HP Rx2620-2 - Integrity - 0 MB RAM User manual

HP System Management Homepage User Guide
HP-UX, Linux, and Microsoft Windows Operating
Systems
HP Part Number: 509679-002
Published: March 2009, Edition 2

© Copyright 2009 Hewlett-Packard Development Company, L.P.
Legal Notices
Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial
Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under
vendor's standard commercial license.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express
warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall
not be liable for technical or editorial errors or omissions contained herein.
Trademark Notices
AMD and Opteron are trademarks of Advanced Micro Devices, Inc.
Adobe and Acrobat are trademarks of Adobe Systems Incorporated.
HP-UX Release 10.20 and later and HP-UX Release 11.00 and later (in both 32 and 64-bit configurations) on all HP 9000 computers are Open
Group UNIX 95 branded products.
Intel and Itanium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.
Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation.
Red Hat is a registered trademark of Red Hat, Inc. in the United States and other countries.
UNIX is a registered trademark of The Open Group.
Java is a U.S. trademark of Sun Microsystems, Inc.
Microsoft® Windows® XP and Microsoft® Windows® Server, are registered trademarks of Microsoft Corporation in the United States of America
and in other countries.

Table of Contents
About This Document.....................................................................................9
Intended Audience..................................................................................................................................9
Publishing History...................................................................................................................................9
Typographic Conventions.........................................................................................................................9
Related Documents................................................................................................................................10
HP SMH documentation....................................................................................................................10
HP Encourages Your Comments..............................................................................................................10
1 Introduction.............................................................................................11
Product features....................................................................................................................................11
HP SIM................................................................................................................................................11
Integrated Management Tools.................................................................................................................11
HP-UX System Administration Manager (SAM) Deprecation.........................................................................11
Supported operating systems..................................................................................................................12
Supported browsers..............................................................................................................................13
Obtaining HP SMH software..................................................................................................................14
HP media.......................................................................................................................................14
HP websites....................................................................................................................................14
2 Getting Started........................................................................................15
Signing in............................................................................................................................................15
Starting HP System Management Homepage (HP SMH) from Internet Explorer.........................................16
Starting HP SMH from Mozilla or Firefox.............................................................................................17
Starting HP SMH from HP SIM...........................................................................................................18
Starting from the HP-UX Command Line..............................................................................................18
HP SMH Management Server............................................................................................................18
Configuring Firewall Settings..................................................................................................................19
Windows........................................................................................................................................19
Linux..............................................................................................................................................19
Red Hat Enterprise Linux 4 and 5..................................................................................................19
SUSE Linux Enterprise Server........................................................................................................20
Configuring Timeout Settings for HP-UX....................................................................................................21
Configuring SMH Service Timeout......................................................................................................21
Configuring SMH Session Timeout.....................................................................................................21
Automatically Importing Certificates.........................................................................................................22
Signing Out.........................................................................................................................................22
3 Scenarios................................................................................................25
IP Binding............................................................................................................................................25
IP Restricted Login.................................................................................................................................25
Local Server Certificate..........................................................................................................................25
Port 2301.............................................................................................................................................25
Kerberos Authentication.........................................................................................................................25
User Groups.........................................................................................................................................25
Alternative Names................................................................................................................................25
4 Navigating the Software...........................................................................27
Information Areas..................................................................................................................................28
Icon View.............................................................................................................................................30
HP SMH Pages.....................................................................................................................................32
Table of Contents 3

5 The Home Page........................................................................................33
Overall Status Summary.........................................................................................................................33
System Status........................................................................................................................................33
Default HP-UX Property Pages.................................................................................................................33
System............................................................................................................................................33
Operating System............................................................................................................................34
Network.........................................................................................................................................34
Software.........................................................................................................................................34
Storage..........................................................................................................................................34
SysMgmtPlus...................................................................................................................................34
6 The Settings Page.....................................................................................35
SNMP Webagent Box...........................................................................................................................35
SMH Data Source Category..............................................................................................................35
SNMP Configuration Category..........................................................................................................35
UI Options Category........................................................................................................................35
System Management Homepage Box......................................................................................................36
UI Properties Category.....................................................................................................................36
User Preferences Category................................................................................................................37
Security..........................................................................................................................................38
Anonymous/Local Access Category..............................................................................................38
IP Binding Category....................................................................................................................40
IP Restricted Login Category.........................................................................................................41
Local Server Certificate Category..................................................................................................42
Port 2301 Category....................................................................................................................43
Timeouts Category......................................................................................................................44
Session Timeout.....................................................................................................................45
UI Timeout............................................................................................................................45
Trust Mode Category..................................................................................................................46
Configuring Trust Mode..........................................................................................................49
Trusted Management Servers Category..........................................................................................50
Kerberos Authentication Category.................................................................................................53
Kerberos Authentication Procedure...........................................................................................53
HP SMH Kerberos Authentication.............................................................................................54
Kerberos Administrator ..........................................................................................................55
Kerberos Operator ................................................................................................................55
Kerberos User ......................................................................................................................55
User Groups Category................................................................................................................56
Administrator Group..............................................................................................................57
Operator Group....................................................................................................................58
User Group..........................................................................................................................58
Alternative Names Certificates......................................................................................................59
Menus (HP-UX Only)..............................................................................................................................59
Add Custom Menu (HP-UX Only)........................................................................................................59
Remove Custom Menu (HP-UX Only)...................................................................................................60
7 The Tasks Page.........................................................................................61
System (HP-UX Only)..............................................................................................................................61
8 The Tools Page (HP-UX Only)......................................................................63
9 The Logs Page..........................................................................................65
System Management Homepage Log.......................................................................................................65
SAM Log.............................................................................................................................................65
Httpd Error Log.....................................................................................................................................65
4 Table of Contents

Supported Languages............................................................................................................................66
10 The Installed Webapps Page....................................................................69
11 The Support Page....................................................................................71
The Help Page......................................................................................................................................71
Search Form....................................................................................................................................72
Credits................................................................................................................................................72
12 Command Line Interface Configuration......................................................73
Command Line Interface Configuration (Windows and Linux Only)..............................................................73
Anonymous Access..........................................................................................................................73
Local Access...................................................................................................................................73
IP Restricted Logins...........................................................................................................................73
IP Binding.......................................................................................................................................74
Trust Modes....................................................................................................................................74
Restart service.................................................................................................................................75
Reject Program Admin Login..............................................................................................................75
Win32DisableAcceptEX...................................................................................................................75
Disable SSL v2................................................................................................................................75
Log Rotations...................................................................................................................................75
Rotate Log Size................................................................................................................................75
Maximum Number of Threads Allowed...............................................................................................75
Maximum Number of Sessions..........................................................................................................75
Session Timeout...............................................................................................................................76
Log Level.........................................................................................................................................76
Port 2301.......................................................................................................................................76
Multihomed certificate alternative names list........................................................................................76
Custom UI.......................................................................................................................................76
Httpd Error Log................................................................................................................................77
Icon View.......................................................................................................................................77
Box Order......................................................................................................................................77
Box Item Order................................................................................................................................77
Kerberos Authentication....................................................................................................................77
User Groups....................................................................................................................................77
Help message.................................................................................................................................78
File Based Command Line Interface....................................................................................................78
13 Troubleshooting......................................................................................79
Troubleshooting....................................................................................................................................79
Support...............................................................................................................................................86
Service and Support.........................................................................................................................86
A .............................................................................................................89
File locations........................................................................................................................................89
Glossary....................................................................................................91
Index.........................................................................................................97
Table of Contents 5

6

List of Tables
1 Publishing history..................................................................................................................................9
2-1 Firewall exceptions..........................................................................................................................19
4-1 Status icons....................................................................................................................................30
4-2 Icon View......................................................................................................................................31
6-1 Timeout settings..............................................................................................................................45
6-2 Error messages...............................................................................................................................54
9-1 Locale names of supported languages...............................................................................................66
9-2 Suffixes of supported languages........................................................................................................67
12-1 CLI arguments..............................................................................................................................73
12-2 Log level......................................................................................................................................76
13-1 Firewall protection exceptions.........................................................................................................84
A-1 HP SMH file locations......................................................................................................................89
7

8

About This Document
Intended Audience
HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies
single system management for HP servers on HP-UX, Linux, and Microsoft® Windows® operating systems.
This user guide is for system administrators who use HP SMH.
Publishing History
Table 1 Publishing history
Publication dateEdition numberSupported versionsSupported operating
systems
Manufacturing part
number
March 20092See the System
Management Homepage
Installation Guide at
http://
h18013.www1.hp.com/
products/servers/
management/agents/
documentation.html.
Linux and Windows509679-002
January 20091See the System
Management Homepage
Installation Guide at
http://
h18013.www1.hp.com/
products/servers/
management/agents/
documentation.html.
Linux and Windows509679-001
Typographic Conventions
find (1) HP-UX manpage. In this example, “find” is the manpage name and “1” is the
manpage section.
Book Title Title of a book or other document.
Linked Title Title that is a hyperlink to a book or other document.
http://www.hp.com A Web site address that is a hyperlink to the site.
Command Command name or qualified command phrase.
user input Commands and other text that you type.
computer output Text displayed by the computer.
Enter The name of a keyboard key. Note that Return and Enter both refer to the same
key. A sequence such as Ctrl+A indicates that you must hold down the key labeled
Ctrl while pressing the Akey.
term Defined use of an important word or phrase.
variable The name of an environment variable, for example PATH or errno.
value A value that you may replace in a command or function, or information in a display
that represents several possible values.
<element> An element used in a markup language.
attrib= An attribute used in a markup language.
Intended Audience 9

Related Documents
HP SMH documentation
For more information about HP SMH, see the following sources:
• HP System Management Homepage Release Notes The release notes provide documentation for
what's new with the release, features and change notifications, system requirements, and known issues.
The release notes are available on the HP Technical Documentation website at http://docs.hp.com.
•HP System Management Homepage Help System The help system provides a complete set of
documentation for using, maintaining, and troubleshooting HP SMH. In HP SMH, go to the Help menu.
• HP System Management Homepage Installation Guide The installation guide provides information
about installing and getting started using HP SMH. It includes an introduction to basic concepts,
definitions, and functionality associated with HP SMH. The installation guide is available on the HP
Technical Documentation website at http://docs.hp.com. Also, for Linux and Windows operating system
releases, the installation guide is available on the Management CD and at the HP SMH web page at
http://h18013.www1.hp.com/products/servers/management/agents/documentation.html.
• HP System Management Homepage User Guide The user guide provides a complete set of
documentation for using, maintaining, and troubleshooting HP SMH. For Linux and Windows operating
systems, this user guide is available under the HP SMH Help menu, and on the HP Technical
Documentation website at http://docs.hp.com. For HP-UX, HP no longer provides a printed user guide.
See the HP SMH online help content for information on how to use, maintain, and troubleshoot HP
SMH.
•Next generation single-system management on HP-UX 11i v2 (B.11.23) This white paper introduces
HP SMH and its various plug-ins. The use cases involving HP SMH plug-ins highlight the features provided
by HP SMH. The white paper is available on the HP Technical Documentation website at http://
docs.hp.com/en/4AA0-4052ENW/4AA0-4052ENW.pdf.
• hpsmh (1m) manpage For HP-UX releases, the manpage is available from the command line using
the man hpsmh command. This information is not available for Linux and Windows operating systems.
• smhstartconfig (1M) manpage For HP-UX operating system releases, the manpage is available from
the CLI using the man smhstartconfig command. This information is not available for Linux and
Windows operating systems.
• sam (1M) manpage For HP-UX operating system releases, the manpage is available from the CLI using
the man sam command. This information is not available for Linux and Windows operating systems.
Note SAM functionality changes in System Management Homepage Installation Guide at http://
h18013.www1.hp.com/products/servers/management/agents/documentation.html.
• smh (1m) manpage This command is available in HP-UX 11i v3 (B.11.31) only. This is an enhanced
version of the sam (1m) command. For HP-UX operating system releases, the manpage is available from
the CLI using the man smh command. This information is not available for Linux and Windows operating
systems.
•HP System Management Homepage website The website provides HP SMH information and product
links. Go to the HP website at http://www.hp.com or to the Software Depot home at http://
www.hp.com/go/softwaredepot and search for System Management Homepage.
•HP Insight Essentials software page This web page is at http://www.hp.com/servers/manage.
HP Encourages Your Comments
HP encourages your comments concerning this document. HP is committed to providing documentation that
meets your needs. Send any errors found, suggestions for improvement, or compliments to:
[email protected]. Include the document title, manufacturing part number, and any comment, error found,
or suggestion for improvement you have concerning this document.
10 About This Document

1 Introduction
HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies
single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating
systems. HP SMH aggregates and displays data from Web Agents and other HP Web-enabled System
Management Software that includes:
•HP Insight Diagnostics
•Array Configuration Utility
•HP Software Version Control Agents
•HP Insight Diagnostics
•Array Configuration Utility
•HP Software Version Control Agents
HP SMH enables you to view in-depth hardware configuration and status data, performance metrics, system
thresholds, diagnostics, and software version control information using a single intuitive interface.
On an HP-UX system, HP SMH has a bundle tag of SysMgmtWeb and is installed by default on all HP-UX
versions, including HP-UX 11i v1 (B.11.11), HP-UX 11i v2 (B.11.23), and HP-UX 11i v3 (B.11.31) Operating
Environments.
Product features
HP SMH provides the following enhanced security and streamlined operations for HP servers running HP-UX,
Linux, and Windows operating systems.
•Browser access using operating system-based Secure Sockets Layer (SSL)-secure authentication
•Common HTTP and HTTPS service for HP Insight Management Agents and utilities, for reduced complexity
and system resource requirements
•Simplified architecture for implementing HTTP security and HP management updates
•Access control through Network Interface Card (NIC) binding and advanced configuration features for
individual and groups of users
•Broad operating system and browser support
HP SIM
HP SMH is tightly integrated with HP Systems Insight Manager (HP SIM). You can easily navigate to HP SMH
from the System Lists and System Pages in HP SIM.
NOTE: Accepting the HP SIM certificate is the default behavior.
There are also several HP SIM tools (under the Configure→HP-UX Configuration category) that access
HP SMH-based plugins directly.
Integrated Management Tools
HP SMH provides the management server for Web-based system administration.
For HP-UX, key functional areas of the HP-UX System Administration Manager (SAM) have been enhanced
to provide Web-based management capabilities and are now integrated into HP SMH. These include such
areas as Partition Management, Peripheral Devices, Disks & File Systems, Users and Groups, and Kernel
Configuration.
HP-UX System Administration Manager (SAM) Deprecation
The HP-UX System Administration Manager (SAM) was an HP-UX System Administration tool that provided
tools for performing system administration tasks. In the HP-UX 11i v3 (B.11.31) release of HP-UX, SAM is
deprecated. HP SMH, an enhanced version of SAM, is the recommended tool for managing HP-UX.
Product features 11

HP SMH provides Graphical User Interface (GUI), Terminal User Interface (TUI) and Command Line Interface
(CLI) for managing HP-UX. You can access these interfaces using the smh command (/usr/sbin/smh).
You can also use the sam (1M) command, which behaves the same as the smh (1M) command, but the
deprecation message is displayed in the beginning.
Most applications for performing administration tasks are now available through the web-based GUI interface
and the enhanced TUI. However, a few applications continue to open in ObAM based X-windows or ObAM
based TUI.
Some functional areas previously available for system administration are obsolete. These areas are listed in
the HP-UX 11i Release Notes , available on the HP Technical documentation Web site at http://docs.hp.com.
Supported operating systems
HP ProLiant servers
•Windows Server 2008 Standard for x86 and x64
•Windows Server 2008 Enterprise for x86 and x64
•Windows Server 2008 Datacenter for x86 and x64
•Windows Server 2008 Essential Business Server
•Windows Server HPC 2008
•Windows Server® 2003 Standard Edition SP2 for x86 and x64
•Windows Server 2003 R2, Standard Edition SP2 for x86 and x64
•Windows Server 2003, Web Edition SP2
•Windows Server 2003 Enterprise Edition SP2 x86 and x64
•Windows Server 2003 R2 Enterprise Edition SP2 x86 and x64
•Windows Server 2003 SBS, Standard and Premium R2
•Windows Vista Business Edition Ultimate Edition
•Windows Vista Enterprise Edition
•Windows Vista Ultimate Edition
•Windows XP SP2
•Red Hat Enterprise Linux 5 update 2 for x86 and AMD64/EMT64T
•Red Hat Enterprise Linux 4 update 6 or later for x86 and AMD64/EMT64T
•Red Hat Enterprise Linux 3 update 9 for x86, AMD64/EMT64T
•Red Hat Enterprise Linux 3 update 9 for x86 with Cisco Kernel
•Oracle Enterprise Linux
•SUSE Linux Enterprise Server (SLES) 11 for x86 and AMD64/EMT64T
•SUSE Linux Enterprise Server (SLES) 10 SP 1 or later for x86 and AMD64/EMT64T
•SUSE Linux Enterprise Server (SLES) 9 SP 4 or later for x86 and AMD64/EMT64T
•VMware ESX 3.0
•VMware ESX 3.0.1
•VMware ESX 3.0.2
•VMware ESX 3.5
•Novell Open Enterprise Server (OES)
•XEN
HP Integrity servers
•Windows Server 2008 R2 for Itanium-based systems, 64-bit
•Windows Server 2008 for Itanium-based systems, 64-bit
12 Introduction

•Red Hat Linux Advanced Server 2.1 Update 3 and later
•SUSE Linux Enterprise Server (SLES) 8 with Service Pack 3 and later
•Red Hat Enterprise Linux 5.0 Update 1
•Red Hat Enterprise Linux 4.0 Update 6
•SUSE Linux Enterprise Server (SLES) 10 Service Pack 1
•SUSE Linux Enterprise Server (SLES) 9 Service Pack 4
HP-UX
•HP-UX 11i v3 (B.11.31) for HP Integrity Servers and HP 9000 Servers
•HP-UX 11i v2 (B.11.23) for HP Integrity Servers and HP 9000 Servers
•HP-UX 11i v1 (B.11.11) for HP Servers and Workstations
NOTE: For Linux operating systems, Lightweight Directory Access Protocol (LDAP) is supported on SUSE
Linux Enterprise Server 9 and SUSE Linux Enterprise Server 10.
For Windows operating systems, SmartStart CD requires that all systems have a minimum of 256 MB of
RAM.
HP-UX 11i v1 (B.11.11) Operating Environments are for PA-RISC systems only. HP-UX 11i v2 (B.11.23)
Operating Environments (September 2004 and later). HP-UX 11i v3 (B.11.31) Operating Environments
(February 2007 and later) support both PA-RISC and Itanium-based operating systems.
Supported browsers
For HP-UX Itanium-based or PA-RISC operating systems:
•Mozilla 1.6, 1.7
•Firefox 1.0.2, 1.5, 2.0
•Internet Explorer 6.0 SP2
•Internet Explorer 7.0 (SMH 2.2.9 or later)
For Windows Itanium-based or x86 operating systems:
•Internet Explorer 6.0 SP2
•Internet Explorer 7.0 (SMH 2.1.9 or later)
•Mozilla 1.7.13
•Firefox 2.0.0.x
•Firefox 3.0
•Mozilla Firefox 1.5.0.x
For Linux Intel Itanium or x86 operating systems:
•Mozilla 1.7.13
•Firefox 2.0.0.x
•Firefox 3.0
•Mozilla Firefox 1.5.0.x
NOTE: Installation of HP SMH does not require a browser.
The HP Web-enabled System Management Software is hardware-dependent. For the installation to complete
successfully, your system must support at least 256 colors.
Supported browsers 13

Obtaining HP SMH software
HP media
•HP-UX 11i v3 (B.11.31) Operating Environment DVD, February 2007 or later
•HP-UX 11i v3 (B.11.31) Applications DVD, February 2007 or later
•HP-UX 11i v2 (B.11.23) Operating Environment DVD, May 2005 or later
•HP-UX 11i v2 (B.11.23) Applications DVD, September 2005 or later
•HP-UX 11i v1 (B.11.11) Operating Environment DVD, September 2005 or later
•HP-UX 11i v1 (B.11.11) Applications DVD, May 2005 or later
•HP SmartSetup CD 6.20 or later
•HP SmartStart CD 8.20 or later
•HP ProLiant Support Pack 8.20 or later
•HP Integrity Support Pack 6.20 or later
HP websites
These HP websites are accessible from any system with a web browser and access to the Internet:
•To download the latest software versions, see the HP website at http://www.hp.com.
•For HP-UX operating systems, you can also find the software on the Software Depot home at http://
www.hp.com/go/softwaredepot.
•For Linux and Windows operating systems, HP SMH is available in the ProLiant Support Pack and
Integrity Support Pack. To download the latest version of the ProLiant Support Pack or Integrity Support
Pack, see the Support and Troubleshooting link at http://www.hp.com.
14 Introduction

2 Getting Started
To get started with HP System Management Homepage (HP SMH), use the following information when
configuring HP SMH and setting up users and security properly.
To configure HP SMH:
•On HP-UX operating environments, HP SMH is installed with default settings. You can change the
configuration by modifying the environment variables and tag values set in the following files:
•/opt/hpsmh/lbin/envvars
•/opt/hpsmh/conf.common/smhpd.xml
•/opt/hpsmh/conf/timeout.conf
•On Linux operating systems, HP SMH is installed with default settings. The settings are configurable by
using the perl script (hpSMHSetup.pl) located in /usr/local/hp (for Linux x86 and x64 systems) or,
in /opt/hp/hpsmh/smhconfig/hpSMHSetup.sh for Itanium systems.
•On Windows operating systems, the installation enables you to configure HP SMH settings during
installation.
NOTE: To change the configurations for the HP-UX, Linux, and Windows operating systems, see the HP
System Management Homepage Installation Guide on the HP Technical Documentation Web site at http:/
/docs.hp.com.
To set up user access and security properly:
1. Add user groups to effectively manage user rights.
2. Configure the trust mode.
3. Configure local or anonymous access.
Signing in
The Sign In page enables you to access the Home page, which contains the available HP Insight Management
Agents .
The Sign In page components include:
•Two fields to input your user name and password from an account that is part of a valid group configured
in the SMH users groups configuration article.
•Two buttons under the input fields:
Sign In Validates the values in the user name and password. If both values are valid, the HP
SMH main page appears.
•
•Clear Erases the input values.
•The question mark icon, ?, displays or hides a floating tooltip box with information about the
authentication mechanism and sign in process.
The following table provides more information about the tooltip box.
Signing in 15

531 Question mark. Show/hide tooltip
box.
Sign In. Validates user name
sign-in to HP SMH.
User Name. The user must be
part of a user group accepted
by HP SMH. 4Clear. Erases user name and
password input fields.
2Password. The user name and
password must match a valid
user.
If an error occurs on a sign-in attempt, you are returned to the Sign In page.
A configuration mechanism enables the administrator to customize the image and the message in the Sign
In page. The administrator can use a custom logo and warning message. As the pages load, HP SMH verifies
if the personalized content is enabled and available. If the content is not available, HP SMH uses the standard
image and warning message.
Starting HP System Management Homepage (HP SMH) from Internet Explorer
To sign in to HP SMH with Internet Explorer:
1. Navigate to https://hostname:2381/.
The first time you browse to this URI, the Security Alert dialog box appears, prompting you to indicate
whether to trust the server. If you do not import the certificate , the Security Alert appears every time you
browse to HP SMH.
If you are browsing to an HP-UX server, by default you must use http://hostname:2301/.
By default, HP-UX is installed with the autostart feature enabled. A daemon listens on port 2301,
and starts HP SMH on port 2381 when requested, then stops it after a timeout period. You can also
configure HP SMH to always run on port 2381. For more information, see the smhstartconfig (1M)
command.
If the Start on Boot feature is enabled (instead of autostart), a message window appears, which
explains the security features. Wait a few seconds to be redirected to port 2381 or click the link at the
bottom of the message. The System Management Homepage sign in page appears.
For more information about procedures on changing the configuration variables, see the HP System
Management Homepage Installation Guide on the HP Technical Documentation Web site at http://
docs.hp.com.
NOTE: To implement your own Public Key Infrastructure (PKI) or install your own generated certificates
into each managed system, you can install a certificate authority Root Certificate into each browser to
be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not
16 Getting Started

appear. If the alert appears, you might have browsed to the wrong system. For more information about
installing the certificate authority Root Certificate, see the online help in your browser.
NOTE: To implement or install your own generated certificates into each managed system, you can
install a certificate authority Root Certificate into each browser to be used for management. If a Root
Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you
might have browsed to the wrong system. For more information about installing the certificate authority
Root Certificate, see the online help in your browser.
2. Click Yes.
The Sign In page appears. If you enabled Anonymous access during installation, then System
Management Homepage appears.
3. Enter your user name that is recognized by the operating system.
NOTE: HP SMH initially only allows access to the root user.
•HP-UX HP SMH initially only allows access to the root user.
•Linux HP SMH initially allows access to users belonging to the root operating system group.
•Windows HP SMH allows access to users belonging to the Administrators operating system
group.
If the user credentials cannot be authenticated, the user is denied access.
After logging into HP SMH as an initially allowed user, use the Security Settings to grant access to users
in other operating system groups.
Administrator on Windows and root on HP-UX or Linux have administrator access on HP SMH.
4. Enter the password that is recognized by the operating system.
5. Click Sign In.
The System Management Homepage appears.
Starting HP SMH from Mozilla or Firefox
To sign in to HP SMH with Mozilla or Firefox:
1. Navigate to https://hostname:2381/.
If you are browsing to an HP-UX server, by default you must use http://hostname:2301/.
By default, HP-UX is installed with the autostart feature enabled. A daemon listens on port 2301,
and starts HP SMH on port 2381 when requested, then stops it after a timeout period. You can also
configure HP SMH to always run on port 2381. For more information, see the smhstartconfig (1M)
command.
If the Start on Boot feature is enabled (instead of autostart), a message window appears, which
explains the security features. Wait a few seconds to be redirected to port 2381 or click the link at the
bottom of the message. The System Management Homepage sign in page appears.
For more information about procedures on changing the configuration variables, see the HP System
Management Homepage Installation Guide on the HP Technical Documentation Web site at http://
docs.hp.com.
2. Click OK.
The Sign In page appears. If you enabled Anonymous access during installation, then System
Management Homepage appears.
3. Enter your user name that is recognized by the operating system.
•HP-UX HP SMH initially only allows access to the root user.
•Linux HP SMH initially allows access to users belonging to the root operating system group.
•Windows HP SMH allows access to users belonging to the Administrators operating system
group.
Signing in 17

Administrator on Windows and root on HP-UX or Linux have administrator access on HP SMH.
4. Enter the password that is recognized by the operating system.
5. Click Sign In.
The System Management Homepage appears.
Starting HP SMH from HP SIM
To start HP SMH by signing in to HP SIM with a Web browser:
1. Navigate to https://hostname:50000/.
The first time you browse to this link, the Security Alert dialog box appears, asking if you want to trust
the server. If you do not import the certificate , the Security Alert appears each time you browse to
Systems Insight Manager (HP SIM).
NOTE: To implement a custom Public Key Infrastructure (PKI) or install your own generated certificates
into each managed system, you can install a certificate authority Root Certificate into each browser to
be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not
appear. If the alert appears, you might have browsed to the wrong system. For more information about
installing the certificate authority Root Certificate, see the online help in your browser.
NOTE: To implement or install your own generated certificates into each managed system, you can
install a certificate authority Root Certificate into each browser to be used for management. If a Root
Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you
might have browsed to the wrong system. For more information about installing the certificate authority
Root Certificate, see the online help in your browser.
2. Click Yes.
The Sign In page appears.
3. Enter your user name that is recognized by the operating system.
4. Enter the password that is recognized by the operating system.
5. Click Sign In.
6. Select Tools→System Information→System Management Homepage.
7. Select a target system from the list.
8. Select a check box next to a target system, and then click Apply.
9. Verify the target system by selecting a check box next to the system, and then click Run Now.
The Security Alert dialog box appears, prompting you to trust the server. If you do not import the
certificate , the Security Alert appears each time you browse to HP SMH.
The System Management Homepage appears.
Starting from the HP-UX Command Line
When you run the sam or smh command and the DISPLAY environment variable is set, HP SMH opens in
the default Web browser. If the DISPLAY environment variable is not set, HP SMH opens in the TUI. Most
applications for performing administration tasks are available through the Web-based GUI interface and
an enhanced TUI. However, some applications continue to open in ObAM based X-windows or ObAM
based TUI.
HP recommends using the smh (1M) command. However, the sam (1M) command continues to be available
and behave just as the smh (1M) command. Some functional areas previously available for system
administration are obsolete. These areas are listed in the HP-UX 11i Release Notes , available on the HP
Technical documentation web site at http://docs.hp.com.
HP SMH Management Server
By default, the HP SMH management server for HP-UX starts only on demand. It does not run continually. A
daemon listens on port 2301 to start an instance of the management server. On Linux, HP SMH is started
on boot.
18 Getting Started

By default, the HP SMH management server for HP-UX starts only on demand. It does not run continually. A
daemon listens on port 2301 to start an instance of the management server.
Configuring Firewall Settings
Windows
Some operating systems including Windows XP with Service Pack 2 and Windows Server 2003 SBS
implement a firewall that prevents browsers from accessing the ports required for the Version Control
Repository Manager access. To resolve this issue, configure the firewall with exceptions to enable browsers
to access the ports used by HP SIM and Version Control Repository Manager.
NOTE: For Windows XP with Service Pack 2, the firewall configuration leaves the default SP2 security
enhancements intact, but enables traffic over the ports. These ports are required for the Version Control
Repository Manager to run. The secure and insecure ports must be added to enable proper communication
with your browser.
To configure the firewall:
1. Select Start→Settings Control Panel.
2. To configure the firewall settings, double-click Windows Firewall.
3. Select Exceptions.
4. Click Add Port.
5. Enter the following product name and the port number information.
Add the exceptions listed in the following table to the firewall protection:
Table 2-1 Firewall exceptions
Port NumberProduct
2301HP SMH Insecure Port:
2381HP SMH Secure Port:
6. Click OK to save your settings and close the Add a Port dialog box.
7. Click OK to save your settings and close the Windows Firewall dialog box.
Linux
Configuring firewalls varies, depending on the version of Linux installed.
Red Hat Enterprise Linux 4 and 5
The following displays an example of iptables firewall rules for Red Hat Enterprise Linux 4 and 5 in the
/etc/sysconfig/iptables file:
# Firewall configuration written by redhat-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
Configuring Firewall Settings 19

-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
The following displays the new value in the iptables firewall rules for Red Hat Enterprise Linux 4 and 5 that
allows access to HP SMH in the /etc/sysconfig/iptables file:
# Firewall configuration written by redhat-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2301 -j
ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 2381 -j
ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server 9 and 10 firewalls are configured using the YAST2 utility.
To configure the firewall:
1. Using the YAST2 utility, select Security & Users→Firewall.
The Firewall Configuration (Step 1 of 4): Basic Settings window appears.
2. Click Next.
The Firewall Configuration (Step 2 of 4): Services window appears.
3. In the Additional Services field, enter 2301:2381, and then click Next.
The Firewall Configuration (Step 3 of 4): Features window appears.
4. Click Next.
The Firewall Configuration (Step 4 of 4): Logging Options window appears.
20 Getting Started