Role-Based User Accounts; Enclosure Linking - HP Xw460c - ProLiant - Blade Workstation Overview

Role-based user accounts

The BladeSystem Onboard Administrator provides configurable user accounts that can provide
complete isolation of multiple administrative roles such as server, LAN, and SAN. User accounts are
configured with specific device bay or interconnect bay permissions and one of three privilege levels:
administrator, operator, or user. An account with administrator privileges including BladeSystem
Onboard Administrator bay permission can create or edit all user accounts on an enclosure. Operator
privileges allow full information access and control of permitted bays. User privileges allow
information access but no control capability.
The BladeSystem Onboard Administrator requires user login to the web GUI or CLI with an account ID
and password. For a local account, the password is stored on the BladeSystem Onboard
Administrator. For an LDAP account, the BladeSystem Onboard Administrator contacts the defined
LDAP server to check the user credentials. Two-factor authentication allows even tighter security for the
user management session to the BladeSystem Onboard Administrator.

Enclosure linking

Rather than requiring separate logins to access multiple management processors within each
enclosure, the BladeSystem Onboard Administrator allows single point access. Thus, an administrator
can use single sign-on to log in to a single BladeSystem Onboard Administrator and use the web GUI
to graphically view and manage the HP BladeSystem c-Class components in up to seven linked
enclosures. For example, an IT administrator could automatically propagate management
commands—such as changing the enclosure power mode—throughout the linked enclosures.
The c7000 enclosure contains two enclosure link ports to allow any active BladeSystem Onboard
Administrator module to access linked enclosures. On a standalone enclosure or upper enclosure in a
series of linked enclosures, the upper enclosure link-up port functions as a service port for temporary
connection to a PC with a CAT5 patch cable. It provides quick access to any BladeSystem Onboard
Administrator module, ProLiant Onboard Administrator (iLO 2), or interconnect module with Ethernet
management ability.
The enclosure link-down port connects to the enclosure link-up port on the enclosure below it. Linking
the enclosures enables the rack technician to access all the enclosures through the open
link-up/service port. If more c-Class enclosures are added to the rack, they can be linked through the
open enclosure link-up port on the upper enclosure or the link-down port on the bottom enclosure.
NOTE
The linked enclosures will enforce a common rack name on all
the linked enclosures unless different rack names are established
prior to linking the enclosures and not changed after linking the
enclosures.
IMPORTANT
The HP BladeSystem c-Class Enclosure link ports are not
compatible with the HP BladeSystem p-Class Enclosure link
ports.
9