Server Sentinel Client Workstation

(1)

Server Sentinel

Client Workstation

Installation and Reinstallation Guide

Server Sentinel 4.4.3 and Higher

April 2008

(2)

.

(3)

Server Sentinel

Client Workstation

Installation and Reinstallation Guide

Server Sentinel 4.4.3 and Higher

unisys

imagine it. done.

April 2008 3850 8263–004

(4)

NO WARRANTIES OF ANY NATURE ARE EXTENDED BY THIS DOCUMENT. Any product or related information described herein is only furnished pursuant and subject to the terms and conditions of a duly executed agreement to purchase or lease equipment or to license software. The only warranties made by Unisys, if any, with respect to the products described in this document are set forth in such agreement. Unisys cannot accept any financial or other responsibility that may be the result of your use of the information in this document or software material, including direct, special, or consequential damages.

You should be very careful to ensure that the use of this information and/or software material complies with the laws, rules, and regulations of the jurisdictions with respect to which it is used.

The information contained herein is subject to change without notice. Revisions may be issued to advise of such changes and/or additions.

Notice to U.S. Government End Users: This is commercial computer software or hardware documentation developed at private expense. Use, reproduction, or disclosure by the Government is subject to the terms of Unisys standard commercial license for the products, and where applicable, the restricted/limited rights provisions of the contract data rights clauses.

(5)

Defining a User Account for the AppManager Operator Console . . . 3–6 Viewing Product Documentation . . . 3–6 Installing Virus Protection Software . . . 3–7 Obtaining Updates . . . 3–7 Internet Access Requirements . . . 3–7 Obtaining Updates Using EZupdate . . . 3–8 Obtaining Updates Using the Unisys Product Support

Web Site . . . 3–9

Section 4. Operations

Accessing Server Sentinel . . . 4–1

Appendix A. Firewall Considerations

Firewall Requirements . . . A–1 Firewall Requirements for Client Workstations . . . A–1

(6)

Appendix B. Windows Firewall Batch Files for Server Sentinel Downloading Server Sentinel Batch Files for Windows Operating

Systems . . . B–1 Contents

(7)

Section 1 Introduction

This guide explains how to configure one or more client workstations in your environment.

A client workstation runs Server Sentinel software and enables remote management.

A client workstation can be located on your public LAN or operations LAN. On a properly sized and configured network, a client workstation provides remote management capabilities through Server Sentinel from anywhere in your public network.

If you attempt to access the Server Sentinel user interface from a workstation that has not had the client workstation software configured on it, you might be prompted to download components of the Server Sentinel software. Note that you may be prompted to download software components multiple times because not all of the required client workstation software is downloaded at one time. If your workstation does not meet the requirements of the Server Sentinel client workstation software, you cannot view the pages that you requested. Therefore, it is recommended that you follow the procedures in this guide rather than download software components on an as-needed basis.

If you previously installed the Server Sentinel client workstation software in your environment, you can upgrade your client workstations by performing the installation procedures in this guide.

Network Configuration

The following illustration shows a client workstation on a public LAN.

Note: Depending on your enterprise server model, some of the components shown in this figure might be optional.

(8)

Documentation Updates

This document contains all the information that was available at the time of publication.

Changes identified after release of this document are included in problem list entry (PLE) 18589494. To obtain a copy of the PLE, contact your Unisys representative or access the current PLE from the Unisys Product Support Web site:

http://www.support.unisys.com/all/ple/18589494

Note: If you are not logged into the Product Support site. you will be asked to do so.

Introduction

(9)

Section 2 Requirements

Ensure that the requirements described in this section are met before installing or reinstalling the Server Sentinel client workstation software.

Hardware and Software Requirements

The following are the hardware and software requirements for client workstations.

Hardware Requirements

All client workstations require the following minimum hardware configuration:

• Pentium II or Pentium III processor with at least 128 megabytes (MB) of memory

• Super VGA color monitor with a display area of at least 1024 x 768 pixels; a display area of 1280 x 1024 is recommended

• Fast Ethernet network interface card (NIC)

• Connection to the network through a network segment that can access server and partition operating systems, Service Processors, and optional management servers

Software Requirements

All client workstations require the following software configuration:

• One of the following Windows operating systems:

Note: The latest supported Service Packs for each operating system are listed.

- Windows Server 2003 R2, Standard Edition, with Service Pack 2 - Windows Server 2003 R2, Enterprise Edition, with Service Pack 2 - Windows XP Professional, with Service Pack 2

- Windows Vista

• Log on by a user with valid administrator group privileges on the system

• Internet Explorer 6.0 and higher

• A unique Windows computer name

(10)

Media Requirements

The following media is required to install a Server Sentinel client workstation:

• Server Sentinel CD-ROM

• One of the following product documentation CD-ROMs, depending on your enterprise server:

- Enterprise Server Getting Started CD-ROM

- Enterprise Server Product Documentation CD-ROM

Environment Information Requirements

The following table lists the required information needed to install a client workstation.

This information should be recorded in your System Planning Guide.

Information Required Comments

Name and organization Identity of the person associated with the client workstation.

Computer name Preferred Windows network name for the client workstation. (Each client workstation must have a different name.)

Administrator password for administrator account

Password preferred instead of the default blank password.

SQL sa password Needed to complete the AppManager installation, if AppManager software is installed in your environment.

Name of the management server where the AppManager program repository exists

Needed to access the AppManager program repository, if AppManager software is installed in your environment.

User account for AppManager operations

Name of a user account that belongs to the Administrator, Sentinel Operator, or Sentinel Observer group on the management server

Requirements

(11)

Additional Considerations

The following additional considerations apply to installation:

• If you intend to access Console Manager by name (rather than by IP address), the name must be statically defined in an external Windows Internet Name Service (WINS) or domain name system (DNS) server, or your DHCP server (if you are using dynamic IP addressing) must be configured to dynamically register DNS names for DHCP clients that do not support dynamic DNS. Console Manager does not perform name registration.

• You might want to define automated methods, such as desktop shortcuts or custom Microsoft Management Console (MMC) files, for accessing management facilities from this or another server.

Requirements

(12)

Requirements

(13)

Section 3 Installation and Reinstallation

Perform the procedures in this section to install or reinstall the Server Sentinel client workstation software.

Setting Internet Explorer Security Options

Note: Internet Explorer settings only affect the current user account. If you log in as a different user, you must repeat these configuration steps.

Use these steps to set and verify the proper Microsoft Internet Explorer settings:

1. Launch Internet Explorer.

For Windows Server 2008, you must be logged in to a user account in the

Administrators group. If this account is not the built-in Administrator account, then launch Internet Explorer by right-clicking the Internet Explorer shortcut icon and clickingRun As Administrator.

2. ClickInternet Options on the Tools menu.

TheInternet Options dialog box appears.

3. Select theSecurity tab.

4. Select theTrusted sites icon.

5. ClickSites.

TheTrusted sites dialog box appears.

6. Make sure theRequire server verification (https:) for all sites in this zone check box is not selected.

7. Add a URL for each Service Processor, management server, and Windows server and partition. If a Service Processor, management server, or Windows server or partition is in a different Domain Name System (DNS) domain than the computer on which you are performing this procedure, use fully qualified host names instead of the URL for that component.

a. In theAdd this Web site to the zone box, enter one URL, for example, http://computername.

b. ClickEnter or Add.

c. Repeat steps a and b until you have added each URL.

(14)

8. Add an IP address for any components that use fixed IP addresses rather than DHCP addresses. These components might include the Service Processor, management server, partition, and Console Manager (if applicable).

a. In theAdd this Web site to the zone box, enter one IP address, for example, http://192.168.1.100.

b. ClickEnter or Add.

c. Repeat steps a and b until you have added each IP address.

9. ClickClose or OK to close the dialog box.

10. ClickCustom Level under Security level for this zone.

TheSecurity Settings dialog box appears.

11. In theSettings list, ensure that the following settings are selected.

Note: Not all of these settings are available in every Internet Explorer and Windows operating system combination. If you do not see a setting in your environment, simply disregard that setting.

Category Option Setting

ActiveX controls and plug-ins Allow previously unused ActiveX controls to run without prompt

Enable

Automatic prompting for ActiveX controls

Enable

Binary and script behaviors Enable Download signed ActiveX controls Enable

Download unsigned ActiveX controls Enable or Prompt Initialize and script ActiveX controls not

marked as safe

Enable

Run ActiveX controls and plug-ins Enable Script ActiveX controls marked safe for

scripting

Enable

Miscellaneous Access data sources across domains Enable Navigate sub-frames across different

domains

Enable

Submit nonencrypted form data Enable or Prompt

Scripting Active scripting Enable or Prompt

Installation and Reinstallation

(15)

13. Do the following to allow active content to run:

Notes:

• After you install the software, return these security settings to their previous values.

• Not all security settings are available in every Internet Explorer and Windows operating system combination. If you do not see a setting in your environment, simply disregard the instruction to change it.

a. Select theAdvanced tab in the Internet Options dialog box.

b. Scroll down and select the following two check boxes underSecurity:

• Allow active content from CDs to run on My Computer

• Allow active content to run in files on My Computer

14. If you are configuring a client workstation, and your client workstation and

management server are part of the same Internet Explorer security zone, skip to the next step. Otherwise, do the following:

Note: After you install the software, return these settings to their previous values.

a. Select theInternet icon on the Security tab.

b. ClickCustom Level under Security levels for this zone.

TheSecurity Settings dialog box appears.

c. In theSettings list, ensure that the following settings are selected:

Category Option Setting

ActiveX controls and plug-ins

Allow previously unused ActiveX controls to run without prompt

Enable

Initialize and script ActiveX controls not marked as safe

Prompt

d. ClickOK. If you receive a warning message, click Yes.

15. ClickOK in the Internet Options dialog box.

16. Close Internet Explorer.

Note: Pop-up blockers prevent this software from operating properly. To avoid this problem, allow pop-ups from the management server, Service Processor, and client workstation. For information on allowing pop-ups, refer to the documentation for Internet Explorer or for your third-party software.

Satisfying Firewall Configuration Requirements

(16)

If you are using the software firewall provided by Windows—known as the Windows Firewall—you should verify that it is enabled now. The Windows Firewall is available with Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, and later operating systems. During the software installation, the Windows Firewall is automatically configured.

If you are using any other hardware or software firewall to protect your system connection to the Internet, refer to Appendix A for prerequisites.

Installing the Server Sentinel Software

Note: Do not install the Server Sentinel software on domain controllers; the software is not qualified for such installation.

Prerequisites

Prior to installing the Server Sentinel software using Installation Assistant, ensure that the following prerequisites have been met:

• Internet Explorer security options have been configured.

• You are logged on to Windows under a user account that has administrator privileges.

• All clustered Microsoft SQL Server instances are offline. Clustered SQL Server instances interfere with the installation of the SQL Server 2000 Desktop Engine (MSDE).

Installation Procedure

To access the Installation Assistant interface, either double-click theSentinel Install Assistant icon if it is available on the desktop or insert the Server Sentinel CD-ROM into the CD/DVD drive.

Note: If the autorun option is not set for your CD/DVD, use Windows Explorer to navigate to the CD/DVD drive and double-click the setup.exe file.

Install the Server Sentinel software using the following procedure.

Note: During the installation process, Installation Assistant attempts to enable the Windows Firewall if it is not already enabled. If Installation Assistant cannot enable the Windows Firewall, you are prompted to enable it. You can either follow the on-screen instructions to enable the Windows Firewall, or you can click OK to continue with the software installation.

(17)

Note: Some system functions are automatically detected and selected for installation.

3. If any requirements have not been met, a dialog box appears. Click the red triangles in the right pane and then install the appropriate software. Refer to the Installation help for assistance.

4. If you are prompted to reboot, clickYes. After the reboot is complete, access the Installation Assistant interface.

5. Install the Server Sentinel software by clicking one of the following:

• Recommended Installation

The recommended installation procedure automatically installs all appropriate Server Sentinel software using default settings. Refer to the Installation help in the left pane for additional information.

• Custom Installation

If you need to install a subset of the Server Sentinel software or redistributable software manually, such as when reinstalling software, use the custom installation procedure. The custom installation screen enables you to select specific software components to install as well as define a minimal or interactive installation. Refer to the Installation help in the left pane for additional information.

Note: If you click Custom Installation, the Installation Assistant does not warn you if installation requirements for the software you are installing have not been met. Ensure that all requirements have been met before clickingCustom Installation.

A dialog box that states installation was successful appears.

6. ClickOK.

7. ClickFinished to close the Installation Assistant interface.

8. If you are prompted to reboot, clickYes. If a reboot does not occur after installation is complete, reboot the system.

Modifying the Client Workstation Hosts File

Note: Perform the following procedure only if your system operations or maintenance LAN does not use DNS.

To modify the client workstation hosts file if you are using static IP addressing, do the following:

1. On theStart menu, click Run.

TheRun dialog box appears.

2. Type the following:

notepad “%systemroot%\system32\drivers\etc\hosts”

(18)

4. Modify or add information for each management server, Service Processor, and server and partition in your environment by entering the static address and host name; for example:

192.168.222.201 partition0

Note: If you intend to change a host name or IP address later, use the new host name or IP address when modifying the hosts file.

5. Save the hosts file and close Notepad.

Configuring for AppManager Software

Perform the actions in the following subsection only if your environment includes a Sentinel Management Server running AppManager software.

Defining a User Account for the AppManager Operator Console

The AppManager® program helps reduce the support costs of managing distributed clients and server networks by providing increased network efficiency. Using Knowledge Scripts®, you can automate the monitoring and management capabilities of a server. The AppManager Operator Console is the user interface that enables you to configure and control the execution of Knowledge Scripts on the systems and applications that you manage.

Using the Computer Management utility, define a user account for running the AppManager Operator Console. This user account must meet the following criteria:

• On the client workstation, the user account must belong to the Power Users group or the Administrator group.

• If the user account is a domain account, the user account must also belong to the Administrator, Sentinel Operator, or Sentinel Observer group on the management server.

• If the user account is a local account, it must have the same name and password as a local account on the management server that belongs to the Administrator, Sentinel Operator, or Sentinel Observer group on that management server.

Viewing Product Documentation

Server Sentinel product documentation and the tools that are required to view it are installed automatically when you install the Server Sentinel software using the

recommended procedure. To access this documentation from your client workstation, Installation and Reinstallation

(19)

To access the documentation for your enterprise server from the desktop of your client workstation, insert the CD-ROM that contains the product documentation (depending on your enterprise server, either the Getting Started CD-ROM or Product Documentation CD-ROM) into the CD/DVD drive. From the CDLib Manager, clickOpen from the File menu and then navigate to the .mdb file on the CD-ROM.

If you have a Sentinel Management Server configured in your environment and you use your client workstation to access it, you can also view product documentation from within the Server Sentinel interface. To do so, starting from the upper-left of the Server Sentinel interface, clickHelp, then click Libraries and tours, and then, under Other

Resources, click the product documentation library you want to view.

Note: You must have installed the enterprise server documentation to the Sentinel Management Server to be able to view it from within the Server Sentinel interface. See the Sentinel Management Server Installation, Reinstallation, and Upgrade Guide for more information on how to perform this procedure.

Installing Virus Protection Software

Virus protection software is not provided with the operating system of your system components. You can purchase and install any virus protection software you prefer.

Virus protection software and Microsoft required hotfixes must be installed before

connecting to the public LAN IP address (DHCP server). Once they are installed, cable your system component to the public LAN.

Some virus protection software can interfere with the installation of other software. If you encounter problems with the installation of any software, disable virus protection before you retry the installation. Be sure to enable virus protection again after you complete installation.

Obtaining Updates

If updates to the Server Sentinel software and platform firmware are available, you can download them by using the Server Sentinel EZupdate feature or by using the Unisys Product Support Web site.

Internet Access Requirements

Depending on your system, Internet access is required to obtain updates through EZupdate, as summarized in the following table.

Server Sentinel Level

Management Server, Client

Workstation Service Processor Partition

(20)

Server Sentinel Level

Management Server, Client

Workstation Service Processor Partition

4.0 and 4.1 Access required. Not supported; use

the Product Support Web site.

Access required only if no management server is available.

4.2 and higher Access required. Access required only if no management server is available.

Access not required.

If you access EZupdate from the Start menu, the system must have Internet access.

Obtaining Updates Using EZupdate

EZupdate periodically checks the Unisys Product Support Web site for available updates to Server Sentinel and platform firmware and notifies you if updates are available.

You can access EZupdate from the Server Sentinel user interface on all systems as outlined in the preceding table. This is the preferred method.

Alternatively, to access EZupdate from Service Processors, client workstations, or management servers, click theStart menu, point to Programs and then Unisys Server Sentinel, and click EZupdate. Internet access is required if you use this method.

• If updates are available on client workstation desktops, theEZupdate icon is displayed in the system tray, and a balloon message appears periodically until you download the available updates or choose to be reminded at another time.

• If updates are available on the Server Sentinel user interface, theEZupdate Available icon is prominently displayed.

Perform the following steps to download the available updates using the EZupdate feature of Server Sentinel:

1. Perform one of the following steps:

• Click the followingConfiguration Summary icon:

The Configuration Summary page appears.

SelectSystem Tools, and click EZupdate.

• Click theEZupdate Available icon.

(21)

4. Be sure to update all partitions when you update the software and platform firmware on Service Processors, client workstations, and management servers.

Obtaining Updates Using the Unisys Product Support Web Site

If your system does not include access to the Internet, you can download Server Sentinel software and platform firmware updates from the Unisys Product Support Web site by using a workstation that is connected to the Internet.

Updates to Server Sentinel software and platform firmware are available in the form of Interim Corrections (ICs) and quick-fix releases (QFRs). ICs and QFRs are replacement modules that contain fixes for your software or platform firmware. Any customer with a maintenance agreement is entitled to use these modules.

To access the latest updates and apply them to your system, perform the following steps:

1. If necessary, close all Server Sentinel windows before installing Server Sentinel updates.

2. Access the Unisys Product Support Web site at www.support.unisys.com.

3. Sign on to entitled support with your user name and password. If you do not have a user name and password, clickRegister.

The Product Support page appears.

4. Select a system type and clickGo.

The support page for that system is displayed.

5. ClickReleases.

The releases for the system are displayed.

6. In theFixes column, select the relevant release.

A list of the latest available updates appears.

7. Select the appropriate update from the list.

The Download Interim Correction page appears.

8. Click the link labeledView Profile of IC to get a description of the update and installation instructions. ClickBack to return to the Download Interim Correction page.

9. Click the link underFile Description to download the update.

(22)

(23)

Section 4 Operations

Accessing Server Sentinel

You can access Server Sentinel from any computer that can access the Sentinel

Management Server (if one is configured in your environment) or from the master Service Processor. To access the Server Sentinel home page, open an Internet Explorer window from a client workstation and enter a URL that identifies the name of the Sentinel Management Server. For example, if the Sentinel Management Server name is usrb-123456, the URL is as follows:

http://usrb-123456/Sentinel

If a Sentinel Management Server is not available, a core set of Server Sentinel functionality is offered directly from the Service Processor. To access Server Sentinel on the Service Processor, open an Internet Explorer window from a client workstation and enter a URL that identifies the name of Service Processor. For example, if the master Service Processor name is usrb-123456, the URL is as follows:

http://usrb-123456/

Note: If you are in a mixed domain/workgroup environment, to access some Server Sentinel functions, you might be required to change the Internet Explorer Security setting for User Authentication for the Local intranet zone to″Prompt for user name and

password.″Other Server Sentinel functions might require that you log on to the client workstation with credentials that are acceptable to the target environment.

(24)

Operations

(25)

Appendix A

Firewall Considerations

Use the information in this appendix to configure any hardware or software firewall other than the Windows Firewall.

Firewall Requirements

To ensure that Server Sentinel functions properly, configure your software or hardware firewall such that traffic is not blocked between system components where Server Sentinel is installed. If you use Windows Firewall, the Installation Assistant automatically configures the firewall.

If you install Windows Firewall after installing Server Sentinel, download the Server Sentinel batch files from the Unisys Product Support Web site to update your firewall rules.

If you use a firewall from another vendor, ensure that your firewall is configured for Server Sentinel network traffic.

If multiple types of Server Sentinel software (for example, Sentinel Management Server software and Server Sentinel client workstation software) are installed on the system, adhere to the firewall requirements for all installed Server Sentinel software. Note that the client workstation is defined as any terminal used to access Server Sentinel remotely.

Notes:

• The firewall requirements are for incoming traffic; most outgoing traffic use dynamic ephemeral ports, and these requirements are not documented.

• %Program Files% is a path variable to the file location, for example: C\Program Files\.

Firewall Requirements for Client Workstations

Client Workstations Running Windows XP Professional or Windows

Server 2003

For 32-bit systems, allow the following application (this application is not installed on x64 systems):

%Program Files%\Unisys\Server Sentinel\

(26)

Traffic is bidirectional with the Windows partition or partitions that the application is configuring.

Client Workstations Running Windows Vista

Windows Vista supports the Windows Firewall with Advanced Security, which allows you to specify separate exceptions for inbound and outbound traffic.

• For 32-bit systems, allow the following application (this application is not installed on x64 systems):

%Program Files%\Unisys\Server Sentinel\

Processor Autonome\GroupManager.exe

Traffic is bidirectional with the Windows partition or partitions that the application is configuring.

• Add outbound exceptions for TCP ports 80, 135, and 443.

• Add outbound exceptions for the following applications:

″%Program Files%\NetIQ\AppManager\bin\NetIQctrl.exe″

″%Program Files%\NetIQ\AppManager\bin\Netiq.exe″

″%pf%\Unisys\EZUpdate\SWUpdateGUI.EXE″

″%Programfiles%\Internet Explorer\iexplore.EXE″

″%systemroot%\system32\mmc.exe″ out Firewall Considerations

(27)

Appendix B

Windows Firewall Batch Files for Server

Sentinel

Perform the following optional procedure only if you enable the Windows Firewall after Server Sentinel installation.

Downloading Server Sentinel Batch Files for

Windows Operating Systems

If you install Server Sentinel and later upgrade to an operating system that uses the Windows Firewall, or if you enable the Windows Firewall after Server Sentinel software installation, you must complete the following procedure and download the Server Sentinel batch files. (The Windows Firewall was first supported with Windows XP Professional with Service Pack 2 and Windows Server 2003 with Service Pack 1.) The batch files automatically update the required registry and Windows Firewall settings. If you do not ever plan to use the Windows Firewall, you do not need to download the batch files.

You can download the required batch files and a readme file containing the batch file installation instructions from the Unisys Product Support Web site by performing the following steps:

1. Access the Unisys Product Support Web site at www.support.unisys.com.

2. Log in with your user name and password.

The Product Support page is displayed.

3. SelectServer Sentinel in the Systems Management list for your server type.

The Server Sentinel Support page is displayed.

4. ClickReleases.

The Releases page is displayed.

5. Click your Server Sentinel release in theRelease column.

The Release page for the release you selected is displayed.

6. ClickBatch Files under the Software tab to display the available batch files.

7. Click your release level in theLevel column.

The Batch Files page for the release level you selected is displayed.

(28)

9. ClickSave and specify a location where you want to save the batch files.

10. Open the downloaded file, specify a location to unzip the files, and then clickUnzip.

The batch files and a readme file are copied to the location that you specified.

11. Follow the instructions in the readme file to run the batch files.

Windows Firewall Batch Files for Server Sentinel

(29)

.

(30)