OMU350 Operations Manager 9.x on UNIX/Linux Advanced Administration

(1)

OMU350 – Operations Manager 9.x on

UNIX/Linux Advanced Administration

Instructor-Led Training

For versions 9.0, 9.01, & 9.10

INTENDED AUDIENCE

This course is intended for anyone seeking a more in-depth knowledge of HP

Operations Manager 9.x for any of the following platforms:

– Linux – HP-UX – Solaris

DURATION: 5 DAYS

SOFTWARE VERSIONS: 9.0, 9.01, & 9.10

PREREQUISITES

To maximize success in this course, students should have one or more of the following:

– Successful completion of the OMU120 – Operations Manager 9.x on

UNIX/Linux Administration Essentials – Six months to one year of direct

administration experience with the product.

In addition, students should be familiar with common networking protocols and system and application monitoring concepts.

COURSE OBJECTIVES

At the end of the course, you will be able to:

– Configure HTTPS communications with HPOM agents, including the use of proxies and certificates

– Perform alternative, secure, or off-line HPOM agent installations

– Describe and apply the models for flexible management

– Create new service hierarchies for the Service Navigator using XML files

– Identify security techniques for system, network, and HPOM elements, including access and authentication items

– Perform a variety of advanced administration functions using the Administrator UI and command line interface – Configure server pooling and have a working

understanding of HPOM in the High Availability (HA) environment

– Create additional administrative users and operators with limited administrative rights

– Identify key areas of focus when troubleshooting HPOM and be able to use tracing to assist in the process

– Apply service hours definitions and dynamic outage configurations

RELATED COURSES

– OMU120 – Operations Manager 9.x on UNIX/Linux Administration Essentials – OMU140 – Operations Manager 9.x on

UNIX/Linux Operators

OVERVIEW

This 5-day instructor-led course focuses on advanced administration topics to effectively monitor, control, and report on the health and performance of the IT environment using HP Operations

Manager on Linux or HP Operations Manager on UNIX. While the course is conducted

using the Linux platform version of Operations Manager, the concepts and configurations covered apply also to the UNIX platform version as well. The course reinforces concepts with extensive hands-on lab exercises. These hands-on lab exercises use version 9.10 of the software.

(2)

HP Software Education Services | www.hp.com/software/education | HPSoftware_PublicTraining@hp.com

|

Module 1: OMU/OML Advanced Administration

 Course purpose

 OMU/OML architecture  Managed node configuration  Communications and certificates  Flexible management

 High Availability and OMU/OML  Service hours and outages

 Service hierarchy concept and configuration  Admin UI tasks

 Troubleshooting and security  Migration and other elements  Additional course information

Module 2: OMU/OML Architecture

 Module overview

 OMU general architecture  Agent process communication  Server process communication  HTTPS communications  Queues and pipes  Agent: event to message  Server: message to browser  Java GUI communications  Admin UI communications  Summary

 Lab: Reviewing OMU/OML Architecture

Module 3: Managed Node Configuration

 Module overview

 OM agent installation review  OM agent installation details  Alternate OM agent installation  Comand-line installation  Semi-automatic installation  Manual installation  Offline agent installation  Installation using SSH  Post installation checks  HTTPS certificate requests

 Using a Windows installation server  Node default configuration

– Read or modify current configuration  Other managed node Configurations  OM agent ee-installation

 Summary

 Lab: Performing a semi-automatic OM agent installation  Lab: Performing a manual agent installation

 Lab: Creating Open Message Interface policies  Lab: Modifying default node configurations

(3)

|

Module 4: OMU/OML Communication and Firewalls

 Module overview

 Managing secure environments  Management scenarios

 Features of HTTPS communication  OMU/OML communications  Managing through firewalls  HTTPS port configuration  Proxy overview

 Proxies, firewalls, and OMU/OML  Proxy and firewall concept

 Configuring proxy communications  Proxy configuration syntax

 OM agents and NAT

 Managing nodes in untrusted zones  Using a reverse channel proxy

 Configuring outbound-only communication  Summary



Lab: Configuring and using a proxy

Module 5: Certificate Use and Management

 Module overview  Data encryption models  Signatures and data encryption  Contents of a certificate  Certificates in OMU/OML  Using the SSL handshake

 Keys and certificates in OMU/OML  Listing certificates and prerequisites  Listing certificate information  Automatic certificate deployment  Granting certificate requests

 Certificate status and update commands  Certificate server commands

 Backing up certificates  Manual certificate deployment  Using an installation key  Manual certificate installation  Summary

 Lab: Examining certificates

(4)

|

Module 6: Flexible Management Basics

 Module overview

 Flexible management concept  Flexible management models  Configuration process overview  Creating flexible policies  Checking flexible policy syntax  Activating flexible policies  Deploying flexible policies

 Configuration requirements for flexibility  Server configuration synchronization  Configuration download and upload  Download and upload from the Admin UI  Download and upload from the command line  Managing certificates

 Before the certificate exchange  The certificate exchange process  Certificate exchange commands  Flexible management and policies  Summary

 Lab: Synchronizing management servers



Lab: Merging and updating certificates

Module 7: Basic Message Forwarding

 Module overview

 Types of flexibility decisions  General syntax structure  Condition sequence  Time-based concept  Defining time templates

 Time-based forwarding example  Attribute-based concept

 Rule conditions and targets

 Attribute-based forwarding example  Summary

Module 8: Agent-based Flexible Policies

 Module overview

 Flexible policy configuration review  Flexible policies and the Admin UI  Accessing the flexible policy editor  The Admin UI raw editor

 Check, rename, activate, and deploy  Manager roles and agents

 Secondary manager configuration  Action Allow manager configuration  Applying agent-based flexibility  Expert Center concept

 Expert Center configuration  Follow-the-sun concept  Follow-the-sun configuration  Summary

 Lab: Reviewing the prerequisites  Lab: Defining Action Allow managers  Lab: Configuring an Expert Center model

(5)

|

Module 9: Server-Based Flexible Policies

 Module overview  Configuration review  Message forwarding concept  Forwarding with switch control  Forwarding as notification only  Acknowledge on local manager  Message forwarding configuration  Message forwarding models  Backup manager concept  Backup manager configuration  Summary

 Lab: Configuring manager-to-managerforwarding



Lab: Configuring a Backup manager model

Module 10: OMU Availability Options

 Module overview  Server pooling concept  Benefits of server pooling  Server pooling requirements  Server pooling setup

 Configure the virtual interface  Responsible manager configuration  Configure message forwarding  Adjustments to agents

 Moving the virtual interface

 Running OMU/OML on high availability  OMU/OML as a virtual node

 Shared directories  Installation overview

 Resource groups – OVRG and HARG  HTTPS communication and OVRGs  Summary

 Lab: Preparing for server pooling  Lab: Creating an OVRG

 Lab: Binding the OVRG to the ovbbccb port  Lab: Registering the virtual manager  Lab: Enabling the virtual interface

 Lab: Configuring the responsible managers  Lab: Configuring message forwarding  Lab: Adjusting the managed nodes

 Lab: Configuring the Java GUI connections method  Lab: Launching a switch to the backup server



Lab: Configuring load balancing (optional)

(6)

|

Module 11: Managing High Availability

 Module overview  Cluster concepts

 Clusters and OMU/OML  Key terminology

 Managing HA nodes with OMU/OML  VNs and HARGs

 VNs and policies  Policies on VNs

 Message creation in the VN  Messages from VNs

 Enabling and disabling policies  Cluster awareness commands  Modify or delete VNs  Summary

Module 12: Service Hours and Scheduled Outages

 Module overview  Basic concepts

 Primary components of service hours  Keywords for service hours

 Example – defining service hours  The pending messages browser  Primary outage components  Keywords for outages  Condition status variables  Example outage definition  Outage file control commands  Other considerations

 Time frames in OMU  Summary

 Lab: Configuring service hours



Lab: Configuring scheduled outages

Module 13: Service Hierarchy Concepts

 Module overview  Services and OMU/OML

 Service hierarchy configuration overview  Planning and design

 Simple Email service design  Service relationships  Messages and services  Determining service status  Status calculation weighting  Status propagation

 Status calculation threshold  Status calculation examples  Other status examples  Summary

(7)

|

Module 14: Constructing Service Hierarchies

 Module overview  What is XML?  Service file basics  The root services tag  The service block  The source block

 The propagation rule block  The calculation rule block  The actions block  After creating the file  Assign the service to users  Other service elements  Summary

– Lab: Defining a service hierarchy using XML  Lab: Modifying status calculation rules  Lab: Using Propagation rules



Lab: Adding new elements (optional)

Module 15: Configuring Admin UI Users

 Module overview  Admin UI users

 The Admin UI user model  Adding Admin UI users  Adding Admin UI users groups  Adding Admin UI users roles  User role elements

 Setting access rights  Inheritance of rights

 Example user role configuration  Assigning roles to groups  Assigning users to groups  The resolved user role  Linking to the Java GUI  Summary



Configuring Admin UI users

Module 16: Admin UI Administration

 Module overview

 Major administrative areas  General maintenance commands  Backup and restore

 Analyze configuration  Auditing the Admin UI  Reviewing audit records  Removing edit locks  Aligning of passwords  Admin UI self-monitoring  Deploy self-monitoring policies  Assign a midas user profile  Java GUI integration  Using HTTPS instead of HTTP  Summary

(8)

|

Module 17: Advanced OMU Troubleshooting

 Module overview

 Troubleshooting overview  XPL tracing architecture  The XPL trace server  Configuring tracing

 Starting and stopping tracing  Trace output – Windows GUI Client  Restricting trace information  Searching and saving trace data  Trace output – command line  Troubleshooting scenarios  Verifying coreIDs

 Verifying certificates  Invalid or lost certificates

 Compromised certificates or keys  HTTPS communication problems  OMU test tools

 Testing data flow  Summary

 Lab: Tracing on UNIX/Linux managed nodes  Lab: Tracing on Windows managed nodes  Lab: Troubleshooting a certificate problem



Lab: Troubleshooting a policy problem

Module 18: OMU Security

 Module overview

 Managing in mixed environments  PAM integration in OMU/OML  Using PAM with OM/OML  Configuring PAM for OMU/OML  PAM configuration

 PAM limitations

 Remote action security concept  Setting the filter specification  Syntax for remactconf.xml  System security elements

 Enforced change of default passwords  Summary



Lab: Configuring PAM for authentication

(9)

|

Module 19: Migration and Other Elements

 Module overview

 Flexible management behavior

 OMU and OMW configuration exchange  Policy migration  NNM changes  NNMi integration  Migration issues  Upgrade considerations  Upgrade procedure  Key migration issues  DCE issues

 Cockpit view concepts  Cockpit view configuration  SiteScope adapter

 OMi ready