Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide

426 Pages·2017·4.33 MB·English

by  Hitachi Vantara Corporation

Hitachi Infrastructure Analytics Advisor
Installation and Configuration Guide
This manual provides information for Hitachi Infrastructure Analytics Advisor.
MK-96HIAA002-06
February 2018
© 2016, 2018 Hitachi, Ltd. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including copying and
recording, or stored in a database or retrieval system for commercial purposes without the express written permission of Hitachi, Ltd., or
Hitachi Vantara Corporation (collectively “Hitachi”). Licensee may make copies of the Materials provided that any such copy is: (i) created as an
essential step in utilization of the Software as licensed and is used in no other manner; or (ii) used for archival purposes. Licensee may not
make any other copies of the Materials. “Materials” mean text, data, photographs, graphics, audio, video and documents.
Hitachi reserves the right to make changes to this Material at any time without notice and assumes no responsibility for its use. The Materials
contain the most current information available at the time of publication.
Some of the features described in the Materials might not be currently available. Refer to the most recent product announcement for
information about feature and product availability, or contact Hitachi Vantara Corporation at https://support.hitachivantara.com/en_us/contact-
us.html.
Notice: Hitachi products and services can be ordered only under the terms and conditions of the applicable Hitachi agreements. The use of
Hitachi products is governed by the terms of your agreements with Hitachi Vantara Corporation.
By using this software, you agree that you are responsible for:
1. Acquiring the relevant consents as may be required under local privacy laws or otherwise from authorized employees and other
individuals to access relevant data; and
2. Verifying that data continues to be held, retrieved, deleted, or otherwise processed in accordance with relevant laws.
Notice on Export Controls. The technical data and technology inherent in this Document may be subject to U.S. export control laws, including
the U.S. Export Administration Act and its associated regulations, and may be subject to export or import regulations in other countries. Reader
agrees to comply strictly with all such regulations and acknowledges that Reader has the responsibility to obtain licenses to export, re-export, or
import the Document and any Compliant Products.
Hitachi is a registered trademark of Hitachi, Ltd., in the United States and other countries.
AIX, AS/400e, DB2, Domino, DS6000, DS8000, Enterprise Storage Server, eServer, FICON, FlashCopy, IBM, Lotus, MVS, OS/390, PowerPC, RS/6000,
S/390, System z9, System z10, Tivoli, z/OS, z9, z10, z13, z/VM, and z/VSE are registered trademarks or trademarks of International Business
Machines Corporation.
Active Directory, ActiveX, Bing, Excel, Hyper-V, Internet Explorer, the Internet Explorer logo, Microsoft, the Microsoft Corporate Logo, MS-DOS,
Outlook, PowerPoint, SharePoint, Silverlight, SmartScreen, SQL Server, Visual Basic, Visual C++, Visual Studio, Windows, the Windows logo,
Windows Azure, Windows PowerShell, Windows Server, the Windows start button, and Windows Vista are registered trademarks or trademarks
of Microsoft Corporation. Microsoft product screen shots are reprinted with permission from Microsoft Corporation.
All other trademarks, service marks, and company names in this document or website are properties of their respective owners.
Contents
Preface...................................................................................................15
Intended audience.............................................................................................15
Product version..................................................................................................15
Release notes....................................................................................................15
Related documents............................................................................................15
Document conventions......................................................................................16
Conventions for storage capacity values...........................................................17
Accessing product documentation.....................................................................18
Getting help........................................................................................................18
Comments..........................................................................................................18
Chapter 1: Overview.............................................................................21
Infrastructure Analytics Advisor overview..........................................................21
Infrastructure Analytics Advisor system configuration.......................................21
Installation methods...........................................................................................23
Installation workflow for a two-host configuration..............................................24
Installation workflow for a three-host configuration............................................25
Default installation directory...............................................................................25
Chapter 2: System requirements.........................................................27
System requirements for using the virtual appliance.........................................27
Requirements for Infrastructure Analytics Advisor and Data Center
Analytics servers..........................................................................................27
Requirements for Analytics probe server and Configuration Manager
REST API.....................................................................................................28
System requirements for using the installer.......................................................28
Infrastructure Analytics Advisor server requirements (Linux).......................28
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 3
Infrastructure Analytics Advisor server requirements (Windows).................29
Data Center Analytics server requirements..................................................30
Analytics probe server requirements............................................................32
Windows-based probe requirements............................................................34
Configuration Manager REST API requirements......................................... 35
Port requirements..............................................................................................36
Supported browsers...........................................................................................39
Management target requirements......................................................................40
Chapter 3: Installation with virtual appliances...................................45
Installing Infrastructure Analytics Advisor and Data Center Analytics servers
(VMware vSphere Client)...................................................................................45
Installing Analytics probe server (VMware vSphere Client)...............................46
Initial setup of the guest OS or VMs..................................................................48
Chapter 4: Installation on a Linux host...............................................51
Verifying the yum/rpm dependency packages...................................................51
Increasing the maximum number of open files..................................................55
Installing Infrastructure Analytics Advisor and Data Center Analytics servers
(Linux OS)..........................................................................................................56
Installing Analytics probe server (Linux OS)......................................................63
Linux OS settings changed by the installer........................................................68
Chapter 5: Installation of Infrastructure Analytics Advisor server
on a Windows host............................................................................... 73
Installing Infrastructure Analytics Advisor server (Windows OS).......................73
Chapter 6: Initial setup after installation.............................................75
Initial setup of Data Center Analytics server......................................................75
Initial setup of Analytics probe server................................................................76
Initial setup of Infrastructure Analytics Advisor server.......................................78
Logging on to Infrastructure Analytics Advisor server..................................78
Changing the system account password......................................................79
Setting up a connection with Data Center Analytics server..........................79
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 4
Configuring the mail server...........................................................................80
Configuring the initial settings for connecting with Automation Director............80
Configuring settings to connect to Automation Director when it is not
linked with Device Manager..........................................................................80
Installing Automation Director.................................................................80
Changing common component settings..................................................81
Checking user account permissions.......................................................81
Configuring settings to connect to Automation Director when it is linked
with Device Manager....................................................................................82
Changing common component settings..................................................82
Creating user accounts...........................................................................83
Checking user account permissions.......................................................84
Creating a definition file to connect with Automation Director......................84
Format of definition files to connect with Automation Director..................... 85
Resetting common component settings.......................................................89
Configuring initial settings for limiting the I/O activity of Hitachi storage
resources...........................................................................................................90
Configuration overview for I/O controls using Automation Director..............91
Installing the Configuration Manager REST API.....................................92
Registering storage systems in the Configuration Manager REST
API..........................................................................................................92
Setting up Automation Director to run the I/O control configuration
function....................................................................................................95
Checking the connection with Automation Director................................ 98
Configuring I/O control settings with user-defined scripts............................98
Prerequisites for setting I/O controls (using a script)..............................99
Creating the script files............................................................................99
Editing built-in command templates......................................................102
Creating an I/O control task..................................................................103
Running the script files..........................................................................104
Checking the status of the script execution.......................................... 104
Initial setup for enabling Granular Data Collection.......................................... 104
Configuring SSH to use Granular Data Collection..................................... 105
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 5
Creating keys on the Infrastructure Analytics Advisor server............... 105
Configuring the public key authentication.............................................106
Verifying SSH connections....................................................................107
Registering storage systems to be monitored by Granular Data
Collection....................................................................................................108
Changing the megha and meghadata passwords............................................111
Adding a secondary Data Center Analytics server ..........................................112
Configuring the downloader on the Data Center Analytics server..............113
Configuring initial settings for enabling the audit log of the Infrastructure
Analytics Advisor server...................................................................................114
Enabling audit logging................................................................................116
Settings in the auditlog.conf file..................................................................117
Sample audit.log.conf file...........................................................................120
Format of data output to the audit log........................................................ 120
Chapter 7: Adding probes to the Analytics probe server............... 123
Agents supported by Hitachi Enterprise Storage probe...................................123
Setting up the Hitachi Enterprise Storage probe (when using RAID Agent)....124
Verify the connection between host and monitoring targets (when using
RAID Agent)...............................................................................................125
Making the command device accessible (when using RAID Agent)..........127
Creating an instance environment (when using RAID Agent)....................128
Adding Hitachi Enterprise Storage probe...................................................132
Deleting an instance environment (when using RAID Agent).................... 133
Setting up the Hitachi Enterprise Storage probe (when using Tuning
Manager - Agent for RAID)..............................................................................134
Requirements for adding the Hitachi Enterprise Storage probe (when
using Tuning Manager - Agent for RAID)...................................................134
Changing data to be collected by Tuning Manager - Agent for RAID.........136
Settings for communication from Analytics probe server to Tuning
Manager - Agent for RAID..........................................................................137
Notes on using Tuning Manager - Agent for RAID.....................................137
Adding Hitachi Enterprise Storage probe...................................................137
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 6
Values used for estimating disk space when using Tuning Manager -
Agent for RAID...........................................................................................139
Adding Hitachi Adaptable Modular Storage (AMS) probe............................... 141
Adding Hitachi NAS probe...............................................................................142
Adding VMware probe.....................................................................................142
Adding Brocade Network Advisor probe..........................................................143
Adding Cisco DCNM probe..............................................................................144
Adding Cisco SAN Switch probe..................................................................... 144
Encrypting the CSV file...............................................................................145
Adding Linux probe..........................................................................................146
Initial setup after adding a probe..................................................................... 147
Chapter 8: Installing Data Center Analytics server Windows-
based probe.........................................................................................149
Data collection methods.................................................................................. 149
Installing the Windows-based probe................................................................152
Configuring Data Center Analytics Windows-based probe..............................153
Configuring the data collection method......................................................153
Configuring the FTP or HTTPS server.......................................................154
Starting the Windows-based probe service................................................155
Windows-based probe configuration backup............................................. 155
Initial setup after adding a probe..................................................................... 155
Chapter 9: Upgrade your Infrastructure Analytics Advisor
environment.........................................................................................157
Upgrade workflow for a two-host configuration................................................157
Upgrade workflow for a three-host configuration ............................................158
Verifying the yum/rpm dependency packages.................................................159
Upgrading the Infrastructure Analytics Advisor and the Data Center
Analytics servers on a Linux host....................................................................163
Upgrading the Infrastructure Analytics Advisor server on a Windows host.....169
Upgrading the Analytics probe server..............................................................169
Upgrading the Data Center Analytics server Windows-based probe...............173
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 7
Upgrading the Configuration Manager REST API...........................................174
Postupgrade guidelines...................................................................................174
Reconfiguring the connection with Automation Director after an upgrade.......175
Chapter 10: Configuring external user authentication....................179
External user authentication overview.............................................................179
Configuring multiple external authentication servers.......................................180
Configuring LDAP authentication for Infrastructure Analytics Advisor server..182
Workflow for configuring LDAP authentication...........................................182
Configuring the LDAP directory server.......................................................182
Creating user accounts on an LDAP directory server...........................182
Checking the LDAP directory server settings....................................... 183
Creating an LDAP search user account................................................185
Connecting to the LDAP directory server...................................................186
LDAP configuration properties................................................................... 189
Settings for connecting directly to an LDAP directory server................190
Settings for using DNS to connect to an LDAP directory server...........195
Settings for connecting directly to an LDAP directory server and an
authorization server...............................................................................199
Settings for using DNS to connect to an LDAP directory server and
an authorization server......................................................................... 205
Examples of specifying settings in the exauth.properties file to use an
LDAP directory server for authentication....................................................209
Configuring RADIUS authentication for Infrastructure Analytics Advisor
server...............................................................................................................212
Workflow for configuring RADIUS authentication.......................................212
Configuring the RADIUS server..................................................................213
Creating user accounts on the RADIUS server.................................... 213
Configuring LDAP directory server as external authorization server....213
Connecting to the RADIUS server..............................................................213
RADIUS configuration properties...............................................................217
Settings for connecting directly to a RADIUS server............................ 218
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 8
Settings for connecting directly to a RADIUS server and an
authorization server...............................................................................221
Settings for using DNS to connect to a RADIUS server and an
authorization server...............................................................................227
Examples of specifying settings in the exauth.properties file to use a
RADIUS server for authentication..............................................................231
Configuring Kerberos authentication for Infrastructure Analytics Advisor
server...............................................................................................................233
Workflow for configuring Kerberos authentication......................................233
Configuring the Kerberos server................................................................ 233
Creating user accounts on the Kerberos server................................... 234
Configuring LDAP directory server as external authorization server....234
Connecting to the Kerberos server.............................................................234
Kerberos configuration properties..............................................................237
Settings for connecting directly to a Kerberos server........................... 238
Settings for using DNS to connect to a Kerberos server...................... 241
Settings for connecting directly to a Kerberos server and an
authorization server...............................................................................243
Settings for using DNS to connect to a Kerberos server and an
authorization server...............................................................................249
Examples of specifying settings in the exauth.properties file to use a
Kerberos server for authentication.............................................................250
Configuring external user authentication on the Analytics probe server and
the Data Center Analytics server.....................................................................252
Configuring the SSL port............................................................................253
Verifying the Active Directory domain name...............................................254
Matching non-default Active Directory server settings...............................254
Managing Active Directory groups............................................................. 256
Chapter 11: Configuring secure communications...........................257
About security settings.....................................................................................257
Workflow for configuring secure communications............................................259
Configuring an SSL server (Infrastructure Analytics Advisor server)...............262
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 9
Creating a private key and a certificate signing request for Infrastructure
Analytics Advisor server.............................................................................262
Applying for a server certificate for Infrastructure Analytics Advisor
server from the certificate authority............................................................262
Enabling SSL communication for the Infrastructure Analytics Advisor
server..........................................................................................................263
Checking the expiration date of the certificate for Infrastructure Analytics
Advisor server.............................................................................................266
Changing the SSL port number between the Infrastructure Analytics
Advisor server and a web browser (Linux).................................................267
Changing the SSL port number between the Infrastructure Analytics
Advisor server and a web browser (Windows)...........................................269
Deleting a certificate from the truststore for Infrastructure Analytics
Advisor server.............................................................................................270
Configuring SSL servers (Data Center Analytics server and Analytics probe
server)..............................................................................................................271
Applying self-signed certificates to the Data Center Analytics server........271
Exporting a self-signed certificate for the Data Center Analytics server.... 273
Importing a certificate to the truststore file for the Infrastructure Analytics
Advisor server (Data Center Analytics server)...........................................274
Applying server certificates to the Data Center Analytics server and the
Analytics probe server................................................................................275
Checking the expiration dates of certificates for Data Center Analytics
server and Analytics probe server..............................................................278
Configuring an SSL server (Automation Director)........................................... 278
Importing a certificate to the truststore for the Infrastructure Analytics
Advisor server (Automation Director).........................................................278
Configuring an SSL server (LDAP directory server)........................................280
Importing a certificate to the truststore for the Infrastructure Analytics
Advisor server (LDAP directory server)......................................................280
Conditions for an LDAP directory server certificate....................................282
Chapter 12: Changing Infrastructure Analytics Advisor system
settings................................................................................................283
Starting and stopping the Infrastructure Analytics Advisor services................283
Starting the Infrastructure Analytics Advisor server services.....................283
Contents
Hitachi Infrastructure Analytics Advisor Installation and Configuration Guide 10