User's Manual

– The collection script emcgrab requires root level system access to obtain information about the system.
See the directory ftp://ftp.emc.com/pub/emcgrab/Unixfor more information.
• What are the other options instead of using UNIX Root password?
– Enter a blank password, when prompted by the SSH session, before Lasso prompts this authentication.
The password may be entered several times for each UNIX host in the spawned windows. Add a new
user with root access, or change the password temporarily for the Lasso run. It is not recommended to
use central authentication scheme. Future versions of Lasso will allow SSH from a normal user that can
then "su" or "sudo" the script.
• How does Lasso provide security and privacy protection?
– Lasso creates a single .zip file that is 2048-bit encrypted (unless this option is disabled, or Lasso is
running in a non-exportable country). Only an authorized Dell representative with a valid Wrangler
processing utility can load the file and decrypt the contents. Lasso uploads the file to the Dell's ftp site
and provides high level of privacy protection and security. This site has "write-only" access to Lasso and
the public, and has no read access.
• Who can view the uploaded data collection?
– From version 2.9.0 and later, a "write-only" ftp site is used and "view" or "read" permission are not
available. The data can be uploaded, but no other collections can be viewed. Only a Dell Employee with
an administrative login can access the files, and only the Wrangler tool can decrypt these files.
• What network ports does Lasso use?
– For more information, see Network Ports
• What is Secure Site option?
– The Secure Site option is used to remove the Customer Identification Information (CII) such as company
name, company address, IP address, MAC address, iSCSI volume names, and Host names from the
Lasso output .xml file.
The customer sensitive data is replaced by tokens in the .XML file. Mapping between the tokens and
customer sensitive data is maintained in an encrypted .XML file. This data is secured when the .XML file
is uploaded to Dell's FTP site.
FAQ — Dealing With Errors
• What is the description of the error code?
– For information on the error code and descriptions, see Error Codes
• Why does the Switch password fail each time even though the login to the Switch Web UI is successful?
– All Switch collections use SSH/Telnet user name and password. For McData switches, if a user name is
accepted with the Web UI, it does not automatically work with the CLI.. The access should be granted
specifically. To verify that the password enter is valid, telnet into the switch and try the user name/
password. To do this, go to Start → Run and enter telnet hostnameor ip address. If SSH interface is
used by lasso and fails, connect to the switch using putty and try the user name/password to manually
execute the command(s). See the documentation on the Switch for instructions to configure the user
name or see troubleshooting section for more information.
• How to troubleshoot device errors on collection?
– Make sure to validate the devices. If the devices are already validated and using a saved configuration,
then validate them again. The password may have changed. Click Error found icon to view the log of the
device. This will include the reason for the device to fail collection. Also see the troubleshooting section
for steps to run the collections using the CLI to verify or collect the data manually.
• Why is the collection against a VMware ESX 3.0 server failing?
– To troubleshoot, see VMware Root Access
92