System Management Homepage

[Jon_151]

I am running HPSIM 4.1. Some of the servers I can access the system management homepage without entering a password others I cannot access them at all. How can I make it so I can access all of my servers with the same password without having to enter one?

Thanks in advance.

[David Claypool]

You need to have a trust relationship established. Check the doc "Understanding HP Systems Insight Manager Security" at http://www.hp.com/go/hpsim --> Information Library

[Jon_151]

David,

I looked at this document before and it does not tell you how to set up the trust relationship.

Where can I find how to do this?

[Rob Buxton]

Setting up a Trust Relationship is not that clearly documented unless I've missed it.

Browse to the Agent yo wish to configure.
Login as Administrator.
Go to the Settings Tab / Options

I recommend Trust By Certificate as it is easy.

Select Trust By Certificate.
In the Box labelled Insight Manager 7 Server Name enter the name of your HPSIM Server and hit Get Cert. Add this Certificate.

You can deploy these settings to other Servers using the Configure / Replicate Agent Settings option from HPSIM.

If you're using VCRM you can also configure the Agents with these details. You'll need to export and do a cut and paste of the Certificate from HPSIM.
That ensures that when the software gets deployed the settings are deployed as well.

[Jon_151]

Rob,

I can not log into the server as administrator or any other user. I thought I said that from the beginning.

How do I clear the current password or reset it?

Some of my systems work fine and others I can not access at all

[Rob Buxton]

Browse to:
http://h18004.www1.hp.com/products/servers/management/hpsim/infolibrary.html
Select the Help Guide
Go to Security in the Index, or Page 358.

[Richard Ward_6]

On a server homepage that you can browse and log into as administrator from some pc, copy the file C:\compaq\wbem\CPQHMMD.ACL to the server you cannot log into the homepage. Replace the file and restart the snmp service and the HP agents. [restarting SNMP stops and starts all the agents]. Then try to login. Worked for me.

[Rob Buxton]

Sorry, I missed the first part of the post.
As Richard has said, you can copy the CPQHMMD.ACL file. You might want to first set a Server with the correct password.
Again, you'll still want to configure the Agents so that when deployed the Agents have all the correct details.
In HPSIM 4.2 you can also use the Repair Agents functionality to fix a non-working Agent.

[Jeff T]

Hey All, I am having this EXACT same problem. Richard your post is exactly what I was looking for, unfortunately it did not work. Jon let us know if it works for you.. I did it exactly as you said Richard but It keeps putting me to the login page where I can select administrator, operator, user. ARGH!!!!!!

[Rob Buxton]

Are we talking about the same problem here?

1) Browse to https://Server:2381 - you will be prompted for Username/Password info. These are the details in the ACL file. If you can login to Administrator then you can change the password.

2) Browse via HPSIM, with a correct Trust set up you can bypass the Username prompt. If not see the bit on setting up Trusts.

[Jeff T]

When I do your step1 I get to to the login but the administrator password it should be does not work. Is there away around this? I assume I cannot setup the trust with out these credentials??

Thanks

JEffT

[Jeff T]

Also I see that this particular machine along with soo many others that under trusting it says NO and when I click configure it brings me to this same login page.

[Rob Buxton]

If you're on HPSIM 4.2 you can use the Repair Agents Option.
With HPSIM 4.1, if you have no agent with a password that you know then you're going to need to configure and redeploy and the Agents. If you have a Server that you can log into, grab the C:\Compaq\WBEM\CPQHMMD.ACL file and copy from the Good Server to the bad one. Restart the Web Agent should be enough. Retry the login.
If you have no agents you know the password for then the way I recommend that's the easiest to see what's going on.
Download the appropriate PSP to a new directory.
Run Setup.exe, in the RH Panel you can configure the Agents with passwords, Trusts details etc.
This is a Deployment Utility, you can then push out the Softpaq to a Server.
HP recommends deploying entire Softapqs as they're tested bundles. So, if you have a Server you can update and reboot choose that.
If you're on the latest Agents you'll need to check the force overwrite box.
Once done, you can use the file from this Server and copy it to others.

[Jeff T]

Rob, Richard Thanks again for all your time on this.. I was successfully able to copy that ACL file from the main SIM server to a managed machine and I can now access it via the SIM Server( is this server called the CMS?) anyway and now I am able to set the trust level yahoo.. BUT I do not know the password that is set in this ACL so I could never loging locally to any of the managed machines. Is there anyway I can see what this password is or change it for all without breaking everything??

And Rob I am sure I will be back to your last post about missing agents.

thanks again guys you are helping me make some good progress on a very stressfull deployment.

JEffT

[Richard Ward_6]

Jeff: Once you are in to that server via the Homepage, click on Settings and under HTTP Server click on Change Password and set it there. Then you should be able to login to that homepage from any computer. My next job is to update all the Homepages to version 2. Richard W.

[Jon_151]

I tried coping the CPQHMMD.ACL file from a server that works and it still does not let me login. My SIM server is listed as not trusted so it does not trust itself??? I think my next step will be to install 4.2 and try the repair. If that does not work then I will try updating the agents on the servers that are not trusted.

On another note I was able to uninstall/ install the WBEM portion on a server that I could not login to and enter a password and I was able to login. It still shows up as not trusted and I tried to create a certificate but when I have the certificate signed it fails.

Thanks for all the replies. It will be a while until I get to install 4.2. I am in the middle of migrating from Novell 5.1 to 6.5.