Home » HP Manuals » Servers » HP Integrity Superdome 2 » Manual Viewer

HP Integrity Superdome 2 HP Integrity Superdome 2 Onboard Administrator User G - Page 140

Directory Settings screen, Uploading a certificate

View all HP Integrity Superdome 2 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 140 highlights

Directory Settings screen LDAP is a protocol for accessing information directories. While LDAP is based on the X.500 standard, it is significantly simpler. LDAP also supports TCP/IP and is an open protocol. Use the Directory Settings screen to set directory access for the now selected enclosure. Box Directory Server Address Directory Server SSL Port Search Context 1 Search Context 2 Search Context 3 Possible value Description where ### ranges The IP address or the DNS name or the from 0 to 255 or DNS name of the name of the domain of the directory directory server or the name of the service. domain 0 to xxxx The port used for LDAP communications. The default port is port 636. All characters except " (quotes), not to exceed 128 characters First searchable path used to locate the user when the user is trying to authenticate using directory services. All characters except " (quotes), not to exceed 128 characters Second searchable path used to locate the user when the user is trying to authenticate using directory services. All characters except " (quotes), not to exceed 128 characters Third searchable path used to locate the user when the user is trying to authenticate using directory services. Uploading a certificate You are not required to upload domain controller certificates. Superdome 2 Onboard Administrator accepts multiple domain controller certificates, which can be uploaded using the Certificate Upload tab under Directory Settings. To upload a certificate: 1. Get the certificate from the domain controller by opening a browser and entering the following address: https://:636 (where domain controller is the IP address for your network domain controller). 2. When prompted to accept a certificate, click View Certificate. 3. Click the Details tab, and then click the Copy to File button. 4. From the list of export options, select Base-64 encoded x.509 (.CER). 5. Provide a name and location for the file, and finish the Upload a Certificate Wizard. 6. Locate the exported certificate file, and then rename it with a .txt extension (for example, dccert.txt). 7. Open the file in a text editor, and copy the entire contents to the clipboard. The following is an example of an exported certificate file: -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIKJWUSwAAAAAAAAjANBgkqhkiG9w0BAQUFADBVMRMwEQYK CZImiZPyLGQBGRYDY29tMRIwEAYKCZImiZPyLGQBGRYCaHAxFzAVBgoJkiaJk/Is ZAEZFgdhdGxkZW1vMREwDwYDVQQDEwh3aW5kb3pDQTAeFw0wNjA4MjIyMDIzMTFa Fw0wNzA4MjIyMDIzMTFaMCAxHjAcBgNVBAMTFXdpbmRvei5hdGxkZW1vLmhwLmNv bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAy4zeh3iXydUAWKVHIDsxLJ6B aRuVT9ZhkL5NQHIDeRjumsgc/jHSERDmHuyoY/qbF7JMhJ9Lh9QQHUg8QfEYsC1y qTvgisrZeHtvmrmecvSxZm27b4Bj5XYN0VYcrwqKnH7X/tVhmwqGls7/YZyahNU1 lGB2OjoCq5eJxX+Ybx0CAwEAAaOCA00wggNJMAsGA1UdDwQEAwIFoDBEBgkqhkiG 9w0BCQ8ENzA1MA4GCCqGSIb3DQMCAgIAgDAOBggqhkiG9w0DBAICAIAwBwYFKw4D 140 Configuring HP Integrity Superdome 2 compute enclosures and enclosure devices

Section	Page
HP Integrity Superdome 2 Onboard Administrator User Guide	1
Contents	3
1 Introduction	8
Overview	8
Access requirements	10
Onboard Administrator overview	11
Detecting component insertion and removal	11
Identifying components	11
Managing power and cooling	11
Controlling components	12
Managing partitions	12
Interfaces	12
Onboard Administrator user interfaces	13
Onboard Administrator authentication	13
Running Onboard Administrator for the first time	14
Logging on to the Onboard Administrator GUI	15
Running the setup wizard	15
Using online help	16
Changing enclosure and device configurations	17
Recovering the administrator password	17
2 HP Integrity Superdome 2 Insight Display	18
HP Integrity Superdome 2 Insight Display components	18
Insight Display overview	18
Running the Insight Display installation	19
Navigating the Insight Display	22
Health Summary screen	24
Enclosure Settings screen	25
Enclosure Info screen	26
Blade and Port Info screen	27
Turn Enclosure UID On/Off screen	28
View User Note screen	29
Chat Mode screen	29
Insight Display errors	30
Power errors	30
Cooling errors	30
Location errors	31
Configuration errors	31
Device failure errors	31
3 HP Superdome 2 Door Status Display	32
Before running Door Display setup	32
Setting up the Door Display	32
Door Display status menu	36
Display Settings menu	38
Firmware Update menu	39
4 First Time Setup Wizard	41
Before you begin	41
User preferences	41
Enclosure Selection screen	42
Configuration Management screen	42
Rack and Enclosure Settings screen	43
Administrator Account Setup screen	45
Local User Accounts screen	46
Enclosure Bay IP Addressing screen	47
Directory Groups screen	48
Directory Settings screen	49
Onboard Administrator Network Settings screen	50
SNMP Settings screen	50
Power Management screen	52
Finish	53
5 Navigating Onboard Administrator	55
Navigation overview	55
Tree view	55
Graphical view navigation	57
6 Complex Overview	60
Complex Overview screen	60
Compute Enclosures tab	60
Power and Thermal tab	61
Complex Information screen	62
Status tab	62
Information tab	64
Complex Logs tab	65
Complex Firmware Summary screen	65
Firmware Update screen	66
Enclosure DVD Module screen	68
7 Configuring HP Integrity Superdome 2 compute enclosures and enclosure devices	70
Viewing the status screens	70
Enclosure settings	71
Enclosure Settings screen	71
Enclosure Information tab	73
AlertMail screen	74
Device Power Sequence Device Bays tabs	76
Device Power Sequence Interconnect Bays tab	78
Date and Time screen	78
Enclosure TCP/IP Settings screen	79
Network Access screen	80
Trusted Hosts tab	81
Anonymous Data tab	81
Link Loss Failover screen	81
Enclosure Bay IP Addressing screen	82
SNMP Settings screen	84
Configuration Scripts screen	86
Device Summary screen	87
Active to Standby screen	88
Onboard Administrator Module	88
Active Onboard Administrator screen	88
Active Onboard Administrator Status and Information tab	89
Active Onboard Administrator Virtual Buttons tab	90
TCP/IP Settings screen	91
Certificate Administration screen	92
Certificate Request tab	93
Active Onboard Administrator Certificate Upload tab	96
System log	96
Log Options tab	99
Standby Onboard Administrator screen	99
TCP/IP Settings for Standby Onboard Administrator	100
Standby Onboard Administrator Virtual Buttons tab	100
Standby Certificate Request tab	100
Standby Onboard Administrator Certificate Upload tab	100
Device bays	101
Device Bay Overview screen	101
Device Bay Information - Bay xx screen	103
Device Bay Information tab	106
Device bay virtual buttons tab	108
Interconnect bays	108
Interconnect Bay Summary screen	108
Interconnect Bay Information screen	110
Interconnect Bay Information tab	111
Interconnect Bay Virtual Buttons tab	112
Port Mapping - Interconnect Bay screen	113
XFM bays	114
XFM Bay Summary screen	114
XFM Bay Information - Bay screen	115
XFM Bay Status tab	115
XFM Bay Information tab	116
XFM Bay Virtual Buttons	117
GPSM bays	117
GPSM Bay Summary screen	117
GPSM Bay Information screen	118
GPSM Status tab	118
GPSM Information tab	119
GPSM Virtual Buttons	119
Enclosure power management	120
Planning power management	120
Power and Thermal screen	120
Power Management screen	121
Enclosure Power Allocation screen	122
Enclosure Power Meter screen	123
Graphical View tab	124
Enclosure Power Meter Table View tab	126
Power Subsystem screen	127
Power Supply Information - Bay screen	128
Fans and cooling management	130
Thermal Subsystem screen	130
Thermal Subsystem Fan Zones tab	131
Superdome 2 Enclosure fan location rules	133
Fan Information - Bay screen	133
Managing users	134
Users/Authentication	134
User roles and privilege levels	135
Role-based user accounts	135
Local Users screen	136
Add Local User	136
Edit Local User	137
Edit Local User Certificate Information tab	139
Password Settings screen	139
Directory Settings screen	140
Uploading a certificate	140
Directory Certificate Upload tab	141
Directory Test Settings tab	141
Directory Groups	143
Add an LDAP Group screen	144
Edit an LDAP Group screen	145
SSH Administration screen	146
HP SIM Integration screen	147
Edit Local User Certificate Information tab	148
Two-Factor Authentication screen	148
Two-Factor Authentication Certificate Information tab	148
Two-Factor Authentication Certificate Upload tab	149
Signed In Users	149
Session Options tab	150
Insight Display	150
Management network IP dependencies	150
8 HP Integrity Superdome 2 IOX enclosures	151
IOX Enclosure Information screen	151
IOX Power and Thermal screen	153
IOX Power Subsystem screen	154
IOX Power Supply screen	155
IOX Thermal Subsystem screen	155
9 Port mapping	157
Device bay port mapping for Superdome 2 compute enclosures	157
Device bay port mapping tabular view for Superdome 2 compute enclosures	157
10 Using the CLI	158
Command line overview	158
11 Using the serial connection	159
Setting up Onboard Administrator using the CLI	159
Pinout signals for Onboard Administrator Serial RS232 connector	159
Using the service port connection	160
12 Using configuration scripts	161
Configuration scripts	161
Reset Factory Defaults screen	162
13 Troubleshooting	163
Onboard Administrator error messages	163
Onboard Administrator factory default settings	172
Onboard Administrator SNMP traps	173
14 Enabling LDAP Directory Services Authentication to Microsoft Active Directory	175
Certificate Services	175
Preparing the directory	175
Uploading the DC certificate (optional)	176
Creating directory groups	178
Testing the directory login solution	179
Troubleshooting LDAP on Onboard Administrator	179
15 Support and other resources	181
Before you contact HP	181
HP contact information	181
Subscription service	181
Documentation feedback	181
Installing HP Insight Remote Support Software	181
New and changed information in this edition	182
Related information	182
Typographic conventions	182
Customer self repair	183
A Time zone settings	184
Africa time zone settings	184
Americas time zone settings	184
Asia time zone settings	186
Universal time zone settings	186
Oceanic time zone settings	187
Europe time zone settings	188
Polar time zone settings	188
Standard terms, abbreviations, and acronyms	189

Match case Limit results 1 per page

Directory Settings screen

LDAP is a protocol for accessing information directories. While LDAP is based on the X.500

standard, it is significantly simpler. LDAP also supports TCP/IP and is an open protocol.

Use the Directory Settings screen to set directory access for the now selected enclosure.

Description

Possible value

Box

The IP address or the DNS name or the

name of the domain of the directory

service.

###.###.###.### where ### ranges

from 0 to 255 or DNS name of the

directory server or the name of the

domain

Directory Server Address

The port used for LDAP communications.

The default port is port 636.

0 to xxxx

Directory Server SSL Port

First searchable path used to locate the

user when the user is trying to

authenticate using directory services.

All characters except " (quotes), not

to exceed 128 characters

Search Context 1

Second searchable path used to locate

the user when the user is trying to

authenticate using directory services.

All characters except " (quotes), not

to exceed 128 characters

Search Context 2

Third searchable path used to locate

the user when the user is trying to

authenticate using directory services.

All characters except " (quotes), not

to exceed 128 characters

Search Context 3

Uploading a certificate

You are not required to upload domain controller certificates. Superdome 2 Onboard Administrator

accepts multiple domain controller certificates, which can be uploaded using the Certificate Upload

tab under Directory Settings.

To upload a certificate:

Get the certificate from the domain controller by opening a browser and entering the following

address:

https://<

domain controller

>:636

(where

domain controller

is the IP address for your network domain controller).

When prompted to accept a certificate, click

View Certificate

Click the

Details

tab, and then click the

Copy to File

button.

From the list of export options, select

Base-64 encoded x.509 (.CER)

Provide a name and location for the file, and finish the Upload a Certificate Wizard.

Locate the exported certificate file, and then rename it with a .txt extension (for example,

dccert.txt).

Open the file in a text editor, and copy the entire contents to the clipboard. The following is

an example of an exported certificate file:

-----BEGIN CERTIFICATE-----

MIIFxDCCBKygAwIBAgIKJWUSwAAAAAAAAjANBgkqhkiG9w0BAQUFADBVMRMwEQYK

CZImiZPyLGQBGRYDY29tMRIwEAYKCZImiZPyLGQBGRYCaHAxFzAVBgoJkiaJk/Is

ZAEZFgdhdGxkZW1vMREwDwYDVQQDEwh3aW5kb3pDQTAeFw0wNjA4MjIyMDIzMTFa

Fw0wNzA4MjIyMDIzMTFaMCAxHjAcBgNVBAMTFXdpbmRvei5hdGxkZW1vLmhwLmNv

bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAy4zeh3iXydUAWKVHIDsxLJ6B

aRuVT9ZhkL5NQHIDeRjumsgc/jHSERDmHuyoY/qbF7JMhJ9Lh9QQHUg8QfEYsC1y

qTvgisrZeHtvmrmecvSxZm27b4Bj5XYN0VYcrwqKnH7X/tVhmwqGls7/YZyahNU1

lGB2OjoCq5eJxX+Ybx0CAwEAAaOCA00wggNJMAsGA1UdDwQEAwIFoDBEBgkqhkiG

9w0BCQ8ENzA1MA4GCCqGSIb3DQMCAgIAgDAOBggqhkiG9w0DBAICAIAwBwYFKw4D

140

Configuring HP Integrity Superdome 2 compute enclosures and enclosure devices