HP Cloud Service Automation

Technical white paper HP Cloud Service Automation Integration with HP Service Manager Table of contents Introduction 2 Required software components 2 Configuration requirements 2 Downloading the distribution file 3 Configuring HP Service Manager 3 Importing the unload file 3 Verifying steps on successful import of unload file 3 Modifying the approval definition 4 Importing HP Operations Orchestration JRE certification to HP Service Manager 4 Modifying the Windows hosts file 5 Importing HP Operations Orchestration flows 5 Updating system account and system properties 7 Running the process definition tool 7 Adding a provider 8 Creating and publishing service offering 8 Configuring external approval 9 Configuring the HP Server Manager LDAP (Active Directory) integration 10 Verifying the solution 11 Limitations 11 For more information 12

Introduction This white paper presents the integration between HP Service Manager and HP Cloud Service Automation (HP CSA), where HP Service Manager is used as an approval mechanism. Many customer IT environments have adopted the ITIL approach to IT Service Management (ITSM). In these environments, an ITSM product such as HP Service Manager can be used to approve or deny resource requests and subscriptions. The following use cases can be considered: Consumer creates service request through the HP CSA consumer portal, and HP CSA create change tickets in HPSM Some operator in HPSM has the privilege to approve or deny this request and may view the details transferring from HP CSA request. The HP CSA workload will be approved or denied after operator making decision on HPSM change tickets Required software components The following table shows the major components required to use this implementation. Table 1: Major software components required Component Version HP Cloud Service Automation 3.10 HP Operations Orchestration In addition to requirements found in the HP Cloud Service Automation Support Matrix, you must have a version of HP Operations Orchestration with the following content packs: Content pack CP8 HP Service Manager Content Pack 7 HP Service Manager 9.30 VMware vcenter Windows Server 64 bit 4.1.0 (or later) 2008 R2, 64 bit You can find documentation about installing, configuring, and verifying these components and their interoperability in the For more information section at the end of this document. Configuration requirements The following configuration must be completed and tested before you can set up this implementation. You can find links to the required documentation and downloads in the For more information section at the end of this document. VMware vcenter must be installed. The HP CSA administrator and consumer portals must be configured. You must be able to successfully deploy the simple vcenter compute service that ships with HP CSA. Providers for VMware vcenter must be configured in the HP CSA providers. 2

HP Service Manager must be installed, and integration account has the enough privilege for creating change tickets in HPSM change module. HP Service Manager has been configured integration with LDAP. See Configuring the HP Server Manager LDAP (Active Directory) integration. Microsoft Active directory must be installed and configured to support the LDAP functionally in this content. Downloading the distribution file Download the ZIP file HP_CSA3.1_SMIntegration.zip from the HP Live Network Portal and unpack it in a temporary location on the HP CSA server. The files listed in the following table are included in the distribution file. Table 2: Contents of the distribution file Folder File name Description OO-Content 00-content.zip HP Operations Orchestration flows SM-UnloadFile HPSM_CSA_Integration_file.unl HP Service Manager unload file Configuring HP Service Manager Importing the unload file To import the unload file, complete the following steps: 1. Log on to the HP Service Manager Windows client using the falcon account or another account with administrator privileges. 2. Navigate in the System Navigator to Connection>Tailoring>Database Manager. You can also type db in command window and click the RUN button. 3. Click Import/Load. 4. Browse to locate the Service Manager unload file distributed with content package. 5. Click Load FG. HP Service Manager will import the unload file and show a message that indicates that it was successful. Verifying steps on successful import of unload file After you successfully import the unload file, you should have a Script Library called OO_CSA3 in HP Service Manager. This script is used to internally invoke the HP Operations Orchestration flows SM Approve Ticket and SM Deny Ticket to approve and deny ticket respectively. To verify that the import was successful, complete the following steps: 1. Log on to the HP Service Manager Windows client using the falcon account or another account with administrator privileges. 2. Navigate in the System Navigator to Connection >Tailoring > Script Library. 3

3. Type OO_CSA3 in the Name field and click Search. Now you should be able to view and edit the script. 4. Edit OO_CSA3 and verify that the script has valid credentials for the HP Operations Orchestration Central server. 5. If the credentials are not valid then modify the OO_call.user and OO_call.password script variables with the correct credentials and click Save. 6. Click Connection >Tailoring >Tailoring Tools > Macros. 7. Verify that the macros OnChangeApproval and OnChangeDenied exist. Modifying the approval definition To check the result of this content, you should follow these steps to modify the HP SM OOB Approval definition. You should back it up before you modify it using unload tools in HP Service Manager: 1. Log on to the HP Service Manager Windows client using the falcon account or another account with administrator privileges. 2. Navigate in the System Navigator to Connection > Change Management > Maintenance > Approvals. 3. Enter Subscription Approval for the Name. 4. Click Search. 5. Modify the subscription approval definition as shown in Figure 1. Figure 1: Subscription approval definition Importing HP Operations Orchestration JRE certification to HP Service Manager HP Operations Orchestration has a web interface, so the HP Service Manager JRE has to import the HP Operations Orchestration certification to invoke the flow using the web service. 1. To export the HP Operations Orchestration certification, open a CMD window on the HP Operations Orchestration system and run the following commands: cd %ICONCLUDE_HOME%\Central\conf "%ICONCLUDE_HOME%\jre1.6\bin\keytool.exe" -exportcert -alias pas -file pas.crt -keystore rc_keystore -storepass bran507025 2. To import the HP Operations Orchestration certification to the Service Manager JRE, copy the pas.crt generated in the previous step to the HP Service Manager application server host and import to HPSM JRE and run the following commands: xcopy pas.crt "<HPSM install directory>\server\run\jre\lib\security" cd "<HPSM install directory>\server\run\jre\lib\security" 4

"<HPSM install directory>\run\jre\bin\keytool.exe" -importcert -alias pas -file pas.crt -keystore cacerts -storepass changeit Modifying the Windows hosts file The HP Operations Orchestration certification file include a hardcoded key which CN is opware.com and alias is pas and it should not be changed. It will be referenced when HP Service Manager accesses HP Operations Orchestration central web service interfaces as a client. In your test environment, you must map opsware.com the DNS name where HP Operations Orchestration Central server is installed. There are many methods to map this but the following is the simplest: 1. On the Service Manager server, browse to c:\windows\system32\drivers\etc\ and open the hosts file. 2. Add the following line to the file: <IP address of HP OO central server> opsware.com For example: 192.168.50.50 opsware.com Where 192.168.50.50 is the IP address of the HP Operations Orchestration central server 3. Save and close the file. Importing HP Operations Orchestration flows Import the HP Operations Orchestration flows found in OO-content.zip into your HP Operations Orchestration repository. To import the flows, complete the following steps: 1. On the HP CSA server, click Start > Hewlett-Packard > Operations Orchestration > HP Operations Orchestration Studio. 2. Log on using an account with administrator privileges. IMPORTANT: Be sure you are connected to the HP Operations Orchestration repository on the HP CSA server, not the CMS. 3. Close any editors that are open in the Authoring panel. 4. Click Repository >Import Repository. The Select Repository Directory dialog will open. 5. Browse to find and select OO-content.zip, which can be found where you extracted the distribution file. 6. Click Open. The Importing From dialog will open. 7. Select the upward-pointing arrow icon for the Library folder and the Configuration folder. 8. Click Apply then click Ok. You should see the following structure added to your HP Operations Orchestration library. 5

Figure 2: Service Manager flows added to the library Table 3: Flows imported in Library/CSA/3.0/Providers/Service Manager. Flow name SM Initiate Request Approval SM Approve Ticket SM Deny Ticket Description Invokes the HP Service Manager web service interface to create change tickets by external approval process. Invokes the HP CSA Rest API interface to approve or deny an HP CSA workload request. Invokes the HP CSA Rest API interface to approve or deny an HP CSA workload request. The following flow will be imported to Integrations/Hewlett-Packard/Cloud Service Automation: Figure 3: Service Manager Integration flow added to the Integrations Table 4: Flows imported in Integrations/Hewlett-Packard/Cloud Service Automation. Flow name Update Approval Status Description This flow updates external approval status in HP CSA. You should see the following structure added to your HP Operations Orchestration Configuration. 6

Figure 4: SM System account and properties added to the Configuration Updating system account and system properties After you import the HP Operations Orchestration flows, you must define the system properties and system account for the subscription to function correctly. Table 5: System properties defined in HP Operations Orchestration Name CSA_ServiceManager_Host CSA_ServiceManager_Port CSA_ServiceManager_Protocol CSA_ServiceManager_Version Description HP Service Manager Application Server binding IP address HP Service Manager Application Server binding port HP Service Manager Application Server binding protocol HP Service Manager Application Server version Table 6: System account defined Name CSA_SERVICEMANAGER_CREDENTIALS Description The HP Service Manager integration account setting; this account should have privileges to create change tickets in the change module. When the flows have been imported and the credentials and system configuration values are updated, check the repository for errors by clicking Repository > Check in Tree in the HP Operations Orchestration library. Running the process definition tool A process definition tool is created when you install and configure HP CSA. This tool ensures that HP CSA can correctly locate the HP Operations Orchestration flows needed for the offering. To run the process definition tool, complete the following steps: 1. On the system where you installed HP CSA, open the following file in a text editor: C:\Program Files\Hewlett-Packard\CSA\Tools\ProcessDefinitionTool HPOOInfoInput.xml 7

2. Add the following line at the end of the file: <ooengine accesspointtype="external_approval" name="<give identifier OO engine for CSA>" password="<oo central admin password>" truststore="<csa installation folder>/jre/lib/security/cacerts" truststorepassword="<csa keystore password>" uri="https://<oo central IP address>:8443/pas/services/wscentralservice" username="<oo central admin username>" > <folder flow="true" path="/library/csa/3.0/providers/service Manager/External Approval/Actions/SM Initiate Request Approval" recursive="false" update="true" /> </ooengine> 3. Run the following command from the process definition folder: java -jar process-defn-tool.jar -d db.properties -i HPOOInfoInput.xml Adding a provider This implementation uses a vcenter resource provider. This provider must be added in HP CSA if it doesn t already exist. To add resource providers, complete the following steps: 1. Log on to the Cloud Service Management Console as an administrator. 2. Select the Resource Management tab. 3. Select VMware vcenter in the panel on the left. 4. Click Create New Provider in the toolbar on the Providers tab in the central panel. 5. Complete the steps to create a new provider. After you have created the resource provider, you should see it on the Providers tab as shown in Figure 5. Figure 5: vcenter provider has been created Creating and publishing service offering A service offering must be created in HP CSA before subscribers can request services based on this service design. To create a service offering, complete the following steps: 8

1. Log on to the HP CSA Management Console using an account with administrator privileges. 2. Select the Service Offerings tab to display all available service offerings. 3. Click Create Offering in the left panel. The Create New Service Offering dialog will open. 4. Enter a name for the new service offering. This is the name of the offering that will be visible to the subscribers of this service. 5. Select the VCENTER_COMPUTE_3.10 blueprint. 6. Click Create. 7. After the offering is created, you can modify the pricing information, associate documents, or modify the subscriber options. Configuring external approval To configure external approval, complete the following steps: 1. Log on to the HP CSA Management Console using an account with administrator privileges. 2. Select the Service Catalogs tab. 3. Select the catalog you want to use or create new one. 4. Click Approval Policies. 5. Click Add Approval Policy near the bottom of the screen. The Add Approval Policy dialog will open. 6. Enter a name for the policy and select Delegated template for the approval template. The Add Approval Policy dialog will change to include new fields. 7. Select SM Initiate Request Approval for the process definition. 8. Click Save Changes. Figure 6: The Edit Approval Policy dialog 9

9. Back in the Service Catalog, and click Published Offerings. 10. Add a new offering or edit an exist offering. 11. Make sure the approval process is set to Active, and select SM Initiate Request Approval for the approval policy again. 12. Save the offering. Configuring the HP Server Manager LDAP (Active Directory) integration To configure LDAP for HP Service Manager, complete the following steps: 1. Create a new HP CSA Consumer user in the Active Directory server to request a change ticket (for example: consumer). 2. Log on to the HP Service Manager client using as an administrative user such as falcon or System.Admin. 3. In HP Service Manager, create a new power user with same name created for the HP CSA Consumer user in Active Directory (consumer) by cloning an administrator account such as falcon. See the HP Service Manager documentation for instructions on how to create new contact and its corresponding operator to achieve this step. 4. Click Connection > System Administration > Ongoing Maintenance > System > LDAP mapping. Enter values for the following: LDAP Server: IP Address of LDAP server LDAP Port: 389 LDAP Base Directory: CN=Users,DC=CSADEV,DC=COM (This is sample data) 5. Click Save. 6. Click Set File/Field Level Mapping and type "operator" for the Name. 7. Click Search. 8. Check the fields mentioned in step 4 to make sure they are filled in correctly on the <HP Service Manager LDAP Mapping - File/Field Level Specifications> page. 9. In the Field Name/LDAP Attribute Name table, make sure that you have value CN for the NAME field in the Field Name column. 10. Edit sm.ini, which is located in <HPSM install directory>\server\run\ and include the following properties: ldapauthenticateonly:1 ldapnostrictlogin:1 ldapbinddn:cn=administrator,cn=users,dc=csadev,dc=com ldapbindpass:password ldapdisable:0 ldapstats:1 11. Restart the HP Service Manager server. You should now be able to log in to HP Service Manager using an LDAP user name and password. 10

Verifying the solution To verify the solution, complete the following steps: 1. Log on to the HP CSA Consumer Portal as the AD user who has privileges to create a service request. 2. Request the service offering you modified in the previous steps. 3. Wait a while and then log on HP Service Manager using the Change.Approver account without a password. 4. Click Approval inbox from the menu navigator, check the request related change tickets that have been created and are waiting for approval. 5. Click View to check detail information for the change ticket that matches the corresponding service request in HP CSA. 6. Click Find to the right of Request By to verify that the contact information for this subscriber is copied to the HP Service Manager contacts. 7. Click Approve or Deny to make a decision on this request, and at same time. The subscription won t be created until the approval has been made. 8. Verify that HP CSA deploys approved requests. Limitations The HP CSA subscription requesting user should be created both in HP Service Manager and HP CSA. For example, the user consumer should be present both in HP CSA and HP Service manager. 11

For more information HP software product manuals and documentation for the following products can be found at http://h20230.www2.hp.com/selfsolve/manuals. You will need an HP Passport to sign in and gain access. HP Cloud Service Automation HP Server Automation HP Operations Orchestration HP Service Manager You can log in using your HP Passport to download HP Service Manager 9.30 from https://h20575.www2.hp.com/evalportal/displayproductslist.do?prdcenter=hpss_smc. To help us improve our documents, please send feedback to csadocs@hp.com. Table 7: Document revision history Date or version Changes March 15, 2013 First draft for HP CSA 3.10 May 9, 2013 Minor updates for clarity Get connected hp.com/go/getconnected Current HP driver, support, and security alerts delivered directly to your desktop Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. 12 Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. AMD is a trademark of Advanced Micro Devices, Inc. Intel and Xeon are trademarks of Intel Corporation in the U.S. and other countries. Oracle and Java are registered trademarks of Oracle and/or its affiliates.