HP BladeSystem bc2000 - Blade PC Service manual

Administrator's Guide
HP Session Allocation Manager (HP SAM) v.3.0

© Copyright 2007–2009 Hewlett-Packard
Development Company, L.P. The
information contained herein is subject to
change without notice.
Microsoft and Windows are trademarks of
Microsoft Corporation in the U.S. and other
countries.
The only warranties for HP products and
services are set forth in the express warranty
statements accompanying such products
and services. Nothing herein should be
construed as constituting an additional
warranty. HP shall not be liable for technical
or editorial errors or omissions contained
herein.
This document contains proprietary
information that is protected by copyright. No
part of this document may be photocopied,
reproduced, or translated to another
language without the prior written consent of
Hewlett-Packard Company.
The MIT License
http://sourceforge.net/projects/expat/
http://www.opensource.org/licenses/mit-
license.php
Permission is hereby granted, free of charge,
to any person obtaining a copy of this
software and associated documentation files
(the "Software"), to deal in the Software
without restriction, including without
limitation the rights to use, copy, modify,
merge, publish, distribute, sublicense, and/or
sell copies of the Software, and to permit
persons to whom the Software is furnished to
do so, subject to the following conditions:
The above copyright notice and this
permission notice shall be included in all
copies or substantial portions of the
Software. THE SOFTWARE IS PROVIDED
"AS IS", WITHOUT WARRANTY OF ANY
KIND, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO THE WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT
SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM,
DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT,
TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.
Copyright © 2006 by the Open Source
Initiative
Technical questions about the website go to
Steve M.: webmaster at opensource.org /
Policy questions about open source go to the
Board of Directors.
The contents of this website are licensed
under the Open Software License 2.1 or
Academic Free License 2.1. OSI is a
registered non-profit with 501(c)(3) status.
Donating to OSI is one way to show your
support.
Part of the software embedded in this
product is gSOAP software.
Portions created by gSOAP are Copyright
(C) 2001-2004 Robert A. van Engelen,
Genivia inc. All Rights Reserved.
THE SOFTWARE IN THIS PRODUCT WAS
IN PART PROVIDED BY GENIVIA INC AND
ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT,
STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING
IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
Copyright (c) 1998-2007 The OpenSSL
Project. All rights reserved.
Copyright (C) 1995-1998 Eric Young
([email protected]). All rights reserved.
Administrator's Guide
HP Session Allocation Manager (HP SAM)
v.3.0
Fifth Edition (August 2009)
Fourth Edition (November 2008)
Third Edition (December 2007)
Second Edition (August 2007)
First Edition (June 2007)
Document Part Number: 453252–005

About This Book
WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily
harm or loss of life.
CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage
to equipment or loss of information.
NOTE: Text set off in this manner provides important supplemental information.
ENWW iii

iv About This Book ENWW

Table of contents
1 Introduction
What's New in This Release ................................................................................................................ 2
Resource Reservations (AKA Access Restrictions) ............................................................ 2
Authenticate Before Allocation ............................................................................................. 3
Switch To, Move, Minimize, and Minimize All Functions on HP SAM Connection Bar ........ 4
Support for RGS Senders Running on a Non-default Port .................................................. 4
Logoff Scheduler .................................................................................................................. 4
Key Features ........................................................................................................................................ 4
Overview .............................................................................................................................................. 5
How HP SAM Works ............................................................................................................ 6
HP SAM Software Components .......................................................................................... 7
Remote Graphics Software (RGS) ...................................................................................... 8
Common Tasks .................................................................................................................................... 9
Setting up HP SAM .............................................................................................................. 9
Setting up a User with a Dynamic Resource ....................................................................... 9
Setting up a User with Static (Dedicated) Resources ........................................................ 10
Configuring a Monitor Layout for a User ............................................................................ 11
2 Requirements
HP SAM Hardware and Software Requirements ............................................................................... 13
Architectural Considerations and Best Practices for Setting up an HP SAM
Environment ....................................................................................................................... 13
Domain Environment Requirements for HP SAM .............................................................. 16
HP SAM Web and SQL Server Requirements .................................................................. 16
HP SAM Registration Service Requirements ..................................................................................... 21
Access Device Requirements ............................................................................................................ 22
Thin Client .......................................................................................................................... 22
Mobile Thin Client .............................................................................................................. 22
Desktop or Notebook PC ................................................................................................... 22
Blade Workstation Clients .................................................................................................. 23
Personal Workstation Clients ............................................................................................. 23
Other requirements ............................................................................................................................ 24
Create a Service Account .................................................................................................. 24
Obtain Administrative Rights ............................................................................................. 24
ENWW v

Change the Firewall ........................................................................................................... 24
Active Directory .................................................................................................................. 24
3 Installation
Order of Installation ............................................................................................................................ 25
New Installation ................................................................................................................. 25
Upgrade ............................................................................................................................. 25
Install the HP SAM Web Server and SQL Software ........................................................................... 27
Grant Users HP SAM Administrator Access ...................................................................... 29
Configure HP SAM System Settings ................................................................................. 29
Configure Secure Socket Layer (SSL) ............................................................................... 29
Install and Validate the HP SAM Registration Service Software ........................................................ 29
Install the HP SAM Registration Service ........................................................................... 30
Create the HP SAM Registration Service Configuration File ............................................. 31
Start/Restart the HP SAM Registration Service ................................................................. 33
Test the HP SAM Registration Service .............................................................................. 33
Install and Validate the HP SAM Client Software ............................................................................... 33
Internet Explorer-Based Client ........................................................................................... 34
Windows XPe-Based Client ............................................................................................... 35
Linux-Based Client ............................................................................................................. 36
Configuration Settings ....................................................................................................... 38
Global and Local Client Configuration Files ....................................................................... 47
Legal Banner ..................................................................................................................... 48
Deploy the HP SAM Registration Service to All HP SAM Computing Resources .............................. 49
Deploy HP SAM Client Software to All HP SAM Access Devices ...................................................... 49
4 Administration
Log In ................................................................................................................................................. 51
General Navigation and User Interface Design .................................................................................. 51
Display More (or Fewer) Items Per Page .......................................................................... 51
Move Columns ................................................................................................................... 51
Sort Result List .................................................................................................................. 51
Select More Than One Item ............................................................................................... 51
Managing the HP SAM Administrator Access List ............................................................................. 52
Add Individual Users to the HP SAM Administrator Group ................................................ 52
Add Security Groups or Organizational Units to the HP SAM Administrator Group .......... 52
Remove Users or Groups From the HP SAM Administrator Group ................................... 53
HP SAM Administrator Console Tabs ................................................................................................ 54
Home Tab .......................................................................................................................... 54
Users and Roles Tab ......................................................................................................... 54
Resources tab .................................................................................................................... 62
Manage Data Centers ........................................................................................................ 65
Policies Tab ....................................................................................................................... 66
vi ENWW

System Settings Tab .......................................................................................................... 69
Reports Tab ....................................................................................................................... 73
Log Tab .............................................................................................................................. 76
Setting Up Smart Card Login on the Access Device .......................................................................... 77
Configuring Session Time Limits for Remote Sessions ..................................................................... 79
Appendix A Firewall Rules
Web Server ........................................................................................................................................ 81
Clients ................................................................................................................................................ 81
Resources .......................................................................................................................................... 82
SQL Server ......................................................................................................................................... 82
Appendix B Frequently Asked Questions
Appendix C Registration Service Error Codes
Appendix D Glossary
Index ................................................................................................................................................................... 92
ENWW vii

viii ENWW

1 Introduction
HP Remote Client Solutions are designed to support a variety of users’ needs, from the most basic
computing tasks to more demanding professional and technical applications, while giving IT greater
control over technology resources, simplifying desktop management, increasing agility and, in many
cases, reducing total cost of ownership.
Underlying HP Remote Client Solutions is a unified infrastructure that enables client deployment,
session allocation, balancing of computing resources, and supports the business needs of a diverse set
of users though the use of a common set of tools.
The HP Session Allocation Manager (HP SAM) system is the control point in managing an HP Remote
Client Solutions deployment. HP SAM manages the assignment of connections from an end-user's client
access device to desktop sessions running on computing resources in a centralized location (typically,
a data center). HP SAM makes these desktop sessions available to users as they are needed.
For more information about HP Remote Client Solutions, visit http://www.hp.com/go/rcs.
ENWW 1

What's New in This Release
●Resource Reservations (AKA Access Restrictions) on page 2
●Authenticate Before Allocation on page 3
●Switch To, Move, Minimize, and Minimize All Functions on HP SAM Connection Bar
on page 4
●Support for RGS Senders Running on a Non-default Port on page 4
●Logoff Scheduler on page 4
Resource Reservations (AKA Access Restrictions)
This feature allows the administrator to restrict when and from where users may access resources. It
also provides the ability to free up resources as needed for when other users require those resources.
Role settings now enable the administrator to specify the source IP Address range time of day, and day
(s) of the week. Users in that role will then only receive a resource from that role when using an access
device in the IP Address range and only on the specified day during the specified period of time. In this
case, the user will be sent directly to a resource in this role even if he has many other roles—he will not
see a role selection dialog. If outside of the IP range and time/day, the user will be denied access to
that role. Multiple such reservations can be designated on each role.
By default, at the end of the reservation period, the user is logged off of the resource. The Allow time
extension option can be set to allow a user to remain logged in beyond the current resource reservation
end time. They can remain logged in until another resource reservation time period for the same role
begins (or at 12:00 midnight, if no other reservations are set.) A dialog warns the user before the logoff
occurs. The lead time of this warning can be configured in System Settings on the General page of the
HP SAM Web Administrator console.
For example, a school may use resource reservations to ensure students get a resource from the correct
role for each class and make sure resources are freed in time for a later class needing resources in the
same role. The administrator can set a reservation on the Math Class role specifying the IP address
range of a certain classroom and a certain time/day when the math class occurs. The student who logs
in using a computer in this classroom during the right day and time will get a resource in the Math
Class role without having to choose which role. He can then use the resource until the class is over.
Another reservation on the Math Class role may specify another math class in a different room at a later
time for the same resource(s). The automatic logoff feature ensures that those resources will be
available for students in the later class.
When the HP SAM Server and the access devices are in different time zones, note that the times set
in Resource Reservations are the times of the access device, not the time of the server. For example,
suppose the HP SAM server is in the Central Standard time zone and the time in the reservation is
specified as 4PM. This will correspond to 4PM on the access device in the Pacific Standard time zone
(even though the time on the HP SAM server operating system will show 6PM.) Therefore, be sure that
times and time zones are set correctly for all systems involved.
The automatic logoff time is given to the resource during user login and is not updated if the reservations
are subsequently updated on the server. For example, if a user is logged in during a reservation set for
2-3PM which has Allow time extensions enabled and there is another reservation already set for
5-6PM, the resource will log the user off at 5PM. If, after the user logs in for the first reservation, the HP
SAM administrator adds a new reservation starting at 4PM, the user will still not be logged off until 5PM.
The Logoff Scheduler (Logoff Scheduler on page 4) features can be used to set a logoff time slightly
2 Chapter 1 Introduction ENWW