HP 9000 rp7410 nPartition Administrator's Guide, Second Edition - Page 44

Remote Management Using WBEM, WBEM Remote Management Files

Page 44 highlights

tools in the mode that uses IPMI over LAN (see "Remote Management Using IPMI over LAN" (page 46)). Local management is the only form of management supported by the older nPartition tools (the Original nPartition Commands and Partition Manager Version 1.0). Also, because the nPartition Configuration Privilege is a feature of the sx1000-based and sx2000-based servers it affects the older nPartition tools when used on nPartitions in an sx1000-based or sx2000-based server, but not when used on nPartitions in the first-generation cell-based servers. Remote Management Using WBEM WBEM enables one form of remote management of an nPartition complex: using nPartition management tools (WBEM client applications) that are running on one system to communicate with the nPartition Provider (a WBEM agent) running on an nPartition in the complex to be managed. When performing remote management using WBEM the following terminology is used: • The complex being managed is referred to as a "remote complex" because it is remote with respect to the system where the tools are being run. • The remote complex is also the "target complex" as it is the complex that will be affected by any changes requested by the tools. • The nPartition that the tools communicate with (using WBEM) is referred to as a "remote nPartition" because it is remote with respect to the system where the tools are being run. • If the tools are used to retrieve information about or to make a change to a specific nPartition in the target complex, then that nPartition is the "target nPartition". The target nPartition and the remote nPartition might be the same, but don't have to be the same nPartition. For example, the parmodify command could be used in a way where it sends requests to an nPartition in the target complex but the -p option identifies a different nPartition to be modified. The following sections explain how to use the Enhanced nPartition Commands and Partition Manager Version 2.0 to remotely manage an nPartition complex using WBEM. The system where the tools are used could be an nPartition or other system, but where the tools are run is irrelevant when performing remote management of an nPartition complex. NOTE: Remote management using WBEM relys on an nPartition in the target complex being booted to multi-user mode. The remote nPartition must be configured to accept remote WBEM requests. Remote management using WBEM also requires that the Trust Certificate Store file on the local system contains a copy of the server certificate data from the SSL Certificate file on the system being managed. See "WBEM Remote Management Files" (page 44). WBEM Remote Management Files WBEM systems provide secure remote management using the following files as part of the SSL authentication process. Both files reside on all WBEM-enabled systems. • server.pem - WBEM SSL Certificate file The SSL Certificate file resides on the system that is being managed and contains the local server's PRIVATE KEY and CERTIFICATE data. On HP-UX B.11.23 systems, the SSL Certificate file is the /var/opt/wbem/server.pem file. 44 Getting Started with nPartitions

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266

tools in the mode that uses IPMI over LAN (see
“Remote Management Using IPMI over LAN”
(page 46)
).
Local management is the only form of management supported by the older nPartition tools (the
Original nPartition Commands and Partition Manager Version 1.0). Also, because the nPartition
Configuration Privilege is a feature of the sx1000-based and sx2000-based servers it affects the
older nPartition tools when used on nPartitions in an sx1000-based or sx2000-based server, but
not when used on nPartitions in the first-generation cell-based servers.
Remote Management Using WBEM
WBEM enables one form of remote management of an nPartition complex: using nPartition
management tools (WBEM client applications) that are running on one system to communicate
with the nPartition Provider (a WBEM agent) running on an nPartition in the complex to be
managed.
When performing remote management using WBEM the following terminology is used:
The complex being managed is referred to as a "remote complex" because it is remote with
respect to the system where the tools are being run.
The remote complex is also the "target complex" as it is the complex that will be affected by
any changes requested by the tools.
The nPartition that the tools communicate with (using WBEM) is referred to as a "remote
nPartition" because it is remote with respect to the system where the tools are being run.
If the tools are used to retrieve information about or to make a change to a specific nPartition
in the target complex, then that nPartition is the "target nPartition". The target nPartition
and the remote nPartition might be the same, but don't have to be the same nPartition.
For example, the
parmodify
command could be used in a way where it sends requests to
an nPartition in the target complex but the
-p
option identifies a different nPartition to be
modified.
The following sections explain how to use the Enhanced nPartition Commands and Partition
Manager Version 2.0 to remotely manage an nPartition complex using WBEM. The system where
the tools are used could be an nPartition or other system, but where the tools are run is irrelevant
when performing remote management of an nPartition complex.
NOTE:
Remote management using WBEM relys on an nPartition in the target complex being
booted to multi-user mode. The remote nPartition must be configured to accept remote WBEM
requests.
Remote management using WBEM also requires that the Trust Certificate Store file on the local
system contains a copy of the server certificate data from the SSL Certificate file on the system
being managed. See
“WBEM Remote Management Files” (page 44)
.
WBEM Remote Management Files
WBEM systems provide secure remote management using the following files as part of the SSL
authentication process. Both files reside on all WBEM-enabled systems.
server.pem — WBEM SSL Certificate file
The SSL Certificate file resides on the system that
is being managed and contains the local server's
PRIVATE KEY
and
CERTIFICATE
data.
On HP-UX B.11.23 systems, the SSL Certificate file is the
/var/opt/wbem/server.pem
file.
44
Getting Started with nPartitions