Monitoring & configuring Server Group by using idrac Group Manager

Transcription

1 Mnitring & cnfiguring Server Grup by using idrac Grup Manager This Dell EMC technical white paper intrduces the idrac Server Grup Manager feature and describes the prcedures t effectively set up and manage a grup f Dell PwerEdge servers. Dell Engineering June 2017 Authrs Server Grup Manager Team Server Slutins Grup A Dell EMC Technical White Paper

2 Revisins Date June 2017 Descriptin Initial release The infrmatin in this publicatin is prvided as is. Dell Inc. makes n representatins r warranties f any kind with respect t the infrmatin in this publicatin, and specifically disclaims implied warranties f merchantability r fitness fr a particular purpse. Use, cpying, and distributin f any sftware described in this publicatin requires an applicable sftware license. Cpyright June-2017 Dell Inc. r its subsidiaries. All Rights Reserved. Dell, EMC, and ther trademarks are trademarks f Dell Inc. r its subsidiaries. Other trademarks may be the prperty f their respective wners. Published in the USA [6/27/2017] [Technical White Paper] Dell believes the infrmatin in this dcument is accurate as f its publicatin date. The infrmatin is subject t change withut ntice. 2 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

3 Cntents Revisins... 2 Executive summary Intrductin Terms and definitins Netwrk cnfiguratin requirements Prerequisites Grup Manager wrkflws Setting up and managing a lcal grup Create a lcal grup Jining a server grup wrkflws Detaching a server frm a lcal grup Managing the grup preferences Changing server grup name Changing a grup passcde Deleting a lcal grup Mnitring and managing grup inventry Bkmarking Grup Manager cnsle address in a web brwser Accessing a Grup Manager cnsle frm a member idrac hme page Accessing a grup member idrac hme page frm Grup Manager cnsle Perfrming pwer-cntrl actins frm Grup Manager cnsle Accessing a grup member virtual cnsle Exprting the Grup Inventry Exprting the Grup Jbs audit lg Grup Actins Cnfigure all idracs in the lcal grup Adding, remving, r updating idrac user Setting up idrac alert cnfiguratin Clning grup alert cnfiguratin settings Grup Jb Manager Jbs tracking and reprting Feedback abut jb status and recvering frm errrs Cnfiguring Grup Manager by using CLIs Cnfiguring Grup Manager by using WS-Man Enabling r disabling the Grup Manager feature Mnitring & cnfiguring Server Grup by using idrac Grup Manager

4 2.7.3 Grup infrmatin Jining an existing grup Leave a grup Deleting idrac lcal grup Cnfiguring Grup Manager by using RACADM Enabling r Disabling the Grup Manager feature Grup infrmatin Jining an existing grup Leaving a grup Deleting idrac lcal grup Frequently asked questins and trubleshting tips Mnitring & cnfiguring Server Grup by using idrac Grup Manager

5 Executive summary The idrac Grup Manager feature makes the basic server management tasks very simple. With an idrac9 Enterprise license, Grup Manager prvides built-in, ne-t-many mnitring and inventry f lcal idracs and their assciated 14 th generatin PwerEdge servers. It is ideal fr small and mid-sized custmers wh d nt want t install and maintain a separate mnitring cnsle. Hwever, Grup Manager can scale t 99 additinal ndes, making this a useful tl fr many rganizatins, such as thse IT admins wh versee server clusters. The prime functins f Grup Manager are shwn in the Infgraphics here. 5 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

6 1 Intrductin With an idrac9 Enterprise license, Grup Manager prvides a simple 1XMany management cnsle experience t mnitr and manage a grup f servers physically cnnected t the same link lcal netwrk. Simplicity and ease f use are key tenets f Grup Manager, which prvides the ability t see a list f servers and quickly identify a server with an errr and access that server with a single click. idrac Grup Manager can: Aut-discver ther idrac9s and assciated servers, cllect basic inventry, mnitr health, perfrm basic passwrd management and cnfigure alerting. Once an idrac has becme a member f a grup, administrative users can view a summary dashbard t determine the verall health f their grup and link and launch t ther member idrac GUIs r virtual cnsles directly t trublesht issues withut having t enter new credentials fr each idrac cnnectin. Grup Manager has three primary views: Summary, Discvered Servers, and Jbs. The Summary view prvides a searchable dashbard fr the health mnitring and inventry f all systems in the lcal grup. The Discvered Servers view shws any idracs n the link lcal netwrk that have been aut-discvered and have nt been n-barded t a grup. The Jbs view shws the prgress and histry f grup cnfiguratin actins. Grup cnfiguratin actins include: setting up alerting, adding a lcal idrac user, remving a lcal idrac user, changing a lcal idrac user passwrd, changing the grup passcde, changing the grup name, and n-barding newly discvered idracs. The screen sht here shws the Summary page f Grup Manager. The Grup Manager wrkflws sectin describes the Grup Manager wrkflws accmplished thrugh web based GUI. The Cnfiguring Grup Manager by using CLIs sectin describes the scriptable wrkflws that can be accmplished by using WS-Man r RACADM CLIs. 6 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

7 The lcal grup is uniquely identified by a user-defined grup name and grup passcde. The grup name and passcde are used t establish authenticated and encrypted cmmunicatin between the idracs in the grup. After a grup is created, Grup Manager will autmatically discver ther enabled idracs in the lcal netwrk and shw them in a cnslidated Discvered Servers view t enable user-driven quick nbarding int the grup. Grup Manager can be accessed frm any idrac that has been cnfigured t be part f the same grup. 1. Click the Open Grup Manager buttn n the idrac hme page. The brwser is redirected t the Grup Manager Summary view. 2. The ppup blckers may prevent the redirect. If that happens, disable ppup blckers (allw ppups) in the web brwser, and then click Open Grup Manager. Up t 100 server ndes can be gruped under a server grup and mre than ne server grup can be set up in the lcal netwrk, but an individual idrac can nly be a member f ne grup at a time. T change (jin a new grup) grup, idrac must first leave its current grup, and then jin the new grup. The idrac frm where the grup was created gets chsen as the primary cntrller f the grup, by default. The primary cntrller idrac caches the grup infrmatin and hsts the graphical user interface (GUI) wrkflws. The user des nt define a dedicated Grup Manager primary cntrller t cntrl that grup. The idrac members autmatically self-select a new primary cntrller fr the grup, if the current primary ges ffline fr a prlnged duratin, but that des nt have any impact n the end user. Only admin rle (all privileges) idrac users have access t the Grup Manager functinality. If a nnadministratr user lgs in t idrac, the Grup Manager sectin remains invisible and inaccessible. Administratr users can seamlessly access the member idrac hme page thrugh single-sign-n frm the Grup Manager Summary screen. 1.1 Terms and definitins Fr the purpses f this technical white paper, the fllwing terms and definitins apply: Summary View: The Grup Manager Summary View (alternatively called the Grup Manager hme page) is bradly categrized int three sectins. The first sectin shws rllup summary with aggregated summary details. The secnd sectin prvides buttns fr actins that are taken n the grup as whle, and the third sectin displays the list f all idracs in the grup. Discvered Servers View: Discvered Servers displays the list f the idracs detected n the lcal netwrk, which has nt jined any grup yet. Fr idracs t be displayed under Discvered Servers, Grup Manager feature must be enabled in each idrac. Grup Jbs View: Jbs view allws the user t track the prgress f a grup jb and helps with simple recvery steps t crrect cnnectivity induced failures. The Jbs view allws the user t view the status f the last 50 jbs that have been run and any success r failures that has ccurred. The user can use the jbs view t track the prgress f the actin acrss the grup r t cancel an actin that is schedule t ccur in the future. 7 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

8 Primary Cntrlling System: Primary cntrlling system f the grup is autmatically selected. By default, it is the idrac frm which the grup was first cnfigured. It hsts the Grup Manager web interface by prviding the GUI wrkflws. If a user lgs in t any member and clicks Open Grup Manager, the brwser will be redirected t the primary cntrller thrugh a single-sign-n. Backup/Secndary Cntrlling System: Primary cntrller autmatically selects a secndary cntrller t take ver if the primary ges ffline fr an extended perid f time (10 min. r mre). If bth primary and secndary ges ffline fr an extended duratin (fr mre than 14 min.) a new primary and secndary cntrller gets selected. Keeps a cpy f the Grup Manager cache f members and grup tasks. Grup Manager Single Sign On: All idracs in the grup trust each ther and are authenticated based n the grup name and shared passcde secret. As a result an administratr user at a grup member IDRAC is granted administratr-level privileges at any grup member idrac when accessed thrugh Grup Manager Web interface single sign n. Yu can nrmally access the Grup Manager hme page frm any member idrac by clicking the Grup Manager buttn at idrac hme page. Any member idrac hme page can be seamlessly accessed frm by duble clicking the respective server rw in the list at Grup Manager hme page. Fr auditing purpses, idrac lgs <user>-<svctag> as the user that lgged n int peer members thrugh Grup Manager Single-Sign-On, where <SVCTAG> is the Service Tag f the idrac where the user <user> first lgged in. IDRAC Jbs and Jb queue: idrac Jb queue accessible frm Maintenance Jb Queue prvides a cnslidated view f cnfiguratin actins perfrmed at that server. Server cnfiguratin grup actins perfrmed thrugh Grup Manager is carried ut n an idrac by using idrac Jb Scheduler interface. Therefre, the audit lg fr any server cnfiguratin perfrmed thrugh Grup Manager will be available in the idrac Jb queue and Lifecycle lgs. 1.2 Netwrk cnfiguratin requirements Grup Manager uses IPv6 link lcal netwrking t cmmunicate between idracs (excluding the web brwser GUI). Link lcal cmmunicatin is defined as nn-ruted packets which means any idrac separated by a ruter cannt be jined in a lcal grup. If the idrac-dedicated prt r shared LOM is assigned t a vlan then the vlan will als limit the number f idracs that can be jined in a grup (idracs must be n same vlan and traffic must nt pass thrugh a ruter). When Grup Manager is enabled, idrac enables an IPv6 Link Lcal address regardless f the idrac s current user defined netwrk cnfiguratin. Grup Manager can be used when idrac is cnfigured fr IPv4 r IPv6 ip addresses. Grup Manager uses mdns t discver ther idracs n the netwrk and will send encrypted packets fr nrmal inventrying, mnitring and management f the grup using the link lcal IPv6 address. Using IPv6 link lcal netwrking means that the Grup Manager prts and packets will never leave the lcal netwrk r be accessible t external netwrks. Prts (Specific t Grup Manager unique functinality des nt include all idrac prts) 5353 (mdns) 443 (webserver) - cnfigurable 8 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

9 5670 (Multicast grup cmmunicatin) C000 F000 dynamically identifies ne free prt fr each member t cmmunicate in the grup Best netwrking practices Grups are intended t be small and n the same physical link lcal netwrk. It is recmmend t use the dedicated idrac netwrk prt fr enhanced security. Shared LOM is als supprted Additinal netwrk cnsideratins Tw idracs that are separated by a ruter in the netwrk tplgy are cnsidered t be n separate lcal netwrks and cannt be jined in the same idrac lcal grup. Meaning, if the idrac is cnfigured fr dedicated NIC settings, the netwrk cable cnnected t IDRAC dedicated prt in the rear f the server must be under a lcal netwrk fr all relevant servers. If the idrac is cnfigured fr shared LOM netwrk settings, the shared netwrk cnnectin used by bth server hst and IDRAC need t be cnnected under a lcal netwrk fr Grup Manager t detect and nbard thse servers int a cmmn grup. IDRACs cnfigured with a mix f dedicated and shared LOM mde NIC settings culd als be nbarded int a cmmn grup, if all the netwrk cnnectins d nt pass thrugh a ruter. 1.3 Prerequisites An Enterprise License is required n all idracs that are required t be gruped under a server grup. Grup Manager must be enabled. idracs must be cnnected n the same physical link lcal netwrk. See Netwrk cnfiguratin requirements. Grup Manager is accessible nly t administratr rle user. Must be a 14G PwerEdge server with an idrac9. idrac must have an IP address that a web brwser can cnnect t. 9 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

10 2 Grup Manager wrkflws This sectin describes the Grup Manager tasks that can be perfrmed by using web-based GUI. 2.1 Setting up and managing a lcal grup Grup Manager allws setting up mre than ne lcal idrac grup n a lcal netwrk. But, an individual idrac can nly be a member f ne grup at a time. T change grups, idrac must first leave its current grup and then jin the new grup. Grup Manager welcme screen accessible frm the idrac index page allws an administratr-privileged user t create a new server grup r nbard that idrac int an existing lcal server grup Create a lcal grup Grup Manager can be rdered as enabled r disabled, by default frm the factry. If Grup Manager is rdered as Disabled : 1. Enable it by lgging in t idrac, and then clicking Enable Grup Manager in the upper-right crner. Wait fr 60 secnds fr the peratin t cmplete. 2. If necessary, check the Lifecycle Lg fr the successful message as shwn in the screen sht. 10 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

11 3. After yu cnfirm the lg, navigate t the Dashbard and click Open Grup Manager. The Welcme screen is displayed. Yu can select the required ptin f creating a new grup, jining an existing grup, r disabling Grup Manager. 4. Click Create New Grup. The Welcme t Grup Manager dialg bx is displayed. 5. Type the required name and the passcde t create the grup. Nte: This passcde is used nly fr the grup management activities and shuld be prtected by the administratr. T imprve security, it is recmmended t use cmplex passcdes that have eight r mre characters and include lwercase alphabets, uppercase alphabets, numbers, and special characters. 11 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

12 6. Click Apply. A message is displayed indicating the successful cmpletin f the task. 7. Click Ok. Yu will be directed t the Grup Manger hme page f the Primary Cntrller Server. By default, when yu create a server grup, the idrac frm where the grup was created will be assigned as the primary cntrller f the grup. 8. T return t the idrac index page, duble-click the server rw, r click Launch idrac in the right pane. Yu can als check the lifecycle lgs fr the grup creatin as shwn in the screen sht here. 12 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

13 2.1.2 Jining a server grup wrkflws IDRACs that are physically n the same link lcal netwrk can be added int a server grup n the Discvered Server screen. Alternatively, the Jin Existing Grup ptin n the Grup Manager Welcme page can be used t nbard a new idrac t an existing server grup fund in that lcal netwrk. See Jining a grup frm new system Adding a new system int grup frm Grup Manager cnsle After enabling the Grup Manager feature n all idracs that are required t be part f the server grup: 1. Click Discvered Servers n the Grup Manager hme page. All the discvered idracs in the link lcal netwrk (if Grup Manager Feature is enabled) which are nt part f a grup yet, are displayed. If yu d nt see the idrac yu are searching fr, see Frequently asked Questins and Trubleshting tips. 2. Select ne r mre servers t be jined and enter an administratr rle idrac user name and passwrd. If the Clne alert cnfiguratin check bx is selected and if there was any prir cnfiguratin grup jb run n the grup, thse alert settings will be applied t these servers after they are assciated. 13 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

14 If the default factry-shipped credentials are detected fr idrac, yu will be prvided an ptin t change the rt user passwrd at this time. 3. After entering all the required data, click Onbard. A grup jb t track the n-barding prgress is created. The status f the Onbarding grup jb can be mnitred frm Jbs tab. 4. Click Jbs. The brwser pens the Jbs page. 14 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

15 5. Expand the entry t view the nbarding status f each idracs. After successful running f grup jb, the new members are displayed in Summary Jining a grup frm new system 1. T jin the server grup frm an idrac which has nt been part f a grup, click Open Grup Manager. 2. Navigate t the Jin Existing Grup sectin n the Grup Manager welcme page. All discvered grups in the lcal netwrk will be listed. 3. Select the required grup and type the secret grup passcde t jin the grup. 15 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

16 If the Clne alert cnfiguratin check bx is selected and a prir cnfiguratin grup jb was executed n the grup, thse alert settings will be applied t these server idracs as part f the jining prcess. After the grup passcde validatin is successful, the idrac becmes part f the required grup, and yur web brwser will be redirected t the Grup Manager hme page hsted at the grup primary cntrller by using a single-sign-n actin. If the passcde validatin fails, a message is displayed. Yu can retry with the crrect passcde. Hwever, after seven cnsecutive failed attempts, grup nbarding will be lcked fr five minutes Detaching a server frm a lcal grup Yu can remve a system frm the lcal grup in the Grup Settings view. 1. Select the systems t be remved frm Grup Settings view and click Remve Systems. 16 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

17 A message is displayed t cnfirm the actin. 2. Click Ok. A grup jb is created. Prgress and cmpletin status is updated and displayed in the Grup Manager jbs tracking view. Any in-prgress jbs at that time are allwed t be cmpleted. If the system being remved ges ffline then Grup Manager waits fr 10 hurs fr the system t cme back nline t run the remval cmmand. After the system is remved frm the grup, Grup Manager remves the system frm the Summary view. Nte that idrac must be nline fr the remve actin t succeed. If the remved system cmes nline after 10 hurs then it will autmatically rejin the grup because it never received the remve cmmand frm the primary cntrller. 2.2 Managing the grup preferences The Grup Settings view is accessible frm the Grup Manager Summary view and allws an administratr user t view and cnfigure the grup name and passcde. Deleting the grup can als be perfrmed frm the Grup Settings view Changing server grup name 1. Click Change Name in the Grup Settings view. 2. Type the new grup name and click Change Name. A grup jb is created. Prgress and cmpletin status can be viewed in the Grup Manager jbs view. Grup Manager cntinues t mnitr bth the ld grup and the new grup until all members f the grup have cnfirmed that they have updated the name identifier. 17 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

18 2.2.2 Changing a grup passcde T supprt best practices fr changing passcdes n a reccurring-basis, Grup Manager has the ability t change the grup passwrd by selecting Change Grup Passcde in the Grup Settings view. If any f the grup member(s) are ffline, a message is displayed as in the screen sht. Imprtant Nte: Make sure that all members are nline befre attempting t change a grup passcde. Changing grup passcde when sme members are ffline culd cause the ffline members t fail authenticatin with the grup and will frm a duplicate grup when they cme back nline. See Frequently asked Questins and Trubleshting tips. T change the grup passcde: 1. Type the new passcde twice t make sure it is entered crrectly. T imprve security, it is recmmended t use cmplex passcdes that have eight r mre characters and include lwercase alphabets, uppercase alphabets, numbers, and special characters. 2. Type the necessary data and click Change Passcde. 3. A grup jb is created. Prgress and cmpletin status will be reflected in the Grup Manager jbs tracking view. Nte: the passcde changes take effect immediately and will nt wait fr ffline members t cme nline. The grup passcde will nt be changed n any ffline system. Any ffline systems when cnnected back t the netwrk will frm a duplicate grup. 18 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

19 2.3 Deleting a lcal grup T delete a lcal grup by navigating t the Grup Settings view, users with administratr privileges must: 1. Click Delete Grup. A message is displayed indicating that all systems in the grup will be updated t remve their grup membership and that any pending jbs will be stpped. 2. Click Delete Grup. A grup jb is created. Prgress and cmpletin status is displayed in the Grup Manager jbs tracking view. After cnfirming the delete actin, the grup primary cntrller stps all running tasks, waits fr all systems t reach an end state, and issues ne final task t all the grup members t remve themselves frm the grup. After all the systems in the grup, except fr the primary cntrller have cmpleted the remve task, the primary cntrller will shut dwn Grup Manager and remve itself frm the grup. Only the primary cntrller will have a recrd f the verall delete grup success r failure task. idrac Lifecycle lgs prvide an audit trail f any grup cnfiguratin activity. If a member system is ffline when the grup is deleted, the primary cntrller will wait fr the system t cme back nline fr up t 10 hurs. After 10 hurs the primary cntrller will lg a message indicating that the system was ffline and therefre failed t delete the grup cmpletely. 19 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

20 2.4 Mnitring and managing grup inventry An idrac administratr user can mnitr and manage gruped servers thrugh a cnslidated web-based Graphical User Interface (GUI) hsted at the grup primary cntrller idrac Bkmarking Grup Manager cnsle address in a web brwser Yu can create a bkmark t quickly launch the Grup Manager Summary view directly by using the fllwing URL frmatted apprpriately in the brwser address tab: Member IDRAC IP Address/Dmain Name>/restgui/gmlgin.html After prviding a valid idrac administratr username and passwrd, yu will be redirected t the Grup Manager summary page hsted n the grup primary cntrller idrac. Grup Manager SSO sessins are identified by <UserLggedInAtMember-MemberIDRACServiceTag> (example, rt ). Any prir existing primary cntrller idrac sessins in the same brwser windw are ended. 20 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

21 If the member IDRAC IP entered in the URL address is nt the primary cntrller idrac IP when the redirect is perfrmed, a message is displayed indicating that Grup Manager has been launched in anther brwser tab. Click Ok. The member IDRAC sessin is ended Accessing a Grup Manager cnsle frm a member idrac hme page An administratr wh has lgged in t any member idrac hme page can seamlessly access the Grup Manager cnsle: 1. Click Open Grup Manager. The brwser is redirected t the primary cntrller idrac which is hsting the Grup Manager interface by using a single-sign-n redirect. 21 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

22 The primary cntrller sessin is established with <UserLggedInAtMember-MemberIDRACServiceTag> as the username. Any prir existing sessins in the same brwser windw is ended. The member IDRAC GUI page displays a message indicating that Grup Manager is launched in anther brwser tab. 2. Click Ok. The brwser will stay n the member IDRAC hme page. 22 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

23 2.4.3 Accessing a grup member idrac hme page frm Grup Manager cnsle Yu can access a grup member server idrac hme page by duble-clicking the respective rw in the Grup Manager Summary view. Alternatively, in the right pane, click Launch IDRAC. The Dashbard displays the selected idracs. The Member IDRAC sessin is started with username in the frmat: <IDRACLggedInUsername-ServiceTag> Perfrming pwer-cntrl actins frm Grup Manager cnsle Yu can perfrm actins such as server hst graceful shutdwn r hst pwer cycle frm the available drpdwn menu n the selected server. 23 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

24 2.4.5 Accessing a grup member virtual cnsle As an administratr: 1. Launch a member IDRAC Virtual Cnsle frm the Summary view by selecting a member idrac rw, and then click Mre Actins. 2. Click Virtual Cnsle. The member idrac HTMLv5 Virtual Cnsle is launched in anther brwser tab in the same brwser windw by using single-sign-n redirect. The Member idrac sessin is started with username shwn in the frmat: <IDRACLggedInUsername-ServiceTag> 24 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

25 2.4.6 Exprting the Grup Inventry Yu can exprt all the inventry data that Grup Manager has as a csv file. On the Summary View page, click Exprt. The brwser dwnlads a file with the name f gruped_servers.csv. All exprted attributes are in the English language. The CSV exprt cntains the fllwing inventried data: Health Hst Name idrac IPV4 Address idrac IPV6 Address Asset Tag Mdel idrac Firmware Versin Last Status Update Express Service Cde idrac Cnnectivity Pwer State Operating System Service Tag Nde ID idrac DNS Name BIOS Versin CPU System Memry(MB) Lcatin Details 25 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

26 2.4.7 Exprting the Grup Jbs audit lg T exprt the Grup Manager Jbs infrmatin, click Exprt under Jbs View. A file with the jbs.csv name is dwnladed t the brwser. 2.5 Grup Actins Cnfigure all idracs in the lcal grup Grup Manager Summary view enables yu t perfrm grup actins by using the actin buttns listed abve the server list. Grup actins are perfrmed n all members in the grup. If an actin is scheduled fr the future and new members have been added t the grup, they will be included in the grup change actin. If a task is in prgress then the newly added member will nt be included in the grup actin Adding, remving, r updating idrac user idrac lcal users can be added r deleted by selecting frm the Manage Lgin drp-dwn menu n the Grup Manager hme page Adding idrac user with passwrd Add idrac user wrkflw adds a new lcal user t all the idracs in the grup. 1. Click Manage Lgins n the Grup Manager page, and then click Add New User. 26 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

27 2. In the Add User dialg bx, type r select data in the fields. If the passwrd and passwrd cnfirmatin d nt match then a message is displayed. 3. Click Save. A grup jb is created. Grup Jb prgress and cmpletin status will be reflected in the Grup Manager jbs tracking view. If the user already exists n a member idrac, the user is updated with the privileges and passwrd defined in the Add User cnfiguratin. Nte: Users are added t the first available user slt in each member. Nt all members will add a user t the same slt. If a member idrac has 16 lcal users then the jb will fail t add a new user n that specific idrac, but all ther idracs will create the lcal user n their first available slt Deleting idrac user The Delete idrac user grup feature remves ne r mre lcal users frm all grup member idracs. Users are nt remved based n slt number but are remved based n a matching name nly. 1. Click Manage Lgins frm the Grup Manager page. 2. Click Delete User ptin. 27 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

28 The Delete User dialg bx displays a list f all the lcal idrac users n the primary cntrller. 3. Select ne r mre lcal idrac users and click Delete. A grup jb is created. Jb prgress and cmpletin status will be reflected in the Grup Manager jbs tracking view. 28 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

29 Changing idrac user passwrd The Change User Passwrd grup feature enables yu t change passwrd f the specified user n all grup member idracs. 1. Click Manage Lgins n the Grup Manager page, and then click Change User Passwrd. A list f all the lcal users n the grup primary cntrller idrac is displayed. 2. Select the username and type the new passwrd twice fr the selected user. 29 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

30 3. Click Change Passwrd. If the passwrd validatin succeeds, a grup jb is created. Grup Jb prgress and cmpletin status will be reflected in the Grup Manager jbs tracking view Setting up idrac alert cnfiguratin The Cnfigure Alerts feature enables yu t cnfigure the SMTP ( ) Cnfiguratin fr all grup member idracs. 1. T cnfigure alerts, click Cnfigure Alerts in Summary. The currently cnfigured settings f the primary cntrller idrac shall be aut-ppulated in the Cnfigure Alert windw (These settings can als be viewed n idrac Hme Page Cnfiguratin System Settings SMTP ( ) Cnfiguratin). 30 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

31 31 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

32 2. After entering and updating the required details fr SMTP cnfiguratin, click Apply. A grup jb is created. Grup Jb prgress and cmpletin status is reflected in the Grup Manager jbs tracking view. After the grup jb is cmpleted successfully, the settings entered by the user is applied t every member idrac. alerting values can be verified n the idrac Alert page by clicking Cnfiguratin System Settings Alert Cnfiguratin Alerts Clning grup alert cnfiguratin settings When a server jins the grup, the alert cnfiguratin settings fr that grup can be clned n that idrac as part f the jining sequence. Optin 1: Select the Clne alert cnfiguratin check bx while jining a grup frm the idrac Grup Manager welcme screen. 32 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

33 Optin 2: Frm the Grup Manager Discvered Servers list, when nbarding servers, select the Clne alert cnfiguratin check bx. At the end f jining sequence, the cnfiguratin will be clned t the jined servers. 2.6 Grup Jb Manager Jbs tracking and reprting The purpse f the Jbs view is t prvide a way fr the user t track the prgress f a grup actin t take simple recvery steps t crrect cnnectivity induced failures and t shw a histry f the last grup actins that were perfrmed as an audit lg. All jbs r actins are initiated frm Summary View and Discvered Servers View. The Jbs view is used t track the prgress f grup actins acrss the grup r t cancel an actin that is scheduled t ccur in the future. A unique ID is created fr every grup actin. The Jbs view prvides an audit lg fr the last 50 jbs that have been run n the grup alng with the cmpletin status n the individual grup member servers Feedback abut jb status and recvering frm errrs The tp level jb list view shws the fllwing infrmatin: Status (The jb verall status is represented by an icn this is the wrst-case rlled-up status f all devices the jb is running against) Running (Prgress bar displaying the jb cmpletin %) Cmpleted successfully Cmpleted with errrs Retrying the jb has been Scheduled Stpped Cancelled 33 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

34 Jb Type Add User Change user passwrd Remve user Change Grup Passcde Change Grup Name Delete Grup Remve Members Cnfigure Jin idrac JOB Unique ID Start Time End Time The secnd level jb list details shws the jb status fr every member f the grup. All actins and data are specific t that member idrac: Hst Name Service Tag Status Successful: The grup actin is successfully applied n this specific server. Failed: The grup actin failed because Grup Manager timed ut trying t cmmunicate with the remte server, the remte server respnded with an errr message, r it was stpped by the user. See Frequently asked Questins and Trubleshting tips. Nt Running: The grup actin has nt started. Grup Manager culd be waiting fr the system t becme available r the server is busy n ther peratins and will run the cmmand in the near future. In Prgress: The grup actin is running n this specific server Errr Occurred. Retrying the Jb: Sme errr ccurred and therefre retrying the jb n this specific server. Message A specific message is displayed fr the member server where the jb executin was nt successful. 34 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

35 When jb fails at a particular member idrac, the reasn fr the failure can be viewed as shwn belw. If a jb is running, a user may select the jb and click Stp t stp the jb executin. It des nt rll back but stps all tasks and puts it in an errr state identified by stpped by user. The rerun actin is nly enabled if the jb is in a failure state. The jb is nly rerun n the specific servers that failed the jb in the prir run. When the rerun is perfrmed the verall jb status will be placed in pending status. The jb list is circular and nly the last 50 jbs are displayed in the view. As new jbs are created, the ldest nes are remved frm the list. 35 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

36 2.7 Cnfiguring Grup Manager by using CLIs idrac Grup Manager is predminantly a graphical user interface (GUI) based feature where mst f the cnfiguratin and mnitring activities can nly be perfrmed thrugh the web based graphical user interface. Fr thse custmers wh are using Grup Manager in larger envirnments, the fllwing sectin describes the actins which can be perfrmed by using WS-Man and RACADM CLIs Cnfiguring Grup Manager by using WS-Man WS-Man (Web Services-Management) is a DMTF pen standard, defining a SOAP-XML based prtcl fr the management f servers, devices, and applicatins used by systems management cnsles r management applicatins Enabling r disabling the Grup Manager feature T enable r disable the Grup Manager feature, management applicatin can use the DCIM_iDRAService.ApplyAttribute() methd frm idrac Card Prfile t set the GrupManager.1#Status attribute. This enumeratin attribute can be set t Enabled r Disabled. Fr mre infrmatin, see the idrac Card Prfile_4.0.0 Sessin 8.21 and available n DTC If nt already enabled, the feature status must be changed t Enabled befre any ther actins can be perfrmed. Here is an example WS-Man wrkflw by using SOAP t set GrupManager.1#Status. In this wrkflw, the current value f GrupManager.1#Status will be checked and sent the invke request t set a new value t the GrupManager.1#Status attribute. Management applicatins can send the GET request fr the fllwing frm t check the current value f the GrupManager.1#Status attribute. SOAP Request fr the GET GrupManager.1#Status attribute: 36 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

37 SOAP Respnse fr the GET GrupManager.1#Status attribute: Management applicatins can send the request fr the fllwing frm t set the GrupManager.1#Status attribute. SOAP request fr the ApplyAttribute methd t set the GrupManager.1#Status attribute: SOAP Respnse fr the ApplyAttribute methd t set the GrupManager.1#Status attribute: 37 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

38 3. Repeat the tasks t ensure that the value f GrupManager.1#Status has changed Grup infrmatin The GrupManager.1#GrupName and GrupManager.1#GrupUUID read-nly attribute are available in DCIM_iDRACCardString t get the Grup Name and Grup UUID f the lcal grup t which the idrac is subscribed t. Fr mre infrmatin, see the idrac Card Prfile_4.0.0 Sessin prfile dcument available at 1) Management applicatin can send the SOAP request as described in the sample here t get the GrupName f the lcal grup which idrac part f. SOAP request fr the GET GrupManager.1#GrupName attribute: SOAP respnse fr the GET GrupManager.1#GrupName attribute: 38 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

39 2) Management applicatin can send the SOAP request by fllwing fr t get the GrupUUID f the lcal grup which idrac part f it. SOAP request fr the GET GrupManager.1#GrupUUID attribute: SOAP respnse fr the GET GrupManager.1#GrupUUID attribute: Jining an existing grup If Grup Manager feature is enabled in idrac, management applicatin can use the DCIM_iDRACCardService.JinGrup() frm idrac Card prfile t jin with existing grup. Refer the idrac Card Prfile_4.0.0 Sessin 8.16 in fr mre details. Belw is an example WSMAN wrkflw using SOAP t jin with existing grup, by invke the DCIM_iDRACCardService.JinGrup() functin. 1) Client can use the DCIM_IDRACCardService.JinGrup() methd frm idrac Card Prfile t Jin with existing grup. 39 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

40 SOAP Request fr JinGrup Leave a grup Management applicatin can use DCIM_iDRACCardService.RemveSelf() frm idrac Card prfile t remve itself frm the lcal grup it is subscribed t. Refer t the idrac Card Prfile_4.0.0 Sessin 8.15 in fr mre details. GrupManager.1#GrupName attribute is available in DCIM_iDRACCardString t get the name f the grup the idrac is subscribed t. 1) Management applicatin can send the SOAP request as shwn in the sample here t remve itself frm the lcal grup. SOAP Request fr DCIM_iDRACCardService.RemveSelf() 40 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

41 2.7.6 Deleting idrac lcal grup Management applicatin can use the DCIM_iDRACCardService.DeleteGrup() frm idrac Card prfile t initiate deletin f the lcal grup the idrac is a member f. Fr mre infrmatin, see the idrac Card Prfile_4.0.0 Sessin 8.17 prfile dcument available at The GrupManager.1#GrupName attribute is available in DCIM_iDRACCardString t get the name f the grup idrac is a member f. Here is an example WS-Man wrkflw by using SOAP t delete the idrac grup and invking the DCIM_iDRACCardService.DeletGrup() functin t delete the grup. 1) Management applicatin can send the SOAP request as shwn in the sample t delete the Grup by giving GrupName. SOAP Request fr DCIM_iDRACCardService.DeleteGrup() 2.8 Cnfiguring Grup Manager by using RACADM The RACADM cmmand-line utility prvides a scriptable interface that allws yu t lcally r remtely cnfigure yur idrac. The RACADM utility supprts the fllwing interfaces: Lcal - Supprts running RACADM cmmands frm the managed server s perating system. T run lcal RACADM cmmands, install the OpenManage sftware n the managed server. SSH r Telnet Als knwn as Firmware RACADM. Firmware RACADM is accessible by lgging in t idrac by using SSH r Telnet. Similar t Remte RACADM, at the RACADM CLI, directly run the cmmands withut the racadm prefix. Remte Supprts running RACADM cmmands frm a remte management statin such as a laptp r desktp. T run Remte RACADM cmmands, install the DRAC Tls utility frm the OpenManage sftware n the remte cmputer. 41 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

42 Administratr privileges are required fr a user t run any f the fllwing Grup Manager cmmands successfully Enabling r Disabling the Grup Manager feature Fllwing cmmand allws t check if Grup Manager Feature is enabled n a server. racadm get idrac.grupmanager.glbalstate Grup Manager Feature must be enabled befre any ther cmmand can be executed. T enable the feature yu can make use f fllwing cmmand. racadm set idrac.grupmanager.glbalstate Enabled Grup infrmatin T identify the server grup t which the idrac is a member f, run the fllwing cmmand. racadm get idrac.grupmanager.grupname T identify the server grup unique identifier, run the fllwing cmmand. racadm get idrac.grupmanager.grupuid Jining an existing grup T jin a server t an existing server grup, run the fllwing cmmand. A server grup is uniquely identified using the grup name, UID and passcde parameters. racadm grupmanager jingrup g <grup name> -uid <grup UID> -pcde <grup passcde> Leaving a grup T leave the server grup the idrac is part f, run the fllwing cmmand. racadm grupmanager remveself g <grup name> Deleting idrac lcal grup T delete the server grup the idrac is part f, run the fllwing cmmand. racadm grupmanager delete g <grup name> 42 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

43 3 Frequently asked questins and trubleshting tips This sectin lists frequently asked questins and ffers trubleshting tips fr cmmn scenaris yu might bserved: 1) Sme f the servers are n lnger listed, r ffline, in the Grup Manager cnsle. Yu have nbarded a server int the grup and that server n lnger shws up in the summary view. This can typically happen if the feature was disabled r the enterprise license expired n that idrac. The idrac reset t default prcess resets the feature status t disabled. Yu shuld install a valid enterprise license and enable the feature fr the server t rejin the grup. If the abve steps des nt wrk ut, yu culd als check if the server idrac is still cnnected n the same lcal netwrk. Verify that the idrac is reachable by pinging the server idrac. Grup Manager primary cntrller keeps a nn-persistent cache f all grup members. A discnnected server will shw up in the Grup Manager summary view with idrac cnnectivity status as ffline until the primary and secndary cntrllers rebt. Duplicate grups may frm as a result f a netwrk disruptin. Lcally reachable idracs may calesce tgether in this scenari. The duplicate grups will nt be detected in the management cnsle until the netwrk is restred. After which, the duplicate grups shuld merge autmatically. 2) The grup cnfiguratin jb status at Jbs view shws as Cmpleted with errrs. Hw can I get mre infrmatin n errrs? The rll up jb status prvides a cnslidated view f jb executin status acrss the grup members. Expand the rllup rw t view jb executin status at a member idrac. Yu culd view mre infrmatin n the jb executin at the idrac Maintenance->Jb Queue r Maintenance->Lifecycle Lgs. 3) Why is user cnfiguratin and alert cnfiguratin failing n few members where system lck dwn mde is enabled? The idrac9 system lckdwn mde feature allws a server system t be lcked dwn frm any further system cnfiguratin activities. Therefre, user cnfiguratin and alert cnfiguratin will nt be executed n member idracs where system lckdwn mde is enabled. 4) Yu cannt nbard an idrac in t a grup as the grup is nt listed in the welcme screen drp dwn list n that idrac. Ensure that the server idrac is still cnnected n the same lcal netwrk as ther grup members. Verify that the idrac is reachable by pinging the server idrac. If the grup des nt shw up still in the list, yu culd reset the idrac t initiate a fresh netwrk discvery. On the idrac select idrac Settings -> Diagnstics -> Reset idrac. 43 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

44 If that still des nt wrk then restart the primary cntrller idrac. 1. Start Grup Manager n ne f the member idracs. 2. In the search bx, type the cntrlling system's Service Tag. 3. Duble-click the idrac that matches the search results and navigate t idrac Settings Diagnstics. 4. Select Reset idrac. When bth idracs fully restart, the grup shuld be visible. 5) Yu cannt nbard an idrac in t a grup frm Grup Manager cnsle as the server is nt listed in the discvered servers view. Ensure that the server idrac is still cnnected n the same lcal netwrk as ther grup members. Ensure that the idrac is reachable by pinging the server idrac. If the server still des nt appear in the list, yu culd reset idrac t initiate a fresh netwrk discvery. IP address cnflicts (duplicate IP addresses) may als cause this issue. Therefre, ensure this cnditin des nt exist. T reset idrac, click idrac Settings Diagnstics Reset idrac. If that still des nt wrk then restart the primary cntrller idrac: 1. Start Grup Manager n ne f the member idracs. 2. In the search bx, type the cntrlling system's Service Tag. 3. Duble-click the idrac that matches the search results and navigate t idrac Settings Diagnstics. 4. Select Reset idrac. When bth idracs fully restart the grup shuld be visible 6) Duplicate grup detected errr banner shws up in the Grup Manager hme page. A duplicate grup can be frmed when a grup passcde change jb fails t execute n few members because thse servers were ffline during the jb executin time. When they get back nline they fail t authenticate successfully with the grup primary cntrller as they n lnger share a cmmn passcde secret and frms a separate grup n their wn even thugh they still share the grup name. Yu culd recver by changing the grup passcde n the secnd grup. After they share a cmmn passcde, the grups shuld eventually merge, autmatically. If the duplicate grup banner still persists, yu culd reset the feature status at the cntrller idracs t initiate a fresh netwrk discvery and aut merge if the grup members share a cmmn secret passcde. 7) Des leaving a grup change any alert setting r lcal users? Leaving a grup des nt change any idrac cnfiguratin settings except fr remving the grup name and passcde. All users and alert settings remain as is. 44 Mnitring & cnfiguring Server Grup by using idrac Grup Manager

45 8) My netwrk security scanner indicated that idrac was sending mdns annuncements. Grup Manager uses mdns annuncement n the IPv6 link lcal netwrk t discver neighbr idracs. idrac sends grup name, Service Tag, and IPv6 address in the mdns recrd. 9) Why des idrac have an IPv6 link lcal address when IPv6 is disabled under netwrk settings? idrac grup management requires IPv6 link lcal addresses t cmmunicate with peer idracs. If yu d nt want IPv6 traffic then disable Grup Manager. 10) Why des deleting a grup take 10 hurs? idrac Grup Manager will wait fr 10 hurs if a member is ffline t tell it t leave the grup. If all members are nline the grup Delete will nly take a cuple f minutes t cmplete. 11) What happens in the event f pwer failure n the Grup Primary server? On grup primary cntrller server pwer failure: All in-prgress jbs are indicated as failed. When the server cmes back nline r alternate grup primary cntrller takes ver, all the scheduled jbs that have nt started will be run, prvided they have passed their start time in the rder they were scheduled, Failed jbs can be rerun. 45 Mnitring & cnfiguring Server Grup by using idrac Grup Manager