIV Management Tools4.3. The document describes the new component: IBM® XIV® Multi-SystemManager, and the relevant XIV GUI capabilities.

Who should use this guideThis document is for storage administrators that manage XIV Systems.

Conventions used in this guideThese notices are used to highlight key information.

Note: These notices provide important tips, guidance, or advice.

Important: These notices provide information or advice that might help you avoidinconvenient or difficult situations.

Attention: These notices indicate possible damage to programs, devices, or data.An attention notice appears before the instruction or situation in which damagecan occur.

Publications and related informationProduct manuals, other IBM publications, and websites contain information thatrelates to the IBM XIV Storage System.

To view a PDF file, you need Adobe Reader, which can be downloaded for freefrom the Adobe website (get.adobe.com/reader/).

Information centers

IBM XIV Storage System Information Center website(publib.boulder.ibm.com/infocenter/ibmxiv/r2/index.jsp)

From the IBM XIV Storage System Information Center, you can browse all productdocumentation.

The most updated version of this publication can be found on the informationcenter.

Publications

Information that is available in the information center is also available in a set ofpublications, in PDF format. You can find the following PDFs in the informationcenter on the Publications and related information web page(publib.boulder.ibm.com/infocenter/ibmxiv/r2/topic/com.ibm.help.xiv.doc/xiv_pubsrelatedinfoic.html).

IBM XIV Storage System

v IBM XIV Storage System Product Overview

© Copyright IBM Corp. 2013 vii

http://get.adobe.com/reader/

http://publib.boulder.ibm.com/infocenter/ibmxiv/r2/index.jsp

publib.boulder.ibm.com/infocenter/ibmxiv/r2/topic/com.ibm.help.xiv.doc/xiv_pubsrelatedinfoic.html

This document contains an overview of the IBM XIV Storage Systemhardware and software.

v IBM XIV Storage System Planning Guide

This guide defines installation requirements for IBM XIV Storage Systemmodel 281x-A14 and model 281x-114. It is important to ensure that youmeet all requirements to guarantee a fast and reliable installation.

v IBM XIV Storage System Application Programming Interface Reference

This reference assists you in developing CIM-based applications usingthe XIV Open API.

v IBM XIV Storage System XCLI Reference Guide

This reference describes the IBM XIV command-line interface (XCLI)system and utility commands used to manage and maintain the XIVsystem, including the command syntax, parameter descriptions, outputdescriptions, and examples.

v IBM XIV Storage System XCLI User Manual

This guide describes how to use the IBM XIV command-line interface(XCLI) to run XIV system and utility commands.

v IBM XIV Storage System Safety Notices

This document describes all standard IBM XIV Storage System safetynotices.

v IBM XIV Storage System Remote Support Proxy Installation and User's Guide

This guide describes how to install, configure, and use the IBM XIVStorage System Remote Support Proxy to connect an XIV system to theXIV Remote Support Center.

v IBM XIV Management Tools User Guide.This user guide describes how to install and use the IBM XIVManagement Tools. The document describes the new component: IBMXIV Multi-System Manager, and the relevant XIV GUI capabilities.

Host software solutions

v Host Attachment Guide

This guide describes how to prepare for, install, and use the IBM XIVHost Attachment Kit (HAK). The guide supports AIX, HP-UX, Linux,Solaris, and Windows. It also includes an appendix for VMware ESX andESXi users.

v IBM Storage Management Pack For Microsoft System Center OperationsManager User Guide

This guide provides installation, configuration, and usage instructionsfor the IBM Storage Management Pack for Microsoft System CenterOperations Manager (SCOM).

v IBM XIV Storage System Remote Mirroring for VCS Installation Guide

The installation guide describes how to install and configure the VeritasCluster Server (VCS) enterprise agent for IBM XIV Remote Mirroring.

v IBM Storage Device Driver for VMware VAAI Installation Guide

This guide describes how to install and configure the IBM StorageDevice Driver for VMware VAAI.

v IBM Storage Provider for VMware VASA Installation Guide

This guide describes how to install and configure the IBM StorageProvider for VMware VASA.

v IBM Storage Enabler for Windows Failover Clustering User Guide

viii IBM XIV Storage System Management Tools: User Guide

This guide describes the IBM Storage Enabler for Windows FailoverClustering (formerly titled ’MSCS Agent’) and provides detailedinstructions and best practices for using it.

v IBM Storage Management Console for VMware vCenter User Guide

This publication provides installation, configuration, and usageinstructions for the IBM Storage Management Console for VMwarevCenter.

v IBM XIV Adapter for VMware vCenter Site Recovery Manager (SRM)Installation Guide

This guide describes how to prepare for, install, configure, and use theIBM XIV Adapter for VMware vCenter Site Recovery Manager.

v IBM XIV Provider for Microsoft Windows Volume Shadow Copy ServiceInstallation Guide

This guide describes how to install and configure the IBM XIV Providerfor Microsoft Windows VSS.

IBM Redbooks publications and technical papers

Various IBM Redbooks® publications, Redpapers, and white papers are availablefor the IBM XIV Storage System. For additional papers, see the IBM XIV StorageSystem website (www.ibm.com/systems/storage/disk/xiv/).

v IBM XIV Storage System: Architecture, Implementation, and Usage(www.redbooks.ibm.com/abstracts/sg247659.html)This Redbooks publication describes the concepts, architecture, andimplementation of the XIV system, which is a scalable enterprise storage systembased upon a grid array of hardware components.

v IBM XIV Storage System with the Virtual I/O Server and IBM i(www.redbooks.ibm.com/redpieces/abstracts/redp4598.html)This Redbooks publication describes how you can connect the XIV system to theIBM i operating system through the Virtual I/O Server (VIOS). A connectionthrough the VIOS is especially useful for IT centers that have many small IBM ipartitions. When using the VIOS, the Fibre Channel host adapters can beinstalled in the VIOS and shared by many IBM i clients by using virtualconnectivity to the VIOS.

v XIV Storage System: Host Attachment and Interoperability(www.redbooks.ibm.com/redpieces/abstracts/sg247904.html)This Redbooks publication describes how to attach an XIV system to varioushosting operating system platforms in combination with databases and otherstorage-oriented application software. It also provides solutions for combiningthe IBM XIV Storage System with other storage platforms, host servers, orgateways.

v IBM XIV Storage System: Copy Services and Migration(www.redbooks.ibm.com/abstracts/sg247759.html)This Redbooks publication describes IBM XIV Storage System copy andmigration functions for various data protection scenarios, to enhance yourbusiness continuance, data migration, and online-backup solutions. Theseinclude point-in-time copies (also known as snapshots and full volume copies)and remote-copy capabilities in synchronous or asynchronous mode. This bookalso describes how to integrate the snapshot function with the IBM Tivoli®

About this guide ix

http://www.ibm.com/systems/storage/disk/xiv/


http://www.redbooks.ibm.com/abstracts/sg247659.html

FlashCopy® Manager, built-in migration capability, and migration alternativesbased on the IBM SAN Volume Controller.

Related websites

View these websites to get more information about the XIV system.

v IBM XIV Storage System website (www.ibm.com/systems/storage/disk/xiv/)Use this website to learn about the XIV system, including features and hardwaresummary. This website also has links to white papers, Redbooks publications,and product documentation.

v IBM Support Portal website (www.ibm.com/storage/support)Use this website to obtain downloadable files, links to submit and trackproblems, and support phone numbers and contacts.

v IBM Systems Storage forum website (www.ibm.com/developerworks/forums/forum.jspa?forumID=846)Use this forum to share ideas with knowledgeable experts and discover how thelatest IBM storage solutions can address your business challenges. Forum topicsinclude storage management, storage virtualization, business continuity,infrastructure simplification, disk storage systems, and storage software productsand solutions.

Getting information, help, and serviceIf you need help, service, technical assistance, or want more information about IBMproducts, you can find various sources to assist you. You can view the followingwebsites to get information about IBM products and services and to find the latesttechnical information and support.v IBM website (ibm.com®)v IBM Support Portal website (www.ibm.com/storage/support)v IBM Directory of Worldwide Contacts website (www.ibm.com/planetwide)

Ordering publicationsThe IBM Publications Center is a worldwide central repository for IBM productpublications and marketing material.

The IBM Publications Center website (www.ibm.com/shop/publications/order/)offers customized search functions to help you find the publications that you need.Some publications are available for you to view or download at no charge. You canalso order publications. The publications center displays prices in your localcurrency.

Sending your commentsYour feedback is important in helping to provide the most accurate and highestquality information.

Procedure

To submit any comments about this book or any other IBM XIV Storage Systemdocumentation:

x IBM XIV Storage System Management Tools: User Guide


http://www.ibm.com/storage/support

http://www.ibm.com/developerworks/forums/forum.jspa?forumID=846

http://www.ibm.com

http://www.ibm.com/storage/support

http://www.ibm.com/planetwide

http://www.ibm.com/shop/publications/order/

v Go to the feedback form (publib.boulder.ibm.com/infocenter/ibmxiv/r2/topic/com.ibm.xiv.doc/icfeedback.htm) in the IBM XIV Storage System informationcenter. You can use this form to enter and submit comments.

v Send your comments by email to [email protected]. Be sure to include thefollowing information:– Exact publication title and version– Publication form number (for example, GA32-0770-00)– Page, table, or illustration numbers that you are commenting on– A detailed description of any information that needs to be changed

About this guide xi

http://publib.boulder.ibm.com/infocenter/ibmxiv/r2/topic/com.ibm.xiv.doc/icfeedback.htm

mailto:[email protected]?subject=IBM XIV Storage System publications

xii IBM XIV Storage System Management Tools: User Guide

Chapter 1. Introduction

IBM XIV Management Tools introduces the IBM XIV Multi-System Manager thatreduces operational complexity and enhances capacity planning through integratedmanagement for large and multi-site XIV deployments. The Management Tools:v Shifts the paradigm to an integrated management of XIV Systems across the

enterprisev Provides powerful health monitoring by integrating events and alerts across the

managed XIV Systemsv Extends management scalability to smartphones and tablets

Diagram

The following diagram depicts the way the IBM XIV Multi-System Managerinteracts with the XIV GUI and XIV Systems.

DefinitionsThe following definitions are in wide use throughout this document:

Multi-System ManagerThe Multi-System Manager is also known as IBM Hyper-Scale Manager

xiv

10

41

2

Multi System Manager

GUI Client

Site A Site B Site C

Multi System Manager Multi System Manager

GUI ClientGUI Client

Datacenter BDatacenter A Datacenter C

Vmotion(optional)

Cross-site high availability

Figure 1. IBM XIV Multi-System Manager

© Copyright IBM Corp. 2013 1

Server Mode vs. Direct Mode from the login dialog of the GUIWith the introduction of the IBM XIV Multi-System Manager, there are twoways to use the IBM XIV Management Tools:

Server modeMoving the GUI to work with the Multi-System Manager.

Direct modeUsing the GUI without Multi-System Manager. In this mode, theGUI manages the XIV Systems directly.

The 'maintenance' accountA Multi-System Manager SFTP user that transfers files from and to theMulti-System Manager. The default password is xivmsMaintenance. You canchange this password through the root menu. See “Changing themaintenance password” on page 55.

System machine accountAn XIV user that monitors all XIV systems in the Multi-System Managerinventory. This user authenticates into all XIV systems in order to pollconfiguration data only.v This user does not change the configurationv This user's name is hardcoded: xiv_msms

v This user can be defined in LDAPv This user must have a storage administrator role (similarly to the admin

user)v This user must be defined with the same password on all XIV systems

in the Multi-System Manager inventoryv This user must be defined in the Multi-System Manager (through the

GUI or CLI)

Diagnose/Fix authentication problemA process in which the GUI tries to fix the System Machine Accountauthentication issues among all XIV systems in the inventory.v You need to supply admin credentials when launching this operationv These credentials will be used to add the System Machine Account

automatically to all your XIVs (if needed)v If some of the XIV systems use LDAP authentication, it will inform you

to manually add the System Machine Account to your LDAP directory

Discover new systemsA process in which the Multi-System Manager tries to authenticate aspecific user in front of all of the systems that the Multi-System Managerknows that the user is not authenticated to.v This button is located on the Systems > Preferences dialog.v Use this button only when it is known that the user was added to the

system's access list and you need to display this system on the GUIscreen. This is not done automatically, because of potential LDAPlocking issues, due to authentication errors.

v Upon a successful completion of the process, if the user was grantedwith an access to a system that was not previously seen in the GUI, itwill now be seen.

Manager Access CodeAny administrative action on the Multi-System Manager, that is performedfrom the GUI requires the Manager Access Code. This code can be changed

2 IBM XIV Storage System Management Tools: User Guide

from GUI and from the root menu. The default manager access code isadminadmin. See here: “Changing the manager access code” on page 55.

Management Tools specificationsSpecifications for the Management Tools deployment are available on theMulti-System Manager and GUI Release Notes:v Specifications for the Multi-System Manager are available on the Multi-System

Manager 1.3 Release Notesv Specifications for the IBM XIV GUI - both direct and server modes - are

available on the IBM XIV Storage System GUI and XCLI 4.2 Release Notes

Both Release Notes documents are available on the IBM XIV Information Center:http://publib.boulder.ibm.com/infocenter/ibmxiv/r2/index.jsp.

Chapter 1. Introduction 3

http://publib.boulder.ibm.com/infocenter/ibmxiv/r2/index.jsp


Chapter 2. Installing the Management Tools

With the introduction of the IBM XIV Multi-System Manager, there are two waysto use the IBM XIV Management Tools:

Server modeMoving the GUI to work with the IBM XIV Multi-System Manager.

Direct modeUsing the GUI without IBM XIV Multi-System Manager. In this mode, theGUI manages the XIV Systems directly.

This chapter guides you how to work in Server mode.

The installation of the Multi-System Manager is composed of:1. Installing the Multi-System Manager virtual appliance2. Installing the Multi-System Manager3. Initializing the Multi-System Manager inventory

Installation-related tasks guide you through upgrading the Multi-System Managerand backing it up:1. “Upgrading the Multi-System Manager” on page 192. “Backing up the Multi-System Manager” on page 23

Note: If you are already using a previous version of the Multi-System Manager,jump directly to “Upgrading the Multi-System Manager” on page 19.

Installing the Multi-System Manager virtual applianceThe Multi-System Manager deployment is running as a Virtual Appliance above anESX server (VMWare Hypervisor only). Prior to the configuration of theMulti-System Manager, you need to install it as a VM using Deploy OVF Template inthe ESX vSphere Client.

About this task

The virtual machine installation deploys the ovf image of the Multi-SystemManager on your VMWare ESX.

Procedure1. Prepare a VM according to the specifications on the Multi-System Manager

Release Notes.2. The installation procedure will ask for the following information. Please

prepare it ahead:v Networking configuration: You can either work with DHCP or with Static IP.

In case you work with Static IP, please prepare: IP Address and netmask,gateway and DNS parameters related to the static IP.

v Hostnamev A new password for 'root'v NTP servers (if any)v SMTP address (not mandatory)


3. Download the file named: XIV_Multi-System-Manager_1.3.x.zip from:http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=Enterprise+Storage+Servers&product=ibm/Storage_Disk/XIV+Storage+System+(2810,+2812)&release=1.3&platform=All&function=all.

4. Unzip it to your local PC that has accessibility to VMWare vSphere client. Thiswill create a folder name: XIV_Multi-System-Manager. The folder contains 3 filesused by the *.ovf deployment process, this user guide, a quick-start guide andan additional LICENSES folder with additional notes regarding the usage license.

5. Deploy *.ovf on your VMWare ESX. Follow the link for instructions (steps 1-11only): http://pubs.vmware.com/vsphere-4-esx-vcenter/index.jsp?topic=/com.vmware.vsphere.vmadmin.doc_41/vsp_vm_guide/working_with_ovf_templates/t_import_a_virtual_appliance.html.

Note: The virtual machine will consume 76Gb of free space.

Note: You may see some warnings related to compatibility. Please ignore themand approve.

6. Power on the VM.7. On the VMWare console, login with: user=root, password=xivmsRoot.8. The wizard opens on screen. Follow the steps on the next section.

Installing the Multi-System ManagerThe purpose of this task is to install the Multi-System Manager on the pre-installedVM.

Procedure

The wizard welcome screen guides you through the steps of the installation.

---------------------------------------------------------------------------------- Multi-System Manager v1.3.0.x --------------------------------------------------------------------------------

Welcome to the Multi-System Manager installation procedure.

This setup will guide you through the installation process.

Required Steps--------------Step 1: License AgreementStep 2: Password ChangeStep 3: NetworkingStep 4: NTP & Regional SettingsStep 5: SMTP

Proceed? [Y/N] >

Click Y to proceed, or N to decline.

Step 1On step 1 of the installation you are required to approve the license agreement.


http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=Enterprise+Storage+Servers&product=ibm/Storage_Disk/XIV+Storage+System+(2810,+2812)&release=1.3&platform=All&function=all.



http://pubs.vmware.com/vsphere-4-esx-vcenter/index.jsp?topic=/com.vmware.vsphere.vmadmin.doc_41/vsp_vm_guide/working_with_ovf_templates/t_import_a_virtual_appliance.html



Procedure1. Click Enter to view the Multi-System Manager license agreement.


---> Step 1: License AgreementStep 2: Password ChangeStep 3: NetworkingStep 4: NTP & Regional SettingsStep 5: SMTP

Step 1 - License Agreement---------------------------

Hit [ENTER] to view license agreement for using Multi-System ManagerPress any key to continue

2. After reading the license agreement, click 1 to approve or 2 to decline it.

Note: You will not be allowed to proceed with the installation, or to use theMulti-System Manager if you do not approve the license agreement.

Step 2On step 2 of the installation you are required to change the root password.

Procedure

Enter a new password, then retype it.


Step 1: License Agreement---> Step 2: Password Change

Step 3: NetworkingStep 4: NTP & Regional SettingsStep 5: SMTP

Step 2 >> Password Change-------------------------

Please change root passwordPassword must be at 6 characters longType new password for root

Step 3On step 3 of the installation you are asked to configure the network.

Before you begin

Throughout the installation we present examples with values surrounded withbrackets. The value inside the brackets is the default. Clicking enter withoutinserting a value, will insert the default value.

Chapter 2. Installing the Management Tools 7

Procedure1. First, select between Static IP and DHCP.


Step 1: License AgreementStep 2: Password Change

---> Step 3: NetworkingStep 4: NTP & Regional SettingsStep 5: SMTP

Step 3 -Network Configuration------------------------------

#------------------------------------# Active Network configuration:#------------------------------------# IP mode# Hostname

1) Configure Static IP2) Configure DHCP3) Return (not supported, installation mode)Setup/Network/IP>

2. If Static IP was chosen, you need to enter the IP address and then the netmask,gateway and DNS parameters.a. Enter your IP address to continue.






Configure static IP address

Enter IP address []:

b. Enter the netmask, gateway and DNS parameters related to the static IP.Follow the questions on the screen.






#------------------------------------# Active Network configuration:#------------------------------------# IP mode OFF# Hostname# Domain search list# Domain name servers

#------------------------------------# New Network configuration:#------------------------------------# IP mode STATIC# Hostname# IP address 1.1.1.1# Netmask 1.1.1.1# Gateway 1.1.1.1# Domain search list ibm.com xiv.ibm.com# Domain name servers 1.1.1.1 2.2.2.2

Configure DNS addressess1) Add domain to search list2) Remove domain from search list3) Continue to hostname configurationSetup/Network/DNS>

Following the configuration of the DNS, IP, gateway and netmask, you willbe asked to enter a fully-qualified hostname and then to approve theconfiguration.

c. Click Y to approve and proceed to the next step.







#------------------------------------# New Network configuration:#------------------------------------# IP mode DHCP# Domain search list ibm.com xiv.ibm.com# Domain name servers 1.1.1.1 2.2.2.2# Hostname

Is the configuration correct? [Y/N] :

Clicking N will take you back to the beginning of step 3 of the installationabove.

3. If you selected DHCP on step 1 above, enter the hostname and click Y toconfirm.





#------------------------------------# Active network configuration#------------------------------------# IP mode NONE# Hostname# Domain search list# Domain name servers

#------------------------------------# New network configuration#------------------------------------# IP mode DHCP# Hostname myHostname# Domain search list Automatically retrieved# Domain name servers Automatically retrieved



Step 4On this step you enter the NTP and regional settings. Select whether to enableNTP or configure static date&time. Additionally, you may need to define thetimezone.

Before you begin

Optional: click 2 to set the timezone.

1) Enable NTP2) Timezone3) Change Date&time4) ContinueSetup/Regional Settings>

Procedure1. Select a global region.

Please identify a location so that time zone rules can be set correctly.Please select a continent or ocean.1) Africa2) Americas3) Antarctica4) Arctic Ocean5) Asia6) Atlantic Ocean7) Australia8) Europe9) Indian Ocean10) Pacific Ocean11) none - I want to specify the time zone using the Posix TZ format.

Next, you are asked to select a country from within the global region.

Note: You may be asked to select a sub region.2. Optional: if you decide to configure NTP instead of static date&time, follow the

instructions on this step. If you don't - go to the next step. Click 1 to enableNTP.



Step 1: License AgreementStep 2: Password ChangeStep 3: Networking

---> Step 4: NTP & Regional SettingsStep 5: SMTP

Step 6 -NTP & Regional Configuration-------------------------------------

#------------------------------------# Active NTP/Regional configuration:# -----------------------------------# NTP status DISABLED# Date 12/31/2012 23:59:59# Timezone UTC

Configure NTP servers1) Add NTP server2) Remove NTP server3) Return to previous menuSetup/Regional Settings/NTP>

Add the NTP servers in your organization, one by one using the menu optionsabove. When finished, click 3 to return to NTP & Regional Settings main menu.

3. If you decided to configure static Date & Time instead of NTP settings, click 3to configure Date & Time.

Configure Date & TimeLocal date&time is: <current date and time> Please enter a new date in format:mm/dd/yyyy 24H:MM:SS >

Note: If you configured NTP, it is not mandatory to configure the Date & Time.Upon the next reboot, the NTP settings will take place.

4. Review the changes (in the NTP & Regional Settings main menu) and thenclick 4 to apply your changes. Alternately, you can repeat any of the previoussteps in order to update the configuration.

Step 5The next step is SMTP configuration.

About this task

SMTP configuration is utilized for enabling sending email messages to anyrecipient you configure in case of a service failure. The available SMTP emailmessages are:

Server is upSubject: <hostname> Service xivms is up and running properly.

Body: Component: Main process was started successfully and is up andrunning.


Server is downSubject: <hostname> Attention: service xivms stopped functioningproperly.

Body: Component: Main process stopped.

Server has low disk spaceSubject:<hostname> Attention: low disk space.

Body: Disk space passed the configured threshold max% and its usagenow is: used%.

System Machine Account is not authenticatedSubject: <hostname> System Machine Account alert.

Body: The System Machine Account (user: xiv_msms) is notauthenticated to work with the following systems:<system name>

Note: This step is not mandatory.

Procedure1. Click 1 to enable SMTP configuration.

---------------------------------------------------------------------------------- Multi-System Manager v1.3.0.x -------------

-------------------------------------------------------------------

Step 1: License AgreementStep 2: Password ChangeStep 3: NetworkingStep 4: NTP & Regional Settings

---> Step 5: SMTP

Step 5 -SMTP Configuration--------------------------

#------------------------------------# Active SMTP configuration:# -----------------------------------# SMTP status DISABLED

1) Enable SMTP configuration2) Apply All3) Return without savingSetup/SMTP>

2. Enter the SMTP server address.

Enter address of SMTP server []:

3. Enter the SMTP server port.

Enter the SMTP server port [25]:

4. Approve the configuration.


---------------------------------------------------------------------------------- Multi-System Manager v1.3.0.x -------------

-------------------------------------------------------------------

Step 1: License AgreementStep 2: Password ChangeStep 3: NetworkingStep 4: NTP & Regional Settings

---> Step 5: SMTP

Step 5 -SMTP Configuration--------------------------

#------------------------------------# Active SMTP configuration:# -----------------------------------# SMTP status DISABLED

#------------------------------------# New SMTP configuration#------------------------------------# SMTP status ACTIVE# SMTP server 9.9.9.9# SMTP port 25


The installation is completeThe installation is now complete.

About this task

The last screen of the installation contains information about the way theMulti-System Manager is connected (Static IP or DHCP).

For static IP connectivity

Congratulations!----------------You successfully installed Multi-System Manager v1.3You can now open any XIV GUI and point to the IP: 192.25.25.25 orDNS: my-multi-system-manaer.Enjoy a world of multi system features!Finalizing installation, please wait.The system is going to reboot.Press any key to continue

For DHCP connectivity

Congratulations!----------------You successfully installed Multi-System Manager v1.3You can now open any XIV GUI and point to the DNS: my-multi-system-manaer.Enjoy a world of multi system features!Finalizing installation, please wait.The system is going to reboot.Press any key to continue

Procedure

Press any key. The Multi-System Manager restarts.


What to do next

Hand over the IP Address / hostname to the Storage Administrator in order tocontinue to the next section “Initializing the inventory.”

Initializing the inventoryInstall the XIV GUI and set it to work with the Multi-System Manager.

Before you beginv If you are using previous GUI versions: open the previous GUI and export

systems list (File > Export Systems File) to a file in your local file system (to beimported later to the Multi-System Manager).

v Obtain the GUI from http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=Enterprise+Storage+Servers&product=ibm/Storage_Disk/XIV+Storage+System+(2810,+2812)&release=4.2&platform=All&function=all.

About this task

This task guides you through:v Installing the XIV GUI and setting it to be managed by the Multi-System

Manager.v Initializing the systems inventory on the Multi-System Manager.

Procedure1. Install XIV GUI and launch it in Direct mode.2. Connect the GUI to the Multi-System Manager.

a. Select Systems > Preferences from the menu. The User Preferences screenopens. Fill the Primary Management Server field and click OK.

b. The Certificate Details screen opens. The Multi-System Manager version 1.3is published using an XIV default that is not signed by a CA, certificate.You can either:v Trust Once - only for the current GUI session.v Trust Always - never being asked again about it.v Replace the Multi-System Manager certificate.

Figure 2. Multi-System ManagerPrimary Management Server


http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=Enterprise+Storage+Servers&product=ibm/Storage_Disk/XIV+Storage+System+(2810,+2812)&release=4.2&platform=All&function=all



c. Fill the access code on the Multi-System Manager Access Code screen.In case the Manager Access code was not defined yet, the default is

adminadmin. Read more about the Manager Access code on the “Definitions”on page 1 section.

d. The Credentials tab of the Manager Configuration screen opens. Check theRemember Me checkbox to eliminate the need to type the access codewhenever you access the Multi-System Manager from the GUI.

Figure 3. The Certificate Details screen

Figure 4. Multi-System Manager Access Code


3. On the same screen, determine a new password for the Systems MachineAccount (this is a system user that will monitor it on the Multi-SystemManager). Fill the Systems Machine Account password and click OK.

Note: Only a correct access code can grant you access to the ManagerConfiguration screens.

4. On the Manager Configuration screen, open the Inventory tab. Perform thefollowing sub steps:a. If you have a previously exported system XML file, Click Import systems

from file, browse to the XML file and import it. Else, jump to bullet b.

Systems are added to the screen.b. If the added screens get an Authentication Error status, select the not

authenticated systems, right-click and select: Diagnose/Fix AuthenticationError from the context menu. Read more on the diagnose and fix process onthe “Definitions” on page 1 topic.

Figure 5. The Remember Me checkbox


Installing another Multi-System ManagerThe number of Multi-System Manager instances that you can install is limitless.Each of these Multi-System Manager instances can monitor all XIV Systems in yourorganization. There is no redundancy or communication between the managersthemselves.

The GUI can be connected to two Multi-System Manager instances (Primary andSecondary) for the use of manual switch over in case one is not responding. Thisway, you can achieve high availability of Multi System Managers.

Using this architecture, you can gain high performance of the GUIs by connectingthem to a Multi-System Manager located in their site, whereas other remotelylocated GUIs will connect to another Multi System Manager that is located on theirsite.

xiv

10411


GUI Client

Datacenter A

Site A Site B


GUI Client

Datacenter B

Cross-site high availability

Figure 6. Cross site high availability


Chapter 3. Upgrading the Multi-System Manager

This chapter discusses how to upgrade the Multi-System Manager to the mostrecent version available and how to roll-back an upgrade.

Upgrading the Multi-System ManagerUpgrading the Multi-System Manager to the most recent version available.

Before you begin

Make sure you have the installation file at hand: XIV-Multi-System-Manager-Upgrade_1.3.0.*.tar.gz.

About this task

This section describes how to upgrade to the current version of the Multi-SystemManager. As part of the upgrade, this procedure backs up the Multi-SystemManager inventory configuration. More details about the backup procedure areavailable here: “Backing up the Multi-System Manager” on page 23.

Procedure1. Back up the database:

a. Click 5 on the root menu. The Backup and Restore Menu is displayed onscreen.

Backup and Restore Menu-----------------------

1) Backup2) Restore3) Schedule Daily Backup4) Remove Scheduled Backup5) ExitYour Selection>

b. Click 1 to back up the database. The backup process takes place:

Your Selection>1Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file:backup/BACKUP_20120815_082926.tar.gzPress any key to continue

The backup file name is displayed on screen.c. Press any key to return to the Backup and Restore Menu.

2. Export the backup to an external device:a. Before you begin, ensure the following:

v You need maintenance credentials in order to perform the following tasks.v The initial password of the maintenance user is xivmsMaintenance.v Make sure the root user changes the password of the maintenance user

as soon as possible. See here: “Changing the maintenance password” onpage 55.


b. Export the backup.

sftp maintenance@msms-12-8-servPassword:Connecting to msms-12-8-serv.sftp> cd backupsftp> get BACKUP_20130404_233001.tar.gz

3. Upgrade the Multi-System Manager:a. Upload the upgrade file to the upload folder using SFTP and maintenance

user credentials.b. Click 13 on the root menu.

Your Selection>13This utility will run the upgrade procedure of IBM XIV Multi-System ManagerThe backup database will run prior the upgrade.Press any key to continue

c. Next, provided that an upgrade file was uploaded as stated above, select afile from the list:

Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file:backup/BACKUP_20120815_105757.tar.gz

Please upload the upgrade file (*.tar.gz) using SFTP and user ’maintenance’to upload folder.Press any key to continue

Files in upload folder----------------------XIV_Multi_System_Manager_Upgrade_1.3.*.tar.gz

Please enter the name of the upgrade file >

d. Enter the file name. You will be asked to confirm the upgrade.

IBM XIV Multi-System Manager will be upgraded to version 1.3.0.x.Please confirm stopping the Multi-System Manager serviceand upgrading now [Y/N] >

e. During the upgrade, you will be prompted to accept the new license. Enter1 to confirm. Upon confirmation, the upgrade takes place, resulting in thefollowing message:

The upgrade to IBM XIV Multi-System Manager version 1.3.0.xcompleted successfully.Following the upgrade, users that are logged into the Multi-System Managerroot menu will have to re-login.

4. The upgrade is complete. Open the XIV GUI.

What to do next

In case the upgrade fails, go to “Rolling-back the Multi-System Manager upgrade”on page 22.


Upgrading the Multi-System Manager from the GUIWhenever it is opened in Server mode, the XIV GUI checks the version of theMulti-System Manager. If the version is not the latest, you are asked to approveupgrading it.

About this task

This procedure does not backup the Multi-System Manager inventoryconfiguration.

For more details regarding a backup, see: “Backing up the Multi-System Manager”on page 23. You may also repeat steps 1, 2 on “Upgrading the Multi-SystemManager” on page 19.

Procedure1. Whenever the following GUI screen pops up, click Upgrade Manager.

2. Accept the Software License Agreement. The Multi-System Manager isupgraded.

Figure 7. Upgrading the Multi-System Manager from the GUI

Chapter 3. Upgrading the Multi-System Manager 21

What to do next

In case the upgrade fails, go to “Rolling-back the Multi-System Manager upgrade.”

Rolling-back the Multi-System Manager upgradeIn case the upgrade does not end well, there is a need for a roll-back.

About this task

This section describes what to do in case that the upgrade fails. The sectionspecifies how to roll-back the upgrade of the Multi-System Manager. Thisprocedure restores the Multi-System Manager inventory configuration that waspreviously backed up. More details about the backup procedure are available here:“Backing up the Multi-System Manager” on page 23.

Procedure1. Delete the VM.2. Re-install the previous Multi-System Manager version. See: Chapter 2,

“Installing the Management Tools,” on page 5.3. Import the back up and restore it. See: “Restoring the Multi-System Manager”

on page 24 section.

Figure 8. The Multi-System Manager is upgraded


Chapter 4. Backing up and restoring the Multi-SystemManager

This chapter describes how to back up the Multi-System Manager and how torestore it.

Backing up the Multi-System ManagerBacking up the inventory configuration of the Multi-System Manager

About this task

This section describes how to backup the inventory configuration of theMulti-System Manager. All of the backup and restore options are accessible fromthe root menu. This section describes the best practice.

The backup file is version-specific. It can be restored into a Multi-System Managerof the same version. Whenever you upgrade the Multi-System Manager to a newversion, create a new backup file.

The backup procedure backs up the following configurations:v Multi-System Manager inventoryv Users workspaces - where information about users and the systems they work

on is savedv RMI portsv Trusted certificatev SMTP configuration

The backup process does not backup other configurations and data, such as:v Network, SMTP and NTP (See “Step 3” on page 7 of the installation).v System Machine Account password (See “Changing the System Machine

Account password” on page 48).v Manager Access Code (See “Changing the manager access code” on page 55).v Multi-System Manager certificate (see here: “Replacing the Multi-System

Manager certificate” on page 38)v Multi-System Manager logs

In order to configure these not-to-be-saved configurations, please refer to therelevant sections on this user guide.

Procedure1. Back up the database:

a. Click 5 on the root menu. The Backup and Restore Menu is displayed onscreen.




b. Click 1 to back up the database. The backup process takes place:

Your Selection>1Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file:backup/BACKUP_20120815_082926.tar.gzPress any key to continue

The backup file name is displayed on screen.c. Press any key to return to the Backup and Restore Menu.

2. Export the backup to an external device:a. Before you begin, ensure the following:

v You need maintenance credentials in order to perform the following tasks.v The initial password of the maintenance user is xivmsMaintenance.v Make sure the root user changes the password of the maintenance user

as soon as possible. See here: “Changing the maintenance password” onpage 55.

b. Export the backup. SFTP to the server using the maintenance account andexport the backup file outside the Multi-System Manager

sftp maintenance@msms-12-8-servPassword:Connecting to msms-12-8-serv.sftp> cd backupsftp> get BACKUP_20130404_233001.tar.gz

Restoring the Multi-System ManagerRestoring the inventory configuration and preferences of the Multi-SystemManager from a backup

About this task

This section describes how to restore the inventory configuration of theMulti-System Manager from a backup. All of the backup and restore options areaccessible from the root menu. This section describes the best practice.

The backup file is version-specific. It can be restored into a Multi-System Managerof the same version. Whenever you upgrade the Multi-System Manager to a newversion, create a new backup file.

The restore procedure restores the following configurations:v Multi-System Manager inventoryv Users workspaces - where information about users and the systems they work

on is saved


v RMI portsv Trusted certificatev SMTP configuration

The restore process does not restore other configurations and data, such as:v Network and NTP (See “Step 3” on page 7 of the installation).v System Machine Account password (See “Changing the System Machine

Account password” on page 48).v Manager Access Code (See “Changing the manager access code” on page 55).v Multi-System Manager certificate (see here: “Replacing the Multi-System

Manager certificate” on page 38)v Multi-System Manager logs

In order to configure these not-restored configurations, please refer to the relevantsections on this user guide.

Procedure1. Restore the Multi-System Manager database to the target Manager. On the

menu of the target Multi-System Manager, click 2 to restore the database.

Note: This step is applicable only if the backup was exported to an externaldevice.a. SFTP to the target Multi-System Manager using the maintenance account.

Put the backup file in the backup folder.

sftp maintenance@msms-12-8-igorgPassword:Connected to msms-12-8-igorg.sftp> put BACKUP_20121101_131435.tar.gz uploadUploading BACKUP_20121101_131435.tar.gz to/upload/BACKUP_20121101_131435.tar.gzBACKUP_20121101_131435.tar.gz

b. Select a file to restore from:

Your Selection>2Backup files to restore:------------------------BACKUP_20120815_085300.tar.gzBACKUP_20120814_085000.tar.gz

Please select a backup file to restore >BACKUP_20120815_085300.tar.gz

c. Click Y to confirm.d. Confirm again:

Are you sure you want to restore BACKUP_20120815_085300.tar.gz? [Y/N] : y

Restore DB is going to override your current configuration.It is recommended to run a backup prior restoring.Do you want to run backup of the current configuration before restoring? [Y/N] :

e. The restore takes place:

Chapter 4. Backing up and restoring the Multi-System Manager 25

Backup files to restore:------------------------BACKUP_20120827_112834.tar.gzBACKUP_20120827_112511.tar.gzBACKUP_20120814_122049.tar.gz



Restore DB is going to override your current configuration.It is recommended to run a backup prior to restoring.Do you want to run backup of the current configuration before restoring? [Y/N] : y

Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file:backup/BACKUP_20120827_112904.tar.gzxivms v1.3.0.x is stopped

Restoring BACKUP_20120814_122049.tar.gz...Restore completed successfully

Note: The following configurations were not restored(the pre-restore configurations were kept):System Machine Account passwordManager Access CodeManager CertificateIf you wish to set them, please refer to the user guide for further explanations.

xivms v1.3.0.x is starting...

f. Press any key to return to the Backup and Restore menu.2. Once the restore is complete, you need to redefine the following:

The System Machine AccountSee a definition to the System Machine Account here: “Definitions” onpage 1.

You can configure it either from the GUI or on the Multi-SystemManager menu.

On the GUIFollow the instructions on step 4 of the “Initializing theinventory” on page 15 section.

From the Multi-System Manager menuGo to: “Changing the System Machine Account password” onpage 48.

The Manager Access CodeSee a definition to the Manager Access Code here: “Definitions” onpage 1.

You can configure it either from the GUI or on the Multi-SystemManager menu.

On the GUIFollow the instructions on step 4 of the “Initializing theinventory” on page 15 section.

From the Multi-System Manager menuGo to: “Changing the manager access code” on page 55.

The Multi-System Manager certificateIf needed, replace the Multi-System Manager certificate (see here:“Replacing the Multi-System Manager certificate” on page 38).


Chapter 5. Managing the XIV and Multi-System Managercertificates

The Management Tools provides the ability to manage the XIV and Multi-SystemManager certificates.

When the XIV GUI connects to a Multi-System Manager, or directly to an XIVsystem, or when the Multi-System Manager connects to an XIV system, they areattempting to identify the certificates of the XIV system or the Multi-SystemManager.

This chapter describes the methods of handling certificates on the GUI. Forhandling certificates from the Multi-System Manager menu, see “Managing thecertificates” on page 49.

GUI certificate management in direct mode

Importing certificates into the local truststoreThe GUI manages a truststore for XIV systems certificates.

Before you begin

In order to import a certificate, you need:v The certificate file

Procedure1. Open Tools > Management > Certificates (Tab) on the XIV GUI menu. The

Certificates Management screen opens.

2. Click the Import certificate icon.

Figure 9. Importing certificates into the local truststore


Results

Following the certificates import into the local truststore and exiting theManagement screen, all XIV systems with certificate errors are reloaded.

Removing certificates from the local truststoreThis option removes a certificate from the local trust store.

Procedure1. Open Tools > Management > Certificates (Tab) on the XIV GUI menu. The

Certificates Management screen opens.2. Select a certificate and click the Remove Certificate icon. Click Yes to approve.

Results

Following the certificates removal from the local truststore and exiting theManagement screen, all XIV systems are reloaded.

Handling errors of XIV systems certificatesThis option reviews a certificate that is already assigned to an XIV system.

Procedure1. Right-click an XIV system with a Certificate Error status and select Manage

Certificate from the pop-up menu.


2. Review the certificate that is displayed on screen, ensure that it can be trustedand select from the following options:v Trust Once - confirm that the certificate of this XIV system can be trusted

throughout the current GUI session only.v Trust Always - confirm that the certificate can be trusted. The certificate will

be added to the local truststore.

Figure 10. Handling errors of XIV systems certificates

Chapter 5. Managing the XIV and Multi-System Manager certificates 29

Results

Following the confirmation, all XIV systems that have a Certificate Error status andare using the certificate that is now confirmed will be automatically reloaded andvalidated.

GUI certificate management in server modeIn server mode the Multi-System Manager maintains a truststore that manages XIVsystems certificates.

Working in server mode, the GUI does not directly connect to the XIV system. TheMulti-System Manager maintains a truststore that validates the certificates of theXIV systems, and the GUI provides the ability to do so.

Note: Multi-System Manager certificate management can also be done via serverscripts.

Importing a certificate into the Multi-System Manager truststore

This option imports certificates into the truststore that is maintained by theMulti-System Manager.

Procedure1. Open Systems > Manager Configuration > XIV Certificates (Tab).

Figure 11. Trusting a certificate


2. Click the Import Certificate icon.

Results

Following the import of new certificates into the Multi-System Manager trust store,and moving to another tab - or exiting the window - all XIV systems with acertificate error are reloaded.

Removing a certificate from the Multi-System Manager truststore

This option removes certificates from the truststore that is maintained by theMulti-System Manager.

Procedure1. Open Systems > Manager Configuration > XIV Certificates (Tab).2. Select a certificate and click the Remove Certificate icon.

Results

Following the certificates removal from the Multi-System Manager trust store andexiting the Management screen - or switching to another tab - all XIV systems arereloaded.

Handling certificate errors on the Multi-System Manager truststore

This option allows to view and re-trust certificates on the truststore that ismaintained by the Multi-System Manager.

Procedure1. Open Systems > Manager Configuration > Inventory (Tab).2. Right-click an XIV system with a certificate error and select Manage Certificate

from the pop-up menu.

Figure 12. The Manager Configuration screen


The certificate opens on screen.3. Review the certificate. Click Trust Always to import it to the Multi-System

Manager trust store.

Results

Following the certificates removal from the Multi-System Manager trust store andexiting the Management screen - or switching to another tab - all XIV systems thatare using this certificate are reloaded.

Handling the Multi-System Manager certificateThis option handles the certificate of the Multi-System Manager itself.

Figure 13. Handling certificate errors on the Multi-System Manager trust store

Figure 14. Handling certificate errors on the Multi-System Manager trust store


About this task

The GUI uses a local truststore that validates the Multi-System Manager.

Procedure

When switching from the Direct Mode to the Server Mode, or switching from oneserver to another, the Multi-System Manager certificate will be validated. If thecertificate cannot be validated, the Certificate Details window will be displayed.To start working with the Multi-System Manager, the certificate has to be trusted inone of the following ways:1. Trust Once - the certificate will be treated as trusted throughout the current

GUI session.2. Trust Always - the certificate is trusted and imported to the local truststore.

Managing XIV systems certificates

Importing a PKCS#12 certificate of an XIV systemThe PKCS#12 certificate of an XIV system includes both public and private keys.

Before you begin

In order to import a PKCS#12 certificate, you need:v The certificate filev The password of the private key

About this task

This task guides you through importing the PKCS#12 certificate of an XIV system.

Figure 15. Handling the Multi-System Manager certificate


Procedure1. Open Systems > System Settings> Manage Certificates on the XIV GUI menu.

The Certificates Management screen opens.

2. Click the Import button. The Import Certificate (*.pem, *.p12) screen opens.

a. Browse for the certificate file.b. Check the services that will use this certificate.c. Choose an alias for the imported certificate. This name can be any

distinguished name that will help you easily identify it among the rest ofyour certificates.

d. Enter the password of the private key.3. Click Import. The certificate file is imported.

Figure 16. The Certificate Management screen

Figure 17. The Import Certificate screen


Importing certificate

Generating a Certificate Signing Request (CSR)This task describes how to generate a Certificate Signing Request that will be sentto the Certificate Authority.

Procedure1. Click the Import Certificate toolbar icon. The Generate CSR screen opens.

2. Enter a certificate name. This has to a be distinguishable name for furtherreference.

3. Enter the certificate subject in standard DN format. For example:/CN=TestCert/O=Organization/OU=OrganizationUnit.

4. Select a bit length from the list.

Note: A bit length of 4096 requires unrestricted policies.5. Click Generate. Select a local path where the CSR file will be saved to.6. Open the Certificate Management screen and verify that the newly generated

certificate is awaiting authentication. The value of the Authenticated field isNo.

Figure 18. The Generate CSR screen


What to do next

Proceed to “Importing a signed certificate request.”

Importing a signed certificate requestImporting signed certificate request into the XIV in order to authenticate it.

Before you begin

In order to replace a signed certificate, you need:v The certificate filev The password of the private key

About this task

Once you have authorization from the certificate authority, you can import thesigned certificate.

Procedure1. Click the Import Certificate toolbar icon.

Figure 19. The newly generated certificate is awaiting authentication


2. Select a certificate file (in PEM format).3. Select among the services that will use the certificate.4. Click Import. The certificate file is imported.

Removing a certificateThis section describes how to remove a certificate.

About this task

This task removes the certificate from the system.


The Certificates Management screen opens.2. Select a certificate and click Delete. The certificate is removed.

Renaming an XIV system certificateThis task describes how to rename an XIV system certificate.


The Certificates Management screen opens.2. Right-click on a certificate and click Rename.3. Enter a new name and click OK.

Regenerating a CSR for an XIV system certificateThis task describes how to regenerate a CSR (Certified Signing Request) for an XIVsystem certificate.


The Certificates Management screen opens.2. Right-click on a certificate and click Regenerate CSR.3. Enter a new subject and click Generate.4. Select the local file path to save the generate CSR file into.

Figure 20. The Import Certificate screen


Updating a certificate of an XIV systemBoth the certificate and the certified services can be updated.


The Certificates Management screen opens.2. Right-click on a certificate and click Update certificate. The Update Certificate

screen opens.

3. Optionally: browse to a new certificate file and import it.4. Optionally: check and un-check services according to your needs.5. Click Update.

Managing the Multi-System Manager certificate

Replacing the Multi-System Manager certificateThis task describes how to replace the Multi-System Manager certificate.

About this task

When the XIV GUI connects to a Multi-System Manager, it is attempting toidentify the certificate of the Multi-System Manager. If needed, you can replace thecertificate from either the GUI or from the Multi-System Manager menu.

Procedure1. From the GUI:

a. Open Systems > Manager Configuration > Administration on the XIV GUImenu.

Figure 21. The Update Certificate screen


Click Show Certificate to view the certificate.b. Clicking Replace Certificate.

c. Click Browse to import a certificate file in PKCS#12 format. Type thepassword and click Import.

2. From the Multi-System Manager menu: see here “Replacing the Multi-SystemManager certificate” on page 56.

Figure 22. Replacing the Manager Certificate

Figure 23. Replacing the Manager Certificate



Chapter 6. Operating the Multi-System Manager

The Multi-System Manager allows access and distributes tasks among thefollowing users:

Root userThe Root user is an OS super user that carries out administrative tasks.

Maintenance userThe Maintenance user carries out Multi-System Manager configurationtasks. This user is the customer's way to interact with any of theMulti-System Manager operations using SFTP protocol (i.e. setting logs,copying the upgrade file, getting backups, etc.).

In addition, pay attention to the following:

No Shell accessThe Multi-System Manager provides no Shell access whatsoever to any ofthe user types.

IBM technician accessibilityThe technician user type does not have access to the GUI in server mode.The GUI is accessible in direct mode.

Root user operations

Selecting an operation from the root user menu

Before you beginv You need root credentials in order to access this menu.

About this task

The Multi-System Manager root menu provides access to systems managementoperations.


Procedure

Login with root credentials. The following menu opens on screen:

-------------------------------------------------------------------------------- IBM XIV Multi-System Manager v1.3.0.x ----------------------------------------------------------------------------------

Super user Menu---------------IBM XIV Multi-System Manager is running

1) Server Configuration Options2) Gather Server Logs3) Show Audit Log4) Show upgrade Logs5) Manage Inventory Options6) Backup/Restore Options7) Change ’root’ Password8) Change ’maintenance’ Password9) Change Manager Access Code10) Start/Stop Multi-System Manager Service11) Replace Multi-System Manager Certificate12) Change XIV GUI Communication Ports13) Upgrade XIV Multi-System Manager14) Reboot15) Shutdown16) ExitYour Selection>

What to do next

The following sections explain how to carry out root user operations.

Server configuration optionsThe server configuration options allow to go back to the various configurationsteps you are already familiar with from the Multi-System Manager installation.Using these scripts you can change the Multi-System Manager configuration afterits installation.

About this task

This task allows you to change the server configuration.

Note: Changing the server configuration is not mandatory.

Procedure1. Click 1 on the root menu. The Server configuration Menu opens on screen.

-------------------------------------------------------------------------------- IBM XIV Multi-System Manager v1.3.0.x ----------------------------------------------------------------------------------

Server Configuration Menu-------------------------1) Network2) NTP & Regional Settings3) SMTP4) ExitYour Selection>


2. Select from the following options: Detailed information regarding the way toconfigure the server are available on the“Installing the Multi-System Manager”on page 6 in this document.

1 Network

2 NTP & Regional Settings

3 SMTP - in addition to the Server address and port that where definedduring the installation (see the relevant section on the Installationchapter: “Step 5” on page 12, from this menu you can do the following:v Define the sender email address - the address that will be displayed on

the from field of the emails.v Add a destination - email addresses that you can send emails to.v Test the SMTP configuration - by sending a confirmation email.

Relevant menu options:

1) Add destination2) Remove destination3) Remove all destinations4) Send confirmation emails5) Continue6) Return to the previous menu

4 Exit - return to the Super user menu.

Gathering the server logsThe Gather Server Logs menu option allows you to gather logs of the serveractivity.

About this task

This task allows you to gather server logs. The logs can be later collected by theMaintenance user (See here “Performing maintenance tasks” on page 59).

Procedure1. Click 2 on the root menu. A log is collected and the file name is displayed on

screen.

Your Selection>2Gathering IBM XIV Multi-System Manager logs...Gather logs completed successfullySFTP using ’maintenance’ account and get the file:logs/msms_logs_20120815_081641.tar.gzPress any key to continue

2. Pressing any key returns you to the super user menu.

What to do next

SFTP using the maintenance user credentials to collect the log from the logs folder.

Displaying the audit logThis menu option displays a log of Server Admin activities.

Chapter 6. Operating the Multi-System Manager 43

About this task

The audit log displays the following Server Admin activities:v Adding a system to the inventoryv Modifying the system addressv Removing a system from the inventoryv Suspending the monitoring of a systemv Suspending the monitoring of all of the systemsv Resuming the monitoring of a systemv Resume the monitoring of all of the systemsv Removing all of the systems from the inventoryv Setting the System Machine Account credentialsv Invalidating the user authenticationv Adding a System Machine Account user to a specific systemv Importing the system certificatev Accepting the system certificatev Removing the system certificate

The audit log is stored into a file that can be collected. See “Gathering the serverlogs” on page 43.

Procedure1. Click 3 on the root menu. A log is collected and is displayed on screen.

Your Selection>318:05:13,924 admin Remove all systems from the inventory. [Success]11:32:38,964 admin Remove system 9.151.133.239 from the inventory [Success]11:32:48,423 admin Add system [mn00010:7778] to the inventory [Success]11:33:07,202 admin Robot user credentials change

[Failed: Password was not changed]11:34:39,320 admin Robot user credentials change [Success]

2. Pressing any key returns you to the Super User menu.

Displaying the upgrade logsThis menu option displays the upgrade logs.

About this task

Upgrade logs can be displayed on screen and exported via SFTP.


Procedure1. Click 4 on the root menu. The upgrade logs are displayed on screen.

---------------------------------------------------------------------------------- IBM XIV Multi-System Manager v1.3.0.x --------------------------------------------------------------------------------

Super User Menu-------------------------------1) Server Configuration Options2) Gather Server Logs3) Show Audit Logs4) Show Upgrade Logs5) Manager Inventory Options6) Backup/Restore Options7) Change ’root’ Password8) Change ’maintenance’ Password9) Change Manager Access code10) Start/Stop Multi-System Manager Service11) Replace Multi-System Manager Certificate12) Change XIV GUI Communication Ports13) Upgrade XIV Multi-System Manager14) Reboot15) Shutdown16) Exit

Your Selection>4

Upgrade log files:------------------upgrade_2013-01-15_12-00-00_23352.logupgrade_2013-01-16_14-00-00_30813.log

Please select the log flie you wish to see >

2. Once a log is selected, the upgrade starts

Created at: 15-01-2013 12/00/00This utility will run the upgrade procedure of theIBM XIV Multi-System Manager.Backup database will run prior to the upgrade.Backing up...Backup completed successfully.SFTP using ’maintenance’ user and get the file:backup/BACKUP_20130115_121000.tar.gz

File in the Upload folder-------------------------MultiSystemManagerUpgradeKit1.3.0-3.tar.gz

Extracting /files/upload/MultiSystemManagerUpgradeKit1.3.0-3.tar.gz

3. You may export the file via SFTP using the 'maintenance' user. See here:“Performing maintenance tasks” on page 59.

Managing inventory optionsThe inventory options allow for adding, modifying and removing XIV systemsfrom being managed by the Multi-System Manager.

About this task

This menu lists all inventory management options.


Procedure

Click 5 on the root menu. The Manager Inventory Configuration menu is displayedon screen.

--------------- IBM XIV Multi-System Manager v1.3.0.x --------------------------------------------------------------------------------

Manager Inventory Configuration-------------------------------IBM XIV Multi-System Manager is running

1) System Inventory List2) Add System3) Modify System4) Remove System5) System Monitoring Suspend6) System Monitoring Resume7) Re-authenticate All Users8) Change System Machine Account9) Manage System Certificates10) ExitYour Selection>

What to do next

The following sections explain how to carry out root user operations.

System inventory listThe system inventory list displays the XIV Systems monitored by Multi-SystemManager and their status.

About this task

This task allows you to view the inventory list.

Procedure1. Click 1 on the Manager Inventory Configuration menu. The System Inventory

List opens on screen. For each system, the list displays its name, address,status and ID.

Your Selection>1---------------------------------------------------------------Name Addresses Status Id

---------------------------------------------------------------Gen3p1-04 Gen3p1-04 Authentication Failure Gen3p1-04::null:nullqa16 qa16 Authentication Failure qa16::nu

Copy of the systems list:logs/systems_list_201208161555.log by SFTP with ’maintenance’ account.Press any key to continue

The list also displays the file on which it is stored and a reminder that the filecan be pulled by the Maintenance user.

2. Press any key to return to the Manager Inventory Configuration menu.

Adding a system to the inventoryThis menu option adds an XIV System to the inventory.


Procedure1. Click 2 on the Manager Inventory Configuration menu. You are asked to enter

the new system.

Your Selection>2Enter new system addresses in the following format: address1 [address2] [address3]>

2. Enter the address of the new system.

Results

The system is added to the inventory and can be viewed from the systeminventory list.

Modifying an XIV system in the inventoryThis menu option modifies an XIV System to the inventory.

Procedure1. Click 3 on the Manager Inventory Configuration menu. The following message

is displayed on screen:

Your Selection>3Enter a system address/ID to modify >

2. Enter the system's address or ID and then enter the new system addresses:

Your Selection>3Enter a system address/ID to modify >qa16Enter new addresses in the following format: address1 [address2] [address3]>

The system is now modified.

Removing a system from the inventoryThis menu option removes an XIV System in the inventory.

Procedure1. Click 4 on the Manager Inventory Configuration menu. A message is displayed

on screen:

Your Selection>4Enter a system address/ID to remove (--all for all systems) >

2. Enter an address or ID in order to remove a single system. Alternately, enter--all in order to remove all of the systems.

Suspending a system from monitoringThis menu option suspends an XIV System from being monitored by theMulti-System Manager.


on screen:

Your Selection>5Enter a system address/ID to suspend (--all for all systems) >


2. Enter an address or ID in order to suspend a single system. Alternately, enter--all in order to suspend all of the systems.

Resuming the monitoring of a suspended XIV SystemThis menu option resumes the monitoring of a suspended XIV System.


on screen:

Your Selection>6Enter a system address/ID to resume (--all for all systems) >

2. Enter an address or ID in order to resume a single suspended system.Alternately, enter --all in order to resume all of the suspended systems.

Re-authenticating usersThis menu option re-authenticates the users across all of the XIV systems that aremanaged by the Multi-System Manager.


on screen:

Your Selection>7This option will force re-authentication of all logged-in users. Are you sure? [Y/N] >

2. Press Y to continue. A message is displayed on screen:

Are you sure? [Y/N] >yInvalidating all authentication records.Logged in users will be re-authenticated automatically.Press any key to continue

3. Press any key to perform the user authentication.

Changing the System Machine Account passwordThis menu option changes the System Machine Account password.

About this task

See a definition of the System Machine Account here: “Definitions” on page 1.

The password can be changed either from the Manager Inventory Configurationmenu or via the GUI.

In addition, the password needs to be changed on all systems.

Procedure

Select whether to use the Manager Inventory Configuration menu or the GUI:

On the administrator menuSee here: “Managing inventory options” on page 45.

On the GUI

1. Login to the GUI using the manager access code (see here: “Initializingthe inventory” on page 15).


2. Go to menu: Systems > Server Admin Options > Credentials. Fill inthe System Machine Account (see a definition here: “Definitions” onpage 1) password and click Update.

3. Re-authenticate the systems according to the new password: openSystems > Manager Configuration> Inventory. Wait until the systemsarrive to the status of Authentication Error, select all those systems(using the CTRL or SHIFT keys), right-click and select Diagnose/FixAuthentication error from the context menu. Read more on thediagnose and fix process on the “Definitions” on page 1 topic.

Managing the certificatesStarting with this release, users can install their own certificates in addition to thebuilt-in certificate that comes with the XIV system.

About this task

Every Management Tool component, connected to an XIV directly or to aMulti-System Manager, can validate the certificate installed in theXIV/Multi-System Manager and if not valid, will be asked to trust it (once oralways).

Procedure

Click 9 on the Manager Inventory Configuration menu. The Manage SystemsCertificates menu is displayed on screen.

--------------- IBM XIV Multi-System Manager v1.3.0.x --------------------------------------------------------------------------------

Manage Systems Certificates---------------------------1) Show Trusted Certificates2) Import Certificate to Trust3) Remove Trusted Certificate4) Show All Systems With Certificate Problem5) Trust System Certificate with Certificate Problem6) ExitYour Selection>

What to do next

The following sections explain how to carry certificate management operations.

Displaying trusted certificatesThis menu option displays a list of certificates that are trusted by the Multi-SystemManager along with their expiration dates.

About this task

This menu option displays a list of trusted certificates, and let you select whetherto display global certificates as well.

Procedure1. Click 1 on the Manage Systems Certificates menu.2. Click Y in order to display also global certificates. The list of trusted certificates

are displayed on screen.


Your selection>1Do you want to display the global certificates as well? [Y/N]:True Sonera Class2 CA Sonera Class2 CA 06-04-2001 06-04-2021True Entrust Root Ce...on Auth Entrust Root Ce...on Auth 27-11-2006 27-11-2026True Sonera Class1 CA Sonera Class1 CA 06-04-2001 06-04-2021

Importing certificates to trustThis menu option imports certificate files in PEM format to the Multi-SystemManager.

About this task

In case the XIV system certificate was replaced, you can add the new certificate tothe Multi-System Manager so that the system will be trusted automatically uponconnecting to it.

Procedure1. Arrange for the new certificates:

v Make sure you have the certificate files.v Make sure all are in PEM format. If not, you can convert your format to PEM

using standard tools.v SFTP these files to the upload folder using maintenance credentials, see here

“Performing maintenance tasks” on page 592. Click 2 on the Manage Systems Certificates menu.

Your Selection> Upload the certificate files (*.pem) in PEM format using SFTPand user ’maintenance’ to the Upload folder and press any key...

3. The certificate files will be displayed.

Enter the certificate file to import

What to do next

You can verify that that certificate files are imported correctly by displaying the listof certificates on screen. See here “Displaying trusted certificates” on page 49.

Removing certificatesThis menu option removes certificate files from the Multi-System Manager.

About this task

This task displays the list of trusted certificates and asks you to select which ofthem to remove.

Procedure

Click 3 on the Manage Systems Certificates menu. A list of all certificates isdisplayed on screen, and each certificate has an index number.


Your Selection> 3

Index Is Global Issue To Issue By----------------------------------------------------------------------------------1 True Security Communications RootCA2 Security Communications RootCA22 True UTN - DATACorp SGC UTN - DATACorp SGC

Select the index of the certificate you want to remove.

Displaying XIV systems with certificate problemsThis menu option displays XIV systems that have certificate problems.

About this task

The certificates with problems are displayed with an indication of their problems.

Procedure

Click 4 on the Manage Systems Certificates menu.

Your Selection> 4Addresses Problem Issued To Issued By Valid From Valid To-------------------------------------------------------------------------------GEN3P1-01C Not Trusted Admin01 Admin 16-01-2013 16-01-2014

Press any key to continue

Handling XIV systems with certificate problemsThis menu option handles XIV systems that have certificate problems.

About this task

This menu option allows you to query for systems with certificate problems andhave them trust these certificates.

Procedure1. Click 5 on the Manage Systems Certificates menu.

Do you want to see the systems with certificate problem? [Y/N] >yPlease wait...

Addresses Problem Issued To Issued By Valid From Valid To------------------------------------------------------------------------------------mn52 Not Trusted XIV XIV 01-05-2011 30-04-2014

Enter the system DNS address >

2. Enter an XIV system that is on the list.


Enter the system DNS address >mn52Please wait...[[Version: V1Subject: EMAILADDRESS=storage at ibm dot com, CN=XIV, OU=XIV, O=IBM, L=Tel Aviv,ST=some-state, C=ILSignature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key: IBMJCA RSA Public Key:modulus:10305904552676934126298894635935691207610305904552676934126298894635935691200010305904552676934126298894635935691207310305904552676934126298894635935691207810305904552676934126298894635935691207public component:65537

Validity: [From: Thu May 19 08:35:42 UTC 2011,To: Sun May 18 08:35:42 UTC 2014]

Issuer: EMAILADDRESS=storage at ibm dot com, CN=XIV, OU=XIV, O=IBM, L=Tel Aviv,ST=some-state, C=ILSerialNumber: [12091787267339116468]]Algorithm: [SHA1withRSA]Signature:0000: 88 d7 6c 82 5c ac 4e 19 75 e2 06 fa a5 47 07 e3 ..1..N.u...G..

]Are you sure you want to import this certificate? [Y/N] >

3. Click Y to import the certificate.

Are you sure you want to import this certificate? [Y/N]yCertificate was imported successfullyCertificate was imported successfully - do you want to reload it? [Y/N]

4. Click Y again.

Certificate was imported successfully - do you want to reload it? [Y/N]yPress any key to continue

What to do next

You can run Trust System Certificate with Certificate Problem (step 1 above)again, and verify that the XIV system no longer appears on the list.

Backing up the server databaseThe Backup/Restore menu options allows you to backup the server database andto restore this database from a backup.

About this task

The information stored on the Multi-System Manager database can be backed upand restored from this menu. This database contains the inventory configuration.Backing it up helps you to recover from a disaster in order to maintain servicecontinuity by restoring the inventory. It can also be used for copying the inventoryconfiguration from one Multi-System Manager to another.


Procedure

Click 5 on the root menu. The Backup and Restore Menu is displayed on screen.



What to do next

See the next sections for detailed instructions about each menu option.

BackupThe Backup menu item allows you to backup the database.

About this task

A default scheduled backup is already configured at 23:30 daily. In addition tothat, you can back up the database using this task.

Procedure1. Click 1 to back up the database. The backup process takes place:

Your Selection>1Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file: backup/BACKUP_20120815_082926.tar.gzPress any key to continue

The backup file name is displayed on screen.2. Press any key to return to the Backup and Restore Menu.

What to do next

You can SFTP using 'maintenance' account and get the file from 'backup' folder.

RestoreThe Restore menu item allows you to restore the database from a backup.

Procedure1. Click 2 to restore the database. The available backup files, that are stored on the

backup folder that is accessible by the maintenance user, are displayed onscreen:

Your Selection>2Backup files to restore:------------------------BACKUP_20120815_085300.tar.gzBACKUP_20120814_085000.tar.gz

Please select a backup file to restore >

2. Select a file to restore from:



3. Click Y to confirm.4. Confirm again:


Restore DB is going to override your current configuration.It is recommended to run a backup prior restoring.Do you want to run backup of the current configuration before restoring? [Y/N] :

5. The restore takes place:

Backup files to restore:------------------------BACKUP_20120827_112834.tar.gzBACKUP_20120827_112511.tar.gzBACKUP_20120814_122049.tar.gz



Restore DB is going to override your current configuration.It is recommended to run a backup prior to restoring.Do you want to run backup of the current configuration before restoring? [Y/N] : y

Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file: backup/BACKUP_20120827_112904.tar.gzxivms v1.3.0.x is stopped

Restoring BACKUP_20120814_122049.tar.gz...Restore completed successfully

Note: Systems Machine Account Password was not restored.

xivms v1.3.0.x is starting...

6. Press any key to return to the Backup and Restore menu.

What to do next

Once the restore is complete, you need to redefine:v The System Machine Accountv The Manager Access Code

See a definitions to both here: “Definitions” on page 1. You can do it either fromthe GUI or on the CLI.

On the GUIFollow the instructions on step 4“Initializing the inventory” on page 15 ofthe Initializing the inventory section.

From the CLIGo to “Changing the System Machine Account password” on page 48.

Scheduling a daily backupThe Schedule Daily Backup menu item allows you to schedule a daily backup job.The default daily backup runs at 23:30.


Procedure1. Click 3 to schedule a back up. The current daily backup schedule is also

displayed on screen:

Your Selection>3Select time (HH:MM) to run backup every day [23:30]? >

2. Select a new backup time in an HH:MM format.

Your Selection>3Select time (HH:MM) to run backup every day [23:30]? >14:00Scheduled daily backup at 14:00Scheduled daily backup folder cleaner at 14:50Press any key to continue

Note: A backup folder cleaner job runs daily and cleans all of the files but the30 newest.

3. Press any key to return to the Backup and Restore menu.

Removing a scheduled backupThe Remove Scheduled Backup menu item allows you to clear the daily backup job.

Procedure1. Click 4 to remove a schedule.

Your Selection>4Removed scheduled backupPress any key to continue

The schedule is cleared.2. Press any key to return to the Backup and Restore menu.

Changing the root passwordThis menu option allows you to change the password of the root user.

Procedure1. Click 7 on the root menu.2. Enter a new password.

Changing the maintenance passwordThis menu option allows you to change the password of the maintenance user.

Procedure1. Click 8 on the root menu.2. Enter a new password.

Changing the manager access codeThis section describes how to change the manager access code.

Procedure1. Click 9 on the root menu.2. Enter a new access code.


Starting and stopping the Multi-System Manager serviceThis menu option allows you to start (or stop) the Multi-System Manager service.

Procedure1. Click 10 on the root menu.

a. If the service is up, you will be asked to stop it.b. Alternately, you will be asked to start it.

2. Confirm.

Replacing the Multi-System Manager certificateThis task guides you through replacing the default Multi-System Managercertificate with your organization’s certificate.

Before you beginv Prepare a certificate file in PKCS12 format.v SFTP the file using 'maintenance' account to 'upload' folder.

About this task

The Multi-System Manager is shipped with a default certificate. This task guidesyou through replacing the default certificate with your organization’s certificate.

Procedure1. Click 11 on the root menu.

Your Selection>11

This script installs a new certificate.You need to prepare a certificate file in PKCS#12 format.You need to SFTP the files using ’maintenance’ account to ’upload’ folder.

2. The available certificates that are on the upload folder will be displayed onscreen. Enter a certificate file name and the key password.

Awaiting screen capture

Results

The server certificate is now replaced.

What to do next

The next time the GUI connects to the server, it will have to approve (trust) thenew certificate.

Changing the communication portsThis task allows you to change the ports through which the Multi-System Managerconnects with the IBM XIV Storage Management GUI.

About this task

The Multi-System Manager connects to the XIV GUI via 6 reserved, consecutiveports, starting with port 1199.


Procedure1. Click 12 on the root menu. The number of the first port among the consecutive

six is displayed on screen. In the following screenshot, this number is 1199.

Your Selection>12

The communication between XIV GUI and the Multi-System Manageris done via 6 consecutive, reserved ports.

Please enter a new starting port number higher than 1024 [1199] >

2. Enter a new port number that is higher than 1024. In this example, the enteredport number is 1340.

Please enter a new starting port number [1199] >1340

The new sequence of six port numbers, 1340 to 1345, is also displayed onscreen.

You are going to change the reserved ports from 1199-1205to 1340-1346. Are you sure? [Y/N] >y

3. Click Y to approve the replacement. You are asked to restart the service.

You need to restart Multi-System Manager service in order for the changesto take effect.Do you want to restart service now? [Y/N] >

4. Click Y to restart the Multi-System Manager service. Upon success, thefollowing message is displayed on screen:

Change was completed successfully.Point XIV GUI to connect to the new starting communication port.

If you select not to restart the service right now, the following notification willbe displayed on screen:

Change was not completed yet. Remember to restart the Multi-System Manager service.

Results

As the service is up again, the ports have changed.

What to do next

Change the communication ports that connect the GUI to the Multi-SystemManager through the System > Preferences menu.

Upgrading the Multi-System ManagerThis menu option allows you to upgrade the Multi-System Manager.

xiv

10

41

0


About this task

For a complete description of the Upgrade and restore processes, see here:Chapter 3, “Upgrading the Multi-System Manager,” on page 19.

Procedure1. Upload the upgrade file to the upload folder using SFTP and maintenance user

credentials.2. Click 13 on the root menu.

Your Selection>13This utility will run the upgrade procedure of IBM XIV Multi-System ManagerThe backup database will run prior the upgrade.Press any key to continue

3. Next, provided that an upgrade file was uploaded as stated above, select a filefrom the list:

Backing up...Backup completed successfullySFTP using ’maintenance’ account and get the file: backup/BACKUP_20120815_105757.tar.gz

Please upload the upgrade file (*.tar.gz) using SFTP and user ’maintenance’to upload folder.Press any key to continue

Files in upload folder----------------------XIV_Multi_System_Manager_Upgrade.tar.gzXIV_Multi_System_Manager_Upgrade_1.3.tar.gzdd.tar.gz

Please enter the name of the upgrade file >

4. Enter the file name. You will be asked to confirm the upgrade.

IBM XIV Multi-System Manager will be upgraded to version 1.3.0.x.Please confirm stopping the Multi-System Manager serviceand upgrading now [Y/N] >

5. During the upgrade, you will be prompted to accept the new license. Enter 1 toconfirm. Upon confirmation, the upgrade takes place, resulting in the followingmessage:

The upgrade to IBM XIV Multi-System Manager version 1.3.0.x completed successfully.

Results

The Multi-System Manager version is upgraded.

Rebooting the Multi-System Manager hostThis menu option allows you to reboot the Multi-System Manager host.

Procedure

Click 14 on the root menu. Confirm the reboot.


Shutting down the VMThis menu option shuts down the VM.

Maintenance user operations

Performing maintenance tasks

Before you beginv You need maintenance credentials in order to perform the following tasks.v The initial password of the maintenance user is xivmsMaintenance.v Make sure the root user changes the password of the maintenance user as soon

as possible. See here: “Changing the maintenance password” on page 55.

About this task

The Multi-System Manager allows for inbound and outbound file delivery viaSFTP. Such files delivery is required for the following tasks:

“Gathering the server logs” on page 43The logs are available for collection from the logs folder.

“System inventory list” on page 46The log of the system list operation can be collected from the logs folder.

Backing up the databaseThe backup file can be collected and stored anywhere outside theMulti-System Manager.

Restoring the databaseThis operation looks for a backup file. In some cases, the backup file has tobe sent to the Multi-System Manager.

Replacing the security certificateThe security certificate has to be sent to the Multi-System Manger.

Upgrading the Multi-System ManagerThe upgrade file has to be sent to the Multi-System Manager.

Procedure

For each of the above operations, make sure that the relevant file is sent to - orcollected from the following directories:

logs The Multi-System Manager stores the logs in this directory.

backupsBackup files are written into here, and the restore operation looks for a filein here as well.

uploadsCertificates and upgrade files need to be stored here.



Chapter 7. Multisystem configuration

Multisystem configuration allows to change the configuration on mass of XIVsystems within a single click.

Before you begin

Multi system configuration is available for:v LDAP configurationv Support parametersv Pool alert thresholdsv Adding and editing a userv Changing the password for a user

About this taskv Multi system configuration can be run on GUI in Server mode as well as in

Direct mode.v Multi system configuration requires access rights to the involved GUI systems.

Procedure

Launch mass configuration in either of the following ways:v Change the user configuration on selected systems. This applies for all users

operations (add, edit, change password).v Copy LDAP / support / pool alert thresholds configuration and paste the

configuration from one system to specifically selected systems.

What to do next

Proceed with either of the following tasks:v “Multi system configuration of user-related information”

– “Adding a user on multiple systems”– “Editing, deleting or changing the password of a user” on page 62

v Mass copy-paste configuration

Multi system configuration of user-related informationYou may configure user-related information on multiple XIV systems at once.

About this task

This task describes how to configure user-related information on multiple XIVsystems at once.

Adding a user on multiple systemsYou may add a user on multiple XIV systems at once.


Procedure1. Select the systems you would like to configure and click Add User. The Add

User screen opens.2. Enter the user's name, password and other details as displayed on the screen.

Click Add.The new user is added to the selected systems.

3. A progress bar is displayed on screen. Clicking Cancel at this stage will cancelthe mass configuration. When the Add operation is complete, a summary of theresults is displayed on screen. Clicking the Show Results button opens adetailed report on screen.

Results

Following this task, the user was added to the selected systems.

Note: Mass Configuration does not stop on error, means it tries to configure allsystems although some may fail.

Note: Closing the GUI amidst the paste operation terminates the massconfiguration in an unknown state. In such a case, it is advised to go over thesystems and see what has already been properly configured and what still needs tobe configured.

Editing, deleting or changing the password of a userYou may edit or delete a user, as well as change the password on multiple XIVsystems at once.

Procedure1. On the GUI, mouse-over the Access icon and click on Users. The Users view

opens on screen.2. Select the systems that will be displayed on this view.3. Use the CTRL key to multiple select the users to be edited.

Note: Mass editing of users can be applied only to users with the same username.

xiv

10

40

3


4. Right-click the users selection and select Edit, Delete or Change password.

v Delete – will display a progress of the deletion.v Edit or Change Password – will display a dialog. Edit the details or

password and click Update.– A progress bar is displayed on screen. Clicking Cancel at this stage will

cancel the mass configuration. When the operation is done, a summary ofthe results is displayed on screen. Clicking the Show Results button opensa detailed report on screen.

Note: The availability of the edit, delete and change password configurationoptions is subject to your access rights.

Results

Following this task, the user was edited to the selected systems.



Mass copy-paste configurationYou may copy system configuration from one system and paste it onto multipleXIV systems.

Procedure1. On the XIV GUI, right-click a system and select Copy System Configuration

from the pop-up menu.

xiv

10

40

4

Chapter 7. Multisystem configuration 63

This system configuration is now copied to the memory and the pop-up menucloses.

2. Select systems to copy the configuration to. Right-click a system, or severalsystems, and select Paste ... Configuration from the pop-up menu. In thisexample, Paste Support Configuration is selected.

The Mass Support Configuration screen opens.

xiv

10405

xiv

10

40

6


Note: Whenever a paste option is grayed-out, meaning that it is not available,mouse-over the option to display a tooltip that explains the reason. In thisexample, the Paste LDAP Configuration is grayed-out and the tooltip says thatthe target system's version is not compatible with the source system.

3. Click Start.

A progress bar is displayed on screen. Clicking Cancel at this stage will cancelthe mass configuration. When the copy operation is done, a summary of theresults is displayed on screen. Clicking the Show Results button opens adetailed report on screen.

xiv

10

40

7

xiv

10

40

8xiv

10

40

9

Chapter 7. Multisystem configuration 65

Results

Following this task, the configuration of one system was deployed on othersystems.




Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document inother countries. Consult your local IBM representative for information on theproducts and services currently available in your area. Any reference to an IBMproduct, program, or service is not intended to state or imply that only that IBMproduct, program, or service may be used. Any functionally equivalent product,program, or service that does not infringe any IBM intellectual property right maybe used instead. However, it is the user's responsibility to evaluate and verify theoperation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matterdescribed in this document. The furnishing of this document does not grant youany license to these patents. You can send license inquiries, in writing, to:

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.

For license inquiries regarding double-byte character set (DBCS) information,contact the IBM Intellectual Property Department in your country or sendinquiries, in writing, to:

Intellectual Property LicensingLegal and Intellectual Property LawIBM Japan Ltd.1623-14, Shimotsuruma, Yamato-shiKanagawa 242-8502 Japan

The following paragraph does not apply to the United Kingdom or any othercountry where such provisions are inconsistent with local law:INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THISPUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHEREXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIEDWARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESSFOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express orimplied warranties in certain transactions, therefore, this statement may not applyto you.

This information could include technical inaccuracies or typographical errors.Changes are periodically made to the information herein; these changes will beincorporated in new editions of the publication. IBM may make improvementsand/or changes in the product(s) and/or the program(s) described in thispublication at any time without notice.

Any references in this information to non-IBM Web sites are provided forconvenience only and do not in any manner serve as an endorsement of those Websites. The materials at those Web sites are not part of the materials for this IBMproduct and use of those Web sites is at your own risk.


IBM may use or distribute any of the information you supply in any way itbelieves appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purposeof enabling: (i) the exchange of information between independently createdprograms and other programs (including this one) and (ii) the mutual use of theinformation which has been exchanged, should contact:

IBM CorporationAlmaden Research650 Harry RoadBldg 80, D3-304, Department 277San Jose, CA 95120-6099U.S.A.

Such information may be available, subject to appropriate terms and conditions,including in some cases, payment of a fee.

The licensed program described in this document and all licensed materialavailable for it are provided by IBM under terms of the IBM Customer Agreement,IBM International Program License Agreement or any equivalent agreementbetween us.

Any performance data contained herein was determined in a controlledenvironment. Therefore, the results obtained in other operating environments mayvary significantly. Some measurements may have been made on development-levelsystems and there is no guarantee that these measurements will be the same ongenerally available systems. Furthermore, some measurements may have beenestimated through extrapolation. Actual results may vary. Users of this documentshould verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers ofthose products, their published announcements or other publicly available sources.IBM has not tested those products and cannot confirm the accuracy ofperformance, compatibility or any other claims related to non-IBM products.Questions on the capabilities of non-IBM products should be addressed to thesuppliers of those products.

All statements regarding IBM's future direction or intent are subject to change orwithdrawal without notice, and represent goals and objectives only.

This information is for planning purposes only. The information herein is subject tochange before the products described become available.

This information contains examples of data and reports used in daily businessoperations. To illustrate them as completely as possible, the examples include thenames of individuals, companies, brands, and products. All of these names arefictitious and any similarity to the names and addresses used by an actual businessenterprise is entirely coincidental.

If you are viewing this information softcopy, the photographs and colorillustrations may not appear.


TrademarksIBM, the IBM logo, and ibm.com are trademarks or registered trademarks ofInternational Business Machines Corp., registered in many jurisdictions worldwide.Other product and service names might be trademarks of IBM or other companies.A current list of IBM trademarks is available on the Web at Copyright andtrademark information website (www.ibm.com/legal/copytrade.shtml).

Adobe, the Adobe logo, and PostScript are either registered trademarks ortrademarks of Adobe Systems Incorporated in the United States, and/or othercountries.

Other company, product, and service names may be trademarks or service marksof others.

Notices 69

http://www.ibm.com/legal/copytrade.shtml

http://www.ibm.com/legal/copytrade.shtml


Index

Aabout this document

sending comments xaccess code 55access control 41Active Network configuration 6adding a system to the inventory 47adding a user 62audit logs 44authentication 6

BBacking up the database 59Backing up the Multi-System

Manager 23backup 23, 52, 53, 55Backup and Restore Menu 52, 55Backup/Restore Options 41backups directory 59, 61

Ccertificate

of the Multi-System Manager 33, 56Certificate Authority 35certificate error 28certificate import 27, 33, 36certificate management 38certificate removal from the local

truststore 28Certificate replacement

for an XIV system 33, 36for the Multi-System Manager 38

Certificate Signing Requestgenerating 35

certificates 27, 30displaying 49import 50

changingthe access code 55

changing the System Machine Accountpassword 48

changing the user's password 62comments, sending xcommunication ports 56configuration

of multiple xiv systems 61, 62, 63configuration options 42configuration tasks 41copy and paste configuration 63credentials 41cron job 52, 55

Ddatabase 52, 53, 55definitions 1deleting a user 62

DHCP 7Diagnose/Fix authentication problem 1directory

for incoming and outgoing files 59Disable LDAP Authentication 6Displaying the audit log 44Displaying the upgrade logs 44, 45DNS parameters 7documentation

improvement xDomain name servers 6Domain search list 6

Eediting a user 62Enable LDAP Authentication 6error

of an XIV system certificate 28ESX 5expiration dates of certificates 49

Fforums vii

Ggateway 7Gateway 6Gather Server Logs 41Gather Server Logs menu option 43Gathering server logs 59GUI 5, 15

Hhost 58Hostname 6how to back up 23

IIBM

internal user 41personnel 41

IBM XIV Management Tools version 1IBM XIV Multi-System Manager 1IBM XIV support 5IBM XIV Support 5import

a certificate 27a PKCS#12 certificate 33, 36

importing a certificateinto a truststore 30

incoming files 59, 61installation 5, 14installation procedure 6, 7installation required steps 6

installation wizard 6, 7, 11, 12inventory 1

adding a system to 47modifying a system 47of XIV Systems 46re-authenticating all of the users 49,

50, 51re-authenticating users 48removing a system 47resuming the monitoring of a

suspended system 48suspending a system from

monitoring 47inventory configuration and

preferences 24inventory configuration tasks 41IP address 6IP mode 6

LLDAP 15, 41, 58LDAP Authentication 6LDAP directory 1LDAP server type 6LDAP user 15, 18, 58legal notices 69Linux super user 41local truststore 27, 28log

of Server Admin activities 44logs

audit 44gathering 43upgrade 44, 45

logs directory 59, 61

Mmaintenance user 58, 59Maintenance user 41Management Tools 1, 5managing

the certificates 27, 30mandatory parameter

for restoring the database 52, 55mass configuration 61, 63Microsoft Active Directory 6mode

server 18modifying a system to the inventory 47multi-site XIV deployments 1Multi-System Manager vii, 5Multi-System Manager certificate 56Multi-System Manager database 52, 55Multi-System Manager host 58Multi-System Manager installation

individual steps 42Multi-System Manager service 56


multisystemconfiguration 61

Nnetmask 7Netmask 6network

configuration option 42non-LDAP user 15, 18, 58notices

legal 67NTP 6, 11NTP & regional settings

configuration option 42

OOpen-LDAP Server 6OS 41outgoing files 59, 61ovf file 5

Ppassword

changing the user's password 62of the System Machine Account 48

PDFs viiPEM format

maintenance user 50SFTP 50

PKCS#12 certificate 33, 36port 1199 56ports 56prerequisites 3publications vii

Rre-authenticating all of the users 49, 50,

51re-authenticating users 48reader feedback, sending xreboot 58regional settings

configuration option 42related information viiremove

a certificate 28removing a certificate 37

from the truststore 31removing a system from the

inventory 47Renaming an XIV system certificate 37,

38Replacing the security certificate 59required steps

installation 6restore 23, 52, 53, 55restoring the database 53, 55Restoring the database 59Restoring the Multi-System Manager 24Resuming the monitoring of a suspended

XIV System 48

roll-back 22Root 41root credentials 5, 41root user 5, 6, 7

Ssending

comments xServer 5Server Admin 41server admin account

configuration option 42server configuration options 42Server Configuration Options 41server configuration tasks 41Server has low disk space 12Server is down 12Server is up 12server logs 43server mode 18service

of Multi-System Manager 56service xivms start 52, 55service xivms stop 52, 55SFTP 58, 59SFTP protocol 41shell access

none whatsoever 41shutdown 59SMTP 6

configuration option 42SMTP configuration 12specifications

Management Tools 3start

the Multi-System Manager service 56Static IP 7Step 1: License Agreement 7Step 2: Password Change 7Step 3: Networking 7Step 4: NTP & Regional Settings 11Step 5: SMTP 12stop

the Multi-System Manager service 56Storage admin 48storage administrator 1Sun Directory 6suspending a system from

monitoring 47system inventory list 46System machine account 1System Machine Account 41System Machine Account password 48system.xml 15, 58systems management tasks 41

Ttasks 41

maintenance user 59time zone 6, 11trademarks 69trusted certificates 49

truststorethat is maintained by the

Multi-System Manager 30, 31

Uupgrade 22upgrade file 58upgrade logs 44, 45Upgrading the Multi-System

Manager 19, 59from the GUI 21

uploads directory 59, 61user-related information

configuration of 62user's tasks 41users

re-authentication 48users types 41

VViewing the log of system list 59virtual appliance 5VM 5, 59

Wwizard 6, 7

XXIV GUI

upgrading the Multi-SystemManager 21

XIV support 5xiv systems

configuration 61, 63XIV Systems 46, 47, 48, 49, 50, 51

re-authenticating users 48xiv_msms 1xivms service 12xivmsMaintenance

maintenance user 59


��

Printed in USA

SC27-4230-04

Documents

IBM XIV Storage System Management Tools: User Guide€¦ · GUI certificate management in server mode . . . 30 Importing a certificate into the Multi-System Manager trust store.....30