book.book Page 1 Tuesday, March 6, 2012 6:13 PM Dell OpenManage Server Administrator Version 7.
book.book Page 2 Tuesday, March 6, 2012 6:13 PM Notes and Cautions NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. ____________________ Information in this publication is subject to change without notice. © 2012 Dell Inc. All rights reserved. Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc.
book.book Page 3 Tuesday, March 6, 2012 6:13 PM Contents 1 Introduction . Overview . . . . . . . . . . . . . . . . . . . . . . . 9 . . . . . . . . . . . . . . . . . . . . . . . . . 9 Installation . . . . . . . . . . . . . . . . . . . . . Updating Individual System Components 10 . . . . . . . . . . . 10 . . . . . . . . . . . . . . 11 Storage Management Service Instrumentation Service Remote Access Controller Logs . . . . . . . . . . . . . 11 . . . . . . . . . . . . . . . . . . . . . . . .
book.book Page 4 Tuesday, March 6, 2012 6:13 PM VMware ESXi Server 5.X P1 Authentication Encryption . . . . 22 . . . . . . . . . . . . . . . . . . . . . 22 Assigning User Privileges . . . . . . . . . . . . . . . . Creating Server Administrator Users for Supported Red Hat Enterprise Linux and SUSE Linux Enterprise Server Operating Systems . . . . Editing Server Administrator User Privileges on Linux Operating Systems . . . . . . . . . . . . . . 25 26 . . . . . 27 . . . . . . . . . . . . . .
book.book Page 5 Tuesday, March 6, 2012 6:13 PM Server Administrator Local System Login . . . . . Server Administrator Managed System Login . . . 46 . . . . . . . . . . . . . 47 . . . . . . . . . . . . . . . . . . . 48 Central Web Server Login Single Sign-On Configuring Security Settings on Systems Running a Supported Microsoft Windows Operating System . . . . . . . . . . . . . The Server Administrator Home Page . . . . 50 . . . . . . . . .
book.book Page 6 Tuesday, March 6, 2012 6:13 PM Unsupported Features in OpenManage Server Administrator . . . . . . . . . . . . . . . . . . Modular Enclosure . . 69 . . . . . . . . . . . . . . . . . 70 System/Server Module . . . . . . . . . . . . . . . Managing Preferences: Home Page Configuration Options . . . . . . . . . . . . . . . . . . . . . . . General Settings . . 91 . . . . . . . . . . . . . . . . . . 91 Server Administrator 5 . . . . . . . . . . . . . . . .
book.book Page 7 Tuesday, March 6, 2012 6:13 PM Integrated Features Log Window Task Buttons 105 . . . . . . . . . . . . . . . 106 106 . . . . . . . . . . . . . . . . . . . . . . 107 Hardware Log Command Log 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Server Administrator Logs Alert Log 105 . . . . . . . . . . . . . . . . . . . 108 . . . . . . . . . . . . . . . . . . . Setting Alert Actions . 109 . . . . . . . . . . . . . .
book.book Page 8 Tuesday, March 6, 2012 6:13 PM B Frequently Asked Questions Index 8 . . . . . . . . . 121 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
book.book Page 9 Tuesday, March 6, 2012 6:13 PM 1 Introduction Overview Dell OpenManage Server Administrator (OMSA) provides a comprehensive, one-to-one systems management solution in two ways: from an integrated, web browser-based graphical user interface (GUI) and from a command line interface (CLI) through the operating system. Server Administrator is designed for system administrators to manage systems locally and remotely on a network.
book.book Page 10 Tuesday, March 6, 2012 6:13 PM Installation You can install Server Administrator using the Dell Systems Management Tools and Documentation DVD. The DVD provides a setup program to install, upgrade, and uninstall Server Administrator, managed system and management station software components. Additionally, you can install Server Administrator on multiple systems through an unattended installation across a network.
book.book Page 11 Tuesday, March 6, 2012 6:13 PM Instrumentation Service The Instrumentation Service provides rapid access to detailed fault and performance information gathered by industry-standard systems management agents and allows remote administration of monitored systems, including shutdown, startup, and security.
book.book Page 12 Tuesday, March 6, 2012 6:13 PM • Increased the Automatic System Recovery (ASR) Watchdog Timer limit to 720 seconds from 480 seconds. • BIOS settings grouped under specific categories on the BIOS settings page.
book.book Page 13 Tuesday, March 6, 2012 6:13 PM • Deprecated support for Mozilla Firefox 3.6 • Deprecated supported for xx8x systems NOTE: The BIOS features and SD Module Card alerts are applicable to yx2x and later systems. For a list of platforms, operating systems, and browsers support added and deprecated, see the Dell Systems Software Support Matrix Version 7.0 at support.dell.com/manualsSoftware Systems ManagementDell OpenManage Releases.
book.book Page 14 Tuesday, March 6, 2012 6:13 PM Availability on Supported Operating Systems On supported Microsoft Windows operating systems, Server Administrator supports two systems management standards: CIM/WMI (Windows Management Instrumentation) and SNMP, while on supported Red Hat Enterprise Linux and SUSE Linux Enterprise Server operating systems, Server Administrator supports the SNMP systems management standard.
book.book Page 15 Tuesday, March 6, 2012 6:13 PM Server Administrator Home Page The Server Administrator home page provides easy-to-set up and easy-to-use web browser-based system management tasks from the managed system or from a remote host through a LAN, dial-up service, or wireless network.
book.book Page 16 Tuesday, March 6, 2012 6:13 PM 16 • The Dell OpenManage Server Administrator Command Line Interface User's Guide documents the complete command line interface for Server Administrator. • The Integrated Dell Remote Access Controller User’s Guide provides detailed information on configuring and using the iDRAC. • The Dell Chassis Management Controller User’s Guide provides detailed information on installing, configuring and using CMC.
book.book Page 17 Tuesday, March 6, 2012 6:13 PM Obtaining Technical Assistance If at any time you do not understand a procedure described in this guide or if your product does not perform as expected, help tools are available to assist you. For more information about these help tools, see “Getting Help” in your system's Hardware Owner’s Manual. Additionally, Dell Enterprise Training and Certification is available; see dell.com/training for more information.
book.
book.book Page 19 Tuesday, March 6, 2012 6:13 PM Setup and Administration 2 Security Management Dell OpenManage Server Administrator provides security through RoleBased Access Control (RBAC), authentication, and encryption for both the web-based and command line interfaces. Role-Based Access Control RBAC manages security by determining the operations that can be executed by persons in particular roles.
book.book Page 20 Tuesday, March 6, 2012 6:13 PM Server Administrator grants read-only access to users logged in with User privileges, read and write access to users logged in with Power User privileges, and read, write, and administrator access to users logged in with Administrator and Elevated Administrator privileges. See Table 2-1. Table 2-1.
book.book Page 21 Tuesday, March 6, 2012 6:13 PM Authentication The Server Administrator authentication scheme ensures that the correct access types are assigned to the correct user privileges. Additionally, when the command line interface (CLI) is invoked, the Server Administrator authentication scheme validates the context within which the current process is running.
book.book Page 22 Tuesday, March 6, 2012 6:13 PM VMware ESXi Server 5.X P1 Authentication ESXi Server authenticates users accessing ESXi hosts using the vSphere/VI Client or Software Development Kit (SDK). The default installation of ESXi uses a local password database for authentication. ESXi authentication transactions with Server Administrator are also direct interactions with the vmware-hostd process.
book.book Page 23 Tuesday, March 6, 2012 6:13 PM NOTE: For instructions on assigning user privileges for each supported operating system, see your operating system documentation. NOTE: Add new users to the operating system if you want to add users to OpenManage software. You do not have to create new users from within the OpenManage software. Adding Users to a Domain on Windows Operating Systems NOTE: You must have Microsoft Active Directory installed on your system to perform the following procedures.
book.book Page 24 Tuesday, March 6, 2012 6:13 PM Creating Users NOTE: For information about creating users and user groups, see your operating system documentation. Creating Users With User Privileges 1 Run the following command from the command line: useradd -d -g where is not root. NOTE: If does not exist, create it by using the groupadd command. 2 Type passwd and press . 3 When prompted, enter a password for the new user.
book.book Page 25 Tuesday, March 6, 2012 6:13 PM Editing Server Administrator User Privileges on Linux Operating Systems NOTE: Log in as root or an equivalent user to perform these procedures. 1 Open the omarolemap file located at /opt/dell/srvadmin/etc/omarolemap. 2 Add the following in the file: [Tab][Tab] Table 2-4 lists the legend for adding the role definition to the omarolemap file Table 2-4.
book.book Page 26 Tuesday, March 6, 2012 6:13 PM Best Practices While Using the omarolemap File The following are the best practices to be considered while working with the omarolemap file: • Do not delete the following default entries in the omarolemap file. root * Administrator +root * Poweruser * * User • Do not change the omarolemap file permissions or file format. • Do not use the loop back address for , for example: localhost or 127.0.0.1.
book.book Page 27 Tuesday, March 6, 2012 6:13 PM 5 To allow a user to access the ESX/ESXi host through a command shell, select Grant shell access to this user. Users that access the host only through the vSphere Client do not need shell access. 6 To add the user to a group, select the group name from the Group dropdown menu and click Add. 7 Click OK.
book.book Page 28 Tuesday, March 6, 2012 6:13 PM NOTE: The default SNMP agent configuration usually includes a SNMP community name such as public. For security reasons, rename the default SNMP community names. For information about renaming the SNMP community names, see the appropriate section below. NOTE: SNMP Set operations are disabled by default in Server Administrator version 5.2 or later. Server Administrator provides support to enable or disable SNMP Set operations in Server Administrator.
book.book Page 29 Tuesday, March 6, 2012 6:13 PM Configuring the SNMP Agent for Systems Running Supported Windows Operating Systems Server Administrator uses the SNMP services provided by the Windows SNMP agent. You can configure the SNMP agent to change the community name, enable Set operations, and send traps to a management station. To configure your SNMP agent for proper interaction with management applications such as IT Assistant, perform the procedures described in the following sections.
book.book Page 30 Tuesday, March 6, 2012 6:13 PM Changing the SNMP Community Name Configuring the SNMP community names determines which systems are able to manage your system through SNMP. The SNMP community name used by management applications must match an SNMP community name configured on the Server Administrator system so that the management applications can retrieve management information from Server Administrator. 1 Open the Computer Management window.
book.book Page 31 Tuesday, March 6, 2012 6:13 PM Configuring Your System to Send SNMP Traps to a Management Station Server Administrator generates SNMP traps in response to changes in the status of sensors and other monitored parameters. You must configure one or more trap destinations on the Server Administrator system for SNMP traps to be sent to a management station. 1 Open the Computer Management window. 2 Expand the Computer Management icon in the window, if necessary.
book.book Page 32 Tuesday, March 6, 2012 6:13 PM 5 Click the Traps tab to add a community for traps or to add a trap destination for a trap community. a To add a community for traps, type the community name in the Community Name box and click Add to list, which is located next to the Community Name box. b To add a trap destination for a trap community, select the community name from the Community Name drop-down box and click Add under the Trap Destinations box.
book.book Page 33 Tuesday, March 6, 2012 6:13 PM Server Administrator SNMP Agent Install Actions If Server Administrator detects the default SNMP configuration during installation, it attempts to modify the SNMP agent configuration to give read-only access to the entire MIB tree for the public community. Server Administrator modifies the SNMP agent configuration file/etc/snm, p/snmpd.
book.book Page 34 Tuesday, March 6, 2012 6:13 PM Changing the SNMP Community Name Configuring the SNMP community name determines which systems are able to manage your system through SNMP. The SNMP community name used by management applications must match an SNMP community name configured on the Server Administrator system so that the management applications can retrieve management information from Server Administrator.
book.book Page 35 Tuesday, March 6, 2012 6:13 PM where IP_address is the IP address of the management station and community_name is the SNMP community name 2 To enable SNMP configuration changes, restart the SNMP agent by typing: service snmpd restart Configuring the SNMP Agent on Systems Running Supported SUSE Linux Enterprise Server Server Administrator uses the SNMP services provided by the net-snmp agent.
book.book Page 36 Tuesday, March 6, 2012 6:13 PM access is restricted to the local host. You must configure the SNMP agent to enable SNMP access from remote hosts if you plan to manage the system by using SNMP management applications from remote hosts. NOTE: For security reasons, it is advisable to restrict SNMP access to specific remote hosts if possible. To enable SNMP access from a specific remote host to a system running Server Administrator, edit the SNMP agent configuration file, /etc/snmp/snmpd.
book.book Page 37 Tuesday, March 6, 2012 6:13 PM Changing the SNMP Community Name Configuring the SNMP community name determines which management stations are able to manage your system through SNMP. The SNMP community name used by management applications must match the SNMP community name configured on the Server Administrator system, so the management applications can retrieve the management information from Server Administrator.
book.book Page 38 Tuesday, March 6, 2012 6:13 PM rwcommunity public 127.0.0.1 3 To enable SNMP configuration changes, restart the SNMP agent by typing: /etc/init.d/snmpd restart Configuring Your System to Send Traps to a Management Station Server Administrator generates SNMP traps in response to changes in the status of sensors and other monitored parameters. One or more trap destinations must be configured on the system running Server Administrator for SNMP traps to be sent to a management station.
book.book Page 39 Tuesday, March 6, 2012 6:13 PM 1 Edit the VMWare SNMP configuration file, /etc/vmware/snmp.xml, either manually or run the following vicfg-snmp commands to modify the SNMP configuration settings. This includes the SNMP listening port, community string, and the trap target ipaddress/port and trap community name and then enable the VMWare SNMP service. a vicfg-snmp.
book.book Page 40 Tuesday, March 6, 2012 6:13 PM 2 Stop the SNMP service if it is already running on your system by entering the following command: service snmpd stop 3 Add the following line at the end of the /etc/snmp/snmpd.conf file: proxy -v 1 -c public udp:127.0.0.1:X .1.3.6.1.4.1.6876 Where X represents the unused port specified above, while configuring SNMP.
book.book Page 41 Tuesday, March 6, 2012 6:13 PM Configuring the SNMP Agent on Systems Running Supported VMware ESXi 4.X and ESXi 5.X Operating Systems Server Administrator supports SNMP traps on VMware ESXi 4.X and ESXi 5.X. If a standalone license is only present, SNMP configuration fails on VMware ESXi operating systems. Server Administrator does not support SNMP Get and Set operations on VMWare ESXi 4.X and ESXi 5.x as the required SNMP support is unavailable.
book.book Page 42 Tuesday, March 6, 2012 6:13 PM where is the hostname or IP address of the ESXi system, is a user on the ESXi system, is the password of the ESXi user, is the SNMP community name and is the hostname or IP address of the management station. NOTE: The extension .pl is not required on Linux. NOTE: If you do not specify a user name and password, you are prompted.
book.book Page 43 Tuesday, March 6, 2012 6:13 PM 3 Press to select Security Level and then press the spacebar to select the security level you want to set. The selected Security Level is indicated by an asterisk. NOTE: Press for more information about the firewall security levels. The default SNMP port number is 161.
book.book Page 44 Tuesday, March 6, 2012 6:13 PM 6 Press Alt-O and ‘Alt-N’ to go to the next screen. 7 Press Alt-A to accept and apply the changes.
book.book Page 45 Tuesday, March 6, 2012 6:13 PM Using Server Administrator 3 Starting Your Server Administrator Session To start a Server Administrator session, double-click the Dell OpenManage Server Administrator icon on your desktop. The Server Administrator Log in screen is displayed. The default port for Dell OpenManage Server Administrator is 1311. You can change the port, if required.
book.book Page 46 Tuesday, March 6, 2012 6:13 PM 3 Click Submit. To end your Server Administrator session, click Log Out located in the upperright corner of each Server Administrator home page. NOTE: For information about Configuring Active Directory on Systems using CLI, see the Dell OpenManage Management Station Software Installation Guide. Server Administrator Managed System Login This login is available only when you install the Server Administrator Web Server component.
book.book Page 47 Tuesday, March 6, 2012 6:13 PM Method 2 Open your Web browser and type one of the following in the address field and press : https://hostname:1311 where hostname is the assigned name for the managed node system and 1311 is the default port number or https://IP address:1311 where IP address is the IP address for the managed system and 1311 is the default port number. You should type https:// (and not http://) in the address field to receive a valid response in your browser.
book.book Page 48 Tuesday, March 6, 2012 6:13 PM To end your Server Administrator session, click Log Out on the "Global Navigation Bar." The Log Out button is located in the upper-right corner of each Server Administrator home page. NOTE: When you launch Server Administrator using either Mozilla Firefox version 3.0 and 3.5 or Microsoft Internet Explorer version 7.0 or 8.0, an intermediate warning page may appear displaying the problem with security certificate.
book.book Page 49 Tuesday, March 6, 2012 6:13 PM For local machine access, you must have an account on the machine with the appropriate privileges (User, Power User, or Administrator). Other users are authenticated against the Microsoft Active Directory. To launch Server Administrator using Single Sign-On authentication against Microsoft Active Directory, the following parameters must also be passed in: authType=ntlm&application=[plugin name] where plugin name = omsa, ita, etc.
book.book Page 50 Tuesday, March 6, 2012 6:13 PM Configuring Security Settings on Systems Running a Supported Microsoft Windows Operating System You must configure the security settings for your browser to log in to Server Administrator from a remote management system that is running a supported Microsoft Windows operating system. The security settings for your browser may prevent the execution of client-side scripts that are used by Server Administrator.
book.book Page 51 Tuesday, March 6, 2012 6:13 PM 4 Copy the Web address used to access the remote managed system from the browser’s address bar and paste it onto the Add this Web Site to the Zone field. 5 Click Custom Level. 6 Under User Authentication, select the Automatic Logon with current username and password radio button. 7 Click OK to save the new settings. 8 Close the browser and log in to Server Administrator. Mozilla Firefox 1 Start your browser. 2 Click Edit Preferences.
book.book Page 52 Tuesday, March 6, 2012 6:13 PM – The action tabs are divided into subcategories of all available secondary options for the action tabs based on the user's access privileges. – The data area displays information for the selected system tree object, action tab, and subcategory based on the user's access privileges.
book.book Page 53 Tuesday, March 6, 2012 6:13 PM Figure 3-1. Sample Server Administrator Home Page — Non-Modular System system tree action tab action tab subcategories global navigation bar action window Figure 3-2 shows a sample Server Administrator home page layout for a user logged in with administrator privileges on a modular system. Figure 3-2.
book.book Page 54 Tuesday, March 6, 2012 6:13 PM Clicking an object in the system tree opens a corresponding action window for that object. You can navigate in the action window by clicking action tabs to select major categories and clicking the action tab subcategories to access more detailed information or more focused actions. The information displayed in the data area of the action window can range from system logs to status indicators to system probe gauges.
book.book Page 55 Tuesday, March 6, 2012 6:13 PM Table 3-2. Server Administrator User Interface Differences Across Modular and NonModular Systems Ports Power Management (xx0x system onwards) Processors Remote Access Removable Flash Media Slots Temperatures Voltages Modular Enclosure (Chassis Information and CMC Information) Global Navigation Bar The global navigation bar and its links are available to all user levels in the program. • Click Preferences to open the Preferences home page.
book.book Page 56 Tuesday, March 6, 2012 6:13 PM To expand a branch of the tree, click the plus sign ( ) to the left of an object, or double-click the object. A minus sign ( ) indicates an expanded entry that cannot be expanded further. Action Window When you click an item on the system tree, details about the component or object appear in the data area of the action window. Clicking an action tab displays all available user options as a list of subcategories.
book.book Page 57 Tuesday, March 6, 2012 6:13 PM Table 3-3. System/Server Module Component Status Indicators component has a warning (noncritical) condition. A warning condition occurs when a probe or other monitoring tool detects a reading for a component that falls within certain minimum and maximum values. A warning condition requires prompt attention. component has a failed or critical condition.
book.book Page 58 Tuesday, March 6, 2012 6:13 PM Underlined Items Clicking an underlined item in the action window data area displays additional details about that item. Gauge Indicators Temperature probes, fan probes, and voltage probes are each represented by a gauge indicator. For example, Figure 3-3 shows readings from a system's CPU fan probe. Figure 3-3. Gauge Indicator Using the Online Help Context-sensitive online help is available for every window of the Server Administrator home page.
book.book Page 59 Tuesday, March 6, 2012 6:13 PM Using the Preferences Home Page The left-hand pane of the Preferences home page (where the system tree is displayed on the Server Administrator home page) displays all available configuration options in the system tree window. The available Preferences home page configuration options are: • General Settings • Server Administrator You can view the Preferences tab after you log in to manage a remote system.
book.book Page 60 Tuesday, March 6, 2012 6:13 PM Figure 3-4. Sample Preferences Home Page - Managed System Managed System Preferences When you log in to a remote system, the Preferences home page defaults to the Node Configuration window under the Preferences tab. Click the Server Administrator object to enable or disable access to users with User or Power User privileges. Depending on the user’s group privileges, the Server Administrator object action window may have the Preferences tab.
book.book Page 61 Tuesday, March 6, 2012 6:13 PM Under the Preferences tab, you can: • Enable or disable access to users with User or Power User privileges. • Configure the Command Log Size • Configure SNMP Server Administrator Web Server Preferences When you log in to manage the Server Administrator Web server, the Preferences home page defaults to the User Preferences window under the Preferences tab.
book.book Page 62 Tuesday, March 6, 2012 6:13 PM 3 To add a preselected e-mail recipient, type the e-mail address of your designated service contact in the Mail To: field, and click Apply Changes. NOTE: Click Email in any window to send an e-mail message with an attached HTML file of the window to the designated e-mail address. Perform the following steps to set up your secure port system preferences: 1 Click Preferences on the global navigation bar. The Preferences home page appears.
book.book Page 63 Tuesday, March 6, 2012 6:13 PM • The SMTP Server name and DNS Suffix for SMTP Server fields specify your company or organization's Simple Mail Transfer Protocol (SMTP) and domain name server (DNS) suffix. To enable Server Administrator to send e-mails, you must type the IP address and DNS suffix for the SMTP Server for your company or organization in the appropriate fields.
book.book Page 64 Tuesday, March 6, 2012 6:13 PM TLS_DHE_DSS_WITH_AES_128_CBC_SHA SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA • Key Signing Algorithm — Displays the supported signing algorithms. Select an algorithm from the drop down list. If you select either SHA 512 or SHA 256, ensure that your operating system/browser supports this algorithm. If you select one of these options without the requisite operating system/browser support, Server Administrator displays a cannot display the webpage error.
book.book Page 65 Tuesday, March 6, 2012 6:13 PM The following are the available options: • Generate a new X.509 certificate — Creates a certificate for access to Server Administrator. • Certificate Maintenance — Selects an existing certificate that your company has title to, and uses this certificate to control access to Server Administrator.
book.book Page 66 Tuesday, March 6, 2012 6:13 PM help administrators to gain information that can be used to adjust usage patterns, to justify purchasing new system resources, or to focus on the health of a problem component. For complete instructions on the functionality and use of the CLI, see the Dell OpenManage Server Administrator Command Line Interface User's Guide.
book.book Page 67 Tuesday, March 6, 2012 6:13 PM Server Administrator Services 4 Overview The Dell OpenManage Server Administrator Instrumentation Service monitors the health of a system and provides rapid access to detailed fault and performance information gathered by industry-standard systems management agents. The reporting and viewing features allow retrieval of overall health status for each chassis that comprises your system.
book.book Page 68 Tuesday, March 6, 2012 6:13 PM Managing Your System The Server Administrator home page defaults to the System object of the system tree view. The default for the System object opens the Health components under the Properties tab. The Preferences home page defaults to the Access Configuration window under the Preferences tab.
book.book Page 69 Tuesday, March 6, 2012 6:13 PM If Storage Management Service is installed, depending on the controller and storage attached to the system, the Storage tree object expands to display various objects. For detailed information on the Storage Management Service component, see the Dell OpenManage Server Administrator Storage Management User's Guide at support.dell.com/manuals.
book.book Page 70 Tuesday, March 6, 2012 6:13 PM • Rolemap NOTE: Server Administrator always displays the date in format. NOTE: Administrator or Power User privileges are required to view many of the system tree objects, system components, action tabs, and data area features that are configurable. Additionally, only users logged in with Administrator privileges can access critical system features such as the shutdown functionality included under the Shutdown tab.
book.book Page 71 Tuesday, March 6, 2012 6:13 PM System/Server Module The System/Server Module object contains three main system component groups: "Main System Chassis/Main System," "Software," and "Storage." The Server Administrator home page defaults to the System object of the system tree view. Most administrative functions can be managed from the System/Server Module object action window.
book.book Page 72 Tuesday, March 6, 2012 6:13 PM Shutdown Subtabs: Remote Shutdown | Thermal Shutdown | Web Server Shutdown Under the Shutdown tab, you can: • • Configure the operating system shutdown and remote shutdown options. Set the thermal shutdown severity level to shut down your system in the event that a temperature sensor returns a warning or failure value. NOTE: A thermal shutdown occurs only when the temperature reported by the sensor goes above the temperature threshold.
book.book Page 73 Tuesday, March 6, 2012 6:13 PM • View the Command log for a list of each command executed from either the Server Administrator home page or from its command line interface. NOTE: See "Server Administrator Logs" for complete instructions on viewing, printing, saving, and e-mailing logs.
book.book Page 74 Tuesday, March 6, 2012 6:13 PM Main System Chassis/Main System Click the Main System Chassis/Main System object to manage your system's essential hardware and software components.
book.book Page 75 Tuesday, March 6, 2012 6:13 PM Properties Subtabs: Health | Information | System Components (FRU)| Front Panel Under the Properties tab, you can: • View the health or status of hardware components and sensors. Each listed component has a "System/Server Module Component Status Indicators" icon next to its name. indicates that a component is healthy (normal). indicates that a component has a warning (noncritical) condition and requires prompt attention.
book.book Page 76 Tuesday, March 6, 2012 6:13 PM • View information about the main system chassis attributes such as the Host Name, iDRAC version, Lifecycle Controller version, Chassis Model, Chassis Lock, Chassis Service Tag, Express Service Code, and Chassis Asset Tag. The Express Service Code (ESC) attribute is a 11-digit numeric-only conversion of the Dell system Service Tag. You can key in this attribute into a telephone while calling Dell Technical Support for auto call routing.
book.book Page 77 Tuesday, March 6, 2012 6:13 PM such as system messages. The BIOS object action window can have the following tabs, depending on the user's group privileges: Properties and Setup. Properties Subtab: Information Under the Properties tab, you can view BIOS information. Setup Subtab: BIOS Under the Setup tab, you can set the state for each BIOS setup object.
book.book Page 78 Tuesday, March 6, 2012 6:13 PM When pending values from the previous session exist or the inband configuration is disabled from an out-of-band interface, Server Administrator does not allow BIOS Setup configuration. NOTE: The NIC configuration information within the Server Administrator BIOS setup may be inaccurate for embedded NICs. Using the BIOS setup screen to enable or disable NICs might produce unexpected results.
book.book Page 79 Tuesday, March 6, 2012 6:13 PM • View current SNMP trap alert thresholds and set the alert threshold levels for fans. The selected traps are triggered if the system generates a corresponding event at the selected severity level. Firmware Click the Firmware object to manage your system firmware. Firmware consists of programs or data that have been written to ROM. Firmware can boot and operate a device. Each controller contains firmware that helps provide the controller's functionality.
book.book Page 80 Tuesday, March 6, 2012 6:13 PM Intrusion Click the Intrusion object to manage your system's chassis intrusion status. Server Administrator monitors chassis intrusion status as a security measure to prevent unauthorized access to your system's critical components. Chassis intrusion indicates that someone is opening or has opened the cover to the system's chassis.
book.book Page 81 Tuesday, March 6, 2012 6:13 PM Properties Subtab: Memory Under the Properties tab, you can view memory redundancy status, memory array attributes, total capacity of the memory arrays, details of memory arrays, memory device details, and memory device status. NOTE: If a system with spare bank memory enabled enters a redundancy lost state, it may not be apparent which memory module is the cause.
book.book Page 82 Tuesday, March 6, 2012 6:13 PM NOTE: The order in which devices are detected is not guaranteed to match the physical port ordering of the device. Click the hyperlink under Interface Name to view NIC information. In case of ESX and ESXi operating systems, the network device is considered a group. For example, the virtual ethernet interface that is used by the Service Console (vswif) and virtual network interface that is used by VMKernel (vmknic) devices on ESX and vmknic device on ESXi.
book.book Page 83 Tuesday, March 6, 2012 6:13 PM Monitoring Subtabs: Consumption | Statistics Under the Consumption tab you can view and manage your system’s Power Consumption information in Watts and BTU/hr. BTU/hr=Watt X 3.413 (Value rounded off to the nearest whole number) Server Administrator monitors power consumption status, amperage, and tracks power statistic details. You can also view the System Instantaneous Headroom and System Peak Headroom.
book.book Page 84 Tuesday, March 6, 2012 6:13 PM Power Supplies Click the Power Supplies object to manage your system’s power supplies. Server Administrator monitors power supply status, including redundancy, to ensure that each power supply present in your system is functioning properly. The Power Supplies object action window can have the following tabs, depending on the user's group privileges: Properties and Alert Management.
book.book Page 85 Tuesday, March 6, 2012 6:13 PM Processors Click the Processors object to manage your system's microprocessor(s). A processor is the primary computational chip inside a system that controls the interpretation and execution of arithmetic and logic functions. The Processors object action window can have the following tabs, depending on the user's group privileges: Properties and Alert Management.
book.book Page 86 Tuesday, March 6, 2012 6:13 PM DRAC allows you to access your system's remote system management capabilities. The Server Administrator DRAC provides remote access to inoperable systems, alert notification when a system is down, and the ability to restart a system. The Remote Access object action window can have the following tabs, depending on the user's group privileges: Properties, Configuration, and Users.
book.book Page 87 Tuesday, March 6, 2012 6:13 PM Users Subtab: Users Under the Users tab, you can modify the remote access user configuration. You can add, configure, and view information about Remote Access Controller users. NOTE: On Dell PowerEdge x9xx systems: - Ten user IDs are displayed. If a DRAC card is installed, sixteen user IDs are displayed. - Serial Over LAN Payload column is displayed.
book.book Page 88 Tuesday, March 6, 2012 6:13 PM Slots Click the Slots object to manage the connectors or sockets on your system board that accept printed circuit boards, such as expansion cards. The Slots object action window has a Properties tab. Properties Subtab: Information Under the Properties tab, you can view information about each slot and installed adapter.
book.book Page 89 Tuesday, March 6, 2012 6:13 PM • View current SNMP trap alert thresholds and set the alert threshold levels for temperature probes. The selected traps are triggered if the system generates a corresponding event at the selected severity level. NOTE: You can set minimum and maximum temperature probe threshold values for an external chassis to whole numbers only.
book.book Page 90 Tuesday, March 6, 2012 6:13 PM Software Click the Software object to view detailed version information about the managed system's essential software components, such as the operating system and the systems management software. The Software object action window has the following tab, depending on the user's group privileges: Properties. Properties Subtab: Summary Under the Properties tab, you can view a summary of the monitored system's operating system and system management software.
book.book Page 91 Tuesday, March 6, 2012 6:13 PM Properties Subtab: Health Under the Properties tab, you can view the health or status of attached storage components and sensors such as array subsystems and operating system disks. Managing Preferences: Home Page Configuration Options The left pane of the Preferences home page (where the system tree is displayed on the Server Administrator home page) displays all available configuration options in the system tree window.
book.book Page 92 Tuesday, March 6, 2012 6:13 PM • Configure the SMTP server address and Bind IP address in either the IPv4 or IPv6 addressing mode. • Perform X.509 certificate management by generating a new X.509 certificate, reusing an existing X.509 certificate, or importing a root certificate or certificate chain from a Certification Authority (CA). For more information about certificate management, see "X.509 Certificate Management" on page 64.
book.book Page 93 Tuesday, March 6, 2012 6:13 PM Working With Remote Access Controller 5 NOTE: Baseboard Management Controller (BMC) is supported on Dell PowerEdge x9xx systems and the Integrated Dell Remote Access Controller (iDRAC) is supported on Dell PowerEdge xx0x and xx1x systems. Overview This chapter provides information on accessing and using the remote access features of BMC/iDRAC and DRAC.
book.book Page 94 Tuesday, March 6, 2012 6:13 PM You can log in to the Remote Access Controller through the Server Administrator home page or by directly accessing the controller's IP address using a supported browser. When using the Remote Access Controller, you can click Help for more detailed information about the specific window you are viewing.
book.
book.
book.book Page 97 Tuesday, March 6, 2012 6:13 PM 3 Click LAN. The LAN Configuration window appears. NOTE: BMC/iDRAC management traffic does not function properly if the LAN on motherboard (LOM) is teamed with any network adapter add-in-cards. 4 Configure the following NIC configuration details: – Enable NIC (this option is available on Dell PowerEdge x9xx systems and when DRAC is installed. Select this option for NIC teaming. In Dell PowerEdge x9xx systems, you can team NICs for added redundancy.
book.book Page 98 Tuesday, March 6, 2012 6:13 PM – IP Address Source – IP Address – Subnet Mask – Gateway Address – Channel Privilege Level Limit – New Encryption Key (This option is available on Dell PowerEdge x9xx systems.
book.book Page 99 Tuesday, March 6, 2012 6:13 PM Configuring the Remote Access Device to use a Serial Port Connection To configure the BMC for communication over a serial port connection: 1 Click the Modular Enclosure System/Server Module Main System Chassis/Main System Remote Access. 2 Click the Configuration tab. 3 Click Serial Port. The Serial Port Configuration window appears.
book.book Page 100 Tuesday, March 6, 2012 6:13 PM 8 Click Apply Changes. 9 Click Back To Serial Port Configuration Window to go to back to the Serial Port Configuration window. Configuring the Remote Access Device to Use a Serial Over LAN Connection To configure the BMC/iDRAC for communication over a serial over LAN (SOL) connection: 1 Click the Modular Enclosure System/Server Module Main System Chassis/Main System Remote Access. 2 Click the Configuration tab. 3 Click Serial Over LAN.
book.book Page 101 Tuesday, March 6, 2012 6:13 PM Additional Configuration for iDRAC To configure the IPv4 and IPv6 properties using the Additional Configuration tab: 1 Click the Modular Enclosure System/Server Module Main System Chassis/Main System Remote Access object. 2 Click the Configuration tab. 3 Click Additional Configuration. 4 Configure the IPv4 and IPv6 properties as Enabled or Disabled. 5 Click Apply Changes.
book.book Page 102 Tuesday, March 6, 2012 6:13 PM 5 Specify the following user privileges: – Select the maximum LAN user privilege level limit. – Select the maximum serial port user privilege granted. – On Dell PowerEdge x9xx systems, select Enable Serial Over LAN to enable Serial Over LAN. 6 Specify the User group for DRAC/iDRAC user privileges. 7 Click Apply Changes to save changes. 8 Click Back to Remote Access User Window to go back to the Remote Access Users window.
book.book Page 103 Tuesday, March 6, 2012 6:13 PM NOTE: On Dell PowerEdge 1900 systems, the PS/VRM/D2D Warning, PS/VRM/D2D Failure, and Power Supply Absent Platform Event Filters are not supported even though Server Administrator allows you to configure these Event Filters. 4 Choose the platform event for which you want to take shutdown actions or generate alerts for selected actions and click Set Platform Events.
book.book Page 104 Tuesday, March 6, 2012 6:13 PM 8 Click Go Back to Platform Events Page to go back to the Platform Event Filters window. Setting Platform Event Alert Destinations You can also use the Platform Event Filters window to select a destination where an alert for a platform event is to be sent. Depending on the number of destinations that are displayed, you can configure a separate IP address for each destination address.
book.book Page 105 Tuesday, March 6, 2012 6:13 PM Server Administrator Logs 6 Overview Server Administrator allows you to view and manage hardware, alert, and command logs. All users can access logs and print reports from either the Server Administrator home page or from its command line interface. Users must be logged in with Administrator privileges to clear logs or must be logged in with Administrator or Power User privileges to e-mail logs to their designated service contact.
book.book Page 106 Tuesday, March 6, 2012 6:13 PM • Click Save As to save the log content in a .zip file. • Click Refresh to reload the log content in the action window data area. See Task Buttons for additional information about using the task buttons. Server Administrator Logs Server Administrator provides the following logs: • Hardware Log • Alert Log • Command Log Hardware Log Use the hardware log to look for potential problems with your system's hardware components.
book.book Page 107 Tuesday, March 6, 2012 6:13 PM Maintaining the Hardware Log The status indicator icon next to the log name on the Server Administrator homepage changes from normal status ( ) to noncritical status ( ) when the log file reaches 80 percent capacity. Make sure you clear the hardware log when it reaches 80 percent capacity. If the log is allowed to reach 100 percent capacity, the latest events are discarded from the log.
book.book Page 108 Tuesday, March 6, 2012 6:13 PM Command Log NOTE: If the Command log displays invalid XML data (for example, when XML data generated for the selection is not well formed), click Clear Log and then redisplay the log information. Use the Command log to monitor all of the commands issued by Server Administrator users.
book.book Page 109 Tuesday, March 6, 2012 6:13 PM 7 Setting Alert Actions Setting Alert Actions for Systems Running Supported Red Hat Enterprise Linux and SUSE Linux Enterprise Server Operating Systems When you set alert actions for an event, you can specify the action to display an alert on the server. To perform this action, Server Administrator sends a message to /dev/console. If the Server Administrator system is running an X Window System, you do not see that message by default.
book.book Page 110 Tuesday, March 6, 2012 6:13 PM • Redirect stdout and stderr to a file when specifying the application so that you can see any output or error messages. • If you want to execute multiple applications (or commands) for an alert, create a script to do that and insert the full path to the script in the Absolute path to the application box. Example 1: ps -ef >/tmp/psout.txt 2>&1 The command in Example 1 executes the application ps, redirects stdout to the file /tmp/psout.
book.book Page 111 Tuesday, March 6, 2012 6:13 PM Do not set a path to an interactive application (an application that has a Graphical User Interface or which requires user input) in the absolute path to the application field. The interactive application may not work as expected on some operating systems. NOTE: The full path to both the cmd.exe file and your script file should be specified. NOTE: Microsoft Windows 2003 is not supported on yx2x systems.
book.book Page 112 Tuesday, March 6, 2012 6:13 PM To allow interaction with the desktop: 1 Right-click the DSM SA Data Manager service in the Services control panel and select Properties. 2 In the Log On tab, select Allow service to interact with desktop and click OK. 3 Restart the DSM SA Data Manager service for the change to take effect. 4 Ensure that the Interactive Services Detection service is running.
book.book Page 113 Tuesday, March 6, 2012 6:13 PM Table 7-1. PEF Alert Events (continued) Event Description Temperature Probe Warning The temperature is approaching excessively high or low limits. Temperature Probe Failure The temperature is either too high or too low for proper operation. Chassis Intrusion Detected The system chassis has been opened. Redundancy (PS or Fan) Degraded Redundancy for the fans and/or power supplies has been reduced.
book.book Page 114 Tuesday, March 6, 2012 6:13 PM Table 7-1. PEF Alert Events (continued) Event Description Removable Flash Media Warning The removable flash media pending a failure condition. Internal Dual SD Module The internal dual SD module card has failed. Card Critical Internal Dual SD Module The internal dual SD module card is pending a failure Card Warning condition. Internal Dual SD Module The internal dual SD module card has no redundancy.
book.book Page 115 Tuesday, March 6, 2012 6:13 PM A Troubleshooting Connection Service Failure On Red Hat Enterprise Linux, when SELinux is set to enforced mode, the Dell Systems Management Server Administrator (DSM SA) Connection service fails to start. Perform one of the following steps and start this service: • Set SELinux to Disabled mode or to Permissive mode. • Change the SELinux allow_execstack property to ON state.
book.book Page 116 Tuesday, March 6, 2012 6:13 PM • The small footprint CIM broker daemon (SFCBD) service on the VMware ESX/ESXi system is not running. • The Web Server Management Service on the managed system is not running. • You enter the IP address of the managed system and not the hostname, when you do not check the Ignore Certificate Warning check box. • The WinRM Authorization feature (Remote Enablement) is not configured in the managed system.
book.book Page 117 Tuesday, March 6, 2012 6:13 PM msiexec /i SysMgmt.msi REINSTALL=ALL REINSTALLMODE=vamus 5 Select Custom Setup and choose all the features that were originally installed. If you are not sure which features were installed, select all features and perform the installation. NOTE: If you have installed Server Administrator in a non-default directory, ensure to change it in the Custom Setup as well.
book.book Page 118 Tuesday, March 6, 2012 6:13 PM Table A-1. OpenManage Server Administrator Services (continued) Service Name Description Impact of Failure Recovery Severity Mechanism Common Service Windows: DSM SA Shared Services Runs inventory collector at startup to Linux: perform a dsm_om_shrsvc software (This service runs on inventory of the the Managed system.
book.book Page 119 Tuesday, March 6, 2012 6:13 PM Table A-1. OpenManage Server Administrator Services (continued) Service Name Description Impact of Failure Recovery Severity Mechanism Instrumentation Services Windows: DSM SA Data Manager Monitors the system, provides rapid Linux: access to dsm_sa_datamgrd detailed fault (hosted under and dataeng service) performance (This service runs on information the Managed system.
book.book Page 120 Tuesday, March 6, 2012 6:13 PM Table A-1. OpenManage Server Administrator Services (continued) Service Name Description Impact of Failure Recovery Severity Mechanism Storage Management Service Windows: mr2kserv The Storage (This service runs on Management the Managed system.) Service provides storage management information and advanced features for configuring a local or remote storage attached to a system.
book.book Page 121 Tuesday, March 6, 2012 6:13 PM Frequently Asked Questions B This section lists the frequently asked questions about Dell OpenManage Server Administrator: NOTE: These questions are not specific to this release of Server Administrator. 1 Why does ESXi 4.x (4.0 U3) and ESXi 5.x host rebooting functionality fail from OpenManage Server Administrator? This issue is due to VMware stand-alone license (SAL) key. See the Knowledge Base article at kb.vmware.com/kb/1026060 for more information.
book.book Page 122 Tuesday, March 6, 2012 6:13 PM and then to version 7.x (x indicates the version of Server Administrator you want to upgrade to). 5 How do I determine what is the latest version of Server Administrator available for my system? Log on to: support.dell.comEnterprise ITManualsSoftware Systems Management Dell OpenManage Server Administrator The latest documentation version reflects the version of OpenManage Server Administrator available for you.
book.book Page 123 Tuesday, March 6, 2012 6:13 PM ITA communicating with Linux systems: SNMP is required on the Linux system for discovery, status polling and inventory. Dell software updates are done through an SSH session and secure FTP and root level permissions/credentials are required for this discrete action and asked for when the action is setup or requested. Credentials from the discovery range are not assumed.
book.book Page 124 Tuesday, March 6, 2012 6:13 PM Yes, an underscore character in the domain name is invalid. All other special characters (except the hyphen) are invalid too. Use only caseinsensitive alphabets and numerals. 13 How does checking/unchecking the 'Active Directory' on the login page of Server Administrator impact privilege levels? If you do not select the Active Directory check box, you will only have access that is configured in the Microsoft Active Directory.
book.
book.
book.
book.
book.
book.
