Hitachi VSP Gx00 series System Administrator Manual
  1. Manuals
  2. Brands
  3. Hitachi Manuals
  4. Storage
  5. VSP Gx00 series
  6. System administrator manual

Hitachi VSP Gx00 series System Administrator Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Hitachi Virtual Storage Platform Gx00 and
Fx00
SVOS 7.3.1
System Administrator Guide
This document provides information and instructions to help you use the maintenance utility and some of
the functions in Device Manager - Storage Navigator as needed to perform system administration tasks
and change settings for VSP Gx00 models or VSP Fx00 models. It explains the GUI features and
provides basic navigation information.
MK-94HM8016-10
December 2017

Advertisement

Table of Contents
loading

Related Manuals for Hitachi VSP Gx00 series

Summary of Contents for Hitachi VSP Gx00 series

  • Page 1 Hitachi Virtual Storage Platform Gx00 and Fx00 SVOS 7.3.1 System Administrator Guide This document provides information and instructions to help you use the maintenance utility and some of the functions in Device Manager - Storage Navigator as needed to perform system administration tasks and change settings for VSP Gx00 models or VSP Fx00 models.
  • Page 2 Materials. “Materials” mean text, data, photographs, graphics, audio, video and documents. Hitachi reserves the right to make changes to this Material at any time without notice and assumes no responsibility for its use. The Materials contain the most current information available at the time of publication.

  • Page 3: Table Of Contents

    Contents Preface....................13 Intended audience..................... 13 Product version....................13 Release notes....................13 Changes in this revision..................14 Referenced documents..................14 Document conventions..................14 Conventions for storage capacity values............16 Accessing product documentation..............17 Getting help......................17 Comments......................17 Chapter 1: System administration overview........19 System management architecture..............19 Ways to administer the storage system.............
  • Page 4 39 Accessing the maintenance utility..............40 Starting from Hitachi Command Suite............41 Starting from Hitachi Device Manager - Storage Navigator......41 Accessing a storage system without management software......42 Chapter 3: Configuring the storage system........45 System administration tasks at a glance............45 System administration using the maintenance utility.........
  • Page 5 Backing up HDvM - SN configuration files........... 52 Restoring HDvM - SN configuration files ............. 53 Changing the administrator password............... 54 System administration using NAS Manager............55 Changing the system date and time of the NAS modules......55 Miscellaneous system administration considerations........56 Modifying SVP port numbers................56 Viewing the port number used in SVP............
  • Page 6 Character restrictions for user names and passwords......78 Changing user passwords..............81 Changing user permissions..............82 Enabling or Disabling user accounts............83 Deleting user accounts................83 Releasing a user lockout.................84 Session timeout..................84 Managing user groups..................84 Roles.......................85 Built-in groups, roles, and resource groups..........87 Verifying the roles available to a user group........... 90 Checking if a role is available to a user group........
  • Page 7 Creating an LDAP configuration file............116 Creating a RADIUS configuration file............120 Creating a Kerberos configuration file...........125 User Administration for NAS Manager.............130 Administrator types and responsibilities............. 130 Adding an SMU user (an administrator)............. 131 Changing user passwords................135 Changing your own password...............135 Changing another user's password............136 Changing an SMU user profile..............
  • Page 8 Enabling TLSv1.0 and TLSv1.1 communications........156 Blocking HTTP communication to the SVP ..........156 Setting up authentication and authorization.............157 Authentication server protocols..............158 Authorization server requirements............. 158 Connecting two authentication servers............159 Connecting authentication and authorization servers........ 159 Naming a user group in Device Manager - Storage Navigator....160 SMU user authentication.................
  • Page 9 Using the Windows event log................182 Monitoring failure information in the Windows event log......183 Viewing the Windows event log..............184 Output example of the failure information..........184 Chapter 7: Managing license keys............ 187 Overview......................187 License key types.................... 187 Using the permanent key................188 Using the term key..................188 Using the temporary key................188 Using the emergency key................189...
  • Page 10 Setting up a syslog server................199 Exporting an audit log.................200 Send test message to syslog server............200 Chapter 9: Managing storage system reports........203 About storage system reports................203 Viewing configuration reports................203 Viewing configuration reports in the Reports window.........204 Creating configuration reports..............204 Deleting configuration reports..............
  • Page 11 Physical View report................... 236 CSV files......................242 AllConf.csv....................242 CacheInfo.csv.....................243 ChapUserInfo.csv..................244 ChaStatus.csv.................... 244 DeviceEquipInfo.csv...................245 DkaInfo.csv....................245 DkaStatus.csv.....................246 DkcInfo.csv....................246 DkuTempAveInfo.csv..................247 DkuTempInfo.csv..................248 DkuTempMaxInfo.csv................. 250 DkuTempMinInfo.csv.................. 251 ELunInfo.csv....................252 EnvMonInfo.csv..................255 FcSpNameInfo.csv..................256 FcSpPortInfo.csv..................257 HduInfo.csv....................258 IscsiHostInfo.csv..................258 IscsiPortInfo.csv..................259 IscsiTargetInfo.csv..................261 JnlInfo.csv....................262 LdevCapaInfo.csv..................262 LdevCountInfo.csv..................263 LdevInfo.csv....................264 LdevStatus.csv................... 267 LPartition.csv....................268 LunInfo.csv....................
  • Page 12 MlcEnduranceInfo.csv................273 ModePerLpr.csv..................274 MpPathStatus.csv..................274 MpPcbStatus.csv..................275 PcbRevInfo.csv...................276 PdevCapaInfo.csv..................277 PdevInfo.csv....................277 PdevStatus.csv...................279 PECBInfo.csv..................... 279 PkInfo.csv....................280 PpInfo.csv....................282 SMfundat.csv....................282 SsdDriveInfo.csv..................283 SsidInfo.csv....................284 SysoptInfo.csv.................... 284 WwnInfo.csv....................285 Appendix B: System option modes...........287 System option modes..................287 Glossary................... 349 Index....................363...

  • Page 13: Preface

    Readers of this document should be familiar with the following: Data processing and RAID storage systems and their basic functions. ■ Hitachi Virtual Storage Platform G200, G400, G600, G800 or Hitachi Virtual Storage ■ Platform F400, F600, F800 storage systems.

  • Page 14: Changes In This Revision

    Updated the description of system option modes (SOMs) 15 and 1106. ■ Referenced documents The following documents are referenced in this guide. Performance Guide, MK-94HM8012 ■ Hitachi SNMP Agent User Guide, MK-94HM8015 ■ Document conventions This document uses the following storage system terminology conventions: Convention Description VSP Gx00 models Refers to all of the following models, unless otherwise noted.
  • Page 15 Document conventions Convention Description Italic Indicates a document title or emphasized words in text. ■ Indicates a variable, which is a placeholder for actual text ■ provided by the user or for output by the system. Example: pairdisplay -g group (For exceptions to this convention for variables, see the entry for angle brackets.) Indicates text that is displayed on screen or entered by the user.

  • Page 16: Conventions For Storage Capacity Values

    Conventions for storage capacity values Icon Label Description WARNING Warns the user of a hazardous situation which, if not avoided, could result in death or serious injury. Conventions for storage capacity values Physical storage capacity values (for example, disk drive capacity) are calculated based on the following values: Physical capacity unit Value...

  • Page 17: Accessing Product Documentation

    Getting help Hitachi Vantara Support Connect is the destination for technical support of products and solutions sold by Hitachi Vantara. To contact technical support, log on to Hitachi Vantara Support Connect for contact information: https://support.hitachivantara.com/en_us/ contact-us.html. Hitachi Vantara Community is a global online community for Hitachi Vantara customers, partners, independent software vendors, employees, and prospects.

  • Page 19: Chapter 1: System Administration Overview

    Chapter 1: System administration overview This chapter provides a high-level view of system administration tasks for the Hitachi Virtual Storage Platform G200, G400, G600, G800 or Hitachi Virtual Storage Platform F400, F600, F800 storage systems. It describes: Software architecture and access to system administration tools from management ■...

  • Page 20: Ways To Administer The Storage System

    Hitachi Virtual Storage Platform F400, F600, F800 storage systems, including those with NAS modules. Users with storage systems that do not have NAS modules use Hitachi Storage Advisor (HSA), Device Manager - Storage Navigator, and the maintenance utility to administer block operations.

  • Page 21: Unified Management Of Block Storage And File Storage

    Unified management of block storage and file storage Integrated configuration workflows with Hitachi recommended practices to ■ streamline storage provisioning and data protection tasks. Common, centralized management for supported storage systems. ■ A REST-based API to provide full management programmability and control in ■...

  • Page 22: Dashboard

    Dashboard Dashboard Once a storage system has been onboarded to Storage Advisor, the dashboard displays as soon as you log in. The Storage Advisor dashboard provides the tools to easily configure, manage, and monitor storage systems. From the Storage Advisor dashboard, you can access managed resources and provision storage in the context of a given storage system or server.
  • Page 23 Dashboard Click Servers to view and add servers. ■ Click Fabric Switches to view and add fabric switches. ■ Click Virtual File Servers to view and add virtual file servers. Displays if the storage ■ system includes NAS modules. Alert tiles Across the top of the dashboard are tiles that display alerts for storage capacity, data protection, jobs, and hardware.
  • Page 24 Dashboard Note: The Thin Free and Thin Used capacities include both Thin and Snap. Thin Used plus Thin Free equals Allocated to Pools. Physical capacity allocated to file pools is indicated by medium blue in the File view ■ and by light blue in the Unified view. File pool utilization is indicated by light blue in the File view and by medium blue in ■...
  • Page 25 Analyzing data in the dashboard If no compression is in use then physical used capacity is the used capacity of ■ the pool(s). Analyzing data in the dashboard The dashboard is a visual display of the important information needed to analyze the overall capacity utilization and health of your storage system.
  • Page 26 Analyzing data in the dashboard Review the information gauge for each storage system to identify which storage ■ system needs additional capacity. Review unused disks for each storage system to determine if any raw unused capacity ■ is available for parity group creation. Capacity subscription beyond the total available capacity should not be an issue if your thin capacity utilization is well within the total capacity.

  • Page 27: Inventory And Resource Information

    Inventory and resource information Inventory and resource information The inventory pages display details about the storage system resources in Storage Advisor. These resources include storage systems, servers, ports, and pools, volumes, parity groups, external parity groups (if the storage system has external storage), and replication groups.

  • Page 28: Maintenance Utility

    Maintenance utility Maintenance utility The maintenance utility allows you to perform administration tasks on VSP Gx00 models or VSP Fx00 models. You can access this tool from either HDvM - SN, SMU, or the management software. You can use the maintenance utility to configure settings such as licenses, syslog, alerts, and network configuration.

  • Page 29: Nas Manager

    NAS Manager The maintenance utility online help provides procedural information for supported storage system administration tasks. Links to storage system tasks, search functions, and a glossary are included. Note: Self-service features that are used to install and remove hardware components and to update the firmware are currently available for use only by customer support personnel or by authorized service providers.
  • Page 30 Chapter 1: System administration overview System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 31: Chapter 2: Preparing Your Management Software

    Configuring Device Manager - Storage Navigator To configure the storage system using Hitachi Device Manager - Storage Navigator, set up a client computer, and then log in to Hitachi Device Manager - Storage Navigator. Setting up a management client Before running Device Manager - Storage Navigator on a management client, certain web browser guidelines must be observed.

  • Page 32: General Requirements

    General requirements Configuring the server if you use a physical or virtual server running on Windows as a ■ management client. General requirements An SVP, required for system maintenance, must be connected to the storage system. ■ Device Manager - Storage Navigator connects to the SVP through a TCP/IP network. Several storage systems can be managed by one management client.
  • Page 33 Requirements for Windows-based computers Software requirements Operating Java Runtime Adobe Flash system Architecture Browser Environment (JRE) Player Windows 7 SP1 32 bit or 64 bit Internet Explorer JRE 7.0 Update 67 14.0 11.0 Windows 8.1 32 bit or 64 bit Internet Explorer JRE 7.0 Update 67 14.0...
  • Page 34 Requirements for UNIX/Linux-based computers Note: To use Device Manager - Storage Navigator secondary windows, first install Java Runtime Environment (JRE). Requirements for UNIX/Linux-based computers Note: The combinations of operating system, architecture, browser, Java Runtime Environment, and Adobe Flash Player described below are fixed requirements.

  • Page 35: Setting Up Tcp/Ip For A Firewall

    Setting up TCP/IP for a firewall Java Runtime Adobe Flash Operating system Architecture Browser Environment (JRE) Player Notes: IPv6 HTTPS connections from Firefox are not supported. ■ Use Adobe Flash Player with the same architecture (32 bit or 64 bit) as the browser. ■...

  • Page 36: Requirements For Using Hdvm - Sn Secondary Windows

    Requirements for using HDvM - SN secondary windows To use the Device Manager - Storage Navigator secondary window, you must enable it in advance. For details about enabling the secondary window, see Enabling the Device Manager - Storage Navigator secondary window (on page 37) .

  • Page 37: Enabling The Device Manager - Storage Navigator Secondary Window

    Enabling the Device Manager - Storage Navigator secondary window Enabling the Device Manager - Storage Navigator secondary window The Device Manager - Storage Navigator secondary window must be enabled before it can be used. Before you begin You must have Storage Administrator (View Only) role to perform this task. ■...

  • Page 38: Normal Login

    Normal login 4. To prevent unauthorized use of the superuser account, change the password immediately after you log in. Click Settings > User Management > Change Password to change your password. After you log in, the Device Manager - Storage Navigator main window opens. You can navigate using the menu, tree, or General Tasks.

  • Page 39: Changing Your Password

    Changing your password 3. When the Storage Device List window opens, select the storage system. The Device Manager - Storage Navigator login window appears. 4. Type the user ID and password. 5. Click Login. 6. If the Security Information dialog box appears, click Yes. 7.

  • Page 40: Accessing The Maintenance Utility

    4. Click Close to close the dialog box. Accessing the maintenance utility To configure the storage system using the maintenance utility, start the maintenance utility from Hitachi Device Manager - Storage Navigator or the management software. Note: Click in the window to see the help menu for the description of the ■...

  • Page 41: Starting From Hitachi Command Suite

    Procedure 1. Start Hitachi Command Suite. 2. In the Hitachi Command Suite main window, click the Resources tab, and then click Storage Systems from the tree view. 3. Expand the tree, and then right-click a storage system and click Other Functions.

  • Page 42: Accessing A Storage System Without Management Software

    Accessing a storage system without management software Menu Replace part Cache Memory replacement/installation Cache memory installed on controller 1. for CTL1 Cache Memory replacement/installation Cache memory installed on controller 2. for CTL2 Other hardware maintenance Component other than a controller, fan, and LAN blade.
  • Page 43 Accessing a storage system without management software If a message indicates that the enhanced security configuration is enabled on the ■ computer, select In the future, do not show this message and click OK. If the SVP is set to support SSL-encrypted communication and security messages ■...
  • Page 44 Chapter 2: Preparing your management software System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 45: Chapter 3: Configuring The Storage System

    Chapter 3: Configuring the storage system When configuring the storage system, you must set storage system information, set up security, and register the SVP. This chapter provides information about configuring the storage system. System administration tasks at a glance The following table summarizes key system administration tasks. The tool used to perform these tasks depends on whether the storage system contains NAS modules.
  • Page 46 System administration tasks at a glance Block-only storage systems (no NAS Block and file storage systems Task modules installed) (NAS modules installed) Change administrator Maintenance utility NAS Manager password Configuring the See the Network Administration storage system (on Guide (MK-92HNAS008) page 45) Edit the login message Maintenance utility...
  • Page 47 System administration tasks at a glance Block-only storage systems (no NAS Block and file storage systems Task modules installed) (NAS modules installed) Registration Device Manager - NAS Manager to register the Storage Navigator to service. register the service See the Server and Cluster processor host name.

  • Page 48: System Administration Using The Maintenance Utility

    System administration using the maintenance utility Block-only storage systems (no NAS Block and file storage systems Task modules installed) (NAS modules installed) Installing licenses Maintenance utility NAS Manager License keys (on License keys (on page 187) page 187) Enabling and disabling Maintenance utility NAS Manager licenses...

  • Page 49: Enabling Ipv6 Communication

    Enabling IPv6 communication The console has established a remote desktop connection with the SVP. ■ The management utility window is displayed on the console. ■ On the management console that is connected to the SVP: Procedure 1. On the Windows 7 desktop, click Start > Control Panel. 2.

  • Page 50: Changing Network Permissions

    Changing network permissions Changing network permissions This procedure explains how to block or allow HTTP blocking. Procedure 1. In the maintenance utility, click Administration to expand the Administration navigation pane. 2. Click Network Settings. The Network Settings window displays the current network settings and permissions.

  • Page 51: Registering The Primary Svp Host Name

    Registering the primary SVP host name logged on. Wait until their processes are complete before releasing the system lock. Before you begin You must have the Storage Administrator (View & Modify) role to complete this procedure. Procedure 1. In the maintenance utility Menu navigation tree, click System Management. 2.

  • Page 52: System Administration Using Device Manager - Storage Navigator

    System administration using Device Manager - Storage Navigator Enter the SVP host name and IP address in the DNS server or the hosts file of the management client. You can register any host name to the DNS server or the hosts file, but there are restrictions on the letters you can use for the host name.

  • Page 53: Restoring Hdvm - Sn Configuration Files

    Restoring HDvM - SN configuration files Display settings (table width) for each Device Manager - Storage Navigator user ■ Device Manager - Storage Navigator login warning messages ■ Device Manager - Storage Navigator task information ■ SMI-S application settings ■ SSL certification for HTTPS/SMI-S/RMI ■...

  • Page 54: Changing The Administrator Password

    Changing the administrator password The SVP is configured so that the service does not start automatically when starting ■ the system. See the Hardware Reference Guide for your storage system model for information about the SVP configuration method. Procedure 1. Copy the backup file to any folder in the SVP. 2.

  • Page 55: System Administration Using Nas Manager

    When the system date and time are set by NAS Manager, they are also reflected in the system date and time of the storage system. Tip: See the Hitachi NAS Platform Server and Cluster Administration Guide for more details about changing the system date and time of the NAS modules.

  • Page 56: Miscellaneous System Administration Considerations

    Miscellaneous system administration considerations Tip: You do not have to enter Time and Date because the settings are acquired from the NTP server. 6. Click OK. The window changes to the Login window a few minutes later. Miscellaneous system administration considerations Modifying SVP port numbers You can change SVP port numbers to any arbitrary number.

  • Page 57: Viewing The Port Number Used In Svp

    Viewing the port number used in SVP Port number key Initial port Corresponding SVP name Protocol number software version RMIIFRegist 1099 83-01-20-XX/00 or later PreRMIServer 51100 83-01-20-XX/00 or later Automatically 83-03-01-XX/00 or later assigned DKCManPrivate 11099 83-01-24-XX/00 or later 83-01-24-XX/00 or later SMIS_CIMOM SMI-S 5989...

  • Page 58: Effects Of Changing Svp Port Numbers

    URL for Device Manager - Storage MAPPWebServerHttps Manager - Storage Navigator (on page 37) Navigator login In Hitachi Command Suite: Hitachi Command Suite Installation and You must change the HCS Configuration Guide port number to be the same number.

  • Page 59: Changing The Svp Port Number

    Changing the SVP port number User reference guide on changing the SVP port Port number key name Effects number You must change the SMI-S Hardware Reference Guide port number to the same for your storage system number. SMIS_CIMOM You must change the SMI-S Hardware Reference Guide port number to the same for your storage system...

  • Page 60: Initializing The Svp Port Number

    Initializing the SVP port number Note: Do not change the management file of the port number. ■ Close the management file of the port number while executing the ■ command for changing or initializing. If the SVP software version of the registered storage system does not ■...

  • Page 61: Reassigning An Automatically Assigned Port Number

    Reassigning an automatically assigned port number 3. In the folder where the .bat file is located, execute the following command: C:\MAPP\wk\Supervisor\MappIniSet>MappSetPortInit.bat 4. An initialization confirmation message box displays. If you want to continue, enter Y, and then press the Enter key. If you want to cancel the task, enter N, and then press the Enter key.

  • Page 62: Initializing And Reassigning An Automatically Assigned Port Number

    Initializing and reassigning an automatically assigned port number Initializing and reassigning an automatically assigned port number You can initialize the port number that is automatically assigned to the storage system. Caution: Stop the service of the storage system which has the status Ready in the ■...

  • Page 63: Initializing The Range Of An Automatically Assigned Port Number

    Initializing the range of an automatically assigned port number Procedure 1. Open the Windows command prompt as administrator on the SVP. 2. In the folder where the .bat file is located, execute the following command: C:\MAPP\wk\Supervisor\MappIniSet>MappPortRangeSet.bat port-number- key-name port-number-range Note: A space is required between MappPortRangeSet.bat and port- ■...
  • Page 64 Procedure 1. Open the Windows command prompt as administrator on the SVP. 2. In the folder where the .bat file is located, execute the following command: C:\MAPP\wk\Supervisor\MappIniSet>MappPortRangeInit.bat 3. A confirmation message box displays. If you want to continue, enter Y, and then press the Enter key. ■...

  • Page 65: Chapter 4: User Administration

    Chapter 4: User administration This chapter describes various user roles, permissions, and groups available to manage your storage system. User administration for maintenance utility The maintenance utility allows you to set up and manage user accounts. Required roles for operating Maintenance Utility You can control the availability of using each operation window of Maintenance Utility for a user by registering the user in the user group and assigning the user with the appropriate role.

  • Page 66: Setting Up User Accounts

    Setting up user accounts Maintenance Utility operation window Required role name Power on Storage System Support Personnel or User Maintenance Power off Storage System Support Personnel or User Maintenance Edit UPS Mode Support Personnel or User Maintenance Edit Login Message Storage Administrator (Initial Configuration) Select Cipher Suite...
  • Page 67 Setting up user accounts 3. Create a new user account. Specify the User Name, Account Status, Authentication, and User Group. Click Finish. Item Description User Name Chapter 4: User administration System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 68: Disabling User Accounts

    Disabling user accounts Account Status The following statuses are available: Enable: User can use the account. Disable: User cannot use the account or log in to the storage management software. Authentication The following methods are available: Local: Does not use authentication server.
  • Page 69 Disabling user accounts Procedure 1. In the Maintenance Utility window, click Administration > User Administration. 2. In the User Groups tab, click the user group belonging to the user. 3. Click the Users tab, and then select the user account to disable. 4.
  • Page 70 Disabling user accounts 6. Confirm the settings, and then click Apply. 7. When a completion message appears, click Close. Chapter 4: User administration System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 71: Removing User Accounts

    Removing user accounts Removing user accounts Security administrators can remove a user account when the account is no longer in use. Built-in user accounts cannot be deleted. If deleting the current login user account, you can continue the storage management software operation until you log out. Note: To delete the user account specified by the registered storage system in the Storage Device List window, click Stop Service of the registered storage system.
  • Page 72 Removing user accounts 3. Click the Users tab, and then select the user to remove. 4. Click Remove. The Confirm window opens. 5. In the Confirm window, confirm the settings, and then click Apply. Chapter 4: User administration System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 73: Backing Up User Accounts

    Backing up user accounts 6. At the completion message, click Close. Backing up user accounts Procedure 1. Click User Account Information > Backup. 2. Specify a storage destination and a file name in the displayed window and download the file. Chapter 4: User administration System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 74: Restoring User Account Information

    Restoring user account information 3. When the following message appears, click Close. Restoring user account information Procedure 1. Click User Account Information > Restore The Restore User Account window opens. 2. Specify file names to be restored, and then click Apply. 3.

  • Page 75: Managing Users, User Groups, And Accounts

    Managing users, user groups, and accounts Managing users, user groups, and accounts You can use the Device Manager - Storage Navigator to create, modify, or delete users, user groups, and accounts. This chapter describes how to define the users and user groups that will manage your storage system.

  • Page 76: Workflow For Creating And Managing User Accounts

    Workflow for creating and managing user accounts For user groups whose roles are other than Storage Administrator, All Resource ■ Groups Assigned is automatically set to Yes. If you delete all the roles except Storage Administrator, reassign resource groups to the user group because All Resource Groups Assigned is automatically set to No.

  • Page 77: User Tasks

    User tasks User tasks Procedure 1. Use the user name and password provided by the administrator to log in to Device Manager - Storage Navigator. 2. Click Settings > User Management > Change Password to change the password to your own password. Managing user accounts You will need to use the local administrator account created during the initial setup step, or create administrator accounts using the procedures described in this chapter as...

  • Page 78: Character Restrictions For User Names And Passwords

    Character restrictions for user names and passwords Table 4 User name and password for logging in to CCI Length in Item characters Characters that can be used User name 1-63 Alphanumeric characters ■ The following symbols: ■ - . @ _ Password 6-63 Alphanumeric characters...
  • Page 79 Character restrictions for user names and passwords The number of characters and types of characters that can be used vary between Device Manager - Storage Navigator, CCI, and NAS Manager. If a user uses all three programs, specify a user name and a password that satisfy the following conditions. Characters that can be Item Length in characters...
  • Page 80 Character restrictions for user names and passwords Length in Item characters Characters that can be used Password 6-256 Alphanumeric (ASCII code) characters ■ All symbols ■ You cannot use the quotation mark (") or backslash (\) symbols when you enter a password in a screen from the Tool Panel dialog box.

  • Page 81: Changing User Passwords

    You can change or reissue passwords for other users by using Device Manager - Storage Navigator. Caution: When using Hitachi Command Suite, you need to change information, such as passwords, registered in Hitachi Command Suite. For details, see the section describing how to change storage system settings in the Hitachi Command Suite User Guide.

  • Page 82: Changing User Permissions

    Changing user permissions 2. On the User Groups tab, select the user group to which the user belongs. 3. On the User tab, select the user whose password you want to change. 4. In the User tab, click Change Password. 5.

  • Page 83: Enabling Or Disabling User Accounts

    Enabling or Disabling user accounts Enabling or Disabling user accounts To allow or prevent a user from logging in to Device Manager - Storage Navigator and NAS Manager, follow the steps below. Caution: Do not select any user account used to connect to a storage system that is registered in the Storage Device List window.

  • Page 84: Releasing A User Lockout

    Releasing a user lockout 5. In the Delete Users window, select the user to be deleted, then click Finish. 6. In the Confirm window, check the settings. 7. Click Apply. The task is now registered. If the Go to tasks window for status check box is checked, the Task window opens to show the status of the task.

  • Page 85: Roles

    Roles For the user groups whose roles are other than the Storage Administrator, All ■ Resource Groups Assigned is automatically set to Yes. If you delete all the roles except the Storage Administrator, reassign resource groups to the user group because All Resource Groups Assigned is automatically set to No.
  • Page 86 Roles Role Capabilities Security Administrator Configuring user accounts ■ (View & Modify) Creating encryption keys and configuring encryption settings ■ Viewing and switching where encryption keys are generated ■ Backing up and restoring encryption keys ■ Deleting encryption keys backed up in the key SVP ■...

  • Page 87: Built-In Groups, Roles, And Resource Groups

    Built-in groups, roles, and resource groups Role Capabilities Storage Administrator Configuring caches ■ (Provisioning) Configuring volumes, pools, and virtual volumes ■ Formatting and shredding volumes ■ Configuring external volumes ■ Configuring Dynamic Provisioning ■ Configuring host groups, paths, and WWN ■...
  • Page 88 Built-in groups, roles, and resource groups Resource Built-in group Role group Security Administrator (View & All Resource Administrator ■ Modify) Groups Assigned Audit Log Administrator (View & ■ Modify) Storage administrator (Initial ■ Configuration) Storage Administrator (System ■ Resource Management) Storage Administrator ■...
  • Page 89 Built-in groups, roles, and resource groups Resource Built-in group Role group Security Administrator (View & All Resource Security Administrator (View ■ & Modify) Modify) Groups Assigned Audit Log Administrator (View & ■ Modify) Storage Administrator (View Only) ■ Audit Log Administrator (View Audit Log Administrator (View Only) All Resource ■...

  • Page 90: Verifying The Roles Available To A User Group

    Verifying the roles available to a user group Verifying the roles available to a user group You can use Device Manager - Storage Navigator to verify the roles that are available to use with any user group. Before you begin You must have the Security Administrator (View Only) role to perform this task.

  • Page 91: Changing A User Group Name

    11. Click Apply. The task is now registered. If the Go to tasks window for status check box is checked, the Task window opens to show the status of the task. Changing a user group name You can change the name of a user group by using Hitachi Device Manager - Storage Navigator. Before you begin You must have the Security Administrator (View &...

  • Page 92: Changing User Group Permissions

    Changing user group permissions Changing user group permissions You can change the permissions that are assigned to user groups by using Hitachi Device Manager - Storage Navigator. Before you begin You must have the Security Administrator (View & Modify) role to perform this task.

  • Page 93: Deleting A User Group

    To avoid such problems, use Hitachi Resource Partition Manager software to set up resource groups that allow you to manage one storage system as multiple virtual private storage systems.

  • Page 94: System Configuration Using Resource Groups

    System configuration using resource groups System configuration using resource groups Configuring resource groups prevents the risk of data leakage or data destruction by another Storage Administrator in another resource group. The Storage Administrator considers and plans which resource should be managed by which user, and then the Security Administrator creates resource groups and assigns each resource to the resource groups.
  • Page 95 Example of resource groups sharing a port Example of resource groups sharing a port If you have a limited number of ports, you can still operate a storage system effectively by sharing ports using resource groups. The following example shows the system configuration of an in-house division providing virtual private storage system for two divisions.
  • Page 96 Example of resource groups not sharing ports 3. The Security Administrator creates the user groups. 4. The Security Administrator assigns the resource groups to the user groups. 5. The Storage Administrator in the system division sets a port. 6. The Security Administrator assigns resources to the resource groups. 7.

  • Page 97: Meta_Resource

    Meta_resource Configuration workflow for resource groups not sharing a port 1. The system division forms a plan about creating resource groups and the assigning resources to the groups. 2. The Security Administrator creates the resource groups. 3. The Security Administrator creates the user groups. 4.

  • Page 98: Operations In A Resource Group For Nas Modules

    Operations in a resource group for NAS modules A user who has All Resource Groups Assigned set to Yes can access all resources in the storage system. For example, if a user is a Security Administrator (with View & Modify privileges) and a Storage Administrator (with View and Modify privileges) and All Resource Groups Assigned is Yes on that user account, the user can edit the storage for all the resources.

  • Page 99: Managing Resource Groups

    Managing resource groups Managing resource groups Managing resource groups includes creating, editing, and deleting resource groups. Creating resource groups When you create a resource group, you enter a name and assign the desired resources (parity groups, LDEVs, ports, host groups, and iSCSI targets) to the new group. You can create more than one resource group at a time.
  • Page 100 Deleting resource groups Duplicate occurrences of the same name are not allowed. ■ Resource group names can include alphanumeric characters, spaces, and the ■ following symbols: ! # $ % & ' ( ) + - . = @ [ ] ^ _ ` { } ~ Resource group names are case-sensitive.

  • Page 101: Resource Access Requirements For Device Manager - Storage Navigator Operations

    Resource access requirements for Device Manager - Storage Navigator operations Before you begin The Security Administrator (View & Modify) role is required to perform this task. Procedure 1. In the Explorer pane, expand the Storage Systems tree, click the Administration tab, select Resource Groups.
  • Page 102 Access requirements for Encryption License Key Operation name Condition Create pools Volumes to be specified as pool-VOLs must be assigned to the Storage Administrator group permitted to manage Expand pools them. All the volumes that are specified when creating a pool must belong to the same resource group.
  • Page 103 Access requirements for LUN Manager Operation name Condition Add LUN paths When you specify host groups and open the Add LUN Paths window, the specified host groups must be assigned to the Storage Administrator group permitted to manage them. When you specify LDEVs and open the Add LUN paths window, the specified LDEVs must be assigned to the Storage Administrator group permitted to manage them.
  • Page 104 Access requirements for LUN Manager Operation name Condition Copy LUN paths The specified host groups and the LDEVs where the paths are set must be assigned to the Storage Administrator group permitted to manage them. Edit command devices LDEVs where the specified paths are set must be assigned to the Storage Administrator group permitted to manage them.
  • Page 105 Access requirements for LUN Manager Operation name Condition Delete LUN paths When you specify an iSCSI target and open the Delete LUN Paths window, the specified iSCSI target must be assigned to the Storage Administrator group permitted to manage them. When you specify LDEVs and open the Delete LUN Paths window, the specified LDEVs must be assigned to the Storage Administrator group permitted to manage them.
  • Page 106 Access requirements for Performance Monitor Operation name Condition Create iSCSI targets When you open the Create iSCSI targets window by specifying iSCSI targets, the specified iSCSI targets must be assigned to the Storage Administrator group permitted to manage them. Edit iSCSI targets The specified iSCSI targets and ports must be assigned to the Storage Administrator group permitted to manage them.
  • Page 107 Access requirements for Thin Image Access requirements for Thin Image The following table specifies the resource access requirements for Thin Image operations. Operation name Condition Create LDEVs If LDEVs for Thin Image are created, the following must be assigned to the Storage Administrator group that is permitted to manage them.
  • Page 108 Access requirements for global-active device Operation name Condition Add Remote Connection Specified initiator ports must be assigned to the user. Edit Remote Connection Operation can be performed with no conditions. Options Create Pairs Primary volumes must be assigned to the user. Initiator ports of remote paths that are connected with the primary volume in the remote storage must be assigned to the user.
  • Page 109 Access requirements for Universal Replicator Operation name Condition Create Pairs Primary volumes must be assigned to the user. Initiator ports of remote paths that are connected with the primary volume in the remote storage must be assigned to the user. Split Pairs Specified primary volumes or secondary volumes must be assigned to the user.
  • Page 110 Access requirements for Universal Replicator Operation name Condition Create Journals All LDEVs that are specified when creating a journal must belong to the same resource group. Volumes to be assigned to a journal must be assigned to the user. Assign Journal Volumes Volumes to be assigned to a journal must be assigned to the user.
  • Page 111 Access requirements for Universal Volume Manager Operation name Condition Edit Mirror Options All data volumes configuring the specified journal must be assigned to the user. Journal volumes must be assigned to the user. Remove Journals Journal volumes must be assigned to the user. Edit Remote Connection Initiator ports of remote paths that are connected to a Options...
  • Page 112 Access requirements for Universal Volume Manager Operation name Condition Reconnect external All the external volumes belonging to the specified external storage systems storage system and all the LDEVs allocated to that external volumes must be assigned to the Storage Administrator group permitted to manage them.
  • Page 113 Access requirements for Virtual LUN Operation name Condition Reconnect external Ports of the specified external paths and all the external volumes connecting with those external paths must be paths assigned to the Storage Administrator group permitted to manage them. When you specify By Ports, all the external paths connecting with the specified ports and all the external volumes connecting with the external paths must be assigned to the Storage Administrator group permitted to manage them.
  • Page 114 Access requirements for Virtual Partition Manager Operation name Condition Restore LDEVs When you specify LDEVs and open the Restore LDEVs window, the specified LDEVs must be assigned to the Storage Administrator group permitted to manage them. When you specify a parity group and open the Restore LDEVs window, the specified parity group and all the LDEVs in the parity group must be assigned to the Storage Administrator group permitted to manage them.
  • Page 115 Access requirements for Volume Shredder Operation name Condition Migrate parity groups When you specify virtual volumes, the specified LDEV must be assigned to the Storage Administrator group permitted to manage them. When you specify a parity group, the specified parity group must be assigned to the Storage Administrator group permitted to manage them.

  • Page 116: Creating Configuration Files

    Creating configuration files Operation name Conditions Add SPM groups and WWNs Delete SPM groups Set priority of SPM groups (attribute/upper limit) Rename SPM groups Add WWNs Delete WWNs Initialization All ports must be assigned to the Storage Administrator group permitted to manage them. Set threshold Creating configuration files Authentication servers and authorization servers must be configured using configuration...
  • Page 117 Creating an LDAP configuration file auth.ldap.PrimaryServer.timeout=3 auth.ldap.PrimaryServer.attr=sAMAccountName auth.ldap.PrimaryServer.searchdn=CN=sample1,CN=Users,DC=domain,DC=local auth.ldap.PrimaryServer.searchpw=passwordauth.ldap.PrimaryServer.basedn=CN= Users,DC=domain,DC=local auth.ldap.PrimaryServer.retry.interval=1 auth.ldap.PrimaryServer.retry.times=3 auth.ldap.PrimaryServer.domain.name=EXAMPLE.COM The LDAP attributes are defined in the following table. Required / Attribute Description Optional Default value auth.server.type Type of an authentication Required None server. Specify ldap. auth.server.name The name of an authentication Required None...
  • Page 118 Creating an LDAP configuration file Required / Attribute Description Optional Default value LDAP protocol to use. Rquired None auth.ldap.<server_ name>.protocol ldaps: Uses LDAP over SSL/ ■ TLS. starttls: Uses StartTLS. ■ When you specify "true" to auth.ldap.<server_name>.dns_ lookup, specify ldaps. auth.ldap.<server_ A host name, an IPv4 address Optional...
  • Page 119 Creating an LDAP configuration file Required / Attribute Description Optional Default value DN of the user for searching. If Otional None auth.ldap.<server_ name>.searchdn omitted, [value_of_attr]=[Login_ID], [value_ of _basedn] is used for bind authentication. auth.ldap.<server_ User password that is used for Required None name>.searchpw...

  • Page 120: Creating A Radius Configuration File

    Creating a RADIUS configuration file Required / Attribute Description Optional Default value Optional False auth.ldap.<server_ Information about whether to name>.dns_lookup search the LDAP server with the information registered in the SRV records in the DNS server. true: Searches with the ■...
  • Page 121 Creating a RADIUS configuration file Caution: If you save the configuration file when using the Windows standard Notepad application, specify ANSI for the letter code. If you use an editor other than the memo pad and have the YTF-8 BOM setting, specify No BOM then save.
  • Page 122 Creating a RADIUS configuration file Required / Default Attribute Description Optional value Required None auth.server.name The name of an authentication server. When registering a primary and secondary server, use a comma to separate the names. The name of the server, including the primary name, secondary name, and the comma (1 byte) must be 64 bytes or less.
  • Page 123 Creating a RADIUS configuration file Required / Default Attribute Description Optional value RADIUS secret key used for PAP or Required None auth.radius.server- name.secret CHAP authentication auth.radius.server- Retry times when the connection to Optional name.retry.times the RADIUS server fails. Must be between 0 and 3. 0 means no retry.
  • Page 124 Creating a RADIUS configuration file Required / Default Attribute Description Optional value Optional false auth.radius.server- Information about whether to name.dns_lookup search the LDAP server with the information registered in the SRV records in the DNS server. true: Searches with the ■...

  • Page 125: Creating A Kerberos Configuration File

    Creating a Kerberos configuration file Required / Default Attribute Description Optional value Optional auth.radius.domain- The number of seconds before the name.timeout connection to the LDAP server times out. Must be between 1 and 302. auth.radius.domain- Retry interval in seconds when the Optional name.retry.interval connection to the LDAP server fails.
  • Page 126 Creating a Kerberos configuration file auth.kerberos.<attribute>=<value> auth.group.<realm name>.<attribute>=<value> A full example is shown below: auth.server.type=kerberos auth.group.mapping=true auth.kerberos.default_realm=example.com auth.kerberos.dns_lookup_kdc=true auth.kerberos.clockshow=300 auth.kerberos.timeout=10 auth.group.example.com.searchdn=CN=sample1,CN=Users,DC=domain,DC=localauth. group.example.com.searchpw=passwordauth.ldap.PrimaryServer.basedn=CN=Users, DC=domain,DC=local The Kerberos attributes are defined in the following table. Table 7 Kerberos definition (for authentication server) Required / Attribute Description Optional...
  • Page 127 Creating a Kerberos configuration file Required / Attribute Description Optional Default value This is a switch that determines Optional false auth.kerberos.dns_l ookup.kdc which information registered in the SRV records in the DNS server to use when searching the Kerberos server. true: Searches with the ■...
  • Page 128 Creating a Kerberos configuration file Required / Attribute Description Optional Default value The realm name set to the Optional None auth.kerberos.<real m _name>.realm Kerberos server. auth.kerberos.<real The host name, the IPv4 Optional None m_name>.kdc address, and the port number of the Kerberos server. Specify these in the format of "<Host name or IP address>[:Port number]".
  • Page 129 Creating a Kerberos configuration file Attribute Description Required / Optional Default value auth.group.<realm_ DN of the user for Required None searching. name>.searchdn auth.group.<realm_ Password of the Required None name>.searchpw user for searching. Specify the same password that is registered in the LDAP server.

  • Page 130: User Administration For Nas Manager

    User Administration for NAS Manager Attribute Description Required / Optional Default value Notes: 1. If the specified value is not valid, the default value will be used. 2. To use symbols such as + ; , < = and >, enter a backslash (\) before each symbol. When using multiple symbols, each symbol must have a backslash before it.

  • Page 131: Adding An Smu User (An Administrator)

    Adding an SMU user (an administrator) Server+Storage Administrators manage servers, clusters, and storage devices, as ■ specified in the administrator profile created by the Global Administrator. Server+Storage administrators can manage everything Server Administrators and Storage Administrators can manage: file systems, file services, or file system related features and functions, and they can also manage storage devices and their components.
  • Page 132 Adding an SMU user (an administrator) Field/Item Description Name The name of the new user account. This name will be requested when logging in to the SMU. The rules for user names are: For Global administrators only, if the user will access the ■...
  • Page 133 Adding an SMU user (an administrator) Field/Item Description Confirm Confirm the password entered in the previous field by entering Password it in again. Only applies when the Local User type is selected. User Level Specify the level for the new administrator that you are creating.
  • Page 134 Adding an SMU user (an administrator) Field/Item Description Read-Only User Defines the user as read-only. A read-only user may be given Global, Server, Storage or Server+Storage access. Based on their defined role, an individual user may or may not perform specific tasks, such as viewing, creating, or modifying files and data.

  • Page 135: Changing User Passwords

    Changing user passwords 5. If the User Type is local, specify the initial login password for the new administrator by filling in the Password and the Confirm Password fields. 6. Specify the user level for the new administrator that you are creating. You can select one of the following: Global ■...

  • Page 136: Changing Another User's Password

    Changing another user's password Procedure 1. Navigate to Home > SMU Administration > Current User Password to display the Current User Password page. The following table describes the fields on this page: Field/Item Description User Name Displays your user login name (cannot be changed). Current Displays a series of dots representing the currently specified Password...
  • Page 137 Changing another user's password For systems with NAS modules, use an external NAS Manager or the maintenance ■ utility to change the user password. Procedure 1. Navigate to Home > SMU Administration > SMU Users to display the SMU Users page.
  • Page 138 Changing another user's password Item/Field Description User Level Displays the user level or type of administrative role. Global Administrators can manage everything in the ■ system: file systems, file services, or file system related features and functions, storage devices and their components.
  • Page 139 Changing another user's password Item/Field Description RADIUS servers. RADIUS users cannot be defined as read-only. If the User Level is Global, you can select or clear the ■ Allow CLI Access check box. If the User Level is Storage, Server, or Server+Storage, ■...

  • Page 140: Changing An Smu User Profile

    Changing an SMU user profile Item/Field Description Selected HNAS Not available for global administrators, because global Servers administrators are allowed to manage all storage and all servers. For server administrators, lists the HNAS servers that the administrator can manage. Note that a Server administrator cannot manage the storage attached to these servers.
  • Page 141 Changing an SMU user profile Item/Field Description Name Administrator’s user name. Cannot be changed. User Type Describes if the user is authenticated by the SMU itself (local users), or if the user is authenticated by a RADIUS server. Password and For users authenticated by the SMU only (local users).
  • Page 142 Changing an SMU user profile Item/Field Description User Level Displays the user level or type of administrative role. Global Administrators can manage everything in the ■ system: file systems, file services, or file system related features and functions, storage devices and their components.
  • Page 143 Changing an SMU user profile Item/Field Description RADIUS servers. RADIUS users cannot be defined as read-only. If the User Level is Global, you can select or clear the ■ Allow CLI Access check box. If the User Level is Storage, Server, or Server+Storage, ■...
  • Page 144 Item/Field Description Selected HNAS Not available for global administrators, because global Servers administrators are allowed to manage all storage and all servers. For server administrators, lists the HNAS servers that the administrator can manage. Note that a Server administrator cannot manage the storage attached to these servers.

  • Page 145: Chapter 5: Setting Up Security

    SVP and the storage system. Managing HCS certificates This topic explains how to set or delete certificates for Hitachi Command Suite (HCS) that are used to check the server's reliability when SSL communication for HCS external authentication is performed.

  • Page 146: Deleting Hcs Certificates

    SSL certificates (also known as digital certificates) are used to establish a secure encrypted connection between an SVP and a storage system. The SSL connection protects the Hitachi Device Manager - Storage Navigator User ID and password that is exchanged during each visit (or session).

  • Page 147: Flow Of Ssl Communication Settings

    Flow of SSL communication settings SSL certificates consist of small data files that digitally bind a cryptographic key to an SVP's log on credentials. When installed on the SVP, SSL activates the padlock and the HTTPS protocol, allowing secure connections between the SVP and the storage system. Flow of SSL communication settings Before you enable SSL encryption, you must create a private key and a public key to establish a secure communication session.
  • Page 148 Creating a public key Procedure 1. If the read-only attribute is set, release it from the c:\openssl folder. 2. Open a command prompt with administrator permissions. 3. Move the current directory to the folder to which the key file is output (such as c: \key), and execute the following command: c:\key >...

  • Page 149: Obtaining A Signed Certificate

    Note: When you send a request to a certificate authority, specify the SVP as the host name. Hitachi recommends that self-signed certificates be used only for testing encrypted communication. Obtaining a self-signed certificate To obtain a self-signed certificate, open a command prompt and execute the following command: c:\key>c:\openssl\bin\openssl x509 -req -sha256 -days 10000 -in...

  • Page 150: Verifying And Releasing An Ssl Certificate Passphrase

    Verifying and releasing an SSL certificate passphrase requirements. Use of this certificate results in higher reliability in exchange for greater cost and requirements. The signed and trusted certificate is the signed public key. Verifying and releasing an SSL certificate passphrase An SSL certificate cannot be applied for the SVP if the passphrase is set.

  • Page 151: Converting Ssl Certificates To Pkcs#12 Format

    Converting SSL certificates to PKCS#12 format Converting SSL certificates to PKCS#12 format Follow these instructions when converting SSL certificates to PKCS#12 format. If you are uploading a created private key and the SSL certificate, you need to convert it to PKCS#12 format. If you are not uploading SSL certificate, conversion is not required. Before you begin You must store a private key and SSL certificate in the same folder.

  • Page 152: Notes On Updating A Signed Certificate For The Service Processor

    Certificates for RMI communication are updated asynchronously. The process takes ■ about two minutes. If the service processor certificate is updated while Hitachi Command Suite is being ■ set up, the setup operation will fail. Updating the SSL certificate might change the system drastically and may lead to ■...

  • Page 153: Selecting A Cipher Suite

    Selecting a cipher suite The passphrase for the private key (server.key file) must be released. ■ Procedure 1. Close all Device Manager - Storage Navigator sessions on the SVP. 2. Open a command prompt window with administrator permissions. 3. In the folder where the .bat file is located, execute the following command: C:\MAPP\wk\Supervisor\MappIniSet>MappApacheCrtInit.bat 4.

  • Page 154: Updating The Certificate Files

    Updating the certificate files Updating the certificate files The Update Certificate Files window is used to update the certificates that are used for communication between the SVP and the storage system. Before you begin You must have the Storage Administrator (View & Modify) role to complete this ■...

  • Page 155: Releasing Http Communication Blocking

    Releasing HTTP communication blocking 4. Browse to the certificate file and click Open. The File Upload window closes and returns you to the Update Certificate Files dialog box. 5. In the Web Server Password: field, enter the certificate password. 6. Enter the password again in the Web Server Re-enter Password: field. 7.

  • Page 156: Disabling Tlsv1.0 And Tlsv1.1 Communications

    Disabling TLSv1.0 and TLSv1.1 communications 5. Close the command prompt window. Disabling TLSv1.0 and TLSv1.1 communications To enhance security, you can disable TLSv1.0 and TLSv1.1 communications and use only TLSv1.2. This setting is optional. Before you begin You must be logged into the SVP. Procedure 1.

  • Page 157: Setting Up Authentication And Authorization

    Setting up authentication and authorization Before you begin You must have the Storage Administrator (Initial Configuration) role to perform this ■ task. You must be logged into the SVP. ■ Procedure 1. Close all Device Manager - Storage Navigator sessions on the SVP. 2.

  • Page 158: Authentication Server Protocols

    Authentication server protocols You can use the authentication server without knowing the host names and port numbers, if you register the information of the authentication server as an SRV record in the DNS server. If you register multiple numbers of authentication servers to the SRV record, you can determine the authentication server to be used, based on the priority that has been set in advance.

  • Page 159: Connecting Two Authentication Servers

    Connecting two authentication servers Windows Server 2012 R2 ■ Prerequisite software Active Directory ■ Authentication protocol for user for searching LDAP v3 simple bind ■ Note: When using an LDAP server or a Kerberos server as an authentication server, and combining it with an authorization server, use the same host for the authentication and authorization servers.

  • Page 160: Naming A User Group In Device Manager - Storage Navigator

    Naming a user group in Device Manager - Storage Navigator Before you begin Contact your server administrator for information about the values to be written in ■ the LDAP, RADIUS, or Kerberos configuration file. If you use LDAP servers, obtain certification for the LDAP server files.

  • Page 161: Active Directory User Authentication

    Active Directory user authentication RADIUS server, or it may authenticate the user through Active Directory. After authorization, the SMU allows the user to perform actions allowed by the user's profile. Active Directory users are assigned full access rights to the SMU functionality. For local and RADIUS users the user profile details are specified when the user account is created.

  • Page 162: Using Transport Layer Security (Tls) With Active Directory Authentication

    Using Transport Layer Security (TLS) with Active Directory authentication response received (either positive or negative) it is treated as definitive. It does not then contact further servers because all servers are assumed to have identical content. Using Transport Layer Security (TLS) with Active Directory authentication TLS is a cryptographic protocol which provides security between applications over a network.
  • Page 163 Configuring Active Directory servers Procedure 1. Navigate to Home > SMU Administrator to display the Active Directory Servers page. 2. Enter the Base Distinguished Name. This name must be entered in LDAP distinguished name (DN) format which consists of a sequence of "attribute=value" pairs separated by comma or semi-colon. The Base Distinguished Name should contain the domain component (dc) attributes for the organization's domain.
  • Page 164 Configuring Active Directory servers Field/Item Description Connection port The port and encryption method to use when connecting to an Active Directory server. Options are: port 389 unencrypted ■ port 389 encrypted using TLS (SSL/TLS ■ connections) port 636 encrypted using LDAPs (SSL) ■...
  • Page 165 Configuring Active Directory servers Field/Item Description remove all settings Removes all Active Directory server settings, including server list, connection settings, search user credentials and groups. After this action, Active Directory users can no longer log into the SMU. 3. Configure the following settings for the connections as required: Connection Attempts - The maximum number of times that the SMU attempts ■...

  • Page 166: Configuring Active Directory Groups

    Configuring Active Directory groups 7. If there is more than one server, the list can be prioritized using Move Up or Move Down . 8. Click Apply to submit this page and save the connection settings and server list to the SMU database.
  • Page 167 Configuring Active Directory groups The following table describes the fields on this page: Field/Item Description Group Name Group name is the user-friendly name of an Active Directory group existing on the Active Directory server. The full distinguished name for a group can be viewed by hovering the mouse over the group name.
  • Page 168 Configuring Active Directory groups Field/Item Description Click to add a group. Takes you to the Add Active Directory Group page. delete Existing groups can be deleted by checking the box in left-hand column and clicking the delete button. The user is asked for confirmation before deleting. If all groups are being deleted, the user is warned that no Active Directory users will be authenticated.
  • Page 169 Configuring Active Directory groups Field/Item Description Read-Only Access Defines the group users as read-only. Members of the group may log into the SMU, but with read-only access. Read-only users may be given Global, Server, Storage or Server+Storage access. Based on the defined roles in the group, read-only users may not perform specific tasks, such as creating, or modifying a files and data.
  • Page 170 Configuring Active Directory groups 4. Select a User Level to be assigned to members of the group. CLI access is given to members of all groups defined with the Global level. Active directory users are given the same access level to all managed HNAS servers. 5.

  • Page 171: User Authentication Through Radius Servers (Hnas Server Only)

    User authentication through RADIUS servers (HNAS server only) The following table describes the fields on this page: Field/Item Description Group Name Name of group that details are provided for. Group Distinguished The LDAP root location for users and groups. The name Name is recommended to contain just the domain components.

  • Page 172: Displaying List Of Radius Servers

    Displaying list of RADIUS servers You can specify and prioritize multiple RADIUS servers for authentication. Note: The SMU contacts RADIUS servers in order of priority; the SMU will always try to contact higher priority servers before lower priority servers, and you cannot map SMU users to authenticate through a specific RADIUS server.
  • Page 173 Adding a RADIUS server Field/Item Description RADIUS server IP To connect with the RADIUS server, specify an IPv4 or IPv6 address or DNS address, or a host name (host name is not recommended). name An IP address is preferred, both because it eliminates the dependency on the network DNS sever(s), and to improve login performance.

  • Page 174: Displaying Details Of Radius Server

    Displaying details of RADIUS server Field/Item Description Retry Count Specify the retry count. The default is 3. When the retry limit is reached, the SMU sends the request to the next RADIUS server in the list. When the retry limit for the second server is reached, the SMU attempts to reach the next server in the list, until there are no more servers to try.

  • Page 175: Configuring Smu Security (Nas Module Only)

    Configuring SMU security (NAS module only) Field/Item Description Timeout The number of seconds the SMU waits before retrying (retrying is re-transmitting the authentication request to the same RADIUS server). If the timeout is reached and there is no response from the first RADIUS server in the list, the SMU attempts another retry.

  • Page 176: Application Settings

    Field/Item Description This section allows you to change web application security Application settings. Security Settings Note: Making any change in this section results in the application being restarted immediately. Enable HTTPS By default, all HTTPS protocols are enabled, and the boxes next Protocols to the protocols are checked.

  • Page 177: Chapter 6: Alert Notifications

    Syslog: Check the messages on the Syslog server to view alert information sent there. ■ SNMP traps: To view SNMP trap information, use the SNMP Manager in Device ■ Manager - Storage Navigator. See the Hitachi SNMP Agent User Guide for information about using SNMP traps. Configuring alert notifications Procedure 1.

  • Page 178: General Settings

    General settings 9. Click the SNMP tab. The SNMP window displays the current settings for the Storage System Name, Contact, Location, SNMP Trap and SNMP Manager. 10. To send a test SNMP trap, click Send Test SNMP Trap. A completion notice displays. 11.

  • Page 179: Email Settings

    Email settings Email settings Procedure 1. To send email notices, click Enable, next to Email Notice. Click Disable to not send email notices. 2. Click Add to add an email address to the list of registered addresses. 3. Enter the email address and then use the pull-down menu to select the type of address: To, Cc, or Bcc.

  • Page 180: Snmp Settings

    SNMP settings 2. Select the type of transfer protocol to use. 3. In Primary Server: a. Click Enable to use the server or Disable not to use it. b. Select the type of IP address to use for the server: IPv4 or IPv6. c.

  • Page 181: Sending Test Messages

    Sending test messages 3. In Trap Destination, click the type of address to send the SNMP trap information: Community or Public. 4. Click Add to add an SNMP trap address. 5. In Community, create a new community name or select an existing one. 6.

  • Page 182: Sending A Test Syslog Message

    Reference code. The same code as the one reported by SNMP traps. Detail Failure details. The same information as the one reported by SNMP traps. See the Hitachi SNMP Agent User Guide for reference codes and failure details. Sending a test Syslog message Procedure 1.

  • Page 183: Monitoring Failure Information In The Windows Event Log

    Monitoring failure information in the Windows event log Monitoring failure information in the Windows event log You can manage the Windows error information by outputting failure information to the event log. Before you begin The storage system status in the storage device list must be READY. ■...

  • Page 184: Viewing The Windows Event Log

    Viewing the Windows event log 4. Close the command prompt. Viewing the Windows event log You can view the Windows event log which is output to the SVP. Procedure 1. From the Windows start menu, click Control Panel > System and Security > Administrative Tools >...
  • Page 185 Output example of the failure information Item Description Overview of Displays the overview of the event the event info information Detail of the Displays the selected information event info Date: Date of the event occurrence Time: Time of the event occurrence Machine: Model name and serial number of the storage system Refcode: Reference code*...
  • Page 186 *For reference code, failure details, and alert level, see the SNMP failure trap reference code section in the Hitachi SNMP Agent User Guide. Chapter 6: Alert notifications System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 187: Chapter 7: Managing License Keys

    Chapter 7: Managing license keys This storage system includes base and optional software features for Hitachi Virtual Storage Platform G200, G400, G600, G800 or Hitachi Virtual Storage Platform F400, F600, F800 storage systems that must be enabled by installing license keys. This chapter describes the types of available licenses, license capacity calculation, and instructions for installing, enabling, disabling, and uninstalling license keys.

  • Page 188: Using The Permanent Key

    Using the permanent key Estimating Effective licensed Type Description term capacity Notes: 1. When you log in to Device Manager - Storage Navigator, a warning message appears if 45 days or less remain before the expiration. Using the permanent key You can purchase the permanent key to use a software application indefinitely.

  • Page 189: Using The Emergency Key

    Using the emergency key If you uninstall the temporary key, even though the effective term remains, Temporary is displayed in the status field, Not Installed is displayed in the Key Type field, and the remaining days of the effective term are displayed in the Term (Days) field of the License Keys window.

  • Page 190: Software And Licensed Capacity

    You can use the software regardless of the volume capacity. Table 10 Software bundle licensed capacity for VSP G200, G400, G600, G800 Software bundle VSP G200 VSP G400, G600 VSP G800 Hitachi Storage Unlimited Mounted capacity Mounted capacity Virtualization Operating System...

  • Page 191: Calculating Licensed Capacity For A Normal Volume

    2. The used capacity for Remote Replication is the sum of TrueCopy and Universal Replicator. Table 11 Software bundle licensed capacity for VSP F400, F600, F800 Software bundle VSP F400, F600, F800 Hitachi Storage Virtualization Operating Unlimited System (SVOS) Hitachi Remote Replication Unlimited...

  • Page 192: Calculating Licensed Capacity For An External Volume

    Calculating licensed capacity for an external volume Table 12 Formulas for calculating capacity of a normal volume Volume emulation type Formula for calculating capacity of a normal volume 3390-x 870 KB × number-of-user-cylinders OPEN-x Same as the capacity specified when creating the volume Notes: 1.

  • Page 193: Accelerated Compression-Enabled Parity Group Capacity

    Accelerated compression-enabled parity group capacity Accelerated compression-enabled parity group capacity For the actual capacity of accelerated compression-enabled parity groups, the total capacity of LDEVs created in the parity group and the physical capacity are compared. The one with the least capacity is added as the actual capacity. See the following table for an example.

  • Page 194: Installing Block And File Licenses Using Nas Manager

    Installing block and file licenses using NAS Manager purchase an additional license within 30 days to cover the capacity shortage. For details on how to calculate pool capacity, see the Provisioning Guide. Caution: When you remove Data Retention Utility an error might occur even if the Permitted Volumes column of the License Keys window indicates that the licensed capacity is 0 TB.

  • Page 195: Installing Block Licenses Using Maintenance Utility

    Installing block licenses using maintenance utility Field/Item Description File License Enables the user to import a license key from a file. Key File Name Import Block License Keys From a File (NAS module only) Block License Enables the user to import a software application license key from Key File Name a file.

  • Page 196: Enabling A License

    Enabling a license Enabling a license You can enable a license that is in disabled status. Before you begin You must have the Storage Administrator (Initial Configuration) role to perform this task. Procedure 1. From the Maintenance Utility menu, click License Keys to open the License Keys window.

  • Page 197: Removing A Data Retention Utility License

    (shown as XX TB) might remain in the list. In this case, select that option and uninstall the software. Note: To reinstall a license key after uninstalling it, contact Hitachi Data Systems customer support to reissue the license key file.

  • Page 198: License Key Expiration

    License key status Licensed (example) Status Key type capacity Term (Days) Expired temporary Number of A temporary key was installed, but has remaining days expired. before expiration A term key or an Not installed blank Blank Blank emergency key was installed, but has expired.

  • Page 199: Chapter 8: Configuring Audit Logs

    Chapter 8: Configuring audit logs This chapter describes how to change the audit log settings in the maintenance utility. Audit log settings This section shows the procedures to configure the audit log settings. The Audit Log Settings window shows the current audit log settings. Select one of more of the three tabs to change the settings.

  • Page 200: Exporting An Audit Log

    Exporting an audit log Exporting an audit log Use the following procedure to send a display an audit log file on the screen or to save it to a file on the SVP or your laptop. Before you begin You must have the Audit Log Administrator (View Only) role to perform this task. Procedure 1.
  • Page 201 Send test message to syslog server Before you begin You must have the Audit Log Administrator (View Only) role to perform this task. Procedure 1. In the maintenance usage Administration tree, select Audit Log Settings. 2. Click Send Test Message to Syslog Server. The following message box opens: 3.
  • Page 202 Chapter 8: Configuring audit logs System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 203: Chapter 9: Managing Storage System Reports

    Chapter 9: Managing storage system reports Device Manager - Storage Navigator can generate a standard set of reports that provide views of various aspects of the storage system. In addition to these views, you can generate custom reports for specific areas of the system. These include a summary of the system data and configuration, ports, channel adapters, and disk adapters.

  • Page 204: Viewing Configuration Reports In The Reports Window

    Viewing configuration reports in the Reports window Procedure 1. Expand the Storage Systems tree, and then click Reports. 2. Specify the report to download. 3. Click Download Reports. 4. Specify a folder in which to save a .tgz file. 5. Extract the downloaded .tgz file. 6.

  • Page 205: Collecting Dump Files Using The Dump Tool

    Collecting dump files using the Dump tool Before you begin Users that create the report or users with the Storage Administrator (Initial Configuration) role can delete a configuration report. Procedure 1. Expand the Storage Systems tree, and then click Reports. 2.
  • Page 206 3. Move the current directory to the folder where the tool is available. (For example: <SVP-root-directory>\DKC200\mp\pc). 4. Specify the output destination of the dump file and execute Dump_Detail.bat or Dump_Normal.bat. For example, if you are storing the result of Dump_Detail.bat to C: \Result_832000400001, enter the following: C:\MAPP\wk\832000400001\DKC200\mp\pc>Dump_Detail.bat C: \Result_832000400001...

  • Page 207: Appendix A: Examples Of Storage Configuration Reports

    Appendix A: Examples of storage configuration reports The Device Manager - Storage Navigator can show configuration reports table, graph, and CSV formats. The following examples show various storage configuration reports in table, graph, and CSV formats. Reports in table view Some Device Manager - Storage Navigator reports appear in table format.

  • Page 208: Chap Users Report

    CHAP Users report CHAP Users report The following figure shows an example of a CHAP Users report. The table following the figure describes the items in the report. Item Description Port Location Name of the port User Name Name of the CHAP user for authentication iSCSI Target Alias Alias of the iSCSI target iSCSI Target Name...

  • Page 209: Host Groups / Iscsi Targets Report

    Host Groups / iSCSI Targets report Item Description Number of PGs The number of the parity groups that the disk board controls. If "DKB" is "External", this item indicates the number of parity groups ■ mapped to external volumes. If "DKB" is "External (FICON DM)", this item indicates the number of ■...

  • Page 210: Hosts Report

    Hosts report Item Description iSCSI Target Name Name of the iSCSI target Resource Group Name Resource Group Name where the host group belongs Resource Group ID Resource Group ID where the host group belongs Number of LUNs The number of LU paths defined to the host group Number of LDEVs The number of logical volumes that are accessible from the hosts in the host group...

  • Page 211: Logical Devices Report

    Logical Devices report Item Description Port Location Name of the port Type Port type Port Internal WWN Port WWN Port Security Port security setting Host Group Name / iSCSI Name of the host group / alias of the iSCSI target Target Alias iSCSI Target Name Name of the iSCSI target...
  • Page 212 Logical Devices report Item Description LDEV ID The logical volume number LDEV Name The logical volume name Capacity (MB) Capacity of the logical volume Emulation Type Emulation type of the logical volume Resource Group Name Resource group name where LDEV belongs Resource Group ID Resource group ID where LDEV belongs The parity group number.

  • Page 213: Luns Report

    LUNs report Item Description Pool Name For V-VOLs of Dynamic Provisioning, the name of the pool related to the ■ logical volume is displayed If the logical volume attribute is Pool, the name of the pool where the ■ logical volume belongs is displayed When neither of the above are displayed, the pool name is blank ■...

  • Page 214: Mp Units Report

    MP Units report Item Description Port Location Name of the port HBA WWN / iSCSI Name Port WWN or name of the iSCSI (16 digits in hexadecimal) Port Security Name of the type of security of the port Host Group Name / iSCSI Name of the host group or alias of the iSCSI target Target Alias iSCSI Target Name...

  • Page 215: Mp Unit Details Report

    MP Unit Details report Item Description MP Unit ID MP unit ID Auto Assignment Auto assignment attribute for the MP unit Number of Resources Number of LDEVs that the MP unit controls (LDEV) Number of Resources Number of journals that the MP unit controls (Journal) Number of Resources Number of external volumes that the MP unit controls (includes volumes...

  • Page 216: Parity Groups Report

    Description Parity group number If the number starts with "E" (for example, E1-1), the parity group ■ contains external volumes (Hitachi Universal Volume Manager User Guide). If the number starts with "M" (for example, M1-1), the parity group ■ contains volumes for FICON DM.
  • Page 217 Parity Groups report Item Description Number of LDEVs (Total) The number of the logical volumes in the parity group Number of LDEVs The number of the logical volumes in the parity group that the host cannot (Unallocated) access Total LDEV Capacity (MB) Capacity of the logical volumes in the parity group Unallocated LDEV Capacity of the logical volumes in the parity group that the host cannot...

  • Page 218: Physical Devices Report

    Physical Devices report Physical Devices report The following figure shows an example of part of a Physical Devices report. The actual report includes more columns of information. A record is created for each physical device. The table following the figure describes the items in the report. Item Description Location...

  • Page 219: Ports Report

    Ports report Item Description Drive Capacity Physical drive capacity (GB or TB) Drive Version Firmware version of the drive DKB1 Name of the DKB1 which controls the physical devices DKB2 Name of the DKB2 which controls the physical devices Serial Number# Serial product number of the physical devices yy: year (last 2 digits) ■...
  • Page 220 Ports report Item Description Name of the channel board Type Package type of the channel board Port Location Name of the port on the channel board iSCSI Virtual Port Mode Mode of the iSCSI virtual port TCP Port Number Port number to use for a socket (decimal) Internal WWN / Internal WWN / iSCSI name of the port iSCSI Name...
  • Page 221 Ports report Item Description IPv6 : Global Address 2 IPv6 global address 2 of the port. Output example: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx (hexadecimal) IPv6 : Assigned Default Assigned IPv6 default gateway Gateway Selective ACK Selective ACK mode Enabled ■ Disabled ■ Ethernet MTU Size (Byte) MTU settings (binary) 1,500 ■...

  • Page 222: Power Consumption Report

    Power Consumption report Item Description SFP Data Transfer Rate Maximum transfer rate of SFP which the mounted package supports. ■ ■ ■ ■ A hyphen (-) is displayed if Type is 10iSCSI2c (CHB) or NAS module ■ (CHB). T10 PI Mode Indicates whether the T10 PI mode can be applied to the port.
  • Page 223 Power Consumption report Item Description Date and Time Date and time when power consumption and temperature were recorded for the two-hour period Power Consumption Average (W) Average of the power consumption Power Consumption Maximum (W) Maximum of the power consumption Power Consumption Minimum (W) Minimum of the power consumption TEMP:DKC0-Cluster1 Average (degrees C)

  • Page 224: Spare Drives Report

    Spare Drives report TEMP:DB00-DBPS00-1 Average Average temperature, maximum (Temperature in degrees C) temperature, and minimum temperature of the DB for the two-hour period. TEMP:DB00-DBPS00-1 Maximum Outputs in the following format: (Temperature in degrees C), TEMP:DB XX -DBPS XX -CL Average, TEMP:DB00-DBPS00-1 Minimum Maximum, or Minimum (Temperature in (Temperature in degrees C),...

  • Page 225: Ssd Endurance Report

    SSD Endurance report SSD Endurance report The following figure shows an example of an SSD endurance report. The table following the figure describes the items in the report. Item Description Drive Type-Code Type code of the SSD Drive Capacity Capacity of the SSD Location Location of the SSD Used Endurance...

  • Page 226: Storage System Summary Report

    Storage System Summary report Storage System Summary report The following figure shows an example of part of a Storage System Summary report. The actual report includes several more rows of information. The table following the figure describes the items in the report. Figure 1 Storage System Summary report (VSP G200) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 227 Storage System Summary report Figure 2 Storage System Summary report (VSP G200) Figure 3 Storage System Summary report (VSP G400, VSP G600) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 228 Storage System Summary report Figure 4 Storage System Summary report (VSP G400, VSP G600) Figure 5 Storage System Summary report (VSP G800) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 229 Storage System Summary report Figure 6 Storage System Summary report (VSP G800) Item Description Storage System Type Type of the storage system Serial Number Serial number of the storage system IP Address IP address of the SVP Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 230 Storage System Summary report Item Description Software Versions Version of the following programs. Main ■ ■ ROM BOOT ■ RAM BOOT ■ Expander ■ Config ■ ■ ■ Printout Tool ■ CHB (iSCSI) ■ CHB (FC16G) ■ CHB (FC32G) ■ ■...

  • Page 231: Reports In Graphical View

    Reports in graphical view Item Description Number of LDEVs List of the numbers of the volumes in the following status. Allocated ■ Unallocated ■ Reserved ■ V-VOL ■ Notes: 1. You cannot sort the list. Reports in graphical view Some Device Manager - Storage Navigator reports appear in graphical format. The reports described in this topic display as graphics.
  • Page 232 Cache Memories report Figure 8 Cache Memories report (VSP G400, G600, VSP F400, F600) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 233: Channel Boards Report

    Channel Boards report Figure 9 Cache Memories report (VSP G800, VSP F800) Total capacity of the cache memory and shared memory is displayed separately for each module. Channel Boards report This report shows the channel boards and the ports and types of channel boards for each channel board.
  • Page 234 Channel Boards report Figure 10 Channel Boards (VSP G200) Figure 11 Channel Boards report (VSP G400, G600, VSP F400, F600) Figure 12 Channel Boards Report (when a NAS module is mounted) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 235 Channel Boards report Figure 13 Channel Boards report (VSP G800, VSP F800) Figure 14 Channel Boards report (when a channel board box is connected) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 236: Physical View Report

    Physical View report Figure 15 Channel Boards report (when a NAS module is mounted) Physical View report This report shows disk controller chassis and drive boxes, and includes channel boards, disk boards, data drives, spare drives, and free drives. It also shows the storage system type, serial number, and software version. You can check the legend for disk units, such as SAS, SSD, Spare, Free, or Not Installed.
  • Page 237 Physical View report Figure 16 Physical View report (VSP G200) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 238 Physical View report Figure 17 Physical View report (VSP G400, G600, VSP F400, F600) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 239 Physical View report Figure 18 Physical View report (when a NAS module is mounted) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 240 Physical View report Figure 19 Physical View report (VSP G800, VSP F800) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...
  • Page 241 Physical View report Figure 20 Physical View report (when a channel board box is connected) Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 242: Csv Files

    CSV files Figure 21 Physical View report (when a NAS module is mounted) CSV files Some Device Manager - Storage Navigator reports appear in CSV format. This topic describes reports that are saved in CSV format. AllConf.csv This is the concatenated file of all the csv files. Appendix A: Examples of storage configuration reports System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 243: Cacheinfo.csv

    CacheInfo.csv CacheInfo.csv This CSV file contains information about the cache memory on the controller board. A record is created for each cache memory. Table 15 CacheInfo.csv file (Title: <<Cache>>) Item Content Location Name of the cache controller board on which the memory is installed CMG#0 Size (GB) Cache memory capacity in the controller board per CMG (16/32/64/128/ blank).

  • Page 244: Chapuserinfo.csv

    ChapUserInfo.csv Item Content Unified Hypervisor The cache memory capacity (blank/16/32/64) (Unit: GB) assigned for Cache Size (GB) Unified Hypervisor usage within the total cache memory capacity in controller board. Blank if Unified Mode of DkcInfo.csv is Off. ■ This item is not displayed for VSP G200. ChapUserInfo.csv This CSV file contains information about the iSCSI CHAP authenticated user registered to the port in the channel board.

  • Page 245: Deviceequipinfo.csv

    DeviceEquipInfo.csv Item Content Notes: 1. 1 Normal, 0: Abnormal DeviceEquipInfo.csv This CSV file contains information about equipment and devices that are part of the storage system, including power supplies and batteries for DKC, DB, and CHBB. A record is created for each device. Table 18 DeviceEquipInfo.csv file (Title: <<Device Equipment Information>>) Item Content...

  • Page 246: Dkastatus.csv

    DkaStatus.csv Item Content Package Type DKB type Output example: Unecryption DKB (2Port) ■ Encryption EDKB (2Port) ■ DkaStatus.csv This CSV file contains information about the status of disk boards (DKBs). A record is created for each DKB. Table 20 DkaStatus.csv file (Title: <<DKB Status>>) Item Content DKB Location...

  • Page 247: Dkutempaveinfo.csv

    DkuTempAveInfo.csv Item Content Serial Number # Serial product number (decimal, from 400001 to 499999) IP Address IP address Output example: xxx.xxx.xxx.xxx (decimal, 0 to 255) Subnet Mask Subnet mask Output example: xxx.xxx.xxx.xxx (decimal, 0 to 255) Number of CUs Number of CUs (decimal, 0 to 64) Number of DKBs Number of DKBs (decimal, 0 to 8) Zero (0) is sometimes displayed if an HDD is not installed.

  • Page 248: Dkutempinfo.csv

    DkuTempInfo.csv DkuTempAveInfo.csv shows the average temperature as DB temperature data. The total number of items depends on the model (VSP G200: 17, VSP G400/VSP G600/VSP F400/VSP F600: 49, VSP G800/VSP F800: 97). The DB temperature data displayed in DkuTempAveInfo.csv (average temperature only), DkuTempMaxInfo.csv (maximum temperature only), and DkuTempMinInfo.csv (minimum temperature only) is the same value as the DB temperature data for DkuTempInfo.csv.
  • Page 249 DkuTempInfo.csv Table 23 DkuTempInfo.csv file (Title: <<DB temperature Information>>) Item Description Date Year, month, and date when temperature data was acquired in the format: YYYY/MM/DD hh:mm:ss DB00 DBPS001 Average temperature (°C) for the two-hour period of DB00 DBPS001 Temperature average DB00 DBPS001 Maximum temperature (°C) for the two- hour period of DB00 DBPS001...

  • Page 250: Dkutempmaxinfo.csv

    DkuTempMaxInfo.csv DB # DBxx DB00 DB01 DB02 DB03 DB04 DB05 DBxxy DBPS00y DBPS01y DBPS02y DBPS03y DBPS04y DBPS05y DB # DBxx DB42 DB43 DB44 DB45 DB46 DB47 DBxxy DBPS42y DBPS43y DBPS44y DBPS45y DBPS46y DBPS47y The following table lists the DBPSxxy: y values (where DB# is 0 and xx is 00) DBPSxxy: y DBPS001 DBPS002...

  • Page 251: Dkutempmininfo.csv

    DkuTempMinInfo.csv Table 24 DkuTempMaxInfo.csv file (Title: <<DB temperature maximum value Information>>) Item Description Date Year, month, and date when temperature data was acquired in the format: YYYY/MM/DD hh:mm:ss DB00 DBPS001 Maximum temperature (°C) for the two- hour period of DB00 DBPS001 Temperature maximum value DB47 DBPS472 Maximum temperature (°C) for the two-...

  • Page 252: Eluninfo.csv

    For details of external volumes, see Hitachi Universal Volume Manager User Guide. Information about the NAS module is not displayed in this CSV file.
  • Page 253 ELunInfo.csv Item Content ECC Group Number of parity group to which the external volume is mapped. If the number starts with "E" (for example, E1-1), the parity group contains external volumes. Range of values: E1-1 to E16384-4096 Current MPU Number and name of a current MP unit controlling the parity group to which the external volume is mapped MPU-10 ■...
  • Page 254 ELunInfo.csv Item Content Status Status of the path between storage systems. Normal ■ Blocked ■ IO TOV I/O timeout value for the external volume Range of values: 5 to 240 QDepth The number of Read/Write commands that can be issued to the external volume at a time Range of values: 2 to 128 Resource Group ID (ECC...

  • Page 255: Envmoninfo.csv

    EnvMonInfo.csv Item Content Package Type Type of CHB to which a port of the local storage system connecting to the external storage system belongs Fibre: 8FC4 (CHB), 16FC2 (CHB), 32FC4R (CHB) ■ iSCSI: 10iSCSI2o (CHB), 10iSCSI2c (CHB) ■ IP Address IP address for an iSCSI target of an external storage system IPv6: ■...

  • Page 256: Fcspnameinfo.csv

    FcSpNameInfo.csv Item Description Electric power maximum Maximum value of electric power (W) value Electric power minimum Minimum value of electric power (W) value In the following cases, a lower value might be temporarily displayed: When the storage system is starting up ■...

  • Page 257: Fcspportinfo.csv

    FcSpPortInfo.csv Item Content Authentication of Group Information about whether to perform authentication or not Enabled ■ Disabled ■ Initiator Username WWN information about the host required for authentication (16-digit hexadecimal number) Protocol Protocol used for authentication ("CHAP" or blank) FcSpPortInfo.csv This CSV file contains information about ports related to Fibre Channel Security Protocols (FCSPs).

  • Page 258: Hduinfo.csv

    HduInfo.csv HduInfo.csv This CSV file contains information about hard drive boxes (DB). A record is created for each drive box. Table 31 DBInfo.csv file (Title: <<DB Information>>) Item Description DB Location DB location name DB Status Information about whether this DB is installed Installed ■...

  • Page 259: Iscsiportinfo.csv

    IscsiPortInfo.csv IscsiPortInfo.csv This CSV file contains information about iSCSI information set to the channel board port. A record is created for each iSCSI host (initiator) target. Information about the NAS module is not displayed in this CSV file. Table 33 IscsiPortInfo.csv file (Title: <<iSCSI Port Information>>) Item Content Port...
  • Page 260 IscsiPortInfo.csv Item Content TCP Port Number The number of the port for using socket (1 to 65535) Ethernet MTU Size (Byte) MTU settings | MTU 1500 ■ 4500 ■ 9000 ■ Keep Alive Timer (sec.) Keep alive timer value of iSCSI (30 to 64800) (sec) Selective ACK Selective ACK mode Enabled...

  • Page 261: Iscsitargetinfo.csv

    IscsiTargetInfo.csv Item Content VLAN | ID VLAN number set to the port (1 to 4094) Blank if "VLAN | Tagging Mode" is set to Off. Resource Group ID (Port) Resource group ID of the port (0 to 1023 in decimal) Resource Group Resource group name of the port Name(Port)

  • Page 262: Jnlinfo.csv

    JnlInfo.csv Item Content Authentication | Method Authentication method settings of the iSCSI target CHAP ■ None ■ Comply with Host Setting ■ Authentication | Mutual Mutual CHAP authentication function settings of the iSCSI target CHAP Enabled ■ Disabled ■ Authentication | User User name set when iSCSI target was authenticated Name Resource Group ID (iSCSI...

  • Page 263: Ldevcountinfo.csv

    LdevCountInfo.csv Table 36 LdevCapaInfo.csv file (Title: <<LDEV Capacity Information>>) Item Content Volume Kind The following classifications are output: Internal OPEN Volumes ■ External OPEN Volumes ■ Total OPEN Volumes ■ Allocated LDEV Capacity Allocated LDEV capacity (GB) Unallocated LDEV Unallocated LDEV capacity Capacity (GB) Reserved Capacity (GB) Reserved LDEV capacity...

  • Page 264: Ldevinfo.csv

    LdevInfo.csv Item Content ECC Groups Total number of parity groups. LdevInfo.csv This CSV file contains information about logical devices (LDEVs). A record is created for each LDEV. For details of LDEVs, see the Provisioning Guide. Table 38 Ldevinfo.csv file (Title: <<LDEV Status>>) Item Content ECC Group...
  • Page 265 LdevInfo.csv Item Content LDEV Attribute LDEV Attribute: CMDDEV (Command device) ■ CMDDEV (Remote command device) ■ Journal (Journal volume) ■ Pool (Pool volume) ■ Quorum disk (used with global-active device) ■ ■ ■ Deduplication system data volume ■ Regular (Others) ■...
  • Page 266 LdevInfo.csv Item Content Setting MPU Number of the MP unit configured to control LDEV. (MPU-10, MPU-11, MPU-20, MPU-21) Allocated Information about whether this LDEV is allocated to a host. "Y" is output for volumes accessible to the host. ■ Pool Name The pool's name If the provisioning type is Dynamic Provisioning, the name of the pool ■...

  • Page 267: Ldevstatus.csv

    LdevStatus.csv Item Content T10 PI Indicates the T10 PI attribute set for the LDEV. Enabled ■ Disabled ■ Blank if "LDEV Emulation" is not OPEN-V. ■ ALUA Mode Indicates whether the ALUA mode is enabled. Enabled: ALUA mode is enabled. ■...

  • Page 268: Lpartition.csv

    LPartition.csv Item Content ECC Group Number of the parity group where the LDEV belongs. If the number starts with "E" (for example, E1-1), the parity group ■ contains external volumes. If the type of the LDEV is a Dynamic Provisioning or Thin Image virtual ■...
  • Page 269 LunInfo.csv Table 41 LunInfo.csv file (Title: <<LUN Information>>) Item Description Port Port name Host Group Host group name If "Package Type" is iSCSI, the iSCSI target alias is output. Host Mode Host mode specified for this host group (hexadecimal) Host Mode Option Host mode option set for this host group (0 to 127, hexadecimal) If more than one option is specified, the options are separated by semicolons (;).

  • Page 270: Lunportinfo.csv

    LunPortInfo.csv Item Description Resource Group ID (Host Resource group ID of a host group (0 to 1,023, decimal) Group) Resource Group Name Resource group name of a host group (Host Group) T10 PI Mode Indicates whether the T10 PI mode can be applied to the port for which the LU path is defined.
  • Page 271 LunPortInfo.csv Item Content Port Address Port address (2-digit hexadecimal number) Blank if "Package Type" is iSCSI or NAS module Loop ID Port address (0 - 125, decimal) Blank if "Package Type" is iSCSI or NAS module Fabric One of the Fibre topology settings indicating the setting status of the Fabric switch: ■...

  • Page 272: Microversion.csv

    MicroVersion.csv Item Content Package Type CHB type for CHB Location Fibre: ■ 8FC4 (CHB) ● 16FC2 (CHB) ● 32FC4R (CHB) ● iSCSI: ■ 10iSCSI2o (CHB) ● 10iSCSI2c (CHB) ● NAS module: ■ NAS Module (CHB) ● T10 PI Mode Indicates whether the T10 PI mode can be applied to the port. Enabled ■...

  • Page 273: Mlcenduranceinfo.csv

    MlcEnduranceInfo.csv Item Content CHB (FC16G) 16G FC protocol chip firmware version (8 digits) CHB (FC32G) 32G FC protocol chip firmware version (8 digits) CHB (iSCSI) CHB(iSCSI) protocol chip firmware version (8 digits) GUM firmware version (8 digits) Unified Hypervisor Unified Hypervisor version (8 digits) The version is displayed in each CL1, CL2.

  • Page 274: Modeperlpr.csv

    ModePerLpr.csv Item Content Used Endurance Current SSD life (0 to 100) Indicator (%) History1 (date) Date on which SSD life was acquired (1 month ago) Output example: yyyy/mm/dd History1 (%) SSD life (0 to 100)(1 month ago) History2 (date) Date on which SSD life was acquired (2 months ago) Output example: yyyy/mm/dd History2 (%) SSD life (0 to 100) (2 months ago)

  • Page 275: Mppcbstatus.csv

    MpPcbStatus.csv Table 46 MpPathStatus.csv file (Title: <<MP Path Status>>) Item Content MPU#/CTL# MP unit number or CTL number (2-digit hexadecimal number) For MP unit number ■ MPU#00 to MPU#03 The MPU#01 or MPU#03 line is blank if Unified Mode of DkcInfo.csv is For CTL number ■...

  • Page 276: Pcbrevinfo.csv

    PcbRevInfo.csv Table 47 MpPcbStatus.csv file (Title: <<MP PCB Status>>) Item Content MPU ID MP unit ID (MPU-10, MPU-11, MPU-20, MPU-21) MPU-10 and MPU-20 are displayed if Unified Mode of DkcInfo.csv is On. Auto Assignment Information about whether this MP unit is set to be automatically assigned to each resource.

  • Page 277: Pdevcapainfo.csv

    PdevCapaInfo.csv PdevCapaInfo.csv This CSV file contains information about physical device (PDEV) capacities. A record is created for each of the classifications shown in "PDEV Kind". Table 49 PdevCapaInfo.csv file (Title: <<PDEV Capacity Information>>) Item Content PDEV Kind The following four classifications are output: OPEN System (TB) ■...
  • Page 278 PdevInfo.csv Item Content Device Type Drive type ■ ■ Revolutions per minute Blank displays as RPM when the drive is SSD. Device Type-Code Device type code of this drive Output example: DKR5D-J600SS Device Size Drive size (inches) ■ ■ Blank for DBF (FMC or FMD) ■...

  • Page 279: Pdevstatus.csv

    PdevStatus.csv Item Content Encryption Encryption status of the parity group to which the PDEV belongs Enabled: Encryption enabled ■ Disabled: Encryption disabled ■ Accelerated Accelerated compression setting. Compression Enabled: accelerated compression is enabled. ■ Disabled: accelerated compression is disabled. ■ If the parity group with PDEV does not support accelerated compression, or if the ECC Group is Spare Drive, a blank space is displayed.

  • Page 280: Pkinfo.csv

    PkInfo.csv Table 52 PECBInfo.csv file (Title: <<PECB Information>>) Item Content Location PECB location name Status Whether the PECB is installed Installed ■ Not Installed ■ Type Destination module type of the PECB CHBB ■ Expansion mode Expansion mode set in the destination module of the PECB ■...
  • Page 281 PkInfo.csv Item Content SFP Status SFP Status: Normal ■ Failed ■ Not Fix ■ Blank if "Package Type" is 10iSCSI2c (CHB) or NAS module (CHB). ■ Fabric One of the Fibre topology settings indicating the setting status of the Fabric switch: ■...

  • Page 282: Ppinfo.csv

    PpInfo.csv PpInfo.csv This CSV file contains information about the software. A record is created for each software product. For details about the license key, see Managing license keys (on page 187) Table 54 PpInfo.csv file (Title: <<PP Information>>) Item Content Program Product Name Software name.

  • Page 283: Ssddriveinfo.csv

    SsdDriveInfo.csv Table 55 SMfundat.csv file (Title: <<SM Install function>>) Item Content SM Install function The following classifications are output for VSP G200: 1. Base 2. Extension 1 3. Extension 2 The following classifications are output for VSP G400, G600, G800 or VSP F400, F600, F800: 1.

  • Page 284: Ssidinfo.csv

    SsidInfo.csv Item Content SSD Device Type SSD drive type ■ ■ ■ Used Endurance SSD life (0 to 100) Indicator (%) Used Endurance SSD life threshold (0 to 100) Indicator Threshold (%) Used Endurance Warning SIM threshold (0 to 100) Indicator Warning SIM FMD Battery Life Threshold of battery life warning SIM (0 to 100)

  • Page 285: Wwninfo.csv

    WwnInfo.csv Table 58 Sysoptinfo.csv file (Title: <<System Option Information>>) Item Content Spare Disk Recover Speed of copying data to the spare drive. Interleave mode ■ Full Speed mode ■ Dynamic Sparing Information about whether to perform automatic copy to a spare drive if the occurrences of drive failures exceed the threshold.
  • Page 286 Item Content World Wide Name of the host bus adapter registered to the host group (hexadecimal number) Blank if the "Package Type" is iSCSI or NAS module. Nickname Nickname of the host Blank if the "Package Type" is iSCSI or NAS module. Host Group# Host group number (00 to ff, hexadecimal) iSCSI target ID will be output if the "Package Type"...

  • Page 287: Appendix B: System Option Modes

    Appendix B: System option modes System option modes allow the storage system to be configured to specific customer operating requirements. System option modes To provide greater flexibility, the storage systems have additional operational parameters called system option modes (SOMs) that allow you to tailor the storage system to your unique operating requirements.
  • Page 288 System option modes Table 60 System option modes for VSP Gx00 models and VSP Fx00 models Mode Category Description Default MCU/RCU Common This SOM can reduce the host response time to be within about 6 seconds. The default setting for this SOM depends on the microcode level: Default = ON: 83-05-01 and later ■...
  • Page 289 System option modes Mode Category Description Default MCU/RCU Common Regarding the correction copy or the drive copy, in None case ECCs/LRC PINs are set on the track of copy source HDD, SOM 22 can be used to interrupt the copy processing (default) or to create ECCs/LRC PINs on the track of copy target HDD to continue the processing.
  • Page 290 System option modes Mode Category Description Default MCU/RCU ShadowImage For Split or Resync request from the Mainframe host and Storage Navigator. Mode 122 = ON: By specifying Split or Resync, Steady/Quick Split or Normal/Quick Resync is respectively executed in accordance with Normal/ Quick setting.
  • Page 291 System option modes Mode Category Description Default MCU/RCU Common When a command issued to a drive turns to time- out, the failure is counted on the failure counter of the drive port. If the failure counter reaches the port blockage threshold, the drive port is blocked. When this SOM is set to ON, the port is blocked when the number of failures reaches the half point of the threshold, which mitigates the occurrence possibility...
  • Page 292 System option modes Mode Category Description Default MCU/RCU Common The drive whose command response time is permanently delayed is blocked. At the same time, SSB=AE4A (total response time exceeds threshold) is reported. In this case, cache can become overloaded so that the storage system performance is degraded. Mode 144 = ON (default*): Check if there is a permanently delayed drive for each port, and block the corresponding port at the first time when all of...
  • Page 293 System option modes Mode Category Description Default MCU/RCU Common Mode 310 = ON: The monitoring timer for MP hang- up is 6 seconds and returning a response to the host within 8 seconds is guaranteed. Mode 310 = OFF (default): The monitoring timer for MP hang-up is 8 seconds.
  • Page 294 System option modes Mode Category Description Default MCU/RCU Universal This SOM is used to enable and disable detection of communication failures between the MCU and RCU. Replicator Mode 449 = ON (default): On the MCU side, checking read journal disruption from RCU is disabled, and monitoring read journal failures is disabled on the RCU side.
  • Page 295 System option modes Mode Category Description Default MCU/RCU Virtual CLPR (function of Virtual Partition Manager) partitions the cache memory in the storage system Partition Manager into multiple virtual cache and assigns the partitioned virtual cache for each use. If a large amount of cache is required for a specific use, it can minimize the impact on other uses.
  • Page 296 System option modes Mode Category Description Default MCU/RCU 1. When this SOM is set to ON, even if there is an overloaded CLPR (CLPR with large Write Pending capacity), the amount of destage processing would not increase easily. Therefore TOV(MIH) may occur in the overloaded CLPR.
  • Page 297 System option modes Mode Category Description Default MCU/RCU Universal This SOM has two purposes: High-Speed LDEV Both Format for External Volumes, and Support for Volume Manager Mainframe Control Block Write GUI. Mode 457 = ON: 1. High-Speed LDEV Format for External Volumes. The high-speed LDEV format for external volumes is available by SOM 457 to ON.
  • Page 298 System option modes Mode Category Description Default MCU/RCU Universal It is strongly recommended that the path between the primary and secondary storage systems have a Replicator minimum data transfer speed of 100 Mbps. If the data transfer speed falls to 10 Mbps or lower, UR operations cannot be properly processed.
  • Page 299 System option modes Mode Category Description Default MCU/RCU ShadowImage For the following features, the current copy processing slows down when the percentage of Snapshot “dirty” data is 60% or higher, and it stops when the Volume percentage is 75% or higher. Mode 467 is provided to Migration prevent the percentage from exceeding 60%, so that the host performance is not affected.
  • Page 300 System option modes Mode Category Description Default MCU/RCU Thin Image Since the SIM-RCs generated when the Thin Image pool usage rate exceeds the threshold value can be resolved by users, these SIM-RCs are not reported to the maintenance personnel. This SOM is used to report these SIM-RCs to maintenance personnel.
  • Page 301 System option modes Mode Category Description Default MCU/RCU Universal UR initial copy performance can be improved by Both issuing a command from CCIto execute a dedicated Replicator script consisting of UR initial copy (Nocopy), UR suspend, TC Sync initial copy, TC Sync delete, and UR resync.
  • Page 302 System option modes Mode Category Description Default MCU/RCU OFF in the primary storage system/ON in the ■ secondary storage system: The update data is copied to the S-VOL synchronously. 5. While this SOM is set to ON, make sure not to perform microcode downgrade to an unsupported version.
  • Page 303 System option modes Mode Category Description Default MCU/RCU ShadowImage Allows Quick Restore for external volumes with Both different Cache Mode settings. Universal Volume Mode 561 = ON: Quick Restore for external volumes Manager with different Cache Mode settings is prevented. Mode 561 = OFF (default): Quick Restore for external volumes with different Cache Mode settings is allowed.
  • Page 304 System option modes Mode Category Description Default MCU/RCU TrueCopy Allows you to slow the initial copy and resync Both operations when the write-pending rate on the RCU global-active exceeds 60%. device Mode 689 = ON: The initial copy and resync copy operations are slowed down when the Write Pending rate on RCU exceeds 60%.
  • Page 305 System option modes Mode Category Description Default MCU/RCU Universal This SOM is used to prevent Read JNL or JNL Restore when the Write Pending rate on RCU exceeds 60% as Replicator follows: When CLPR of JNL-Volume exceeds 60%, Read JNL ■...
  • Page 306 System option modes Mode Category Description Default MCU/RCU Universal Issues the Read command at the logical unit discovery operation using UVM. Volume Manager Mode 701 = ON: The Read command is issued at the logical unit discovery operation. Mode 701 = OFF (default): The Read command is not issued at the logical unit discovery operation.
  • Page 307 System option modes Mode Category Description Default MCU/RCU ShadowImage To reduce the chance of MIH, this SOM can reduce the priority of ShadowImage, Volume Migration, or Volume Resync copy internal IO requests so that host IO has Migration a higher priority. This SOM creates new work queues where these jobs can be assigned with a lower priority.
  • Page 308 System option modes Mode Category Description Default MCU/RCU Common When a parity group is uninstalled or installed, the following operation is performed according to the setting of SOM 721. Mode 721 = ON: When a parity group is uninstalled or installed, the LED of the drive for uninstallation is not illuminated, and the instruction message for removing the drive does not appear.
  • Page 309 Hitachi product is used as an external storage system. 5. While USP V/VM is used as an external storage...
  • Page 310 System option modes Mode Category Description Default MCU/RCU Dynamic When a DP pool is full, if any write operation is requested to the area where the page allocation is Provisioning not provided, this SOM can enable the DRU Protect Data attribute for the target DP-VOL.
  • Page 311 System option modes Mode Category Description Default MCU/RCU 6. With or 83-01-21-x0/00 and later, when HMO 63 or 73 is set to ON, the setting of the HMO is prioritized over the SOM 729 setting, so that the behavior remains the same as when SOM 729 is OFF even when it is set to ON.
  • Page 312 System option modes Mode Category Description Default MCU/RCU Dynamic When exceeding the pool threshold, the SIM is reported as follows: Provisioning Mode 734 = ON: A SIM is reported at the time when the pool usage rate exceeds the pool threshold (warning, system, or depletion).
  • Page 313 System option modes Mode Category Description Default MCU/RCU Dynamic This SOM enables to switch over whether to report the following SIM for users to the service personnel: Provisioning SIM-RC 625000 (DP pool usage rate continues to exceed the threshold) Mode 741 = ON: SIM is reported to the service personnel.
  • Page 314 System option modes Mode Category Description Default MCU/RCU Universal Enables to change the area where the information is obtained as the Characteristic1 item from Volume Manager SYMMETRIX. Mode 745 = ON: The area where the information is obtained as the ■...
  • Page 315 System option modes Mode Category Description Default MCU/RCU Dynamic This SOM disables the HDP Rebalance function and the HDT Tier relocation function which allow the Provisioning drives of all ECC Groups in the pool to share the load. Dynamic Tiering Mode 749 = ON: The HDP Rebalance function and the HDT Tier relocation function are disabled.
  • Page 316 System option modes Mode Category Description Default MCU/RCU TrueCopy This SOM can reduce the MIH watch time of RI/O for Both a TC or GAD pair internally so that update I/Os can Global-active continue by using an alternate path without MIH or device time-out occurrence in the environment where Mainframe host MIH is set to 15 seconds, or Open...
  • Page 317 System option modes Mode Category Description Default MCU/RCU alternate path delays and host MIH or time-out may occur. 8. If an RI/O retry occurs due to other factors than RI/O MIH (5 sec), such as a check condition report issued from RCU to MCU, the RI/O retry is performed on the same path instead of an alternate path.
  • Page 318 System option modes Mode Category Description Default MCU/RCU Dynamic While a DP pool VOL is blocked, if a read or write I/O is issued to the blocked pool VOL, this SOM can Provisioning enable the Protect attribute of DRU for the target DP- Data VOL.
  • Page 319 System option modes Mode Category Description Default MCU/RCU ShadowImage By switching this SOM to ON/OFF when ShadowImage is used with SOM 467 set to ON, copy Volume processing is continued or stopped as follows. Migration Mode 855 = ON: When the amount of dirty data is within the range from 58% to 63%, the next copy processing is continued after the dirty data created in the previous copy is cleared to prevent the amount...
  • Page 320 System option modes Mode Category Description Default MCU/RCU Common This SOM enables or disables to limit the cache allocation capacity per MP blade/unit to within the prescribed capacity* except for Cache Residency Manager. Mode 857 = ON: The cache allocation capacity is limited to within the prescribed capacity*.
  • Page 321 System option modes Mode Category Description Default MCU/RCU Dynamic All-page reclamation (discarding all mapping information between DP pool and DP volumes) is Provisioning executed in DP-VOL LDEV format. This new method is Dynamic enabled or disabled by setting this SOM to ON or Tiering OFF.
  • Page 322 System option modes Mode Category Description Default MCU/RCU Dynamic This SOM enables or disables the background format function performed on an unformatted area of a Provisioning DP/DT/TI pool. Dynamic Tiering For information regarding operating conditions, see the Provisioning Guide for your storage system. Thin Image Mode 896 = ON: The background format function is disabled.
  • Page 323 System option modes Mode Category Description Default MCU/RCU Dynamic By the combination of SOM 897 and 898 setting, the expansion width of Tier Range upper I/O value Tiering (IOPH) can be changed as follows. Mode 897 = ON: SOM 898 is OFF: 110%+0IO ■...
  • Page 324 System option modes Mode Category Description Default MCU/RCU Dynamic By the combination of SOM 898 and 897 setting, the expansion width of Tier Range upper I/O value Tiering (IOPH) can be changed as follows. Mode 898 = ON: SOM 897 is OFF: 110%+1IO ■...
  • Page 325 System option modes Mode Category Description Default MCU/RCU Volume In combination with the SOM 900 setting, this SOM determines whether to execute and when to start Migration the I/O synchronous copy change as follows. Mode 899 = ON: SOM 900 is ON: I/O synchronous copy starts ■...
  • Page 326 System option modes Mode Category Description Default MCU/RCU Volume In combination with SOM 899 setting, this SOM determines whether to execute and when to start Migration the I/O synchronous copy change as follows. Mode 900 = ON: SOM 899 is ON: I/O synchronous copy starts ■...
  • Page 327 System option modes Mode Category Description Default MCU/RCU Dynamic By setting this SOM to ON or OFF, the page allocation method of Tier Level ALL when the drive type of tier1 Tiering is SSD changes as follows. Mode 901 = ON: For tier1 (drive type is SSD), pages are allocated until the capacity reaches the limit.
  • Page 328 System option modes Mode Category Description Default MCU/RCU For more details about the interactions between SOMs 897, 898, and 901, contact customer support (see SOM897_898_901 sheet). Dynamic By setting this SOM to ON or OFF, the number of Tiering pages to be migrated per unit time at tier relocation is changed.
  • Page 329 System option modes Mode Category Description Default MCU/RCU Universal This SOM can change CM capacity allocated to MPBs Both Replicator with different workloads. Mode 908 = ON: The difference in CM allocation capacity among MPBs with different workload is large. Mode 908 = OFF (default): The difference in CM allocation capacity among MPBs with different workload is small (existing operation) .
  • Page 330 System option modes Mode Category Description Default MCU/RCU Dynamic When this SOM is set to ON, all of the zero data page reclamation operations in processing are stopped. Provisioning (Also the zero data page reclamation cannot be Dynamic started.) Tiering * Zero data page reclamation by WriteSame and ShadowImage UNMAP functions, and IO synchronous page...
  • Page 331 System option modes Mode Category Description Default MCU/RCU Dynamic By setting this SOM to ON, HDT monitoring data is collected even if the pool is a DP pool. Provisioning Dynamic Mode 937 = ON: HDT monitoring data is collected Tiering even if the pool is a DP pool.
  • Page 332 System option modes Mode Category Description Default MCU/RCU Common By setting this SOM, THP Page Size in Inquiry Page E3h is changed. THP Page Size varies depending on the combination of SOM 972 and 973 settings. For details, contact customer support (see SOM972_973 sheet).
  • Page 333 System option modes Mode Category Description Default MCU/RCU 1015 Universal When a delta resync is performed in a 3DC multi- target configuration with TC and UR, this SOM is used Replicator to change the pair status to PAIR/Duplex directly and then complete the delta resync.
  • Page 334 System option modes Mode Category Description Default MCU/RCU 6. When this SOM setting is default (OFF), a delta resync operation is completed without pair status change to COPY/Pending. Therefore, if an operation depends on the pair status changing to COPY/Pending, such as running the CCI pairevtwait command, set this SOM to ON.
  • Page 335 System option modes Mode Category Description Default MCU/RCU 1043 Universal This SOM disables journal copy. Both Replicator Mode 1043 = ON: When the following conditions are met at the UR secondary site, the journal copy is disabled. For VSP Fx00 models and VSP Gx00 models, the following conditions (1) and (2) or (1) and (3) are met: 1.
  • Page 336 System option modes Mode Category Description Default MCU/RCU For example, when setting this SOM only to CLPR0 (even though this SOM is not set to CLPR 1 to 31), select "LPR00" and then set this SOM to ON/OFF. If "System" is selected and then this SOM is set to ON, this SOM is not effective for any of the CLPRs.
  • Page 337 System option modes Mode Category Description Default MCU/RCU 1067 Universal This SOM is used to enable microcode downgrade to Both a version that does not support URxUR (including Replicator delta). Mode 1067 = ON: Even when a UR pair has been registered, downgrading the microcode to a version that does not support URxUR (including delta) is allowed.
  • Page 338 System option modes Mode Category Description Default MCU/RCU 1069 Common By setting this SOM, the INQUIRY Page E3h field is changed. The field varies depending on the combination of SOMs 972, 973, and 1069. For details, contact customer support (see SOM1069 sheet). Notes: 1.
  • Page 339 System option modes Mode Category Description Default MCU/RCU 1079 Dynamic This SOM is set not to run the Proprietary ANCHOR command during microcode downgrade from a Provisioning version that supports the Proprietary ANCHOR Dynamic command to a version that does not support the Tiering command.
  • Page 340 System option modes Mode Category Description Default MCU/RCU 1080 Global-active This SOM is intended for a case that multiple external connection paths are connected to a Target device port on an external system with a quorum disk and Universal there is a path whose performance degrades. For Volume such a case, this SOM can eliminate impacts on Manager...
  • Page 341 System option modes Mode Category Description Default MCU/RCU 1083 Dynamic This SOM enables or disables DP-VOL deletion while an external volume associated with the DP-VOL with Provisioning data direct mapping attribute is not disconnected. Universal Volume Mode 1083 = ON: DP-VOL deletion is enabled. Manager Mode 1083 = OFF (default): DP-VOL deletion is disabled.
  • Page 342 System option modes Mode Category Description Default MCU/RCU 1093 Dynamic This SOM is used to disable background unmap during microcode downgrade from a version that Provisioning supports pool reduction rate correction to a version Dynamic that does not support the function. Tiering Mode 1093 = ON: Background unmap cannot work.
  • Page 343 System option modes Mode Category Description Default MCU/RCU 1106 Dynamic This SOM is used to monitor the page usage rate of parity groups defined to a pool, and perform Provisioning rebalance to balance the usage rate if the rate differs Dynamic significantly among parity groups.
  • Page 344 System option modes Mode Category Description Default MCU/RCU rate between the parity group and the average is 0%. The average parity group usage rate of Tier2 ■ is (40%＋ 30%) / 2 ＝ 35% and the difference in the rate between the parity group and the average is 5% at the maximum.
  • Page 345 System option modes Mode Category Description Default MCU/RCU 1115 Deduplication When this SOM is set to ON, data is initialized without using metadata at LDEV format for a virtual Compression volume with Capacity Saving enabled. Mode 1115 = ON: When LDEV format is performed for a virtual volume whose capacity saving setting is Compression, the data is initialized without using the metadata.
  • Page 346 System option modes Mode Category Description Default MCU/RCU Compression, so that there is no side effect in relation to user data, but the processing may take more time than that when this SOM is set to OFF depending on the pool capacity. Therefore, basically do not use this SOM for cases other than pool volume blockage recovery.
  • Page 347 System option modes Mode Category Description Default MCU/RCU 1119 Deduplication This SOM is used to downgrade the microcode as follows while capacity saving is enabled: Compression VSP Fx00 models, VSP Gx00 models: From ■ 83-04-03-x0/00 or later to 83-04-01-x0/00 or 83-04-02-x0/00 New control information is added with 83-04-03 for the inflow control processing when capacity saving is...
  • Page 348 Mode Category Description Default MCU/RCU 1120 Dynamic This SOM disables TI pair creation in DP pools and releases cache management devices to enable the Provisioning microcode downgrade from 80-05-44 or later to Thin Image earlier than 80-05-44 or from 83-04-44 or later to earlier than 83-04-44.

  • Page 349: Glossary

    Glossary two-data-center. Refers to the local and remote sites, or data centers, in which TrueCopy (TC) and Universal Replicator (UR) combine to form a remote replication configuration. In a 2DC configuration, data is copied from a TC primary volume at the local site to the UR master journal volume at an intermediate site, then replicated to the UR secondary volume at the remote site.
  • Page 350 See copy-on-write (COW). COW Snapshot Hitachi Copy-on-Write Snapshot custom volume (CV) A custom-size volume whose size is defined by the user using Virtual LVI/Virtual LUN. See custom volume.
  • Page 351 A physical data storage device that can be either a hard disk drive (HDD) or a flash drive (also called a solid-state device). Hitachi Database Validator data center delta resync A disaster recovery solution in which TrueCopy and Universal Replicator systems are configured to provide a quick recovery using only differential data stored at an intermediate site.
  • Page 352 A software module that is used by a storage system but runs on a separate platform. external volume A logical volume whose data resides on drives that are physically located outside the Hitachi storage system. Fibre Channel; FlashCopy...
  • Page 353 hard disk unit head LDEV See top LDEV. host group A group of hosts of the same operating system platform. host mode Operational modes that provide enhanced compatibility with supported host platforms. Used with fibre-channel ports on RAID storage systems. host mode option Additional options for fibre-channel ports on RAID storage systems.
  • Page 354 A group of 255 control unit (CU) images in the RAID storage system that is controlled by a virtual (logical) storage system within the single physical storage system. For example, the Hitachi Universal Storage Platform V storage system supports two LDKCs, LDKC 00 and LDKC 01.
  • Page 355 OPEN-x A logical unit (LU) of fixed size (for example, OPEN-3 or OPEN-9) that is used primarily for sharing data between mainframe and open-systems hosts using Hitachi Cross-OS File Exchange. P-VOL This term is used only in the earlier version of the Device Manager - Storage Navigator GUI (still in use) for the primary volume.
  • Page 356 The volume in a copy pair that contains the original data to be replicated. The data on the P-VOL is duplicated synchronously or asynchronously on the secondary volume (S-VOL). The following Hitachi products use the term P-VOL: Thin Image, Copy-on-Write Snapshot, ShadowImage, TrueCopy, Universal Replicator, Universal Replicator for Mainframe, and High Availability Manager.
  • Page 357 The volume in a copy pair that is the copy of the original data on the primary volume (P-VOL). The following Hitachi products use the term "secondary volume": Thin Image, Copy-on-Write Snapshot, ShadowImage, TrueCopy, Universal Replicator, Universal Replicator for Mainframe, and High Availability Manager.
  • Page 358 SMTP simple mail transfer protocol snapshot A point-in-time virtual copy of a Hitachi Thin Image primary volume (P-VOL). The snapshot is maintained when the P-VOL is updated by storing pre-updated data (snapshot data) in a data pool. SNMP See Simple Network Management Protocol.
  • Page 359 See also source volume. space Generally refers to the data storage capacity of a disk drive or flash drive. Storage Replication Manager solid-state drive. Also called flash drive. SSID See storage subsystem identifier. secure socket layer storage cluster See cluster. storage tiers See tiered storage.
  • Page 360 Hitachi products: ShadowImage for Mainframe, Dataset Replication, and Compatible FlashCopy ® See also source volume. Hitachi TrueCopy See Thin Image. tiered storage A layered structure of performance levels, or tiers, that matches data access requirements with the appropriate performance tiers.
  • Page 361 volume migration; volume manager volume (VOL or vol) A logical device (LDEV), or a set of concatenated LDEVs in the case of LUSE, that has been defined to one or more hosts as a single data storage unit. An open-systems volume is called a logical unit (LU), and a mainframe volume is called a logical volume image (LVI).
  • Page 362 Glossary System Administrator Guide for VSP Gx00 models and VSP Fx00 models...

  • Page 363: Index

    Index certificates, obtaining changing 52, accelerated compression changing a user’s password accessing a storage system Changing assigned resource groups without the management software changing permissions account changing the date and time release lock controller settings Active Directory authentication SVP clock adding Channel Boards report RADIUS servers...
  • Page 364 DkuTempAveInfo.csv license key DkuTempInfo.csv estimating capacity DkuTempMaxInfo.csv license keys Dump files expiration collecting overview permanent term types viewing information event log License keys external volume, calculating capacity disabling emergency enabling installing failure report managing 193, firewall setup 35, removing a software license force release system lock temporary logging in...
  • Page 365 Physical View report resource groups (continued) PKCS#12 format resource lock pool capacity rules, restrictions, and guidelines calculating system configuration port number 56, user groups port number range Resource groups port numbers changing Ports report resource lock 94, Power Consumption report resources PpInfo.csv restoring user account information...
  • Page 366 Syslog server (continued) send test message setup system system administration 45, 48, 52, 55, System administration overview system architecture System configuration system lock system option modes test email message Test messages email SNMP Syslog There is a problem with this website's security certificate time TLSv1.0...
  • Page 368 Hitachi Vantara Corporate Headquarters Regional Contact Information 2845 Lafayette Street Americas: +1 866 374 5822 or info@hitachivantara.com Santa Clara, CA 95050-2639 USA Europe, Middle East, and Africa: +44 (0) 1753 618000 or info@emea@hitachivantara.com www.HitachiVantara.com | community.HitachiVantara.com Asia Pacific: + 852 3189 7900 or info.marketing.apac@hitachivantara.com...

This manual is also suitable for:

Vsp fx00 seriesVirtual storage platform g200Virtual storage platform g800Vsp g200Vsp g400Vsp g600 ... Show all

Table of Contents