24 advanced topics, 1 management processor credentials, 2 maintaining mp unique credentials – HP Insight Control Software for Linux User Manual
Page 198: Management processor, Management
24 Advanced topics
Topics include:
•
“Management Processor Credentials” (page 198)
•
“Deploying WBEM provider components using Configure or Repair Agents task” (page 200)
•
“Logging RAM disk connections and operations” (page 201)
24.1 Management Processor Credentials
Insight Control for Linux is easiest to use when the credentials on your management processors
(MPs) match either the global management processor credentials that you specified when you
installed Insight Control for Linux or the credentials that you specified on the Insight Control for
Linux Configure
→Management Processor→Credentials screen.
It is not uncommon for company policies to prohibit setting global user names and passwords for
security reasons. When this is the case, Insight Control for Linux has the ability to maintain individual
credentials for each discovered management processor. This section describes the procedures
required for maintaining this advanced level of security.
24.1.1 General information on Insight Control for Linux MP credentials
Insight Control for Linux uses management processor credentials to connect to management
processors for tasks like controlling system power and collecting environmental metrics. Which
credential it uses depends on the operation performed.
Most Insight Control for Linux deployment and monitoring operations use the default
credential
unless a system-specific credential was set. If a system specific credential was set, that is used
instead.
However, when initiating a
discovery from the Initiate Bare-Metal Discovery tool or
when first collecting data for the Network Configuration Editor tool, the global MP credentials are
used to access the device regardless of whether or not a system specific credential was set.
How you manage the MP credentials is determined by whether or not you use either of these two
tools. These tools are required when you first configure and discover new servers using the
based deployment features of Insight Control for Linux. After a system is fully discovered
and configured, the procedure for managing MP credentials is the same.
24.1.2 Maintaining MP unique credentials
The first step to maintaining separate credentials for all your management processors is to disable
the pushing of the global credentials on bare-metal discovery. To do this, simply add the following
line to the /opt/mx/icle/icle.properties file:
DISCOVERY_MP_CREDENTIAL_PUSH=false
24.1.2.1 Discovering and setting up servers with PXE deployment
If you manage servers using the standard
deployment method, use this procedure to discover
servers:
1.
Be sure the unique credentials are already set on your management processor.
2.
Discover the system and the MP using either standard HP SIM tools or the Insight Control for
Linux bare-metal discovery process. Be sure the system and its MP are properly associated
with each other in HP SIM.
3.
Run the Configure
→Management Processor→Credentials tool, select the MP that was just
discovered, and select the Edit button
4.
Enter the unique credentials for the MP you selected. Be sure to check the box labeled Update
only local credentials.
198 Advanced topics