Funcionality loss when not using SSH?

[Ulrik Ivers]

What functionality in SIM relies on SSH client being installed and configured on the managed system?

We have a few hundred servers today monitored by IM 7, planning to migrate to SIM but would prefer not to install SSH client on the existing servers.

/U.

[David Claypool · Accepted solution]

OpenSSH is used on the central management server (CMS) to duplicate the functionality of the "Application Launch" functionality in IM7.

OpenSSH is used on managed nodes to enable new functionality not present in IM7 to execute distributed tasks.

[Ulrik Ivers]

Thanks!

Looks like I'll install SSH on the new CMS server but not on managed nodes until we decide to use the functionality of distributed tasks.

/U.

[David Claypool]

I also should let folks know that in the 4.1 timeframe (looking like late April at this point), we also will have a 'smart component' packaging of OpenSSH that can be pre-configured and distributed through Version Control. That might make your decision to implement easier.

[Stuart_43]

I have multiple servers with no VCR and need to be to deploy initall service packs to get the VCR on the servers ,but SSH prevents me from doing this.

Giving us the option to roll out ssh via the VCR is no use if you don't have the VCR on the server it's just a visious circle, this is a major flaw in the software, hope on future versions of SIM HP can give us the option not to use SSH.

[David Claypool]

Stuart:

Saying it a different way than I stated above, the only reason to distribute OpenSSH to all of your nodes is if you want to use the Distributed Task Functionality that lets you run command lines and scripts (batch files) remotely. It is NOT necessary to have OpenSSH on the target nodes to duplicate all of the functionality from IM7.

I appreciate that you have a "chicken and egg" view of the situation, but it really isn't a problem. hpSIM 4.1 has a "Install OpenSSH task" that uses the "setupc.exe" from the Support Pack command line utility to address a remote machine and use OS security to install remotely. Similarly, the Initial PSP Install does the same thing. Using this technique it is possible to install OpenSSH or the Support Pack on systems that have no pre-requisites installed.