User Management CAS Generic Configuration, 287 | Fujitsu IRMC S2/S3

User Management

CAS Generic Configuration

The CAS Generic Configuration group allows you to configure CAS access data.

Figure 171: CAS Generic Configuration

CAS Enabled

Enables SSO using the CAS service that you specify in the CAS Generic Configuration group.

Enable SSL/HTTPS

All communication between the CAS service and the iRMC S2/S3 is SSL encrypted.

Verify SSL Certifikate

The SSL Certificate of the CAS service is checked against the CA Certificate.

iRMC S2/S3

287

Image 287

Fujitsu IRMC S2/S3 manual User Management CAS Generic Configuration, 287

Contents

Edition July User Guide English Certified documentation according to DIN EN ISO Comments… Suggestions… Corrections…Copyright and Trademarks Contents Configuring and using the serial interface IRMC S2/S3 Contents Menus of the AVR window Structure of the user interface System Event Log and Internal Event Log Remote Storage 354 Appendix Ipmi OEM Commands supported by the iRMC S2/S3 Preface Other information ServicePurpose and target groups of the manual Purpose and target groups of the manual Standard functions of the iRMC S2/S3 Power managementFunctions of the iRMC S2/S3 overview Functions of the iRMC S2/S3 Functions of the iRMC S2/S3 LAN DNS / Dhcp Extended functionality of the iRMC S2/S3 CD ROM DVD ROM IRMC S2/S3 web interface web interface Communication interfaces of the iRMC S2/S3Communication interfaces of the iRMC S2/S3 IRMC S2/S3 provides the following communication interfaces Communication protocols used by the iRMC S2/S3 Communication protocols used by the iRMC S2/S3 Objective Ipmi technical backgroundIpmi technical background Intelligent Platform Management Ipmi and other management standards Ipmi technical background AdvantagePage Ipmi technical background Ipmi technical background IPMI-over-LAN BMC and LAN controller Serial Over LAN interface SOL BMC and SOL Channel concept under Ipmi References Dcmi Data Center Management InterfaceData Center Management Interface Dcmi User identifications Changes compared with the previous version Changes since the previous versions of the manual Power Consumption Options iRMC S3 only Changes compared with the previous version ServerView Suite link collection Access to the link collection Documentation for the ServerView Suite Documentation for ServerView Suite VWarning Notational conventionsNotational conventions Notational conventions Your network RequirementsOn the remote workstation Default Dhcp name of the iRMC S2/S3 IRMC S2/S3 factory defaultsIRMC S2/S3 factory defaults Default administrator ID Logging into the iRMC S2/S3 web interface Logging into the iRMC S2/S3 web interfacePage Following tools are available for configuring the iRMC S2/S3 Configuring the LAN interface of the iRMC S2/S3 Connected to the correct LAN port? Configuring the LAN interface of the iRMC S2/S3Prerequisites Access from a different subnet Configuring the LAN interface Configuration tools Configuring the LAN interface of the iRMC S2/S3 Set the value to Enabled Configure the following settings IRMC LAN Parameters Configuration Menu IRMC S2/S3 You can test the LAN interface as follows Testing the LAN interfaceTest the connection to the iRMC S2/S3 with a ping command Configuring text console redirection via LAN Accept the first value pair proposed Configuring text console redirection for the iRMC S2Settings in the Peripheral Configuration menu Call the Peripheral Configuration menu Specify the baud rate Set the value to Serial Set the value to On-board COM a Console redirection is terminated after the Bios Post phase Exiting the Bios / TrustedCore setup utility Set the value to iRMCS3 Configuring text console redirection for the iRMC S3Make the following settings Save your settings and exit the Uefi setup utility Make the following settings in the Console Redirection menuExiting the Uefi setup utility Windows Server 2003 DOS Add the following line to the end of the file /etc/inittab Configuring text console redirection via LAN LinuxSettings required Settings may differ between program versions Configuring and using the serial interface of the iRMC S2/S3 Configuring the serial interface of the iRMC S2 Data bits Parity None Stop bits Flow Control Configuring the serial interface using of the iRMC S3 Serial Port Set the value to Using the Remote Manager Serial interfacePrerequisites On the managed server Configuring DHCP/DNS Dynamic DNS Configuring the LAN parametersConfiguring the LAN settings Configuring ports and network services Configuring email notification email alerting Configuring alertingConfiguring text console redirection Configuring alert forwarding over Snmp User management for the iRMC S2/S3 Concept User management concept for the iRMC S2/S3 Concept User permissions User permissions Remote Storage Enabled Configure User AccountsConfigure iRMC S2/S3 Settings Video Redirection Enabled Local user management for the iRMC S2/S3 Local user management using the iRMC S2/S3 web interfaceShowing the list of configured users Local user management for the iRMC S2/S3 Prerequisite Local user management via the Server Configuration ManagerModifying the configuration of a user Deleting users Public key authentication SSHv2 public key authentication for iRMC S2/S3 users Creating the public and private SSHv2 keys with PuTTYgen Bild 21 PuTTYgen Creating a new key pair progress bar Proceed as follows Local user management for the iRMC S2/S3 IRMC S2/S3 Click Upload to load the public key onto the iRMC S2/S3 Bild 25 PuTTY Selecting and loading an SSH session Bild 26 PuTTY Loading an SSH session IPlease note Local user management for the iRMC S2/S3 User Public SSHv2 key in OpenSSH format Example Public SSHv2 keyPublic SSHv2 key in RFC4716 format Advanced Video Redirection AVR Resolution Refresh rates Maximum Color depth Bits Requirements Check the AVR settingsGraphics mode settings on the managed server Keyboard settings Prerequisites Supported text mode Using AVR Using AVR Parallel AVR sessions Using a low bandwidth Local Monitor Off function Local monitor is on, but can be switched offLocal monitor is off, but can be switched on Left Ctrl key corresponds to the Ctrl key on your keyboard Redirecting the keyboardSpecial key combinations Integrated special keys Virtual keyboard Caps lock corresponds to the Caps Lock key on your keyboard Synchronizing the mouse pointer Using AVR Secure KeyboardRedirecting the mouse Using AVR Proceed as follows Open a DOS prompt window Set the Pointer Speed to a medium value Proceed as follows to adjust the mouse pointer ChooseClick the OK button to save the settings This opens the following window Properties ... Troubleshooting Hardware acceleration KDE Mouse Control Center window IRMC S2/S3 You make permanent settings as follows for KDE Set the following values in the Mouse Control Center window 101 Menus of the AVR windowMenus of the AVR window Refreshes the display of the local monitor state Extras menuYou can select the following functions in the Extras menu Virtual Keyboard window opens see on 103 Refreshes the AVR window Terminate your own AVR session 104 Terminate another AVR sessionList of current AVR sessions appears 105 Remote Storage menu Switches the server on Power Control menu 107 Languages menu Preferences menu Default setting Absolute Mode 108 109 Default No lower bandwidthBpp color depth 8 colors Bpp color depth 256 colorsPage 111 Remote Storage IRMC S2/S3 113 Providing remote storage at the remote workstationProviding remote storage at the remote workstation This opens the AVR window Menu bar in the AVR window, choose Starting Remote Storage Storage Devices dialog box 115 Storage Devices dialog box 117 Provision of storage media for emote Storage Add Storage Device dialog Selecting the storage medium 118 119 120 121 Connecting storage media as remote storage 122 123 Connection Type dialog Assignment to USB 1.1 and USB 125 Clearing Remote Storage connectionsClick Disconnect to clear all Remote Storage connections Storage Devices dialog Removing a Remote Storage medium Removing the storage medium Remote Storage server is available for Windows systems Booting from WinPE 2.x-based ISO imagesProviding remote storage via a Remote Storage server Providing remote storage via a Remote Storage server Installing the Remote Storage server 129 Executing the Remote Storage server as a serviceRemote Storage server execution modes 130 Configuring, starting and exiting the Remote Storage serverCalling the Remote Storage server’s raphical user interface 131 Click the Apply button to activate your settings 132 133 Exiting the Remote Storage server 134 135 IRMC S2/S3 web interface Logging into the iRMC S2/S3 web interface 137 User configuration details on 138 Required user permissionsRequired user permissions Set firmware selector 139 140 Open/edit the Email Alerting Open/edit the iRMC S2/S3 User 141 142 143 Structure of the user interfaceStructure of the user interface IRMC S2/S3 web interface is structured as follows 144 Navigation area 145 146 System Information Information on the server 147 System Overview General information on the server 148 Informs about the server‘s Global Error LEDInforms about the server’s CSS Customer Self Service LED System Information Information on the server System Status 149 Asset Tag Configuration Operating System Information System Information lists information on the managed server 151 Current Overall Power ConsumptionThis option is not supported for all Primergy servers 152 153 System CPU Information 154 Cancels your selectionSelects all memory modules Applies the selected action to the selected memory modules 155 Bios Backing up/restore Bios settings, flashing BiosBios Backing up/restore Bios settings, flashing Bios Bios entry contains the links to the following pages Edit Filename 157 Request Bios Parameter Backup Apply 159 Bios Updating Bios via upload from file or via Updating Bios Tftp download successfully finished 161 Bios Information Bios Update Settings page Bios Update from File File in which the Bios image is stored 163 Vcaution 164 IRMC S2/S3 Information, firmware and certificatesIRMC S2/S3 Information, firmware and certificates IRMC S2/S3 entry contains the links to the following pages 165 IRMC S2/S3 Information Information on the iRMC S2/S3 166 Active Session Information 167 You can purchase the license keyMiscellaneous iRMC S2/S3 Options Temperature Units 169 Save iRMC S2/S3 Firmware Settings Save firmware settingsAlways save the setting using Click Save All to save all the settings 170 Save iRMC S2/S3 firmware settingsClick Save to save the selected settings 171 IRMC S2/S3 Information, firmware and certificates Certificate Upload IRMC S2/S3 173 174 175 Loading a CA certificate from a local file 177 You do this using the group Entering the DSA/RSA certificate/private Dsarsa key directly Generate a self-signed RSA Certificate IRMC S2/S3 179 Certificate Creation No explicit reset of the iRMC S2/S3 is required 180 181 IRMC S2/S3 Firmware Update High firmware image is selected Most recently updated firmware image is selectedLeast recently updated firmware image is selected Low firmware image is selected 183 Inactive firmware is automatically selectedLow firmware image firmware image 1 is selected High firmware image firmware image 2 is selected IRMC S2/S3 Tftp Settings Updates the runtime firmwareUpdates the SDR record 185 186 Power ManagementPower Management 187 Power On/Off power the server up/downPower Status Summary Power Management Boot Options Power Management Boot Options 189 Power On/Off page, Restart server is powered up Graceful Power Off Shutdown 191 Power Options Configuring power management for the server Server is always powered up again after a power outage Server always remains powered down after a power outage 193 Power Options page, Power On/Off Time IRMC S2/S3 194 Power Management Watt Technology Please note 195 ASR&R Defines the beginning hhmm of the time interval 196 Power Options page, 0 Watt Technology Administration window 197 198 Power Supply Info 199 Power ConsumptionPower Consumption Power Consumption Configuration Power Limit Options group is also displayed see 200 201 Power Consumption Power Consumption OptionsUnit of electrical power used to display power consumption Scheduled Power Consumption Configuration 203 Power Consumption Configuration page scheduled Maximum power consumption in Watts 204 Power Limit Options 205 Shut down the system gracefully and power it downNo action is performed 206 Current Power Consumption Show the current power consumption 207 Power Consumption History Show server power consumption Power History Options Power Consumption Current Power Consumption 209 210 Power History Chart Risk of loss of data integrity Sensors Check status of the sensorsSensors Check status of the sensors Value range 212 Fans Check fansFans page provides information on fans and their status 213 Sensors Check status of the sensors Fan Test Test fansSelects all fans Sensors Check status of the sensors 215 Temperature Report the temperature of the server components Selects all temperature sensors 217 Voltages Report voltage sensor information 218 Power Supply Check power supply 219 This functionality is not available with all servers 220 Component Status Check status of the server components Status display for individual HDDs IRMC S2/S3 221 Sensors Check status of the sensors 223 System Event Log and Internal Event LogSystem Event Log and Internal Event Log 224 System Event Log Content 225 System Event Log Content page, System Event Log Information Show Resolutions 227 InternalEvent Log Content IRMC S2/S3 Clear Internal Event Log 229 230 Event Log Configuration 231 Event log is organized as a ring buffer Helpdesk Information Helpdesk Information Server Management Information IRMC S2/S3 233 Retry counter 0 Max Enables/disables the Bios recovery flash bit Server Management Information page, Watchdog Options 235 Server management software triggers a system reset Server Management Information HP SIM Integration Options 237 238 Network Settings Configure the LAN parametersNetwork Settings Configure the LAN parameters Network Interface IRMC S2/S3 239 MAC address of the iRMC S2/S3 is displayed here Network Interface Settings 241 IPv4 configurationIPv4 address of the default gateway in the LAN Subnet mask of the iRMC S2/S3 in the LAN This option is disabled by default IPv6 configuration Vlan Configuration Max TCP Segment Lifetime 245 Ports and Network Services 246 Session Timeout 247 Ports for text-based access Remote Storage Ports Network Settings Configure the LAN parameters VNC portsClick Apply to store the configured settings 248 249 DNS Configuration Configuring DNS for the iRMC S2/S3 Number of DNS retries Network Settings Configure the LAN parameters DNS SettingsEnables/disables DNS for the iRMC S2/S3 251 Network Settings Configure the LAN parameters DNS NameEnables/disables update of DNS records via Dynamic DNS Name extension for the iRMC S2/S3 253 Alerting Configure alertingAlerting Configure alerting Snmp Trap Alerting Snmp Trap Alerting Configure Snmp trap alerting 255 Serial / Modem Alerting Configure alerting via modemEnables or disables serial / modem alerting This entry will depend on the type of connection you have You can choose between 80 or 140 as the maximum length Enter the name of the SMS serverEnter the name of the mobile phone DoCoMo 257 Email Alerting Configure email alerting Time in seconds between Smtp retries Activate this optionNumber of Smtp retries Smtp port of the mail server No authentication for the connectionUser name for authentication on the mail server Password for authentication on the mail server Email Alerting page Secondary Smtp Server Configuration 261 Some entry fields are disabled depending on the mail format Admin Name 263 User ManagementIRMC S2/S3 User local user management on the iRMC S2/S3 User Management Delete 265 You can see the configuration of a user with the name User3 266 User Management User name Configuration Enter a general description of the configured user here Disable this option to lock the userEnter the user password Confirm the password by entering it again here Permission to use the Remote Storage functionality 268 Permission to configure local user access dataAssign a privilege group for a LAN channel to the user here 269 User SSHv2 public key upload from file 270 Following email formats are available 271 Errors sending email are recorded in the event logEmail address of recipient Notification function is deactivated for this paging group 273 Ldap Enabled 275 IRMC S2/S3 Ldap directory server that is to be used IP address or DSN name of the Backup Ldap serverLdap port of the Backup Ldap server Secure Ldap port of the Backup Ldap server User name the iRMC S2/S3 uses to log onto the Ldap server Complete DNS path name of the directory serverBase DN is automatically derived from Domain Name 279 Enables global email alerting IRMC S2/S3 281 User Search Context 283 Repeat the password you entered under Ldap Auth Password 284 Enhanced User Login 285 286 Centralized Authentication Service CAS Configuration 287 User Management CAS Generic Configuration Always Display Login Logout URL of the CAS service Port of the CAS service Default port numberDNS name of the CAS service Login URL of the CAS service Assign a privilege group to the user here Permission to configure local user access data 290CAS User Privilege and Permissions 291 292 Console Redirection Redirecting the consoleConsole Redirection Redirecting the console Following pages are available for console redirection 293 Console Redirection Mode Flow control is handled by the hardware Following settings are possibleFlow control is disabled Flow control is handled by the software Start text console redirection via Serial over LAN SOL 295 296 Power management and text console redirection Login window 297 Console Redirection Redirecting the console 299 To close the connection to the console, click Leave Console Windows Server 2003 SAC console 301 Console Redirection Redirecting the console Advanced Video Redirection IRMC S2/S3 303 Takes a new video screenshot View Screenshot 305 This function is not supported for all Primergy servers 306 No USB port will be disabled 307 Parallel AVR sessions 308 You start AVR under Video Redirection 309 AVR window full-control mode AVR window with two active AVR sessions 311 AVR window when the server is powered down IRMC S2/S3 Remote Storage Remote Storage 313 Remote Storage Connection Status Remote Storage Server 315 Operating iRMC S2/S3 via Telnet / SSH Remote ManagerOperating iRMC S2/S3 via Telnet / SSH Remote Manager Requirements on the managed server Establishing an SSH connection to the iRMC S2/S3 316 SSH connection Logging in to the Remote Manager 317 Telnet connection Logging in to the Remote Manager Remote Manager login window is displayed 319 Closing a Telnet / SSH connection 320 321 IRMC S2/S3 via Telnet/SSH Remote Manager Requirements on the managed server 323 Operating Remote ManagerOperating Remote Manager Enclosure Information Overview of menusOverview of menus System Information 325 Service Processor 326 LoggingLogging Remote Manager Main menu window without system information 327 Main menu of the Remote Manager Main menu of the Remote Manager Start a command line shell Configure the iRMC S2/S3iRMCS2/S3 e.g. update firmware or Change the password 330 331 System Information Information on the managed server Change the passwordChange the password 333 System Information Information on the managed serverSets a customer-specific asset tag for the managed server Agents are installed and signed onto Powers the server down completely and thenPowers it up again after a configured period Graceful shutdown and power off Remote Manager Enclosure Information menu IRMC S2/S3 335 Primergy diagnostic LED Display information on the temperature sensorsDisplay information on the power supplies and their Housing are open Enclosure Information System Eventlog Enclosure Information Internal Eventlog Clear the contents of the internal event log Switch the Primergy identification LED on/off Configure the IPv4 / IPv6 address settingsFor details in the individual settings Display the IP settings Console Redirection EMS/SAC Start text console redirection Start a Command Line shell... Start a Smash CLP shell For a more detailed description, see Show the console log in fast modeContinuous mode Show and change the logging run state Console Logging Console Logging Run State Menu 343 Command Line Protocol CLPCommand Line Protocol CLP Smash CLP syntax Command Line Protocol CLP 345 Command Line Protocol CLP User data in the CLP overviewHierarchy of the CLP commands An overview of the CLP command hierarchy is shown in on 346 347 Requirements 348 Configuring via Server Configuration Manager 349 Applying settings Operations Manager Start window 350 351 Configuring via Server Configuration Manager 353 Firmware update Active and passive firmware image IRMC S2/S3 firmware overviewIRMC S2/S3 firmware overview Structure of the iRMC S2/S3 Eeprom 355 IRMC S2/S3 firmware overview Firmware selector Connect the USB memory stick to your computer Setting up the USB memory stickSetting up the USB memory stick Proceed as follows Setting up the USB memory stick 359 Downgrading the firmware to the previous version Update via the iRMC S2/S3 web interfaceUpdating firmware images Updating firmware images 361 Update using the ServerView Update Manager When downgrading the firmware, please note Online update using ServerView Update Manager Express or ASP 363 Update using the operating system flash tools Updating firmware images Proceed as follows 365 Update via the lashDisk menuFirmware downgrade is only possible via recovery flash An iRMC S2/S3 warm start is performed Readme file is opened 367 Emergency flashEmergency flash Options Flash toolsFlash tools Syntax Flashing operation Updates the bootloader firmwareEmulation mode for debugging purposes only Update the inactive firmware Flash tools Return values 371 Remote installation of the operating system via iRMC S2/S3 General procedure 373 Remote Storage connections Connecting a storage medium as remote storage 375 Storage Devices dialog box ServerView Suite DVD 377 Booting from DVD Choose Standard mode as the Installation Manager mode 379 Booting from DVD Starting local deployment 380 Installing the operating system 381 382 383 Installing Linux on the managed server after configuration Installing the operating system Overview Ipmi OEM Commands supported by the iRMC S2/S3SCCI-compliant communication commands SCCI-compliant signaling commands IRMC S2/S3-specific commands BIOS-specific commandF109 Get Bios Post State F115 Get CPU Info 387 Description of the Ipmi OEM commandsIpmi OEM Commands supported by the iRMC S2/S3 Description format 388 Power on Description Source 389 390 391 Time LSB first 393 02 06 System OS Shutdown Request and Reset02 05 System OS Shutdown Request 394 This command checks whether the agent is active02 09 Shutdown Request Cancelled Attribute 395 396 397 This command returns the current firmware selector setting 398 399 400 BIOS-specific commands F1 09 Get Bios Post StateThis command provides information whether Bios is in Post 401 Bit Watchdog active Agent connected Post State 402 Bit System on Notifications Ipmi OEM Commands supported by the iRMC S2/S3 Signaling EEPROM# 00=EEPROM 1 01=EEPROM 404 CSS and Physical LED available 405 406 This command translates a given SEL entry into long text 407 408 F5 B1 Get Identify LED 409 State of Error LED 410 F5 E0 Reset ConfigSpace variables to default 411 Overview IRMC S2/S3 configuration data 413 Cmdseq 415 Integer value 416 Transferring a password as clear readable textTransferring an encrypted password Transferring the string Hello World 417 Transferring the IPv4 address IRMC S2/S3 419 420 Scripted configuration of the iRMC S2/S3List of Scci commands supported by the iRMC S2/S3 421 422 USERNAME, Password 423 IRMCPWD standard command line options Generating encrypted passwords with iRMCPWD.exe 425 IRMCPWD command line output optionsDefault in Batch mode iRMCpwd.pre Creates the output file as a WinSCU Batch file Output File 426 Contents of the generated .pre file