Server Sentinel Client Workstation

Transcription

1 Server Sentinel Client Workstation Installation and Reinstallation Guide Server Sentinel and Higher April 2008

2 .

3 unisys imagine it. done. Server Sentinel Client Workstation Installation and Reinstallation Guide Server Sentinel and Higher April

4 NO WARRANTIES OF ANY NATURE ARE EXTENDED BY THIS DOCUMENT. Any product or related information described herein is only furnished pursuant and subject to the terms and conditions of a duly executed agreement to purchase or lease equipment or to license software. The only warranties made by Unisys, if any, with respect to the products described in this document are set forth in such agreement. Unisys cannot accept any financial or other responsibility that may be the result of your use of the information in this document or software material, including direct, special, or consequential damages. You should be very careful to ensure that the use of this information and/or software material complies with the laws, rules, and regulations of the jurisdictions with respect to which it is used. The information contained herein is subject to change without notice. Revisions may be issued to advise of such changes and/or additions. Notice to U.S. Government End Users: This is commercial computer software or hardware documentation developed at private expense. Use, reproduction, or disclosure by the Government is subject to the terms of Unisys standard commercial license for the products, and where applicable, the restricted/limited rights provisions of the contract data rights clauses. Unisys is a registered trademark of Unisys Corporation in the United States and other countries. AppManager is a registered trademark of NetIQ Corporation or its subsidiaries in the United States and other jurisdictions. Knowledge Scripts is a registered trademark of NetIQ Corporation or its subsidiaries in the United States and other jurisdictions. All other brands and products referenced in this document are acknowledged to be the trademarks or registered trademarks of their respective holders.

5 Contents Section 1. Introduction Network Configuration Documentation Updates Section 2. Requirements Hardware and Software Requirements Media Requirements Environment Information Requirements Additional Considerations Section 3. Installation and Reinstallation Setting Internet Explorer Security Options Satisfying Firewall Configuration Requirements Installing the Server Sentinel Software Modifying the Client Workstation Hosts File Configuring for AppManager Software Defining a User Account for the AppManager Operator Console Viewing Product Documentation Installing Virus Protection Software Obtaining Updates Internet Access Requirements Obtaining Updates Using EZupdate Obtaining Updates Using the Unisys Product Support Web Site Section 4. Operations Accessing Server Sentinel Appendix A. Firewall Considerations Firewall Requirements A 1 Firewall Requirements for Client Workstations A iii

6 Contents Appendix B. Windows Firewall Batch Files for Server Sentinel Downloading Server Sentinel Batch Files for Windows Operating Systems B 1 iv

7 Section 1 Introduction This guide explains how to configure one or more client workstations in your environment. A client workstation runs Server Sentinel software and enables remote management. A client workstation can be located on your public LAN or operations LAN. On a properly sized and configured network, a client workstation provides remote management capabilities through Server Sentinel from anywhere in your public network. If you attempt to access the Server Sentinel user interface from a workstation that has not had the client workstation software configured on it, you might be prompted to download components of the Server Sentinel software. Note that you may be prompted to download software components multiple times because not all of the required client workstation software is downloaded at one time. If your workstation does not meet the requirements of the Server Sentinel client workstation software, you cannot view the pages that you requested. Therefore, it is recommended that you follow the procedures in this guide rather than download software components on an as-needed basis. If you previously installed the Server Sentinel client workstation software in your environment, you can upgrade your client workstations by performing the installation procedures in this guide. Network Configuration The following illustration shows a client workstation on a public LAN. Note: Depending on your enterprise server model, some of the components shown in this figure might be optional

8 Introduction Documentation Updates This document contains all the information that was available at the time of publication. Changes identified after release of this document are included in problem list entry (PLE) To obtain a copy of the PLE, contact your Unisys representative or access the current PLE from the Unisys Product Support Web site: Note: If you are not logged into the Product Support site. you will be asked to do so

9 Section 2 Requirements Ensure that the requirements described in this section are met before installing or reinstalling the Server Sentinel client workstation software. Hardware and Software Requirements The following are the hardware and software requirements for client workstations. Hardware Requirements All client workstations require the following minimum hardware configuration: Pentium II or Pentium III processor with at least 128 megabytes (MB) of memory Super VGA color monitor with a display area of at least 1024 x 768 pixels; a display area of 1280 x 1024 is recommended Fast Ethernet network interface card (NIC) Connection to the network through a network segment that can access server and partition operating systems, Service Processors, and optional management servers Software Requirements All client workstations require the following software configuration: One of the following Windows operating systems: Note: The latest supported Service Packs for each operating system are listed. - Windows Server 2003 R2, Standard Edition, with Service Pack 2 - Windows Server 2003 R2, Enterprise Edition, with Service Pack 2 - Windows XP Professional, with Service Pack 2 - Windows Vista Log on by a user with valid administrator group privileges on the system Internet Explorer 6.0 and higher A unique Windows computer name

10 Requirements Media Requirements The following media is required to install a Server Sentinel client workstation: Server Sentinel CD-ROM One of the following product documentation CD-ROMs, depending on your enterprise server: - Enterprise Server Getting Started CD-ROM - Enterprise Server Product Documentation CD-ROM Environment Information Requirements The following table lists the required information needed to install a client workstation. This information should be recorded in your System Planning Guide. Information Required Name and organization Computer name Administrator password for administrator account SQL sa password Name of the management server where the AppManager program repository exists User account for AppManager operations Comments Identity of the person associated with the client workstation. Preferred Windows network name for the client workstation. (Each client workstation must have a different name.) Password preferred instead of the default blank password. Needed to complete the AppManager installation, if AppManager software is installed in your environment. Needed to access the AppManager program repository, if AppManager software is installed in your environment. Name of a user account that belongs to the Administrator, Sentinel Operator, or Sentinel Observer group on the management server

11 Requirements Additional Considerations The following additional considerations apply to installation: If you intend to access Console Manager by name (rather than by IP address), the name must be statically defined in an external Windows Internet Name Service (WINS) or domain name system (DNS) server, or your DHCP server (if you are using dynamic IP addressing) must be configured to dynamically register DNS names for DHCP clients that do not support dynamic DNS. Console Manager does not perform name registration. You might want to define automated methods, such as desktop shortcuts or custom Microsoft Management Console (MMC) files, for accessing management facilities from this or another server

12 Requirements

13 Section 3 Installation and Reinstallation Perform the procedures in this section to install or reinstall the Server Sentinel client workstation software. Setting Internet Explorer Security Options Note: Internet Explorer settings only affect the current user account. If you log in as a different user, you must repeat these configuration steps. Use these steps to set and verify the proper Microsoft Internet Explorer settings: 1. Launch Internet Explorer. For Windows Server 2008, you must be logged in to a user account in the Administrators group. If this account is not the built-in Administrator account, then launch Internet Explorer by right-clicking the Internet Explorer shortcut icon and clicking Run As Administrator. 2. Click Internet Options on the Tools menu. The Internet Options dialog box appears. 3. Select the Security tab. 4. Select the Trusted sites icon. 5. Click Sites. The Trusted sites dialog box appears. 6. Make sure the Require server verification ( for all sites in this zone check box is not selected. 7. Add a URL for each Service Processor, management server, and Windows server and partition. If a Service Processor, management server, or Windows server or partition is in a different Domain Name System (DNS) domain than the computer on which you are performing this procedure, use fully qualified host names instead of the URL for that component. a. In the Add this Web site to the zone box, enter one URL, for example, b. Click Enter or Add. c. Repeat steps a and b until you have added each URL. Note: If you are running Internet Explorer on a management server or Service Processor, repeat steps a and b to add the URL

14 Installation and Reinstallation 8. Add an IP address for any components that use fixed IP addresses rather than DHCP addresses. These components might include the Service Processor, management server, partition, and Console Manager (if applicable). a. In the Add this Web site to the zone box, enter one IP address, for example, b. Click Enter or Add. c. Repeat steps a and b until you have added each IP address. 9. Click Close or OK to close the dialog box. 10. Click Custom Level under Security level for this zone. The Security Settings dialog box appears. 11. In the Settings list, ensure that the following settings are selected. Note: Not all of these settings are available in every Internet Explorer and Windows operating system combination. If you do not see a setting in your environment, simply disregard that setting. Category Option Setting ActiveX controls and plug-ins Allow previously unused ActiveX controls to run without prompt Automatic prompting for ActiveX controls Binary and script behaviors Download signed ActiveX controls Download unsigned ActiveX controls Initialize and script ActiveX controls not marked as safe Run ActiveX controls and plug-ins Script ActiveX controls marked safe for scripting Enable Enable Enable Enable Enable or Prompt Enable Enable Enable Miscellaneous Access data sources across domains Enable Navigate sub-frames across different domains Submit nonencrypted form data Enable Enable or Prompt Scripting Active scripting Enable or Prompt Note: If the computer accessing the management software is not in the same intranet zone as the management server or Service Processor being accessed, select Automatic Logon with current username and password under User Authentication to avoid being prompted for credentials. 12. Click OK. If you receive a warning message, click Yes

15 Installation and Reinstallation 13. Do the following to allow active content to run: Notes: After you install the software, return these security settings to their previous values. Not all security settings are available in every Internet Explorer and Windows operating system combination. If you do not see a setting in your environment, simply disregard the instruction to change it. a. Select the Advanced tab in the Internet Options dialog box. b. Scroll down and select the following two check boxes under Security: Allow active content from CDs to run on My Computer Allow active content to run in files on My Computer 14. If you are configuring a client workstation, and your client workstation and management server are part of the same Internet Explorer security zone, skip to the next step. Otherwise, do the following: Note: After you install the software, return these settings to their previous values. a. Select the Internet icon on the Security tab. b. Click Custom Level under Security levels for this zone. The Security Settings dialog box appears. c. In the Settings list, ensure that the following settings are selected: Category Option Setting ActiveX controls and plug-ins Allow previously unused ActiveX controls to run without prompt Initialize and script ActiveX controls not marked as safe Enable Prompt d. Click OK. If you receive a warning message, click Yes. 15. Click OK in the Internet Options dialog box. 16. Close Internet Explorer. Note: Pop-up blockers prevent this software from operating properly. To avoid this problem, allow pop-ups from the management server, Service Processor, and client workstation. For information on allowing pop-ups, refer to the documentation for Internet Explorer or for your third-party software. Satisfying Firewall Configuration Requirements If you do not plan to use a hardware or a software firewall to protect your connection to the Internet, skip this subsection

16 Installation and Reinstallation If you are using the software firewall provided by Windows known as the Windows Firewall you should verify that it is enabled now. The Windows Firewall is available with Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, and later operating systems. During the software installation, the Windows Firewall is automatically configured. If you are using any other hardware or software firewall to protect your system connection to the Internet, refer to Appendix A for prerequisites. Installing the Server Sentinel Software Note: Do not install the Server Sentinel software on domain controllers; the software is not qualified for such installation. Prerequisites Prior to installing the Server Sentinel software using Installation Assistant, ensure that the following prerequisites have been met: Internet Explorer security options have been configured. You are logged on to Windows under a user account that has administrator privileges. All clustered Microsoft SQL Server instances are offline. Clustered SQL Server instances interfere with the installation of the SQL Server 2000 Desktop Engine (MSDE). Installation Procedure To access the Installation Assistant interface, either double-click the Sentinel Install Assistant icon if it is available on the desktop or insert the Server Sentinel CD-ROM into the CD/DVD drive. Note: If the autorun option is not set for your CD/DVD, use Windows Explorer to navigate to the CD/DVD drive and double-click the setup.exe file. Install the Server Sentinel software using the following procedure. Note: During the installation process, Installation Assistant attempts to enable the Windows Firewall if it is not already enabled. If Installation Assistant cannot enable the Windows Firewall, you are prompted to enable it. You can either follow the on-screen instructions to enable the Windows Firewall, or you can click OK to continue with the software installation. 1. Ensure that system software requirements for the software that you want to install have been met. System functions that have requirements yet to be satisfied are listed in the right pane and marked with a red triangle. Refer to the Installation help in the left pane of the interface for assistance. 2. Under Select Software to Install, select the appropriate check boxes to specify which Server Sentinel software components to install. You can select more than one of the listed components as appropriate for your environment

17 Installation and Reinstallation Note: Some system functions are automatically detected and selected for installation. 3. If any requirements have not been met, a dialog box appears. Click the red triangles in the right pane and then install the appropriate software. Refer to the Installation help for assistance. 4. If you are prompted to reboot, click Yes. After the reboot is complete, access the Installation Assistant interface. 5. Install the Server Sentinel software by clicking one of the following: Recommended Installation The recommended installation procedure automatically installs all appropriate Server Sentinel software using default settings. Refer to the Installation help in the left pane for additional information. Custom Installation If you need to install a subset of the Server Sentinel software or redistributable software manually, such as when reinstalling software, use the custom installation procedure. The custom installation screen enables you to select specific software components to install as well as define a minimal or interactive installation. Refer to the Installation help in the left pane for additional information. Note: If you click Custom Installation, the Installation Assistant does not warn you if installation requirements for the software you are installing have not been met. Ensure that all requirements have been met before clicking Custom Installation. A dialog box that states installation was successful appears. 6. Click OK. 7. Click Finished to close the Installation Assistant interface. 8. If you are prompted to reboot, click Yes. If a reboot does not occur after installation is complete, reboot the system. Modifying the Client Workstation Hosts File Note: Perform the following procedure only if your system operations or maintenance LAN does not use DNS. To modify the client workstation hosts file if you are using static IP addressing, do the following: 1. On the Start menu, click Run. The Run dialog box appears. 2. Type the following: notepad %systemroot%\system32\drivers\etc\hosts 3. Click OK. The hosts file opens

18 Installation and Reinstallation 4. Modify or add information for each management server, Service Processor, and server and partition in your environment by entering the static address and host name; for example: partition0 Note: If you intend to change a host name or IP address later, use the new host name or IP address when modifying the hosts file. 5. Save the hosts file and close Notepad. Configuring for AppManager Software Perform the actions in the following subsection only if your environment includes a Sentinel Management Server running AppManager software. Defining a User Account for the AppManager Operator Console The AppManager program helps reduce the support costs of managing distributed clients and server networks by providing increased network efficiency. Using Knowledge Scripts, you can automate the monitoring and management capabilities of a server. The AppManager Operator Console is the user interface that enables you to configure and control the execution of Knowledge Scripts on the systems and applications that you manage. Using the Computer Management utility, define a user account for running the AppManager Operator Console. This user account must meet the following criteria: On the client workstation, the user account must belong to the Power Users group or the Administrator group. If the user account is a domain account, the user account must also belong to the Administrator, Sentinel Operator, or Sentinel Observer group on the management server. If the user account is a local account, it must have the same name and password as a local account on the management server that belongs to the Administrator, Sentinel Operator, or Sentinel Observer group on that management server. Viewing Product Documentation Server Sentinel product documentation and the tools that are required to view it are installed automatically when you install the Server Sentinel software using the recommended procedure. To access this documentation from your client workstation, click Start, point to Programs, and then to Unisys CD-ROM Library, and then click CD-ROM Library. The Server Sentinel documentation will display automatically in the CDLib Manager

19 Installation and Reinstallation To access the documentation for your enterprise server from the desktop of your client workstation, insert the CD-ROM that contains the product documentation (depending on your enterprise server, either the Getting Started CD-ROM or Product Documentation CD-ROM) into the CD/DVD drive. From the CDLib Manager, click Open from the File menu and then navigate to the.mdb file on the CD-ROM. If you have a Sentinel Management Server configured in your environment and you use your client workstation to access it, you can also view product documentation from within the Server Sentinel interface. To do so, starting from the upper-left of the Server Sentinel interface, click Help, then click Libraries and tours, and then, under Other Resources, click the product documentation library you want to view. Note: You must have installed the enterprise server documentation to the Sentinel Management Server to be able to view it from within the Server Sentinel interface. See the Sentinel Management Server Installation, Reinstallation, and Upgrade Guide for more information on how to perform this procedure. Installing Virus Protection Software Virus protection software is not provided with the operating system of your system components. You can purchase and install any virus protection software you prefer. Virus protection software and Microsoft required hotfixes must be installed before connecting to the public LAN IP address (DHCP server). Once they are installed, cable your system component to the public LAN. Some virus protection software can interfere with the installation of other software. If you encounter problems with the installation of any software, disable virus protection before you retry the installation. Be sure to enable virus protection again after you complete installation. Obtaining Updates If updates to the Server Sentinel software and platform firmware are available, you can download them by using the Server Sentinel EZupdate feature or by using the Unisys Product Support Web site. Internet Access Requirements Depending on your system, Internet access is required to obtain updates through EZupdate, as summarized in the following table. Server Sentinel Level Management Server, Client Workstation Service Processor Partition 3.x Access required. Access required. Access required

20 Installation and Reinstallation Server Sentinel Level Management Server, Client Workstation Service Processor Partition 4.0 and 4.1 Access required. Not supported; use the Product Support Web site. 4.2 and higher Access required. Access required only if no management server is available. Access required only if no management server is available. Access not required. If you access EZupdate from the Start menu, the system must have Internet access. Obtaining Updates Using EZupdate EZupdate periodically checks the Unisys Product Support Web site for available updates to Server Sentinel and platform firmware and notifies you if updates are available. You can access EZupdate from the Server Sentinel user interface on all systems as outlined in the preceding table. This is the preferred method. Alternatively, to access EZupdate from Service Processors, client workstations, or management servers, click the Start menu, point to Programs and then Unisys Server Sentinel, and click EZupdate. Internet access is required if you use this method. If updates are available on client workstation desktops, the EZupdate icon is displayed in the system tray, and a balloon message appears periodically until you download the available updates or choose to be reminded at another time. If updates are available on the Server Sentinel user interface, the EZupdate Available icon is prominently displayed. Perform the following steps to download the available updates using the EZupdate feature of Server Sentinel: 1. Perform one of the following steps: Click the following Configuration Summary icon: The Configuration Summary page appears. Select System Tools, and click EZupdate. Click the EZupdate Available icon. Depending on your system, the View Latest Report page or the System Report page appears. 2. Click Task Help in the upper-right corner for more information on downloading and installing the updates. 3. Copy the files to all systems that need software or firmware updates

21 Installation and Reinstallation 4. Be sure to update all partitions when you update the software and platform firmware on Service Processors, client workstations, and management servers. Obtaining Updates Using the Unisys Product Support Web Site If your system does not include access to the Internet, you can download Server Sentinel software and platform firmware updates from the Unisys Product Support Web site by using a workstation that is connected to the Internet. Updates to Server Sentinel software and platform firmware are available in the form of Interim Corrections (ICs) and quick-fix releases (QFRs). ICs and QFRs are replacement modules that contain fixes for your software or platform firmware. Any customer with a maintenance agreement is entitled to use these modules. To access the latest updates and apply them to your system, perform the following steps: 1. If necessary, close all Server Sentinel windows before installing Server Sentinel updates. 2. Access the Unisys Product Support Web site at 3. Sign on to entitled support with your user name and password. If you do not have a user name and password, click Register. The Product Support page appears. 4. Select a system type and click Go. The support page for that system is displayed. 5. Click Releases. The releases for the system are displayed. 6. In the Fixes column, select the relevant release. A list of the latest available updates appears. 7. Select the appropriate update from the list. The Download Interim Correction page appears. 8. Click the link labeled View Profile of IC to get a description of the update and installation instructions. Click Back to return to the Download Interim Correction page. 9. Click the link under File Description to download the update

22 Installation and Reinstallation

23 Section 4 Operations Accessing Server Sentinel You can access Server Sentinel from any computer that can access the Sentinel Management Server (if one is configured in your environment) or from the master Service Processor. To access the Server Sentinel home page, open an Internet Explorer window from a client workstation and enter a URL that identifies the name of the Sentinel Management Server. For example, if the Sentinel Management Server name is usrb , the URL is as follows: If a Sentinel Management Server is not available, a core set of Server Sentinel functionality is offered directly from the Service Processor. To access Server Sentinel on the Service Processor, open an Internet Explorer window from a client workstation and enter a URL that identifies the name of Service Processor. For example, if the master Service Processor name is usrb , the URL is as follows: Note: If you are in a mixed domain/workgroup environment, to access some Server Sentinel functions, you might be required to change the Internet Explorer Security setting for User Authentication for the Local intranet zone to Prompt for user name and password. Other Server Sentinel functions might require that you log on to the client workstation with credentials that are acceptable to the target environment

24 Operations

25 Appendix A Firewall Considerations Use the information in this appendix to configure any hardware or software firewall other than the Windows Firewall. Firewall Requirements To ensure that Server Sentinel functions properly, configure your software or hardware firewall such that traffic is not blocked between system components where Server Sentinel is installed. If you use Windows Firewall, the Installation Assistant automatically configures the firewall. If you install Windows Firewall after installing Server Sentinel, download the Server Sentinel batch files from the Unisys Product Support Web site to update your firewall rules. If you use a firewall from another vendor, ensure that your firewall is configured for Server Sentinel network traffic. If multiple types of Server Sentinel software (for example, Sentinel Management Server software and Server Sentinel client workstation software) are installed on the system, adhere to the firewall requirements for all installed Server Sentinel software. Note that the client workstation is defined as any terminal used to access Server Sentinel remotely. Notes: The firewall requirements are for incoming traffic; most outgoing traffic use dynamic ephemeral ports, and these requirements are not documented. %Program Files% is a path variable to the file location, for example: C\Program Files\. Firewall Requirements for Client Workstations Client Workstations Running Windows XP Professional or Windows Server 2003 For 32-bit systems, allow the following application (this application is not installed on x64 systems): %Program Files%\Unisys\Server Sentinel\ Processor Autonome\GroupManager.exe A 1

26 Firewall Considerations Traffic is bidirectional with the Windows partition or partitions that the application is configuring. Client Workstations Running Windows Vista Windows Vista supports the Windows Firewall with Advanced Security, which allows you to specify separate exceptions for inbound and outbound traffic. For 32-bit systems, allow the following application (this application is not installed on x64 systems): %Program Files%\Unisys\Server Sentinel\ Processor Autonome\GroupManager.exe Traffic is bidirectional with the Windows partition or partitions that the application is configuring. Add outbound exceptions for TCP ports 80, 135, and 443. Add outbound exceptions for the following applications: %Program Files%\NetIQ\AppManager\bin\NetIQctrl.exe %Program Files%\NetIQ\AppManager\bin\Netiq.exe %pf%\unisys\ezupdate\swupdategui.exe %Programfiles%\Internet Explorer\iexplore.EXE %systemroot%\system32\mmc.exe out A

27 Appendix B Windows Firewall Batch Files for Server Sentinel Perform the following optional procedure only if you enable the Windows Firewall after Server Sentinel installation. Downloading Server Sentinel Batch Files for Windows Operating Systems If you install Server Sentinel and later upgrade to an operating system that uses the Windows Firewall, or if you enable the Windows Firewall after Server Sentinel software installation, you must complete the following procedure and download the Server Sentinel batch files. (The Windows Firewall was first supported with Windows XP Professional with Service Pack 2 and Windows Server 2003 with Service Pack 1.) The batch files automatically update the required registry and Windows Firewall settings. If you do not ever plan to use the Windows Firewall, you do not need to download the batch files. You can download the required batch files and a readme file containing the batch file installation instructions from the Unisys Product Support Web site by performing the following steps: 1. Access the Unisys Product Support Web site at 2. Log in with your user name and password. The Product Support page is displayed. 3. Select Server Sentinel in the Systems Management list for your server type. The Server Sentinel Support page is displayed. 4. Click Releases. The Releases page is displayed. 5. Click your Server Sentinel release in the Release column. The Release page for the release you selected is displayed. 6. Click Batch Files under the Software tab to display the available batch files. 7. Click your release level in the Level column. The Batch Files page for the release level you selected is displayed. 8. Click Downloadable Files under Download Information. A File Download dialog box is displayed B 1

28 Windows Firewall Batch Files for Server Sentinel 9. Click Save and specify a location where you want to save the batch files. 10. Open the downloaded file, specify a location to unzip the files, and then click Unzip. The batch files and a readme file are copied to the location that you specified. 11. Follow the instructions in the readme file to run the batch files. B

29 .

30 2008 Unisys Corporation. All rights reserved. * *