IBM HMC 小型机硬件管理终端

2004 IBM Corporation
eServer pSeries POWER5 Server
Service Processor Network Security
§ All network traffic to and from a service processor is secured by the Secure Socket Layer (SSL) protocol § The first time a connection is made between the HMC and the service processor, an authentication dialog is started § Userids and passwords are exchanged § Default userids/passwords are “admin” and “general” § An “HMC” userid is created; you assign the password § The service processor issues the SSL certificate for on-going management by the HMC
§ Managing a server without an HMC Server can run in Manufacturing Default Mode, with all resources but no logical partitioning, CoD or Service Focal Point, or Entry-level servers may use the Integrated Virtualization Manager § Managing a server over a private network connection HMC configured as a DHCP server Private network connects only the HMC and the servers it manages Private network replaces the serial connection on POWER4 servers Dual HMCs require two unique private networks
You may also set the admin and general passwords on the service processor for this menu, or you can set them directly on the service processor via ASMI
2004 IBM Corporation
eServer pSeries POWER5 Server
Service Processor Static IP Addresses
2004 IBM Corporation
eServer pSeries POWER5 Server
Adding Static IP Managed Server to HMC
2004 IBM Cቤተ መጻሕፍቲ ባይዱrporation
eServer pSeries POWER5 Server
What’s New on the p5 HMC?
§ The HMC now has an optional setup wizard to assist in customization § Documentation for the eServer is found in Information Center A web-based documentation interface Information Center is available online at: /servers/library/infocenter.html § New service options allowing inbound as well as outbound calls Always under complete customer control for security § Dynamic reallocation can be set up for a date and time using the Scheduled Operations task menu § HMCs have an expanded role in managing server firmware
2004 IBM Corporation
eServer pSeries POWER5 Server
Upgrades and New Installs
§ POWER5 HMCs cannot manage POWER4 servers, and vice versa § Existing POWER4 HMCs can be upgraded to support POWER5 servers This involves a complete overwrite of the disk and the loss of all previous configuration information, including user profiles § If you want to recreate partition profiles from an HMC being upgraded, capture the profiles using the Command Line Interface or screen captures The profiles will have to be re-entered manually on the newly installed POWER5 HMC
eServer pSeries POWER5 servers
POWER5 HMC and System Setup
2004 IBM Corporation
eServer pSeries POWER5 Server
What’s New on the p5 HMC?
§ POWER5 HMC connects to service processors via SSL-encrypted Ethernet, replacing the serial cables § The applications running on the HMC are packaged as Licensed Machine Code (LMC) § The HMC is a customer setup server and LMC is maintained by customers § Each network card has an integrated firewall § The HMC may be a DHCP server for service processors in entry and midrange p5 servers § The HMC must be a DHCP server for high-end models § With the latest release of LMC, an HMC can support up to 32 servers with a total of 254 logical partitions
2004 IBM Corporation
eServer pSeries POWER5 Server
HMC-to-Service Processor Networking Options
§ Managing a server over an open network This requires setting the IP address on the service processor manually Use a laptop attached to one of the two service processor Ethernet ports and access the Advanced System Management menu § Default service processor connections: Eth0 Eth1 HMC1 255.255.255.0 192.168.2.147 HMC2 255.255.255.0 192.168.3.147
2004 IBM Corporation
eServer pSeries POWER5 Server
HMC Configuration
§ New HMCs come preinstalled § The Recovery CD that comes with the HMC is used to reinstall, such as following a disk failure When used with a current Critical Console Date backup, it will restore profiles, userids, passwords, etc., after a disk is lost or corrupted § When the HMC is powered on the first time, login as hscroot and use “abc123”, the default password
2004 IBM Corporation
eServer pSeries POWER5 Server
Sample Configuration Wizard Screens
2004 IBM Corporation
eServer pSeries POWER5 Server
Server Management and Network Options
§ From the HMC, go to Server and Partition and Server Management menus § From the Server Management pulldown menu on the tool bar, select Add Managed System(s) § The Pending Authentication message allows you to set the HMC password on the managed server
2004 IBM Corporation
eServer pSeries POWER5 Server
Service Processor Static IP Addresses
§ Connect a laptop directly to one of the ports and open a browser using https://IP_address Note the https – the service processor uses SSL on all network connections Also, Internet Explorer users – Tools Internet options Advanced tab – uncheck “Use TLS 1.0” § Login using the admin userid (default password is admin) § Change the admin password – and write it down for safekeeping!
2004 IBM Corporation
eServer pSeries POWER5 Server
HMC Configuration
§ When you login the first time, the new configuration wizard starts automatically § While optional, the wizard is recommended for those who are not familiar with the HMC menus § You can close the wizard and use the HMC Configuration menus § The wizard can be re-run at any time from the WebSM menus