Hp OneView Bedienungsanleitung

HP OneView 1.0 User GuideAbstractThis guide describes HP OneView features, interfaces, resource model design, and secure working environment. It descr

26 Using the State-Change Message Bus (SCMB)...18526.1 Connect to the SCMB...

Why you need itConfiguration requirementYou do not have to know the hardware configuration, but you do have tochoose an available network or network s

ProcessDescriptionTaskResource• When you add the enclosure, specify an existing enclosure group.• When you add an enclosure, you also must select a fi

ProcessDescriptionTaskResource• You must create a logical interconnect group before you can create anenclosure group.• You add uplink sets as part of

• The networks and network sets, if any, have been added to the appliance. To add networksor network sets, see “Quick Start: Adding a network to an ex

104

12 Quick Start: Configuring an enclosure and server bladefor Direct attach to an HP 3PAR Storage SystemThis quick start describes the process for addi

ProcessDescriptionTaskResource• If you add the networks from the Networks screen:◦ For Type, select Fibre Channel◦ For Fabric type, select Direct atta

13 Quick Start: Adding an HP ProLiant DL rack mount serverThis quick start describes the process for adding a rack mount server.The features supported

108

Part IV Configuration and managementThe chapters in this part describe the configuration and management tasks for the appliance and the resourcesit ma

27.12.3 Profile operations fail...21827.13 Troubleshooting user a

110

14 Managing servers and server profilesManaging servers with the appliance involves interacting with several different resources on theappliance:• A s

HP ProLiant DLGen82HP ProLiant BLGen8HP ProLiant BLG71Feature✓✓✓SSO (single sign-on): The appliance enables SSO to iLOand OA without storing user-crea

• Manage the boot order of a server profile.• Manage virtual or physical IDs for the server hardware.• Copy a server profile.• Delete a server profile

NOTE: Health monitoring is not enabled on ProLiant G7 iLO3 server hardware until the HPmanagement agents are installed on the OS and the SNMP service

15 Managing networks and network resourcesThis chapter describes configuring and managing networks and network resources for the enclosuresand server

15.2.1 Roles• Minimum required privileges: Infrastructure administrator or Network administrator15.2.2 TasksThe appliance online help provides informa

having to replicate configuration changes across multiple servers. In addition, the logical andphysical network resources can be configured for high a

Figure 11 Direct attach and Fabric attach Fibre Channel networksEnclosureUIDEnclosureInterlinkPS3PS2PS1PS6PS5PS4OA1 OA2Removemanagement modules before

IMPORTANT: When you move a server profile to a different enclosure, and the profile is configuredto boot from a Direct attach storage device, you must

A.5.5 Creating an enclosure group for vSphere (ESXi) hosts...248A.5.6 Adding the enclosure...

Network set details• Network sets are supported for use in server profiles only.• All networks in a network set must be Ethernet networks.• All networ

16 Managing interconnects, logical interconnects, andlogical interconnect groupsA logical interconnect group acts as a recipe for creating a logical i

Interconnects are an integral part of an enclosure, and each interconnect is a member of a logicalinterconnect. Each logical interconnect is associate

16.2.1 Roles• Minimum required privileges: Infrastructure administrator or Network administrator16.2.2 TasksThe appliance online help provides informa

NICTeamingDriversInterconnectStackingLinkConnectionsLogical InterconnectInterconnect, Logical Interconnect, NetworksServer BladeUplink SetsLOM2LOM1ToR

Stacking modesStacking modes and stacking links apply to Ethernet networks only.Interconnects that are connected to one another through stacking links

Deleting a logical interconnectTo delete a logical interconnect, you must remove the enclosure from management.16.2.4 About logical interconnect group

Figure 12 Relationship of a logical interconnect group to a logical interconnectLogical Interconnect LI1<create> <create> <create>En

capture, and then designate the SNMP manager to which traps will be forwarded. By default,SNMP is enabled with no trap destinations set.When you creat

16.2.7 Configure a port to monitor network trafficPort monitoring enables you to send a copy of every Ethernet frame coming in and going out ofa port

Part I Learning about HP OneViewThis part describes HP OneView and its model for data center resources and introduces you to the termsand concepts use

130

17 Managing enclosures and enclosure groupsAn enclosure is a physical structure that can contain server blades, infrastructure hardware, andinterconne

17.2 Roles• Minimum required privileges: Infrastructure administrator or Server administrator17.3 TasksThe appliance online help provides information

NOTE: HP does not recommend using iLO or the OA to make changes to a device. Makingchanges to a device from its iLO or OA could cause it to become out

134

18 Managing firmware for managed devicesNOTE: This chapter describes how to manage the firmware for devices managed by the appliance.For information a

Unsupported firmware for enclosuresWhen adding an enclosure, the appliance:• Generates an alert if the logical interconnect firmware for the interconn

resources in the enclosure (OA, all member interconnects, and server hardware firmwareincluding iLO).In the UI, select Enclosures→Actions→Update firmw

DescriptionBest practiceDo not update the firmware on a managed device unless the firmware baseline isset to manage manually.Verify the managed device

19 Managing power and temperatureYou can manage the power and temperature of your IT hardware using the appliance.19.1 Managing powerTo manage power,

14

• HP Intelligent Power Distribution Units (HP iPDUs), which the appliance can automaticallydiscover and control.• Other power delivery devices that th

19.2 Managing temperatureTo manage the temperature of your hardware, you must add your server hardware to racks, positionit in the rack, and then add

19.2.4 Learning more• “About utilization graphs” (page 181)142 Managing power and temperature

20 Managing users and authenticationThe appliance requires users to log in with a valid user name and password, and security ismaintained through user

If you cannot see resource information or perform a resource task, your assigned role does nothave the correct privileges. In this case, you should re

Table 6 Action privileges for user roles (continued)Action privileges for user roles(C=Create, R=Read, U=Update, D=Delete, Use)CategoryRead onlyBackup

Table 6 Action privileges for user roles (continued)Action privileges for user roles(C=Create, R=Read, U=Update, D=Delete, Use)CategoryRead onlyBackup

Any user in the group can log in to the appliance, and each member of the group is assigned thesame role. On the login window, the user:• Enters their

20.9 Reset the administrator passwordIf you lose or forget the administrator password, you can reset it by executing a command andcontacting your auth

21 Backing up an applianceThis chapter describes how to use the UI, REST APIs, or a custom-written PowerShell script to saveyour appliance resource co

1 Learning about HP OneView1.1 HP OneView for converged infrastructure managementOptimized for collaboration, productivity, and reliability, the HP On

21.4 Guidelines for creating a backup file• HP recommends performing regular backups, preferably daily, and especially after addinghardware or changin

• Non-data files: Static files that are installed as part of the execution environment, and are notspecific to the appliance or managed environment co

152

22 Managing the appliance22.1 Managing appliance availabilityManaging and maintaining appliance availability starts with configuring the appliance vir

Appliance recovery operationsWhen the appliance restarts, it performs the following operations:• Detects tasks that were in progress and resumes those

Restarting the appliance1. From the Settings screen, select Actions→Restart.A dialog box opens to inform you that all users will be logged out and ong

1. Install the host operating system on the server.2. Install the SNMP subsystem on the server.3. Configure SNMP on the host to use the community stri

access will be controlled by a password generated by HP that will only be provided to the authorizedsupport representative. You can disable access at

22.4.3.1 Roles• Minimum required privileges: Infrastructure administrator22.4.3.2 TasksThe appliance online help provides information about managing p

• Specify a license type as part of adding a rack mount server.• View licensing status information through license graphs.• View a list of server hard

and server profiles established by your experts, you can enable system administrators to provisionand manage thousands of servers without requiring th

22.5.3.4 View license statusYou can view the status of your server hardware licenses using the license graphs from the Settingsmenu in the Licenses vi

server blades in the enclosure. When you add a rack mount server, you specify a license type forthat server. Both policy and type refer to either of t

22.5.4.2 Rack mount server licensingRack mount server licensing is managed at the server level.When you add a rack mount server to the appliance, you

Table 8 Licensing scenariosNotesResultLicense policy or typeUser actionThere is no guarantee thatlicenses embedded on anenclosure will be applied to t

then verify if a newer version of an appliance update file is available to download from http://www.hp.com/go/oneviewupdates. Before you install an ap

23 About unsupported and unmanaged hardwareUnmanaged and unsupported devices are devices that the appliance does not manage. Addingunmanaged and unsup

166

Part V MonitoringThe chapters in this part describe using the appliance to monitor your data center. You use the informationin this part after the app

168

24 Monitoring data center status, health, and performanceThis chapter describes the recommended best practices for monitoring data center status, heal

1.2.1 Server profilesA server profile captures key aspects of a server configuration in one place, including firmwarelevels, BIOS settings, network co

To learn more about utilization graphs, see “Monitoring power and temperature” (page 179).24.1.4 Monitor data center temperatureThe appliance provides

Server hardware health monitoringFor server hardware with a Critical or Warning status, the associated server profile might bein failed state, so you

Monitoring stepView the originating event(s) that caused a specific alert.1. Select an alert.GET /rest/alerts/2. Get a specific alert using the alert

perform a GET operation on alerts and filter for alerts related to interconnects. To list states, youcan perform a GET operation on interconnects and

You can assign alerts to the appropriate administrator for their timely resolution. When issues areinvestigated and resolved, you can clear them so th

IMPORTANT: The appliance maintains a tasks database that holds information for approximately6 month’s worth of tasks or 50,000 tasks. If the tasks dat

DescriptionStatusThe status of the alert or task is unknown.The status of a task that is set to run at a later time is Unknown.UnknownA task was preve

Table 9 Dashboard graph colors (continued)IndicationColorA critical condition that requires your immediate attentionRedThe percentage of resource inst

The sample graph for the Server Hardware resource shows a total of ten instances of managedserver hardware, of which half are either disabled or are u

25 Monitoring power and temperatureHP OneView enables you to monitor the power and temperature of your hardware environment.Power and temperature moni

Types of groups and setsDescriptionGroup or setA group of enclosures that use the same configuration, such network connectivity and firmwareversions f

Prerequisites• Minimum required privileges: Server administrator.• You have created a data center and positioned your racks in it.• The placement of r

Manipulating the view of the data center visualizationTo change the data center view, do one or more of the following:• Move the horizontal slider lef

Table 10 Utilization statistics gathered by resourceUtilization metricCustomTemperaturePowerCPUResource✓✓✓Enclosures✓Power DeliveryDevices✓✓✓✓ServerHa

with the most recent intervaldata on the right. Thedifferent units ofmeasurement have a secondminimum time interval is two interval down the right sid

25.2 REST API power and temperature monitoring25.2.1 Update enclosure power capacity settingsTo update the enclosure capacity settings, perform a PUT

26 Using the State-Change Message Bus (SCMB)The State-Change Message Bus (SCMB) is an interface that uses asynchronous messaging to notifysubscribers

Figure 16 Connecting the client to the SCMB5The appliance can revoke theSCMB client certificate to3The appliance issues a clientcertificate to the SCM

NOTE: The task resources routing key syntax is scmb.resource-category and does not usechange-type and resource-uri. To receive messages about all task

ChangeType valuesDescriptionChangeType valueThe resource is created or is added to HP OneView.CreatedThe resource state, attributes, or both are updat

Additional example-specific prerequisitesExample 1Convert the client certificate and private key to PKCS format for .Net.openssl.exe pkcs12 -passout p

Flexibility in design and deploymentHP OneView provides flexibility in the creation of groups, templates, and sets. For example, youcan create a logic

ExamplesExample 3 .Net C# code example 1 (directly referencing client certificate) public void Connect() { string exchangeName = &q

NOTE: .Net C# code example 2 (Microsoft Windows certificate store) is referencing the TrustedRoot Certificate Authorities store, located under Local C

Example 5 Java code example//c://MyKeyStore contains client certificate and private key. Load it into Java Keystorefinal char[] keyPassphrase = "

Example 6 Python code example (pika)import pika, sslfrom pika.credentials import ExternalCredentialsimport jsonimport logginglogging.basicConfig()####

Example 7 Python code example (amqplib)#!/usr/bin/env pythonfrom optparse import OptionParserfrom functools import partialimport amqpdef callback(chan

ch.close() conn.close()if __name__ == '__main__': main()26.7 Re-create the AMQP client certificateIf you change the appliance name

196

Part VI TroubleshootingThe chapters in this part include information you can use when troubleshooting issues in your data center,and information about

198

27 TroubleshootingHP OneView has a variety of troubleshooting tools you can use to resolve issues. By following acombined approach of examining screen

© Copyright 2013 Hewlett-Packard Development Company, L.P.Confidential computer software. Valid license from HP required for possession, use or copyin

1.3 Firmware and configuration change management features1.3.1 Simplified firmware managementThe appliance provides fast, reliable, and simple firmwar

27.1 Basic troubleshooting techniquesHP OneView has a variety of troubleshooting tools you can use to resolve issues. By following acombined approach

DetailsRecommendationWhen VM host is down or nonresponsive:1. From the local computer, use the ping command to determine if you can reach theappliance

3. Click Yes, create.You can continue doing other tasks while the support dump file is created.The support dump file name has the following format:hos

IMPORTANT: Unless you specify otherwise, the support dump file is encrypted so that onlyauthorized support personnel can view its contents.In accordan

27.4.4 Appliance update is unsuccessfulAny blocking or warning conditions affecting the appliance update are displayed prior to theupdate operation.Po

27.4.7 Backup file creation, download, or restore action failsPossible cause and recommendationSymptomOther related operations are in progressOnly one

Possible cause and recommendationSymptomA profile operation was running during the backup1. Minimum required privileges: Infrastructure administrator2

27.4.9 VM does not restart when VM host time is manually setPossible cause and recommendationSymptomYou are not using NTP and the VM host’s time was i

27.5 Troubleshooting enclosures and enclosures groups27.5.1 Add or remove enclosure is unsuccessfulPossible cause and recommendationSymptomIf the encl

Possible cause and recommendationSymptomYou might be unable to remove an enclosure for the following reasons:• Lack of communication with the hardware

Isolated management networkThe appliance architecture is designed to separate the management traffic from the productionnetwork, which increases relia

27.5.2 Add server blade is unsuccessfulPossible cause and recommendationSymptomIf a server blade previously associated with this profile is re-inserte

27.6.2 Lost iLO connectivityPossible cause and recommendationSymptomReset the server to restore network connectivity to the server's management p

NOTE: You need your entitlement certificate (physical or electronic document) to restore thelicense key.Possible cause and recommendationSymptomThe li

27.9.3 Physical interconnect warnings and errorsPossible cause and recommendationSymptomInterconnect warnings or errors due to:• Downlink with a deplo

embedded in the message; the add action rediscovers all components and updates its knowledgeof the server.Possible cause and recommendationSymptomServ

resource state accordingly, and updating the health status. The appliance creates a task queue foreach task during a resynchronization operation.Possi

( ). The profile remains on the appliance, but you must to correct it. When you correct the serverprofile, the profile status changes to OK ( ).Possib

Possible cause and recommendationSymptomThe server hardware or its iLO are powered-off or reset• In most cases, retrying the operation resolves the pr

27.12.3 Profile operations failPossible cause and recommendationSymptomThe enclosure is no longer managed by the applianceTo prevent losing all alloca

27.13.3 User public key is not acceptedPossible cause and recommendationSymptomHidden characters introduced during a copy/paste operation change the k

1.4.1 Data center environmental managementHP OneView integrates these critical areas for environmental management of the data center:• Thermal data vi

27.13.6 Cannot add server for a directory servicePossible cause and recommendationSymptomLost connection with directory service host1. Verify that the

28 Restoring an appliance from a backup fileThis chapter describes how to use the UI, REST APIs, or a custom-written PowerShell script to restorea cor

28.3 Preparing to restore an appliance• Make sure that all users logged in to the appliance log out. Users who are logged in whenthe restore operation

28.4 Restore an appliance from a backup fileBefore you restore an appliance from a backup file, note the following:• A restore operation should only b

Restoring an appliance from a backup file1. From the Settings screen, select Actions→Restore from backup.2. Read the on-screen notification, then sele

cleanup of hardware (servers, interconnects, and enclosures) if server profiles are forcibly unassignedor the hardware is forcibly removed without fir

226

29 Support and other resourcesTo learn how to contact HP, obtain software updates, submit feedback on documentation, andlocate links to HP OneView web

After redeeming your license certificate activation key, you are prompted to register for softwaretechnical support and update services. Licenses that

• HP ProLiant educationhttp://www.hp.com/learn/proliant• HP Storage productshttp://www.hp.com/go/storage• HP Virtual Connecthttp://www.hp.com/go/virtu

• View alerts for a specific resource from the UI screen for that resource or using the REST APIfor that resource.• Automatically forward SNMP traps f

230

A Step by step: Configuring an example data center usingHP OneViewThis appendix contains an illustrated example of using the HP OneView appliance UI t

• Two HP BladeSystem c7000 Enclosures, each of which contain HP Virtual Connect FlexFabricmodules and several different models of HP BladeServer serve

Enclosure 2DescriptionAttributeEnclosure-1904Name172.18.1.13Primary Onboard Administrator IPaddress172.18.1.14Secondary Onboard Administrator IPaddres

Table 11 SAN A and SAN B Fibre Channel network configurationsNotesValueConfiguration attributeFibre ChannelTypeChoose Fabric attach for Fibre Channel

Figure 17 Sample data center: Fibre Channel network connectionsEnclosureUIDEnclosureInterlinkPS3PS2PS1PS6PS5PS4OA1 OA2Removemanagement modules beforee

Table 15 Development networksVLAN IDName1105dev 11051106dev 11061107dev 11071108dev 1108Table 16 Test networksVLAN IDName1111test 11111112test 1112111

ValueConfiguration attribute172.18.0.0Gateway address172.18.0.0Preferred DNS server172.18.0.1Alternate DNS serverUnassigned (do not use IPv6 addresses

A.3.4 Planning resource namesSearching and filtering in the appliance is based on a smart search model. By embeddinginformation about the resource in

6. “Create an unassigned server profile for use as a template for ESXi servers” (page 250).This server profile includes a firmware baseline, the BIOS

1.6 Security featuresCATA (Comprehensive Applications Threat Analysis) is a powerful HP security quality assessmenttool designed to substantially redu

After the networks are added, when you select a network in the master pane, you can see detailsabout that network in the details pane. For each of the

k. Click Create + to create another network.The appliance creates the network and opens the Create network dialog box. This dialogbox uses the configu

The following illustration shows the Networks screen after you add the Ethernet networks.A.5.3.3 Configuring the network setsYou use network sets to c

The Create network set dialog box shows the networks that you added to the networkset.d. Select a network in the network set to receive untagged traff

b. In the search box, enter dev to filter the list of networks.c. Select all of the dev networks listed and click Add.d. Select Untagged for the first

3. In the top left box, click Add interconnect and select HP Virtual Connect FlexFabric 10Gb/24-PortModule.4. In the top right box, click Add intercon

5. Add the uplink set for the SAN B:a. For Name, enter SAN B.b. For Type, select Fibre Channel.c. For Network, select SAN B.d. Configure the uplink po

e. Add the ESXi networks:i. In the search box, enter esx to display only the ESXi networks.ii. Select all of the EXSi networks listed.TIP: Select all

4. Click Create to create the logical interconnect group.5. In the details pane of the Logical Interconnect Groups screen, you can use your pointing d

3. For Logical interconnect group, select EsxFlexFabricLIG.4. Click Create.A.5.6 Adding the enclosureAdding an enclosure brings the rack, the enclosur

1.8 Graphical and programmatic interfacesThe HP OneView appliance was developed to use a single, consistent resource model embodiedin a fast, modern,

Viewing server hardware typesFrom the main menu, select Server Hardware Types.The Server Hardware Types screen lists server hardware types for each un

1. From the main menu, select Server Profiles and then click + Create profile.The Create Server Profile dialog box opens.2. Under General, enter the f

a. Add two connections to the esxi mgmt 1131 network. When you finish entering theinformation for a connection, click Add + to add this connection and

e. Add one connection to the SAN A network. Enter the information shown in the followingtable, and then click Add + to add the connection and reopen t

4. Scroll down to see other items in the dialog box.5. Configure the boot order for this server profile. Manage boot order is selected by default.Drag

d. Click OK to save the edits and close the dialog box.The Create Server Profile dialog box displays the BIOS settings whose values differ fromthe def

4. (Optional) View the progress of the create profile action from the Server Profiles screen.Optionally, launch the iLO remote console to view the pro

8. In Name, enter FlatSAN B and click Create.The Networks screen opens.After the networks are added, when you select a network in the master pane, you

3. Click Add to add the enclosure.The appliance discovers the interconnects in the enclosure, creates a logical interconnectgroup, and opens the Edit

c. For Network, select FlatSAN B.d. Configure the uplink ports. For Interconnect under Uplink Ports, select Interconnect: 2and then select ports X3 an

1.9 Integration with other HP management softwareOnboard AdministratorHP OneView interacts seamlessly with the Onboard Administrator to provide comple

7. Click OK and add enclosure.The appliance adds the enclosure, the enclosure group, the logical interconnect group, andthe uplink sets:Encl2Enclosure

• For Server hardware type, select BL460c Gen8 Standard.• For Enclosure Group, select DirectAttachGroup.• For Firmware Baseline, select Manage manuall

6. Add one connection to the FlatSAN B network. Enter the information shown in the followingtable, and then click Add to add the connection and close

b. Click Edit BIOS Settings.The Edit BIOS Settings dialog box opens. The server hardware type that you selected forthis profile determines the default

1. In the master pane of the Server Profiles screen, select win2k12 boot from 3PAR.The appliance displays the details about the server profile in the

A.7.2 Adding the server hardware1. From the main menu, select Server Hardware, and then click + Add server hardware.2. Enter the following information

NOTE: To view utilization data or connect to the remote console, the server must have theappropriate licenses. See “Adding a license for the server” (

In this example, the server is related to Rack-173 and the DL360p Gen 8 1 server hardwaretype.5. Click Rack-173 to display the Map view for the rack.6

To add an HP OneView license for the server you added in “Adding the server hardware”(page 265):1. Do one of the following:• From the warning message

B Using the virtual appliance consoleB.1 Using the virtual appliance consoleThe virtual appliance console has a restricted browser interface that supp

When you add hardware with an embedded license to the appliance, the applianceautomatically applies the license. Your software license is also automat

270

C Backup and restore script examplesC.1 Sample backup scriptAs an alternative to using Settings→Actions→Create backup from the appliance UI, you can w

Example 8 Sample backup.ps1 script# (C) Copyright 2013 Hewlett-Packard Development Company, L.P.######################################################

} catch [System.Exception] { Write-Host $_.Exception.message if ($_.Exception.getType() -eq [System.IO.IOException]) # f

##### getApiVersion: Get X_API_Version #####function getApiVersion ([int32] $currentApiVersion,[string]$hostname){ <# .DESCRIPTION

# create the request body as a hash table, then convert it to json format $body = @{ userName = $username; password = $password } | convertTo-json

function waitFor-completion ([object]$taskResource,[string]$authValue,[string]$hostname){ <# .DESCRIPTION Checks the status of t

if ($global:interactiveMode -eq 1) { Write-Host "`n" Write-Host "Backup stopped abnormally" Write-Host $erro

Write-EventLog -EventId 100 -LogName Application -Source backup.ps1 -Message $error[0].Exception.Message } }}##### Function to download the

Write-Host "Backup download complete!" } } catch [System.Management.Automation.CommandNotFoundException] { return download-Ba

Network setsYou can define a collection of Ethernet data center networks to be identified by a single name,called a network set. You can specify a net

if (($errorObject.message.length -gt 0) -and ($errorObject.recommendedActions.length -gt 0)) { $errorMessage = $errorObject

#Use exception message } if ($isSilent) { throw $errorMessage } elseif ($global:interactiveMode -eq 1) { Write-Host $

Write-Host "Could not initialize backup" } Write-EventLog -EventId 100 -LogName Application -Source backup.ps1 -Message "Could no

4. Calls start-restore() to start the restore.5. Calls restore-status() to periodically check the restore status until the restore completes.If you pa

Example 9 Sample restore.ps1 script#(C) Copyright 2013 Hewlett-Packard Development Company, L.P.######################################################

Write-Host "Enter user name" $secUsername = Read-Host -AsSecureString $username =[Runtime.InteropServices.Marshal]::PtrToStringAuto([Run

The correct password associated with username .PARAMETER hostname The appliance address to send the request to (in https

{ return } $uploadResponse = $rawUploadResponse | convertFrom-Json if ($uploadResponse.status -eq "SUCCEEDED"

$rs.write($contentDisp,0,$contentDisp.Length); [byte[]]$contentType = [System.Text.Encoding]::UTF8.GetBytes($conType + "`r`n`r`n");

$rawRestoreResponse = setup-request -uri $fullRestoreUri -method "POST" -accept "application/json" -contentType "applicat

2 Understanding the resource modelThe HP OneView appliance uses a resource model that reduces complexity and simplifies themanagement of your data cen

} if ($statusResponse.status -eq "FAILED") { Write-Host "`r`nRestore failed! System should now undergo a reset to factor

if ($authValue -ne "0") { $request.Headers.Item("auth") = $authValue } $request.Headers.Add("X-API-Version:

$loginVals = query-user if ($loginVals -eq $null) { Write-Host "Error passing user login vals from function query-host, closing program.&q

IndexAActions menu, 59activity, 173see also alertsee also taskstates, 175statuses, 175types, 174administrator passwordresetting, 148agentless manageme

Information Library, 76online help, 75submit feedback to HP, 229website, 76downlink, 123Eenclosureadding, affected resources, 87HP BladeSystem website

staged firmware and reboot actions, 85unsupported hardware, 122interconnect modification failuretroubleshooting, 211Kkey combinationsvirtual appliance

search, 66, 67securityAdministrator password, 79allowing access by support personnel, 79and DoS attacks, 24and RBAC (role-based access control), 24, 8

navigating screens, 58screen topography, 58user role, 80, 144utilizationiLO Advanced license requirement, 182meters, 181overview, 181panel, 181setting

ContentsI Learning about HP OneView...131 Learning about HP OneView...

The UI and REST APIs are organized by resource. The documentation for the UI and REST APIs arealso organized by resource.To view the complete list of

Relationship to other resourcesA connection template resource is associated with zero or more connection resources. A connectionresource is associated

Relationship to other resourcesA server hardware type resource is associated with the following resources in the resource summarydiagram (page 29):• Z

UI screens and REST API resourcesNotesREST API resourceUI screenYou use the server hardware resource,not the server profile resource, toperform action

UI screens and REST API resourcesNotesREST API resourceUI screenThe UI does not refer to enclosure type,but the enclosure type is used by theappliance

Relationship to other resourcesAn interconnect type resource is associated with the following resources in the resource summarydiagram (page 29):• Zer

Relationship to other resourcesAn interconnect resource is associated with the following resources in the resource summarydiagram (page 29):• Exactly

Relationship to other resourcesA logical interconnect group resource is associated with the following resources in the resourcesummary diagram (page 2

The server administrator is not required to know the details about interconnectconfigurationsBecause a logical interconnect is managed as a single ent

The uplink sets defined by a logical interconnect group specify the configuration for uplink setsused by logical interconnects that are members of the

2.19.4 Unmanaged devices...423 Understanding the security fea

Relationship to other resourcesA network set resource is associated with the following resources in the resource summarydiagram (page 29):• Zero or mo

UI screens and REST API resourcesREST API resourceUI screenSeveral REST API resources are related to the appliance and appliance settings. See thereso

Relationship to other resourcesA rack resource is associated with the following resources in the resource summarydiagram (page 29):• Zero or one data

All devices connected to an HP Intelligent Power Distribution Unit (iPDU) using an HP IntelligentPower Discovery (IPD) connection are added to the app

44

3 Understanding the security features of the applianceMost security policies and practices used in a traditional environment are applicable in a virtu

• Operating-system-level users are not allowed to access the appliance, with the followingexceptions:◦ A special pwreset command used only if the Infr

◦ Maintain a zone of trust, for example, a DMZ (demilitarized zone) that is separate fromproduction machines.◦ Ensure proper access controls on Fibre

3.5 Controlling access for authorized usersAccess to the appliance is controlled by roles, which describe what an authenticated user ispermitted to do

Monitor the audit logs because they are rolled over periodically to prevent them from getting toolarge. Download the audit logs periodically to mainta

5 Using the REST APIs and other programmatic interfaces...715.1 Resource operations...

Example 1 Sample audit entries: user login and logout2013-09-16 14:55:20.706 CST,Authentication,,,administrator,jrWI9ych,,,SUCCESS,LOGIN,INFO,CREDENTI

3.9.2.1 Verifying a certificateYou can verify the authenticity of the certificate by viewing it with your browser.After logging in to the appliance, c

You can import a certificate signed by a CA, and using it instead of the self-signed certificate. Theoverall steps are as follows:1. You generate a CS

information on obtaining a certificate with a browser, see “Managing certificates from a browser”(page 50)3.12 Ports needed for HP OneViewHP OneView r

3.13.1 Enabling or disabling authorized services accessWhen you first start up the appliance, you can choose to enable or disable access by on-siteaut

Table 2 Supported SSL cipher suites (continued)MacEncAuKxSSL versionSSL cipher suiteSHA1AES (128)RSADHSSL v3DHE-RSA-AES128-SHASHA1AES (128)RSARSASSL v

56

4 Navigating the graphical user interface4.1 BrowsersFor general information about browser use, see the following topics:• “Supported browsers” (page

DescriptionFeatureRight-click a link to a resource or screen to open the link in a new tab or window.NOTE: If you right-click a link while in an edit

Figure 2 Screen topographyHP OneViewOverviewCreateCreateGeneralActivityTypeVLAN IDPurposeEthernetc1 net2015GeneralPreferred bandwidth 2.5Gb/sMaximum b

III Configuration quick starts...899 Quick Start: Initial Configuration...

4.3 About the Activity sidebarThe Activity sidebar shows activities (specifically, tasks) initiated during the current session. Themost recent task is

Table 4 UI buttonsDescriptionButtonAdds items from your current data center environment (such as enclosures, server hardware,and other physical items)

Figure 6 Help sidebarHelpDocumentationHelp on this pageBrowse helpLicenseEnd-User License agreementCommunityHP OneView ForumWritten Oer12345?Help53Di

4.8.1 Status and severity iconsTaskActivityResourceSmall iconLarge iconFailed/InterruptedCriticalCriticalWarningWarningWarningSuccessInformationalOKCa

4.8.3 Informational iconsDescriptionNameIconProvides a graphical representation of the relationships between the current resource andother resourcesMa

Figure 7 Sample Map viewAdd enclosure: 192.0.2.0Apr 30 10:17AMMap1Z34AB7890ActionsvHPTC-RACK - 011Z34AB7890, interconnect 11Z34AB7890BladeSystem c7000

Figure 8 Notifications areaModelManagLocationPowerMaximumSerialGeneralOverviewA, Slot 1!The system A, Slot 1 is not configured for redundant power beca

4. Enter a search term in the Search box. Note the following:• Search terms are case insensitive.• Cutting and pasting text into the search box is sup

When you find what you are looking for in the search results, which are organized by resourcetype, select the item to navigate to it.NOTE: The Smart S

To filter that view based on a specific health status, select the health status you are interested inviewing from the Status menu.For more information

15.4.3 About network sets...11915.5 Learning more...

70

5 Using the REST APIs and other programmatic interfacesREST (Representational State Transfer) is a web service that uses basic CRUD (Create, Read, Upd

5.2 Return codesDescriptionReturn codeSuccessful operation2xxClient-side error with error message returned4xxAppliance error with error message return

determine the correct REST API version, perform /rest/version. This GET operation does notrequire an X-API-Version header. If multiple appliances are

5.11 Querying resources using common REST API parametersYou can use a set of common parameters to customize the results returned from a GET operation,

6 Accessing documentation and helpThis chapter describes how to access help from the appliance, how to access the publicly availableonline information

• Planning information, including configuration decisions to make and tasks that you might needto perform before you install an appliance, add managed

Part II Planning tasksThe chapters in this part describe data center configuration planning tasks that you might want to completebefore you install th

78

7 Planning your data center resourcesIn addition to ensuring that your environment meets the prerequisites for installation of the appliance,there are

20.2 Tasks...14320.3 About user acc

The default SNMP read community string, public, is easily guessed. You can make your SNMPenvironment more secure by changing the SNMP read community s

7.2.10 Reviewing your firewall accessThe appliance maintains a firewall that allows traffic on specific ports and blocks all unused ports.For a list o

testUS_left• The appliance does not support the filtering of resources, such as server hardware, based onphysical location (data center name). To enab

• A connection to the management LAN. HP recommends that you have separate networks formanagement and data.• The clock on the VM host must be set to t

84

8 Planning for configuration changesThis chapter identifies configuration changes that might result in a resource being taken offlinetemporarily or th

each server profile connection to reconfigure it to specify the network you added. Becauseyou must edit the server profile to edit the connection, you

• Logical Interconnects and Logical Interconnect Groups. For a server connected to a logicalinterconnect to access a network, the logical interconnect

88

Part III Configuration quick startsThe quick starts provided in this part describe the basic resource configuration tasks required to quicklybring the

22.5.3.1 License types...15922.5.3.2 License delivery...

90

9 Quick Start: Initial ConfigurationThis quick start describes the process to bring your data center resources under management ofthe appliance after

Configure appliance resources and bring your environment under managementof the applianceRelated informationRequired action or inputConfiguration step

Related informationRequired action or inputConfiguration step• Network set name• Networks to add to the network set• Indicate the untagged network(opt

Defining your power systems using the Power Delivery Devices resource enables you to monitormetrics such as consumption rates and power caps.Related i

10 Quick Start: Adding a network to an existing applianceenvironmentThis quick start describes the process to add a network to an existing appliance e

ProcessWhen you add a network to the appliance, you might need to make configuration changes to thefollowing resources:DescriptionTaskResource• Adding

DescriptionTaskResource• Applies to Ethernet networks only.• Adding a network to a network set does not require that you takeresources offline. Server

98

11 Quick Start: Adding an enclosure and connecting itsserver blades to networksThis quick start describes the process to add an enclosure to an existi