2. First, remove power cords from outlet. 3. Attach signal cables to connectors. 3. Remove signal cables from connectors. 4. Attach power cords to outlet. 4. Remove all cables from devices. 5. Turn device ON. BladeCenter Management Module: User’s Guide...
Statement 8: CAUTION: Never remove the cover on a power supply or any part that has the following label attached. Hazardous voltage, current, and energy levels are present inside any component that has this label attached. There are no serviceable parts inside these components.
Chapter 1. Introducing the BladeCenter management module This Management Module User’s Guide contains information about configuring the ERserver ® management module and managing components installed in the IBM ™ BladeCenter unit. Your BladeCenter unit comes with one hot-swap management module in management-module bay 1.
For additional information, see the “Light path diagnostics” section in the Hardware Maintenance Manual and Troubleshooting Guide on the IBM BladeCenter Documentation CD. v Power-on: When this green LED is lit, the management module has power.
Video connector Your BladeCenter management module contains one standard video connector. Use this connector to connect a compatible SVGA or VGA video monitor to the BladeCenter unit. Blade server integrated video controllers share the management-module video connector through the BladeCenter KVM interface.
Remote management and console Ethernet connector Your BladeCenter management module contains one 10/100 Mb Ethernet connector that provides the remote connection to the network management station on the network. Use this port to establish connections with the remote management and remote console features of the BladeCenter unit.
You also can use the management-module Web interface and management-module command-line interface to view some of the blade server configuration settings. See Chapter 3, “Using the management-module Web interface,” on page 11 and the IBM Eserver BladeCenter Management-Module Command-Line Interface Reference Guide for more information.
Setting up the remote connection To configure and manage BladeCenter components, you must first set up the remote connection through the external Ethernet port on the management module. Cabling the Ethernet port Complete the following steps to connect the Ethernet cable to the management module: 1.
Note: If the IP configuration is assigned by the DHCP server, the network administrator can use the MAC address of the management module network interface to find out what IP address and host name are assigned. BladeCenter Management Module: User’s Guide...
Console main window) that represents the BladeCenter unit. If the BladeCenter management module IP address is known, the network administrator can create an IBM Director managed object for the unit. If the IP address is not known, the IBM Director software can automatically discover the BladeCenter unit (out-of-band, using the Ethernet port on the BladeCenter management module) and create a managed object for the unit.
1. Open a Web browser. In the address or URL field, type the IP address or host name assigned for the management-module remote connection (see “Configuring the management module for remote access” on page 8 for more details). BladeCenter Management Module: User’s Guide...
The Enter Network Password window opens. 2. Type your user name and password. If you are logging in to the management module for the first time, you can obtain your user name and password from your system administrator. All login attempts are documented in the event log. Note: The initial factory-defined user ID and password for the management module are: v User ID: USERID (all capital letters)
BladeCenter unit. Blade Servers: v Bay - The lowest-number bay the blade server occupies. BladeCenter Management Module: User’s Guide...
(Blade Tasks → On Demand), which changes the status from Standby to Active. Note: You must contact IBM within 14 calendar days after you activate an On Demand blade server. See your Agreement for Standby Capacity on Demand for additional information.
The maximum capacity of the event log is 750 entries. When the log is 75 percent full, the BladeCenter Information LEDs light. When the log is full, new entries overwrite the oldest entries, and the BladeCenter Error LEDs light. If you do not BladeCenter Management Module: User’s Guide...
want the management module to monitor the state of the event log, deselect the Monitor log state events checkbox at the top of the event log page. You can sort and filter entries in the event log. See the event log help for more information.
The VPD for the firmware in the management modules also includes the file name of the firmware components. (Selecting the Firmware VPD choice takes up to 30 seconds to refresh and display information.) BladeCenter Management Module: User’s Guide...
Blade Tasks Select the choices in the Blade Tasks section to view and change the settings or configurations of blade servers in the BladeCenter unit. Power/Restart Select Power/Restart choice to perform the following actions on any blade server in the BladeCenter unit. Note: You cannot perform these actions on an On Demand blade server with a Standby status (identified by an X in the SCOD column).
Servers link to activate the selected blade servers. Blade servers with an On Demand status of N/A are not On Demand blade servers. Note: You must contact IBM within 14 calendar days after you activate an On Demand blade server. See your Agreement for Standby Capacity on Demand for additional information.
Select the Remote Control choice to: v View and change the current owners of the keyboard, monitor, and mouse (KVM), and of the CD-ROM drive, diskette drive, and USB port (Media tray). v View the details of any remote control session currently active (user ID, client IP address, start time).
Select the Firmware Update choice to update the service processor firmware on a blade server. Select the target blade server and the firmware file to use for the update; then, click Update. You can obtain the firmware files from the IBM Support Web site at http://www.ibm.com/pc/support/.
Configuration Select the Configuration choice to: v Define a name for a blade server. v Enable or disable the following items on all blade servers in the BladeCenter unit: – Local power control – Local KVM control – Local media tray control –...
SOL sessions are started and run using the management module command-line interface. See the IBM Eserver BladeCenter Management Module Command-Line Interface Reference Guide for information and instructions. BladeCenter Management Module: User’s Guide...
I/O Module Tasks Select the choices in the I/O Module Tasks section to view and change the settings or configuration on network-interface I/O modules in the BladeCenter unit. Note: Some choices do not apply to, and are not available for, some types of I/O modules such as pass-thru modules.
Select the Firmware Update choice to update the firmware in a I/O module. Select the target I/O module and the firmware file to use for the update; then, click Update. You can obtain the firmware files from the IBM Support Web site at http://www.ibm.com/pc/support/.
General Settings Select the General Settings choice to view or change the following settings: v The name of the management module v The name of the contact person responsible for the management module v The physical location of the management module v The real-time clock settings in the management module Some of the General Settings are used during SNMP and SMTP configuration.
ID and password in a safe place. If you forget the management-module login ID and password, you must replace the management module. Click on View Configuration Summary to display the configuration settings for all BladeCenter users and components. BladeCenter Management Module: User’s Guide...
Select the Alerts choice to specify which alerts (from lists of Critical, Warning, and System alerts) are monitored, which alert notifications are sent to whom, how alert notifications are sent (SNMP, e-mail, IBM Director), whether to include the event log with the notification, and other alert parameters.
Port used for persistent remote disk (disk on card). 5900 Port used for the TCP VNC server applet 6090 Port used for IBM Director commands using TCP/IP 13991 Port used for IBM Director alerts using UDP Click on View Configuration Summary to display the configuration settings for all BladeCenter users and components.
Changes). 2. For I/O module communication with a remote management station, such as the IBM Director server, through the management module external Ethernet port, the I/O module internal network interface and the management module internal and external interfaces must be on the same subnet.
BladeCenter users and components. Some of the Network Protocol settings are used during SNMP, SMTP, and LDAP configuration. See “Configuring SNMP” on page 35, “Configuring SMTP” on page 37, and “Configuring LDAP” on page 38 for additional information. BladeCenter Management Module: User’s Guide...
Security Select the Security choice to view or change the secure socket layer (SSL) settings for the Web server and LDAP client, and view or change the Web server secure shell (SSH) settings. You can enable or disable (the default) SSL, and choose between self-signed certificates and certificates provided by a certificate authority (CA).
Management-module firmware is in several separate files that are installed independently; you must install all of the firmware update files. You can obtain the firmware files from the IBM Support Web site at http://www.ibm.com/pc/support/. Restore Defaults Select the Restore Defaults choice to restore the factory default configuration of the management module.
(MIB) on your SNMP manager. The MIB supports SNMP traps. The MIB is included in the management-module firmware update package that you downloaded from the IBM Support Web site. Complete the following steps to configure your SNMP: 1. Log in to the management module where you want to configure SNMP. For more information, see “Starting the management-module Web interface”...
SNMP managers. You must define at least one community. Each community definition consists of the following parameters: v Name v IP address If either of these parameters is not correct, SNMP management access is not granted. BladeCenter Management Module: User’s Guide...
Note: If an error message window opens, make the necessary adjustments to the fields listed in the error window. Then, scroll to the bottom of the page and click Save to save your corrected information. You must configure at least one community to enable this SNMP agent. 7.
If left blank, the default value of 389 is used for non-secured LDAP connections. For secured connections, the default is 636. You must configure at least one LDAP server. BladeCenter Management Module: User’s Guide...
Root DN The distinguished name for the root entry of the directory tree on the LDAP server. An example might look like dn=companyABC,dn=com. User Search Base DN As part of the user authentication process, it is necessary to search the LDAP server for one or more attributes associated with a particular user.
1. In the navigation pane, click MM Control → Network Protocols. 2. Scroll down to the Lightweight Directory Access Protocol (LDAP) Client section and click Set search attribute names for LDAP based authentication. A page similar to the one in the following illustration is displayed. BladeCenter Management Module: User’s Guide...
3. To configure the search attributes, use the following information. UID Search Attribute When the binding method selected is Anonymous authentication or Client authentication, the initial bind to the LDAP server is followed by a search request directed at retrieving specific information about the user, including the distinguished name, login permissions, and group ownerships of the user.
Web server (HTTPS) and secure LDAP connection (LDAPS). The management module takes on the role of SSL client or SSL server depending on the type of connection. The following table shows that the management module BladeCenter Management Module: User’s Guide...
acts as an SSL server for secure Web server connections. The management module acts as an SSL client for secure LDAP connections. Table 4. Management module SSL connection support Connection type SSL client SSL server Secure Web server Web browser of the user Management-module (HTTPS) (For example: Microsoft Internet Explorer)
SSL server, see “Generating a self-signed certificate” on page 45. If you want to use a certificate authority signed certificate for the SSL server, see “Generating a certificate signing request” on page 46. BladeCenter Management Module: User’s Guide...
Generating a self-signed certificate: Complete the following steps to generate a new private encryption key and self-signed certificate: 1. In the navigation plane, click MM Control → Security. A page similar to the one in the following illustration is displayed. 2.
Read the information in the following sections for a description of each of the common fields. Required certificate data The following user-input fields are required for generating a self-signed certificate or a certificate signing request. BladeCenter Management Module: User’s Guide...
Country Use this field to indicate the country where the management module physically resides. This field must contain the 2-character country code. State or Province Use this field to indicate the state or province where the management module physically resides. This field can contain a maximum of 30 characters.
Web browser window, PEM format is usually expected. The command for converting a certificate signing request from DER to PEM format using OpenSSL is similar to the following: openssl req -in csr.der -inform DER -out csr.pem -outform PEM BladeCenter Management Module: User’s Guide...
7. Send the certificate signing request to your certificate authority. When the certificate authority returns your signed certificate it might be necessary to convert the certificate to DER format. (If you received the certificate as text in an e-mail or a Web page, it is probably in PEM format.) You can change the format using a tool provided by your certificate authority or using a third-party tool such as OpenSSL (http://www.openssl.org).
1. In the navigation pane, select MM Control → Security. 2. In the SSL Client Configuration for LDAP Client section, make sure that the SSL client is disabled. If it is not disabled, select Disabled in the SSL Client field and then click Save. BladeCenter Management Module: User’s Guide...
3. Scroll to the SSL Client Trusted Certificate Management section. A page similar to the one in the following illustration is displayed. 4. Click Import next to one of the Trusted CA Certificate 1 fields. A page similar to the one in the following illustration is displayed. 5.
You must create a server key before enabling the secure shell server. When you request a new server key, both a Rivest, Shamir, and Adelman (RSA) key and a DSA key are created to allow access to the management module from BladeCenter Management Module: User’s Guide...
either a SSH version 1.5 or SSH version 2 client. For security, the secure shell server private key is not backed-up during a configuration save and restore operation. The following third-party SSH clients are available. While some SSH clients have been tested, support or non-support of any particular SSH client is not implied.
Restore the management-module configuration Note: If you cannot communicate with a replacement management module through the Web interface or the IBM Director programs, the IP address might be different from the IP address of the management module just removed.
changed or damaged. Use it as a base that you can modify to configure multiple management modules with similar configurations. Complete the following steps to back up your current configuration: 1. Log in to the management module where you want to back up your current configuration.
8. Click OK to confirm that you want to restart your management module. 9. Click OK to close the current browser window. 10. To log in to the management module again, start your browser, and follow your regular login process. BladeCenter Management Module: User’s Guide...
If you need help, service, or technical assistance or just want more information about IBM products, you will find a wide variety of sources available from IBM to assist you. This appendix contains information about where to go for additional information about IBM and IBM products, what to do if you experience a problem ®...
Getting help and information from the World Wide Web On the World Wide Web, the IBM Web site has up-to-date information about IBM xSeries and IntelliStation products, services, and support. The address for IBM xSeries information is http://www.ibm.com/eserver/xseries/. The address for IBM IntelliStation information is http://www.ibm.com/pc/intellistation/.
Web sites. The materials at those Web sites are not part of the materials for this IBM product, and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.
OS/2 WARP Lotus, Lotus Notes, SmartSuite, and Domino are trademarks of Lotus Development Corporation and/or IBM Corporation in the United States, other countries, or both. Intel, MMX, and Pentium are trademarks of Intel Corporation in the United States, other countries, or both.
IBM makes no representations or warranties with respect to non-IBM products. Support (if any) for the non-IBM products is provided by the third party, not IBM. Some software may differ from its retail version (if available), and may not include user manuals or all program functionality.
IBM cannot accept responsibility for any failure to satisfy the protection requirements resulting from a nonrecommended modification of the product, including the fitting of non-IBM option cards. This product has been tested and found to comply with the limits for Class A Information Technology Equipment according to CISPR 22/European Standard EN 55022.