Red Hat NETWORK PROXY 5.3.0 - Guida Utente

vCenter Configuration Manager Installation andGetting Started GuidevCenter Configuration Manager 5.3This document supports the version of each product

Technical Support and Education ResourcesThe following technical support resources are available to you. To access the current version of this bookand

Installation Options withDefault ValuesDescriptionCSI_USE_NEXT_AVAILABLE_LOCAL_GID=Y Recommendkeeping default value.Setting this option to Y will allo

NOTE If you are using the custom configuration file, csi.config, proceed with the installation in SilentMode.Silent Mode:If you execute InstallCMAgent

drwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 Agentdrwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 CFC-rw-rw---- 1 root cfgsoft 49993 Jul 2 17:34 CSIRegistry-

NOTE Consider these points when uninstalling an Agent:• The uninstall reverses all changes made by installation, however the installation log files ar

The data classes and filters for Mac OS X include the following:nMachines | GeneralnFile System | File StructurenSystem Logs | syslog eventsnIP Inform

4. The Data Types dialog box appears. Select the Select All check box, then confirm that the Use defaultfilters option button is also selected. Click

Exploring Mac OS X Collection ResultsNow that you have performed an initial Mac OS X collection, you can explore that data in the Portal.DashboardsMac

When you select the node, you see a Summary Report as displayed above of the data type that youselected. Click View data grid to go directly to the da

An alternate way to view your collected Mac OS X data is by running VCM Reports or creating your owncustom reports using VCM ’s reporting wizard. To b

1. Add UNIX machines hosting Oracle and install the Agent.2. Discover Oracle Instances.3. Create the Oracle Collection User Account.4. Perform an Orac

Preparing for Installation1Preparing for InstallationThis chapter provides important information that will help you prepare to install VCM components

1. In Administration | Machines Manager | Additional Components | VCM for Oracle, click Add.The Add Oracle Instances wizard opens.2. Select the machin

nMachine NamenOracle Home (Collected)nOracle Home (Override)nOracle SIDnOracle Software Owner (Override)nOracle Software Owner (Override)nOracle User3

d. Type the ORACLE_SOFTWARE_OWNER_ACCOUNT. If left blank, VCM will attempt toderive it by determining the owner of the ORACLE_HOME directory. This acc

d. Connect to the Oracle database using the sqlplus binary.e. The Oracle OS-authenticated account will be removed for Oracle database.f. If the option

chmod o+r $ORACLE_HOME/sqlplus/mesg/sp1us.msbchmod o+r $ORACLE_HOME/sqlplus/mesg/sp2us.msbchmod o+rx $ORACLE_HOME/nlschmod o+rx $ORACLE_HOME/nls/datac

nOracle Management View Data TypesnOracle Mgmt View – Audit Table PrivsFor Oracle 9i Online Documentation, see:(http://www.oracle.com/pls/db92/db92.do

How to Set Up and Use VCM AuditingThe VCM Auditing capability tracks all changes in the security aspects of VCM. Security-related events arewritten to

Getting Started with VCM for Virtualization6Getting Started with VCM for VirtualizationVCM collects virtualization configurations for Virtual Machine

The VCM Agent is not installed directly on the ESX/vSphere Servers and vCenter Servers; insteadcollections are accomplished using what is referred to

In order to configure VCM to seamlessly collect from virtual machines, the various actions specified in thefollowing sections are performed on three m

Using Installation ManagerInstallation Manager performs new installations as well as upgrades, and provides a highly simplifiedprocess for installing

ConfigurationSection VCM Agent Proxy Machine ESX/vSphere ServerStep 11: Installing theESX Web ServicesCertificate the AgentProxy Machines **Step 12: F

In VCM:1. Click Administration | Machines Manager | Available Machines | Available Windows Machines.2. In the data grid, select your designated Agent

In VCM:1. Click Collect. The Collection Type Selection dialog box appears.2. Select Machine Data, and then click OK.3. In the Available list, double-c

6. Configure the following options:nInstall From: In the drop-down list, select the name of the Collector used to manage virtualmachines.nSchedule: Se

1. Copying files from the Collector to the ESX/vSphere Server (requires access to the Collector and to thetarget ESX/vSphere Servers).2. Running scrip

Setting these variables will enable the execution script listed in Step 4 (csiprep.py) to create a useraccount on the ESX/vSphere Server (if it does n

3. Select Basic Name, Domain, Type, and then click Next. The Manually Add Machines - Basic pageappears.4. Type your ESX/vSphere Server Machine using a

In VCM:1. Click Administration | Machines Manager | Available Machines | Available UNIX Machines.2. Select your ESX/vSphere Server in the data grid, a

5. Enter information related only to the following areas:nAgent Proxy: Select the configured Agent Proxy machine.nSSH Settings: Specify the port and u

1. Adding the Web Services User to the Administrator Role Using the VI Client/vCenter Client.2. Installing the ESX Web Service Certificate on the Agen

Understanding Tools InstallationThe VCM tools include:nFoundation CheckernJob ManagernImport/Export and Configuration Content Wizard (CCW)nWeb Service

4. Click Add.5. Select the user name that you defined in Running Scripts on the ESX/vSphere Server (csi_acct in thatexample). For ESX 2.5, select the

On the Agent Proxy machine:1. Log on to the Agent Proxy machine. The steps provided here cannot be performed remotely.2. Open Internet Explorer, and t

4. Click the Certificate Error field on the red-shaded address bar. A dialog box appears with informationabout the error message.5. Click View certifi

6. Click Install Certificate. The Certificate Import Wizard appears.7. Click Place all certificates in the following store, and then click Browse. The

For ESX 2.5.x Only: Setting Up VirtualCenter to Collect Virtualization DataIn VCM:1. Add your VirtualCenter machine and license it. For more informati

Exploring Virtualization Collection ResultsNow that you have performed an initial Virtualization collection, you can explore that data in the Portal.R

Viewing the Virtualization EnvironmentsSelect Console | Virtual Environments to begin viewing virtualization configuration data for licensedVirtual Ma

Virtualization ReportsTo view reports related to your Virtual Environments, select Reports | Machine Group Reports |Virtual Environments.Like Dashboar

1. Go to Add/Remove Programs.2. Select Show Updates. The list displays updates associated with installed programs.3. Look for any of the following KB

Configuring the EcmAgtStartup Identity1. On the Collector, select Administrative Tools | Component Services. The Component Serviceswindow appears.2. E

The Local System account named NT AUTHORITY\System has unrestricted access to all local systemresources. This account is a member of the Windows Admin

nPassword: Type the password associated with the user name.7. After specifying the password, the script runs, creating a <MachineName>.txt file

6. In the Command Text text box, revise the script as specified in the description on the previous page.Clone this remote command for each vCenter Ser

nRun Action now: Runs the job immediately when you finish the wizard.nSchedule the Action to run later: Runs the job based on the time and date that y

nYou have not created the credential file for this machine (for example, vcenterserver1.local).nYou did not create the credential as the correct user

1. On the VCM Collector, browse to:[path]\VMware\VCM\Tools\vSphere Client VCM Plugin\bin2. Double-click VCVPInstaller.exe. The VCVP Plug-in Registrati

1. Select Administration | Settings | Integrated Products | VMware | vSphere Client VCM Plug-in.2. Select the setting you want to configure, and then

Upgrading the vSphere Client VCM Plug-inThe vSphere Client VCM Plug-in integrates VMware vCenter Configuration Manager into the vSphereClient to provi

Getting Started with VCM Remote7Getting Started with VCM RemoteGetting Started with VCM RemoteMany workstations come and go from the network. This tra

Before Collecting Remote DataBegin using VCM Remote by following the steps outlined below. For more information, click any step tojump to the related

The VCM Remote Client can be installed using any of several methods, including a manual installation(provided below), "Installing the Remote Clie

Secure Communications CertificatesVCM uses Transport Layer Security (TLS) to secure all HTTP communication with Windows and UNIXAgents in HTTP mode (i

4. Accept the default installation location, or click Change to enter a different location. Click Next.5. Type the name of the Collector machine and t

7. Configure or select one of the following certificate options:nIf you copied the VCM-generated Enterprise certificate to the CM Remote Client, to lo

msiexec.exe /qn /i "[path]\cm remote client.msi" COLLECTOR="YourCollectorName"PATHTOASP="VCMRemote/ecmremotehttp.asp" IN

1. On your VCM Collector, copy ...\VMware\VCM\AgentFiles\CM Remote Client.msito...\VMware\VCM\WebConsole\L1033\Files\Remote_Command_Files.2. On your V

sAddRemove = 1 'Whether or not VCM remote should appear in the Add/Removeprograms List, should be 0 = hide, 1 = showsMSIPackageName = "CM Re

sVirDir = Trim(sVirDir)End IfIf sInstallDir = "" ThensInstallDir = "c:\vcm remote client"ElsesInstallDir = Trim(sInstallDir)End If

nRun Action now: This option immediately installs VCM Remote Client on the target machines.nSchedule the Action to run later: This option allows you t

1. In VCM, click Administration | Settings | General Settings | VCM Remote. The default selection forthe Broadband, Dialup, and LAN collection filter

vCenter Configuration Manager Installation and Getting Started Guide158 VMware, Inc.

Getting Started with VCM Patching8Getting Started with VCM PatchingGetting Started with VCM PatchingYou can use VCM Patching to assess the state of ma

is shared between two collectors.Server Authentication is required to establish a TLS connection with an Agent. All Collectors should have acommon Ent

1. Click Patching | Windows | Bulletins. To obtain a comprehensive view of all released bulletins, clickBy Bulletin. If you know the affected product

5. If no conflicts appear, click Finish to begin your collection.NOTE If you experience problems collecting data from your Windows machines via the VC

2. Refer to VMware Deployment Summary for a list of issues that might impede distribution of a givenbulletin.3. Click On the Web to link directly to t

5. Read the confirmation screen, and then click Finish. VCM Patching creates your template and places itin the Assessment Templates folder (Patching |

6. The bulletin that relates to the product you selected appears in the Selected pane. Click Next.7. Read the confirmation screen, and then click Fini

1. Verify that the correct Machine Group is active.2. Click Patching | Windows | Assessment Templates.3. In the list of available templates, select th

patch staging, deployment, and reboot options, see Patch Staging and Deployment Schedule in theonline Help.NOTE If you have a licensed VCM Service Des

NOTE Navigate to Patching | VCM Patching Administration | Windows | Job Manager | Runningto view the status of your job. If you have scheduled the job

Getting Started with VCM Patching for UNIX/Linux MachinesWelcome to VCM Patching for UNIX/Linux. When licensed, you can use VCM Patching for UNIX/Linu

NOTE Before you can deploy patches to a UNIX/Linux machine, VCM Patching for UNIX must belicensed on the UNIX/Linux machine.For a list of UNIX/Linux m

For UNIX/Linux, each UNIX/Linux installation package is targeted for one or more supported platforms.To install the UNIX/Linux Agent using a provision

nThe Patch Signature File (.pls) files must reside on the Collector. By default, VCM Patching is set toexecute the action to download the .pls files a

Assessment Results node.Using a Template to Run an AssessmentUNIX assessment templates are filters for the patch assessment results data. To run an as

2. Follow the Collect wizard and select the option to collect machine data. Specify the UNIX machines tocollect data from, specify a data type to use

Explore Assessment Results and Acquire the PatchesAfter you have collected assessment data from your VCM-managed UNIX/Linux machines, use theAssessmen

3. Review the patch status for each machine. The patch status for the assessed machine is indicated byone of the following icons:PatchStatusDescriptio

If you define an alternate location for a particular Machine Group such as Servers (in Patching | VCMPatching Administration | Machine Group Mapping w

You can install the UNIX patches using the Deploy wizard from the following locations: User-createdAssessment Template, Imported Template, or Assessme

The pre-install and post-install scripts used in the Deploy actions are remote commands, which differ fromusing a VCMremote command to install a patc

vCenter Configuration Manager Installation and Getting Started Guide178 VMware, Inc.

Getting Started with Software Provisioning9Getting Started with Software ProvisioningThe VCM Software Provisioning components consist of VMware vCente

Cryptography used in VCM Software ComponentsVCM uses various software components that also use cryptography. Microsoft’s IIS, Internet Explorer,and SC

Overview of Component RelationshipsThe following diagram displays the general relationship between Package Studio, repositories, andPackage Manager in

nSoftware Repository for Windows: Installed on at least one Windows machine in your environment,and installed on the same machine with Package Studio.

The repository and the virtual directory are added to the locations specified during installation. The defaultlocation for the repository is C:\Progra

PrerequisitesTarget machine meets the supported hardware requirements, operating system, and softwarerequirements. See VCM Hardware and Software Requi

You can add the following arguments if you want to specify locations other than the defaultdirectories:REPOSITORY_ROOT=C:\Program Files\VMware\VCM\Too

1. Select Administration | Machines Manager | Licensed Machines | Licensed Windows Machines.2. In the data grid, locate the machines on which you are

1. Start the VMware vCenter Configuration Manager Package Studio. Select Start | All Programs All |VMware vCenter Configuration Manager | Tools | Pack

nYou have created software provisioning packages using VMware vCenter Configuration ManagerPackage Studio and published the packages to the repositori

8. Review the information, resolve any conflicts, and then click Finish. You can monitor the process inthe Jobs Manager. See "Viewing Provisionin

Install PackagesThe process of installing packages includes identifying and processing dependencies and conflicts, runningany specified prescripts, ru

Installing VCM Using Installation Manager2Installing VCM Using Installation ManagerThis chapter explains how to use VCM Installation Manager to instal

Related Software Provisioning ActionsYou can use the following management options in VCM when working with software provisioning:nJob Manager: Display

In this example the Compliance rule checks whether the source, where platform=Any and section=Release,was added to selected Package Managers as a sour

In this example, you want to determine if a software application named XSoftware is correctly installed. Ifthe software is installed correctly, a serv

21. Select one of the following Security Options:This option determines if a package is installed or removed based on the state of the signature. Sele

vCenter Configuration Manager Installation and Getting Started Guide194 VMware, Inc.

Getting Started with VCM ManagementExtensions for Assets10Getting Started with VCM ManagementExtensions for AssetsGetting Started with VCM Management

1. Click Administration | Settings | Asset Extensions Settings. The VCMMXA navigation windowappears.2. Select to configure either the hardware or soft

1. Click Administration | Settings | Asset Extensions Settings | Hardware Configuration Items. TheHardware Configuration Items view appears.2. Click V

5. If you are adding a field, determine how you want this field to be populated. Click the appropriateoption button: Manually (free-form text), Lookup

Add or Edit a Software Configuration Item Field1. Click Administration | Settings | Asset Extension Settings | Software Configuration Items. TheSoftwa

CopyrightYou can find the most up-to-date technical documentation on the VMware Web site at:http://www.vmware.com/support/The VMware Web site also pro

1. Insert the installation CD into the machine on which you are installing VCM and all of its components.The installation screen appears.NOTE If the i

6. Assign the roles that should have edit access to this field. Users with these roles can then edit the valuesof the field from Console | Asset Exten

3. Verify the machines you want to edit appear in the Selected pane. Click Next.4. Select the fields to edit, and then click Next.5. Enter a value for

NOTE If you want to change only the values for that device, and not the device name or descriptionitself, click Edit Values, instead of Edit. The Edit

1. Select the record, and then click Delete.2. Click OK to confirm your deletion. VCMMXA deletes the requested record from the SoftwareConfiguration I

vCenter Configuration Manager Installation and Getting Started Guide204 VMware, Inc.

Getting Started with VCM Service DeskIntegration11Getting Started with VCM Service DeskIntegrationGetting Started with Service Desk IntegrationVCM Ser

Service Desk Integration in Job ManagerWhen VCM Service Desk Integration is licensed and activated, it suspends any requested change to aVCM-managed m

Further ReadingRefer to Customizing VCM for information on how to customize for your environment. Each of theseareas regarding customization also appl

vCenter Configuration Manager Installation and Getting Started Guide208 VMware, Inc.

Getting Started with VCM for Active Direc-tory12Getting Started with VCM for ActiveDirectoryVCM for Active Directory (AD) collects AD objects across D

2. Click Run Installation Manager. The Introduction page of the Installation Manager appears.3. Click Next. The License Agreement page appears.4. If y

Confirming the Presence of DomainsPrior to setting up VCM for Active Directory, you must confirm that all fully-qualified DNS Domains thatyou want to

Adding and Assigning Network Authority AccountsBefore you can perform any type of action (Discovery, Collection, and so forth), the Collector must gai

4. Select By Browse List, then click Next. The Discovery Filters page appears.5. Select Only discover machines in the Browse List that match these cri

Verifying Domain Controller Machines in Available MachinesOnce your Domain Controller discovery is completed, verify that your Domain Controllers are

9. Verify the method used for communication. The default communication method is DCOM. For mostVCM for Active Directory configurations, the default va

4. Click the Tools tab.5. In the Tool Name list, select Disable UAC.6. Click Launch. A Command window displays the running action. When the command is

Performing a Machine Data Type CollectionNow you must perform a collection based on the Machines Data type. Refer to Performing an InitialCollection f

1. Click Administration | Machines Manager | Additional Components | VCM for Active Directory.NOTE If the Domain Controllers that you want to collect

as possible with VCM for AD.If you have machines that you plan to promote to Active Directory machines, but have not yet doneso, you must install VCM

NOTE A single Domain Controller may be selected as both an FDS and RDS. We recommend selecingDCs with reliable connections and availability to serve i

5. When the Select Installation Type page first appears, the VMware vCenter Configuration Managerand Tools options are automatically selected.To view

5. Click Finish.6. When the Setup DCs action is completed, VCM for Active Directory performs a schema and astructure collection. The information obtai

4. Click Select Data Types to collect from these machines.5. To ensure that a full collection will occur during setup of VCM for Active Directory, cli

10. To specify a location click the lookup ellipsis button (...). The Select an ADLocation page appears.11. Expand the Enterprise tree, and then sele

Exploring Active Directory Collection ResultsNow that you have performed an initial Active Directory collection, you can explore that data within theP

When you select the node, you will see a Summary Report, as displayed above, of the data you selected.Click View Data Grid to go directly to the data,

Active Directory ReportsAn alternative way to view your collected AD data is by running VCM Reports or creating your owncustom reports using VCM’s rep

Further ReadingRefer to Customizing VCM for information on how to customize for your environment. Each of theseareas regarding customization also appl

Getting Started with VCM for SMS13Getting Started with VCM for SMSGetting Started with VCM for SMSVCM for SMS provides continuous enterprise-wide OS,

nIf all SMS Servers that you want to manage are listed, then they have been discovered; however,they must be licensed in order to make them available

Performing SMS Client CollectionsNow that your SMS Server Collection is complete, you must perform another collection using theMicrosoft SMS Client Fi

nIf the Foundation Checker detects missing or improperly configured settings, you are notified withthe message "Errors detected". You will n

1. To view the SMS dashboard, select Console | Dashboards | Enterprise Applications | SMSDashboard.2. Click the SMSClient links or the Chart bars to

1. To view a list of your SMS Servers, along with additional information obtained during your initial SMSServer collection, select Console | Enterpris

1. To view a list of your SMS Clients, select Console | Windows (tab) | Enterprise Applications | SMS| SMS Clients | SMS Advanced Clients.2. View the

1. To begin exploring VCM’s Reporting functionality, select Reports | Machine Group Reports |Enterprise Applications | Microsoft SMS Reports.2. View t

vCenter Configuration Manager Installation and Getting Started Guide234 VMware, Inc.

Getting Started with Windows ServerUpdate Services14Getting Started with Windows Server UpdateServicesGetting Started with Windows Server Update Servi

nIf you cannot locate your WSUS Servers in this data grid, they have not yet been discovered byVCM. You must first discover, and then license these ma

1. As with the WSUS Server collection, use the procedure described in "Performing an Initial Collection"on page 67 to initiate your WSUS Cli

Viewing WSUS ReportsIn addition to using Reports to view your WSUS Server data, you can also run Reports to view data aboutyour WSUS Client Settings a

Accessing Additional Compliance Content15Accessing Additional Compliance ContentVMware provides several additional VCM Compliance Content Packages rel

7. When the Foundation Checker process has completed successfully and you have viewed the results ofthe checking process, click Next. The Specify Lice

If the particular Content Package(s) you have imported contains filter sets, they will appear underAdministration | Collection Filters | Filter Sets.P

Installing and Getting Started with VCMTools16Installing and Getting Started with VCMToolsAll VCM components and tools were automatically installed on

NOTE The VCM Tools installation has prerequisites much like a VCM installation. Each tool in theAdvanced Installation has its own installation require

2. When you launch the Job Manager Tool the first time, you must add your VCM Collectors before youcan view any job data originating from those machin

nBackup (export) and restore (import) Business Objects to the same machine.nBackup (export) and import (if needed) Business Objects during a VCM upgra

2. To use Import/Export, you must identify a source for the data to be imported or exported. ClickConnect to Source (or Connect to Target, if you are

As you proceed through the wizard, you can select which content packages you want to import. Beadvised that some Content Packages are very large. Ther

Maintaining VCM After Installation17Maintaining VCM After InstallationOnce you have performed initial setup and familiarized yourself with VCM and its

In addition to several general global settings, the following components also have specific settings thatshould be considered if you have licensed tha

Configure Database File GrowthAfter VCM is installed, the installer creates a single 250 MB data file and a 25 MB log file. As data is addedto VCM thr

9. The Verify Components to be Activated page updates to display the components included in thelicense. Installation Manager installs VCM and all of i

Configure Database Recovery SettingsSQL Server supports the following individual “Recovery Models” in SQL Server. They can be setdifferently for each

2. Open the Management folder, right-click Maintenance Plans, and then select Maintenance PlanWizard. The SQL Server Maintenance Plan Wizard opens.3.

4. Enter a maintenance plan name, and then select Single schedule for the entire plan or no schedule.Click Change. The Job Schedule Properties - Maint

7. Select the maintenance tasks to be performed. Select Check Database Integrity, Rebuild Index,Update Statistics, and Clean Up History. Click Next. T

9. Click the Databases drop down menu. Select the CSI_Domain, VCM, VCM_Coll, VCM_Raw, andVCM_UNIX databases for the integrity check, and then click OK

10. Specify how the Maintenance Plan should rebuild the Index. Click the Databases drop down menu.Select the CSI_Domain, VCM, VCM_Coll, and VCM_UNIX d

11. Specify how the Maintenance Plan should update the database statistics. Click the Databases dropdown menu. Select the CSI_Domain, VCM, VCM_Coll, a

13. Select Write a report to a text file, and specify the folder location. Writing the report to a file saves arecord of the maintenance plan actions

15. When the Maintenance Plan Wizard completes, verify that the actions specified in the wizard weresuccessful. To view, save, copy, or send the repor

Troubleshooting Problems with VCMATroubleshooting Problems with VCMThis chapter provides important information that will help you troubleshoot issues

12. Specify the SQL Server instance and type a database name as needed. Click Validate. It could take aminute or two, and then the page updates to inc

nThe bulletin information was removed from the UNIX Agent machine.nBulletin information may not be loaded on your Collector. If the Check for Updates

To Resolve the Problem1. Open a command prompt.2. Navigate to the C:\Program Files\VMware\VCM\AgentData\protected directory, and deletethese two files

Updating the VCM Virtual DirectoryTo update the VCM virtual directory, follow these steps:1. Access Internet Information Services by opening a command

3. Click the Show Details button on the right hand of the screen.4. Click the check box next to the affected report.5. Click the Delete option. You wi

vCenter Configuration Manager Installation and Getting Started Guide264 VMware, Inc.

Configuring a Collector as an Agent ProxyBConfiguring a Collector as an Agent ProxyAlthough it is not recommended, you can configure your Collector as

generated/uploaded and distributed.To change the password for the new user account, you must log in as the user rather than allowing anadministrator t

Index%%Systemroot% environment variable 63Aabout this book 9access by user 47accessingcompliance content 239accountapplication services 14collector se

change detectionWCI 74checkfor UNIX/Linux updates 169for Windows updates 159CMAgentInstall.exefor Windows 63uninstalling agent 64collectpackage manage

disablingUAC on Windows machines 61, 65, 214disaster recovery plan 258discoveringdomain controllers, AD 211Oracle Instances 109Windows machines 53, 56

15. Change the values as needed, otherwise click Next. The SRS Instance configuration page appears.16. Click Validate and wait for the validation proc

tools 13, 241understanding configurations 12using installation manager 12InstallCMAgent 87, 100installingPackage Manager for Windows 184Package Studio

PowerShellexecuting for WCI 76for Windows Custom Info 72scripts, troubleshooting 80signing scripts for WCI 76WCI getting started 75prerequisitescheck

SSLresetting required secure channel 261SUSEinstall UNIX agent 83Ttemplatesfor compliance 239ToCMBase64String 77toolbarin portal 49toolsfoundation che

Web ServicesconfiguringESX certificate 130settings 134virtualization 128settings 134user rolesvirtualization 129user, adding 129Web.config file 261Win

274 VMware, Inc.vCenter Configuration Manager Installation and Getting Started Guide

18. Change the path as needed, otherwise click Next. The NetBIOS and Active Directory configurationpage appears.19. If you are managing only specific

20. Type the account information as specified in "Default Network Authority Account" on page 13, andthen click Next. The Default Collector S

ContentsCopyright 2About This Book 9Preparing for Installation 11Using Installation Manager 12Understanding Installation Configurations 12Understandin

To specify a certificate different from the Collector certificate, click the Select button associated withSelect your Enterprise Certificate. For more

26. The vSphere Client VCM Plug-in (VCVP) provides VMware vSphere Client users with the ability toCollect, Run Compliance, Run VCM Patching Assessment

downloaded. Either change the path or click Next. The Create a Software Repository and local cacheunder page appears.30. The Software Repository is us

32. Package Studio Components will be installed in order to support Software Provisioning functionality,including creating and publishing packages. Ei

34. When the installation completes, you can select the Launch Product Portal option to start VCM afteryou click Finish.35. Review the displayed infor

Upgrading VCM and Related Components3Upgrading VCM and Related ComponentsThis chapter provides important information that will help you upgrade VCM an

To recover if the upgrade process is unsuccessful, reinstall the version from which you were upgrading,reconnect the databases from the back up copies

1. Detach a VCM 4.11.1 or newer database that is running in a 32-bit system.2. Copy the VCM database to a 64-bit machine that is running the 64-bit ve

nInstalling using Add/Remove Programs: When invoking setup.exe from Add/RemovePrograms, the option to repair VCM is available. The Repair option check

To upgrade an Agent:1. Click Administration | Machines Manager | Licensed Machines | Licensed Windows Machines.2. Select the machine or machines you a

vCenter Configuration Manager Installation and Getting Started GuideLaunching and Logging Onto VCM 48How to Launch VCM and Log On 48Getting Familiar w

1. Click Administration | Settings | General Settings | VCM Remote.2. Select Will Remote automatically upgrade old Remote clients.3. Click Edit Settin

1. Locate the AgentUpgradeLocal.sh file in \ProgramFiles\VMware\VCM\WebConsole\L1033\Files\UNIX_Remote_Command_Files.2. Open the AgentUpgradeLocal.sh

nHP-UX (PA-RISC) Agent UpgradenRed Hat Enterprise 2.1 Agent Upgrade (use only CMAgent.5.1.0.Linux.2.1)nRed Hat Enterprise 3.0, 4.0, 5.0, 5.1, 5.2, SUS

Platform Not Supported for Upgrade to 5.3 Agent ProxyYou can install or upgrade an Agent Proxy machine only to the 5.1.3 Agent if it is collecting fro

1. The following executable must be accessible from your non-Collector Agent Proxy Machine. The pathto this file on the Collector machine is as follow

NOTE If you have previously used this Agent Proxy to perform a collection from your upgradedCollector, the first collection may fail due to a password

vCenter Configuration Manager Installation and Getting Started Guide46 VMware, Inc.

Getting Started with VCM Componentsand Tools4Getting Started with VCM Components andToolsThis chapter covers global getting started procedures for VCM

Launching and Logging Onto VCMIf you have not already launched VCM after closing Installation Manager, follow the procedure detailedbelow to launch an

As shown in the following diagram, there are several major controls and areas in the Portal. The followingsubsections describe the general information

ContentsLicensing ESX/vSphere Server Machines as Virtual Machine (VM) Hosts 127Configuring Web Services for ESX/vSphere Server Communication 128Adding

The Select all displayed data rows button selects all the rows in the data grid.The Copy button is used to copy information from the selected rows in

Select: If you want to:Intersite Transports, Servers, Connections and Licensing.nView Active Directory Group Policy Container Settings.nView informati

Where to Go NextYou are now ready to proceed to Getting Started with VCM to start using VCM and all of its componentsand tools.Once you have completed

Getting Started with VCM5Getting Started with VCMBefore you can begin using VCM to manage the machines in your enterprise, you must complete thefollow

If the Windows machines that you want to manage belongs to a domain that is not shown in this list, thenyou must add that domain manually. Click Add,

1. Click Administration | Settings | Network Authority | Available Accounts.2. If you need to add a new account, click Add and follow the prompts.NOTE

The following procedure illustrates how to assign Network Authority to accounts by NetBios domain.However, you can also assign Network Authority by Ac

Your initial discovery can take anywhere from one afternoon to a couple of days, depending on the size ofyour network. You may not have a 100% success

3. Type a Name and Description for this new Discovery Rule, then click Next. The Discovery Methodpage appears.4. If you have Active Directory in your

8. Create the filter. For more specific filtering of machines for discovery and other advanced features,refer to the online Help. Click Next. The Impo

vCenter Configuration Manager Installation and Getting Started GuideManually Uninstall the Repository 182Install Package Studio 182Manually Uninstall

VCM requires that you specify the machines you want to manage. Remember, the number of licenses youhave purchased may not match the number of machines

4. Leave the Install VCM Agents for the selected machines box unchecked during your first pass atlicensing machines. Once you have more experience lic

3. Click Install and follow the prompts.NOTE To use advanced options such as HTTP communication for your agent, or to deploy the agentfrom an alternat

1. On your Collector, navigate to the Agent files directory at:c:\Program Files\VMware\VCM\AgentFiles2. Locate the CMAgentInstall.exe file, and then i

NOTE For Vista, Windows7, and Windows 2008 only: If you set compatibility mode on any Agentexecutables to a prior version of Windows, the operating sy

nPORTNUMBER: Installs the Windows Agent on the port number specified, using HTTP instead ofDCOM. For HTTP installs, where PORTNUMBER is set, you must

8. Restart the machine to apply the changes.9. Install the Agent as specified in Licensing and Deploying the VCM Agent.10. After installing the Agent

Performing an Initial CollectionYou are now ready to collect data. VMware recommends using the default filter set, which collects ageneral view of the

5. For initial collections, there should be no conflicts with previously scheduled or running jobscontaining the same data types. Click Finish.6. Veri

1. Begin by looking at the Windows Operating Systems Dashboard under Console | Dashboards |Windows | Operating Systems.2. Note that several other Wind

ContentsViewing SMS Dashboards 229Viewing SMS Server Data 230Viewing SMS Client Data 231Viewing SMS Reports 232Further Reading 233Getting Started with

4. When you select the node, you will see a Summary Report as displayed above of the data class thatyou selected. Click View Data Grid to go directly

TIP The default view is the Summary Report; however, at any time you may switch the defaultview to go directly to the data grid by using the ’Enable/D

Getting Started Collecting Windows Custom InformationAs a System Administrator, you can extend the data that VCM can collect by using a script, which

nYou must obtain or write a PowerShell script that will return data in a VCM-compatible element-normal XML format.nThe VCM agent (for VCM 5.3 or later

11. Click Next and then Finish.12. Run a collection using your new collection filter.13. Ensure the job completes.14. View data in the Custom Informat

The Job History Machine Detail view displays a single row for each WCI filter included in the collectionjob. These rows provide information about the

Executing PowerShell ScriptsPowerShell contains built-in policies, which limit its use as an attack vector. The primary policy is for scriptexecution.

For additional information about Windows PowerShell and signing scripts, see:nScripting with Windows PowerShell: http://technet.microsoft.com/en-us/sc

Example of Developing a Custom PowerShell Script for Use with the WCI Data TypeIn this example, the objective is to collect scheduled tasks informatio

The first challenge can be seen by looking at the column names returned by the schtasks command.Even the basic schtasks command (no options) has a col

vCenter Configuration Manager Installation and Getting Started Guide8 VMware, Inc.

It is still possible that reordering the list among tasks that have the same name, will cause “extra” changesto be reported, but regardless of these c

These steps are explained in the following subsections.Adding UNIX/Linux MachinesBefore you can collect data from your UNIX/Linux machines, they must

NOTE When you expand your UNIX/Linux collections to a broader set of machines, you may want touse other methods to add your UNIX/Linux machines. Refer

5. Click Next. The Product License Details page appears.6. The licensed machine count has increased by the number of machines that you have selected t

1. Verify that the machine on which you intend to install the agent has enough free disk space. For moreinformation, see the VCM Hardware and Software

inflating: CSIInstall/scripts/AltSource_ftp.shinflating: CSIInstall/scripts/AltSource_rcp.shinflating: CSIInstall/scripts/AltSource_sftp.shinflating:

Installation Options withDefault ValuesDescriptionCSI_CREATE_USER=YRecommend keeping defaultvalue.The user is being created. This value indicates whet

Installation Options withDefault ValuesDescriptionCSI_USE_NEXT_AVAILABLE_LOCAL_GID=Y Recommendkeeping default value.Setting this option to Y will allo

NOTE If you are using the custom configuration file, csi.config, proceed with the installation in SilentMode.Silent Mode:If you execute InstallCMAgent

12. In addition to creating the necessary user and groups, and configuring the machine to run the Agent,the installation also creates a new directory

About This BookAbout This BookThis guide, VCM Installation and Getting Started Guide, describes the steps you must take in order to ensurea successful

nThe uninstall reverses all changes made by installation, however the installation log files are retained in<AgentRoot>/install. <AgentRoot&g

3. Select the machine(s) from which you want to collect data. To select multiple machines, use Shift-clickor Ctrl-click. Use the double arrow to move

Note that several other UNIX Dashboards are also available. Take time to familiarize yourself with theremainder of the UNIX Dashboards. UNIX Collectio

When you select the node, you see a Summary Report as displayed above of the data type that youselected. Click View data grid to go directly to the da

Like Dashboards, Reports are run real time against the current data available in the CMDB for themachines in the active machine group, and therefore t

2. Click Add Machines. The Add Machines page appears.3. Select Basic, and then click Next. The Manually Add Machines - Basic page appears.NOTE When yo

4. Enter the Machine and the Domain, and then select DNS for Type. For Machine Type, select theappropriate operating system. Modify the port number if

5. Click Next. The Product License Details page appears.6. The licensed machine count has increased by the number of machines that you have selected t

4. Use chmod u+x <filename> to change the permissions on the agent binary file.5. In the directory where you copied the file, execute the agent

Installation Options withDefault ValuesDescription• +H means only for HP-UX• +L means only for Linux• +D means only for Darwin (Mac OS X)• + means for