Transcription

Universal CMDBSoftware Version: 10.33Administration GuideDocument Release Date: July 2017Software Release Date: July 2017

Administration GuideLegal NoticesDisclaimerCertain versions of software and/or documents (“Material”) accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett PackardEnterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and HewlettPackard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.WarrantyThe only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth in the express warranty statements accompanyingsuch products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors oromissions contained herein. The information contained herein is subject to change without notice.Restricted Rights LegendConfidential computer software. Except as specifically indicated otherwise, a valid license from Micro Focus is required for possession, use or copying. Consistent with FAR12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Governmentunder vendor's standard commercial license.Copyright Notice 2002 - 2017 Micro Focus or one of its affiliates.Trademark NoticesMICRO FOCUS and the Micro Focus logo, among others, are trademarks or registered trademarks of Micro Focus (IP) Limited or its subsidiaries in the United Kingdom,United States and other countries. All other marks are the property of their respective owners.Adobe is a trademark of Adobe Systems Incorporated.Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation.UNIX is a registered trademark of The Open Group.Documentation UpdatesTo check for recent updates or to verify that you are using the most recent edition of a document, go to: https://softwaresupport.softwaregrp.com.This site requires that you register for a Software Passport and to sign in. To register for a Software Passport ID, click Register for Software Passport on the Micro FocusSupport website at https://softwaresupport.softwaregrp.com.You will also receive updated or new editions if you subscribe to the appropriate product support service. Contact your Micro Focus sales representative for details.SupportVisit the Micro Focus Support site at: https://softwaresupport.softwaregrp.com.This website provides contact information and details about the products, services, and support that Micro Focus offers.Micro Focus online support provides customer self-solve capabilities. It provides a fast and efficient way to access interactive technical support tools needed to manage yourbusiness. As a valued support customer, you can benefit by using the support website to:llllllllSearch for knowledge documents of interestSubmit and track support cases and enhancement requestsDownload software patchesManage support contractsLook up Micro Focus support contactsReview information about available servicesEnter into discussions with other software customersResearch and register for software trainingMost of the support areas require that you register as a Software Passport user and to sign in. Many also require a support contract. To register for a Software Passport ID,click Register for Software Passport on the Micro Focus Support website at https://softwaresupport.softwaregrp.com.To find more information about access levels, go to: resupport/access-levels.Integration Catalog accesses the Micro Focus Integration Catalog website. This site enables you to explore Micro Focus Product Solutions to meet your business needs,includes a full list of Integrations between Micro Focus Products, as well as a listing of ITIL Processes. The URL for this website 02731.Micro Focus Universal CMDB (10.33)Page 2 of 315

Administration GuideContentsIntroduction11Chapter 1: Configuration Management Database (CMDB)CMDB OverviewIPv6 Support for UCMDB/Universal DiscoveryConfiguration Items (CIs)Query Nodes and RelationshipsHistory Storage and Purging in UCMDBUnified Resource Manager (URM)Chapter 2: Logging In to UCMDBHow to Log In to UCMDBHow to Enable Logging In to UCMDB AutomaticallyHow to Log In to UCMDB Local Installation ModeHow to Launch UCMDB UI from Chrome 43 , Firefox 48 , MicrosoftEdge, or Safari 10 How to Customize the UCMDB Applet Files DirectoryHow to Change the Default Time Limit for User Inactivity Log OutHow to Enable Localized Online HelpTroubleshooting – Logging In to UCMDBChapter 3: Navigating Universal CMDBNavigating the Universal CMDB User InterfaceMenus and OptionsStatus BarAnnotation ToolChapter 4: UCMDB BrowserUCMDB Browser OverviewInitial Setup for Working with the UCMDB BrowserHow to Grant Access to the UCMDB BrowserHow to Authorize Access to CIsUse CasesHow to Change the UCMDB Integration User CredentialsHow to Configure the UCMDB-UI Server URLHow to Configure LW-SSOHow to Configure SSLMicro Focus Universal CMDB 1414243444546474748Page 3 of 315

Administration GuideHow to Configure Multiple UCMDB ServersHow to Specify Data Stores Used for Data LoadingHow to Change the Default Port of the Tomcat ServerHow to Deploy the UCMDB Browser with a Different Root ContextHow to Upgrade the UCMDB BrowserHow to Configure an Environment to Use Multiple Reverse ProxiesHow to Configure the Enhanced Search EngineHow to Brand the UCMDB BrowserHow to Set UCMDB Browser Session to ExpireAdministration50525253545657727475Chapter 5: UCMDB Server Administration76Basic Administration Tasks77How to Enable HTTP Communication for UCMDB Server78How to Access the JMX Console80How to Enable Remote Access to the JMX Console83How to Manage UCMDB Licenses Using the JMX Console84How to Access Support Using the JMX Console85How to Configure High Availability90How to Set Master Key for Password Encryption on Data Flow Probe91How to Set Master Keys92How to Configure the UCMDB Mail Server96How to Change the Root Context for UCMDB Components98How to Customize the Application Title99How to Use the Database Tool100How to Deploy Hotfixes and Track Hotfixes Applied on UCMDB Server101How to Configure UCMDB Log Levels105How to Retrieve UCMDB Server Log Files105How to Configure UCMDB to Save User Audit Log to a RemoteMachine106How to Configure Microsoft IIS as Reverse Proxy for UCMDB Server 108How to Download a Zip File of Log Files and Thread Dumps109How to Enable Validation of the Host Header of a Request110How to Retrieve UCMDB Server Logs for a Specific Time Frame111How to Use the User Activity Log112How to Limit the Number of Concurrent Sessions for System Accounts 113How to Set Up a Standalone Solr Environment113Micro Focus Universal CMDB (10.33)Page 4 of 315

Administration GuideHow to Run Solr in a Different Process than UCMDB115Change the Default Port of the Solr116Modify Solr Memory Size116How to Configure Maximum Number of Condition Phrases for a SingleNode for Solr Search117Solr Auto Commit118How to Set UCMDB Server Time, Change Time Zone Setting, orCorrect System-induced Clock Drift119How to Disable Caching of Generated IDs for CIs, Jobs, and URMResources120How to Increase the Java Heap Memory Used by the UCMDB UI JavaApplet120Editing the JSP File120Editing the Control Panel Java Settings121How to Configure Configuration Manager 10.22 to Connect to UCMDBServer122How to View the KPI Dashboard123Performance Statistics Dashboard125How to Enable License Usage Tracking129How to Use the External JAR Configuration File130UCMDB Services131UCMDB Server Ports135UCMDB Integration Service Ports136UCMDB Log Files136General Log Files137Class Model Log Files140TQL Log Files141Data-In Log Files142History Log Files142Enrichment Log Files145Dal Log Files145Authorization Log Files146UCMDB UI Log Files147Data Flow Management Log Files148Log Severity Levels151Log Configuration Dialog Box152Enhanced File Upload Mechanism153Micro Focus Universal CMDB (10.33)Page 5 of 315

Administration GuideTroubleshooting and Limitations – UCMDB Server AdministrationTroubleshooting Keystore and TruststoreChapter 6: Infrastructure Settings ManagerInfrastructure Settings Manager OverviewInfrastructure Settings ValidationInfrastructure Settings Manager User InterfaceChange Default Value Dialog BoxInfrastructure Settings Manager PageChapter 7: Package ManagerPackage Administration OverviewPackage Zip File Contents and FormatPackages for Integration AdaptersCompare and Merge Packages or Content PacksOverviewCompare and MergeHow to Merge Packages or Content PacksLog and Backup FilesHow to Create a Custom PackageHow to Deploy a PackageHow to Export a PackageHow to Install a Discovery and Integration Content PackHow to Use the JMX Console to Perform Package Manager TasksPackage ResourcesResource TypesPackage Manager User InterfaceChoose Resources to Export Dialog BoxCreate Custom Package/Edit Package WizardPackage Properties PageResource Selection PageSelection Summary PageExport Package Dialog BoxFilter Dialog BoxFind Dialog BoxUndeploy Package Resource WizardRemove Resources PageSelection Summary PageMicro Focus Universal CMDB 194195196196197Page 6 of 315

Administration GuideTroubleshooting and Limitations – Package ManagerChapter 8: State ManagerState Manager OverviewHow to Define a StateState Manager User InterfaceState Manager PageChapter 9: SchedulerHow to Define Tasks That Are Activated on a Periodic BasisHow to Rebuild Indexes on Microsoft SQL DatabasesScheduler User InterfaceAction Definition Dialog BoxFilter Dialog BoxJob Definition Dialog BoxJob Scheduler PageSelect Days Dialog BoxSelect Hours Dialog BoxChapter 10: Recipients ManagerRecipients Manager OverviewHow to Define an Email RecipientConfigurable Email Rate SettingsRecipients Manager User InterfaceAdd Mail Recipient Dialog BoxRecipients Manager PageChapter 11: CI Lifecycle and the Aging MechanismThe Aging Mechanism OverviewCI Lifecycle OverviewHow to Enable and Run the Aging MechanismHow to Generate CI Lifecycle Data and Filter the ResultsCI Lifecycle User InterfaceAging Run Statistics Dialog BoxAging Status TabCI Lifecycle and Relationship TabsCI Lifecycle PageFilter Dialog BoxAging ParametersConfiguring SecurityMicro Focus Universal CMDB 224226227228229Page 7 of 315

Administration GuideChapter 12: User Permissions for UCMDBUser Permissions in a Single Tenant EnvironmentUser Permissions WorkflowUser Permissions for the UCMDB BrowserMulti-Tenancy OverviewUser Permissions in a Multi-Tenancy EnvironmentTenant Association RulesConfiguration Manager in a Multi-Tenant UCMDB EnvironmentMulti-Tenancy WorkflowHow to Change the Tenant Assignment for a Resource or a CIUser Permissions User InterfaceAssign Tenants Dialog BoxAssign Resources to Roles and Resource Groups Dialog BoxChapter 13: Users and GroupsUsers and Groups OverviewUsers and Groups WorkflowDefault Password PolicyUsers and Groups User InterfaceNew Group WizardGroup Details PageGroup Association PageRoles Association PageDefault Tenant PageNew User WizardUser Name and Password PageUser Details PageGroup Association PageRole Association PageDefault Tenant PageSelect Tenants for Role Dialog BoxUsers and Groups PageChapter 14: Roles ManagerRoles Manager OverviewHow to Create a New Role and Define Permissions for the RoleRoles Manager User InterfaceNew Role Dialog BoxMicro Focus Universal CMDB 266266267269269Page 8 of 315

Administration GuideRoles Manager PageResources TabBrowser CI Access Control TabResource Groups TabGeneral Actions TabRole Details TabPermissions Overview TabPermissions SummaryChapter 15: Resource GroupsResource Groups OverviewHow to Define a Resource GroupResource Groups User InterfaceNew Resource Group Dialog BoxResource Groups PageChapter 16: Ownership ManagementOwnership Management OverviewOwnership Management User InterfaceOwnership Management PageChapter 17: LDAP MappingLDAP Mapping OverviewSynchronize Universal CMDB User Groups with LDAP GroupsHow to Configure LDAP for Active DirectorySearch LDAP UsersExample: How to Configure LDAP for Sun ONE Directory Server inUCMDB ServerExample: How to Configure Dynamic LDAP GroupsLDAP Mapping User InterfaceLDAP Groups to UCMDB Groups Mappings Dialog BoxLDAP Mapping PageRemote Group Users Dialog BoxChapter 18: Tenants ManagementTenants Management OverviewMulti-Tenancy Architecture vs. Multi-Customer ArchitectureMulti-Customer (MC) ArchitectureMulti-Tenant (MT) ArchitectureMulti-Tenant Architecture with Tenant-Aware ReconciliationMicro Focus Universal CMDB 305306307310Page 9 of 315

Administration GuideMigration from Single-Tenant Architecture to Multi-Tenant or MultiCustomer ArchitectureProbe Connection Address in MT and MC ArchitecturesModeling in a Multi-Tenant EnvironmentHow Scheduler Runs in a Multi-Tenant EnvironmentTenants Management User InterfaceNew Tenant/Edit Tenant Dialog BoxTenants Management PageShortcut MenuSend documentation feedbackMicro Focus Universal CMDB (10.33)310311311311312312313314315Page 10 of 315

IntroductionMicro Focus Universal CMDB (10.33)Page 11 of 315

Chapter 1: Configuration ManagementDatabase (CMDB)This chapter includes:CMDB Overview12IPv6 Support for UCMDB/Universal Discovery13Configuration Items (CIs)14Query Nodes and Relationships15History Storage and Purging in UCMDB15Unified Resource Manager (URM)17CMDB OverviewThe CMDB is the central repository for the configuration information that is gathered from the DataFlow Management (DFM) process and the various third-party applications and tools.The CMDB contains all the configuration items (CIs) and relationships created in Universal CMDB,whether created automatically from the DFM process or inserted manually. The CIs and relationshipstogether represent a model of all the components of the IT Universe in which your business functions.The CMDB stores and handles the infrastructure data collected and updated by the DFM process. Formore information about the DFM process, see the Universal CMDB Discovery and IntegrationsContent Guide.The IT Universe model can be very large, containing millions of CIs. To facilitate their management,you work with the CIs in a view that provides a subset of the overall components in the IT Universeworld.You use factory views or views defined in the Modeling Studio to display and manage the CIs andrelationships in the CMDB. The views enable you to focus on specific IT areas and are available via theCI Selector. An example of a view is shown in the following figure:Micro Focus Universal CMDB (10.33)Page 12 of 315

Administration GuideChapter 1: Configuration Management Database (CMDB)The CMDB also contains the TQL query definitions that are used to query and retrieve data from theCMDB for presentation in the view, and the configuration item type (CIT) model, a repository for the CItypes used to define the CIs and relationships. For information on TQL queries, see Topology QueryLanguage in the Universal CMDB Modeling Guide.IPv6 Support for UCMDB/Universal DiscoveryUnless otherwise specified, UCMDB and Universal Discovery support the IPv6 protocol as follows:lUCMDB Web UI (including Jetty Web Server and Java Applets) works over IPv6.lThe JMX interface as well as pure Web UI (such as the login screen) support IPv6.lData Flow Probe to UCMDB server communications can be done via IPv6.lProbe clustering supports IPv6 communication.lUCMDB Server can connect to the MS SQL/Oracle/PostgreSQL databases over IPv6.lHigh-availability clusters (at the JGroups level) can communicate work over IPv6.lThe UCMDB Browser supports IPv6.lIP ranges for Data Flow Probes and Management Zones can be defined in the UCMDB userinterface in IPv6 format. For details, see New/Edit Range Dialog Box in the Universal CMDB DataFlow Management Guide.lSome of the discoveries and integrations provided out-of-the-box with the UCMDB work over IPv6.Among those supported are:Micro Focus Universal CMDB (10.33)Page 13 of 315

Administration GuideChapter 1: Configuration Management Database (CMDB)ooBasic network discovery:lPing sweeps can be done over IPv6 rangeslThe IP/MAC Address Harvesting job was extended to read IPv6 specific ARP cache tables.Inventory Discovery and its various components are IPv6 enabled:lInventory Scanners (off-site scan file saving)lScanner Scheduler (download of scanners and configuration)lStore and Forward ServerlUD Agent (Communication and Call Home)lInventory Discovery by Scanners joblInventory Discovery by Manual Scanner DeploymentNote: For a complete list of discovery jobs and integrations that support IPv6, see "UniversalDiscovery IPv6 Support" in the HPE UCMDB Discovery and Integrations Content Guide Supported Content.lThe UCMDB SDK API works over IPv6.The SDK can be accessed via IPv6. APIs that take IP addresses can accept IPv6 addresses (e.g.for Discovery ranges).lWeb services work over IPv6.Configuration Items (CIs)A configuration item (CI) is a component of the CMDB that represents a physical or logical entity in thesystem, for example, hardware, software, services, business processes, and customers. The CIs arepart of the IT Universe model in the CMDB, where they are organized into a hierarchical format basedon the interdependencies in your organization's IT environment. The interdependencies in UniversalCMDB are called relationships.Each CI belongs to a configuration item type (CIT). The CIT defines a category of CIs used inUniversal CMDB. The CITs provide templates for creating the CIs and associated properties in eachcategory. You view and manage the CIs in the CMDB using views. Each view shines a spotlight onpart of the IT Universe model.For further details on working with CIs in Universal CMDB, see "Working with CIs" in the UniversalCMDB Modeling Guide.Micro Focus Universal CMDB (10.33)Page 14 of 315

Administration GuideChapter 1: Configuration Management Database (CMDB)Query Nodes and RelationshipsQuery nodes are the components from which TQL queries are built in Enrichment Manager, ImpactAnalysis Manager, and the Modeling Studio. For details, see "Creating TQL Queries in the UCMDBManagers" in the Universal CMDB Modeling Guide.Note: When working in views, query nodes are called view nodes in the Universal CMDB userinterface.Relationships are connections defined between CIs. Relationships are defined one at a time for eachpair of query nodes in a TQL query. For details on working with relationships, see "Working withRelationships" in the Universal CMDB Modeling Guide.History Storage and Purging in UCMDBHistory StorageUniversal CMDB stores history for all CIs and relationships. By default, history is stored for allattributes of a CI or relationship. You can configure specific CIT attributes to be excluded from historystorage by selecting the Not Tracked for History qualifier for those attributes. For details on editingCIT attributes, see "Add/Edit Attribute Dialog Box" in the Universal CMDB Modeling Guide.Baseline ProcessStored history events for CIs and relationships are grouped by CI type. For each CI type, the historyevents for each CI instance are stored by monthly periods with a separate database table for eachmonthly period. At the beginning of each table, the current data for all CIs and relationsh