WIXLIB

Spectrum Accelerate publicationDescriptionCommand-Line Interface (CLI) ReferenceGuideThis publication describes the command-lineinterface (CLI) commands for IBM SpectrumAccelerate.Publication number: SC27-6697-01Getting information, help, and serviceIf you need help, service, technical assistance, or want more information about IBMproducts, you can find various sources to assist you. You can view the followingwebsites to get information about IBM products and services and to find the latesttechnical information and support.v IBM website (ibm.com )v IBM Support Portal website (www.ibm.com/storage/support)v IBM Directory of Worldwide Contacts website (www.ibm.com/planetwide)How to order publicationsThe IBM Publications Center is a worldwide central repository for IBM productpublications and marketing material.The IBM Publications Center website (www.ibm.com/shop/publications/order/)offers customized search functions to help you find the publications that you need.Some publications are available for you to view or download at no charge. You canalso order publications. The publications center displays prices in your localcurrency.Sending your commentsYour feedback is important in helping to provide the most accurate and highestquality information.ProcedureTo submit any comments about this guide or any other IBM XIV Storage Systemdocumentation:v Go to AG/com.ibm.help.xivgen3.doc/xiv kcwelcomepage.html TAG/com.ibm.help.xivgen3.doc/xiv kcwelcomepage.html), drill down to the relevant page, and click theFeedback link that is located at the bottom of the page.You can use this form to enter and submit comments privately.About this guideix

v Post a public comment on the Knowledge Center page that you are viewing byclicking Add Comment. For this option, you must first log in to IBM KnowledgeCenter with your IBM ID.v Send your comments by email to starpubs@us.ibm.com. Be sure to include thefollowing information:– Exact publication title and version– Publication form number (for example, GA32-0770-00)– Page, table, or illustration numbers that you are commenting on– A detailed description of any information that needs to be changedxIBM XIV Management Tools: Operations Guide

Chapter 1. Introducing IBM Hyper-Scale ManagerIBM XIV Management Tools introduces the IBM Hyper-Scale Manager that reducesoperational complexity and enhances capacity planning through integratedmanagement for large and multisite XIV deployments. The Management Tools:v Shift the paradigm to an integrated management of XIV Systems across theenterprisev Provide powerful health monitoring by integrating events and alerts across themanaged XIV SystemsDiagramThe following diagram depicts the way the IBM Hyper-Scale Manager interactswith the XIV GUI and XIV Systems.Figure 1. IBM Hyper-Scale ManagerManagement Tools documentation setThe IBM XIV Management Tools documentation set includes the followingpublications:v IBM Hyper-Scale Manager Installation guides and Quick-start guides:– Installation as Virtual Appliance– Installation as Applicationv IBM XIV Management Tools Operations and Administration guide Copyright IBM Corp. 2013, 20151

DefinitionsThe following definitions are in wide use throughout this document:Manager Mode versus Direct Mode from the login dialog of the GUIWith the introduction of the IBM Hyper-Scale Manager, there are two waysto use the IBM XIV Management Tools:Manager modeMoving the GUI to work with the IBM Hyper-Scale Manager.Direct modeUsing the GUI without IBM Hyper-Scale Manager. In this mode,the GUI manages the XIV Systems directly.'Maintenance' accountApplicable to the Virtual Appliance installation only.A IBM Hyper-Scale Manager SFTP user that transfers files to and from theIBM Hyper-Scale Manager. The default password is xivmsMaintenance. Youcan change this password through the root menu. See Changing themaintenance password on the Installation Guide for VM.System machine accountThe account which is used by the IBM Hyper-Scale Manager to connect toXIV systems.v This user does not change the configurationv This user's name default is: xiv msms and can be editedv This user can be defined in LDAP (make sure it is added to all XIVstorage admin groups in the LDAP)v This user must have a storage administrator role (similarly to the adminuser)v This user must be defined with the same password on all XIV systemsin the IBM Hyper-Scale Manager inventoryv This user must be defined in the IBM Hyper-Scale Manager (through theGUI or CLI)Diagnose/Fix authentication problemA process in which the GUI tries to fix the System Machine Accountauthentication issues among all XIV systems in the inventory.v You need to supply admin credentials when starting this operationv These credentials are used to add the System Machine Accountautomatically to all your XIVs (if needed)v If some of the XIV systems use LDAP authentication, it informs you tomanually add the System Machine Account to your LDAP directoryDiscover new systemsA process in which the IBM Hyper-Scale Manager tries to authenticate aspecific user in front of all of the systems that the IBM Hyper-ScaleManager knows that the user is not authenticated to.v This button is on the Systems Preferences dialog.v Use this button only when it is known that the user was added to thesystem's access list and you need to display this system on the GUIscreen. This is not done automatically, because of potential LDAPlocking issues, due to authentication errors.2IBM XIV Management Tools: Operations Guide

v Upon a successful completion of the process, if the user was grantedwith an access to a system that was not previously seen in the GUI, itwill now be seen.Manager Access CodeAny administrative action on the IBM Hyper-Scale Manager, that isperformed from the GUI requires the Manager Access Code. This code canbe changed from GUI and from the management menu. The defaultmanager access code is adminadmin. See Changing the Manager AccessCode on the User Guides.GUI keyboard shortcutsTable 1 provides a list of keyboard shortcuts that can be used while working withthe XIV GUI.Table 1. GUI keyboard shortcutsShortcutTaskCtrl FSearchAlt SOpen the System Selector and switchsystemsAlt XOpen the View SelectorAlt OShow all menu items (Dynamic Menus)Alt EEdit menu pinned items (Dynamic Menus)Alt Left ArrowGo back on the HistoryAlt Right ArrowGo forward on the HistoryChapter 1. Introducing IBM Hyper-Scale Manager3

4IBM XIV Management Tools: Operations Guide

Chapter 2. Managing the XIV and IBM Hyper-Scale ManagercertificatesThe Management Tools provides the ability to manage the XIV and IBMHyper-Scale Manager certificates.When the XIV GUI connects to a IBM Hyper-Scale Manager, or directly to an XIVsystem, or when the IBM Hyper-Scale Manager connects to an XIV system, theyare attempting to identify the certificates of the XIV system or the IBM Hyper-ScaleManager.This chapter describes the methods of handling certificates on the GUI. Forhandling certificates from the IBM Hyper-Scale Manager menu, see “Replacing theIBM Hyper-Scale Manager certificate” on page 16.GUI certificate management in direct modeImporting certificates into the local truststoreThe GUI manages a truststore for XIV systems certificates.Before you beginIn order to import a certificate, you need:v The certificate fileProcedure1. Open Tools Management Certificates (Tab) on the XIV GUI menu. TheCertificates Management screen opens.Figure 2. Importing certificates into the local truststore2. Click the Import certificate icon. Copyright IBM Corp. 2013, 20155

ResultsFollowing the certificates import into the local truststore and exiting theManagement screen, all XIV systems with certificate errors are reloaded.Removing certificates from the local truststoreThis option removes a certificate from the local trust store.Procedure1. Open Tools Management Certificates (Tab) on the XIV GUI menu. TheCertificates Management window opens.2. Select a certificate and click the Remove Certificate icon. Click Yes to approve.ResultsFollowing the certificates removal from the local truststore and exiting theManagement window, all XIV systems are reloaded.Handling errors of XIV systems certificatesThis option reviews a certificate that is already assigned to an XIV system.Procedure1. Right-click an XIV system with a Certificate Error status and select ManageCertificate from the popup menu.6IBM XIV Management Tools: Operations Guide

Figure 3. Handling errors of XIV systems certificates2. Review the certificate that is displayed on screen, ensure that it can be trustedand select from the following options:v Trust Once - confirm that the certificate of this XIV system can be trustedthroughout the current GUI session only.v Trust Always - confirm that the certificate can be trusted. The certificate willbe added to the local truststore.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates7

Figure 4. Trusting a certificateResultsFollowing the confirmation, all XIV systems that have a Certificate Error status,and are using the certificate that is now confirmed, are automatically reloaded andvalidated.GUI certificate management in manager modeIn manager mode the IBM Hyper-Scale Manager maintains a truststore thatmanages XIV systems certificates.Working in manager mode, the GUI does not directly connect to the XIV system.The IBM Hyper-Scale Manager maintains a truststore that validates the certificatesof the XIV systems, and the GUI provides the ability to do so.Note: IBM Hyper-Scale Manager certificate management can also be done viaserver scripts.Importing a certificate into the IBM Hyper-Scale Manager truststoreThis option imports certificates into the truststore that is maintained by the IBMHyper-Scale Manager.Procedure1. Select Systems Manager Configuration XIV Certificates (Tab).8IBM XIV Management Tools: Operations Guide

Figure 5. The Manager Configuration screen XIV Certificates (Tab)2. Click the Import Certificate icon.ResultsFollowing the import of new certificates into the IBM Hyper-Scale Manager truststore, and moving to another tab - or exiting the window - all XIV systems with acertificate error are reloaded.Removing a certificate from the IBM Hyper-Scale Managertrust storeThis option removes certificates from the truststore that is maintained by the IBMHyper-Scale Manager.Procedure1. Select Systems Manager Configuration XIV Certificates (Tab).2. Select a certificate and click the Remove Certificate icon.ResultsFollowing the certificates removal from the IBM Hyper-Scale Manager trust storeand exiting the Management screen - or switching to another tab - all XIV systemsare reloaded.Handling certificate errors on the IBM Hyper-Scale Managertrust storeThis option allows to view and re-trust certificates on the truststore that ismaintained by the IBM Hyper-Scale Manager.Procedure1. Open Systems Manager Configuration Inventory (Tab).2. Right-click an XIV system with a certificate error and select Manage Certificatefrom the pop-up menu.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates9

Figure 6. Handling certificate errors on the IBM Hyper-Scale Manager trust storeThe certificate opens on screen.3. Review the certificate. Click Trust Always to import it to the IBM Hyper-ScaleManager trust store.Figure 7. Handling certificate errors on the IBM Hyper-Scale Manager trust storeResultsFollowing the certificates removal from the IBM Hyper-Scale Manager trust storeand exiting the Management screen - or switching to another tab - all XIV systemsthat are using this certificate are reloaded.Handling the IBM Hyper-Scale Manager certificateThis option handles the certificate of the IBM Hyper-Scale Manager itself.10IBM XIV Management Tools: Operations Guide

About this taskThe GUI uses a local truststore that validates the IBM Hyper-Scale Manager.ProcedureWhen the XIV GUI connects to the IBM Hyper-Scale Manager, or switching fromone server to another, the IBM Hyper-Scale Manager certificate will be validated. Ifthe certificate cannot be validated, the Certificate Details window will bedisplayed.To start working with the IBM Hyper-Scale Manager, the certificate has to betrusted in one of the following ways:1. Trust Once - the certificate will be treated as trusted throughout the currentGUI session.2. Trust Always - the certificate is trusted and imported to the local truststore.Figure 8. Handling the IBM Hyper-Scale Manager certificateManaging XIV systems certificatesImporting a PKCS#12 certificate of an XIV systemThe PKCS#12 certificate of an XIV system includes both public and private keys.Before you beginTo import a PKCS#12 certificate, you need:v The certificate filev The password of the private keyAbout this taskThis task guides you through importing the PKCS#12 certificate of an XIV system.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates11

Procedure1. Select Systems System Settings Manage Certificates on the XIV GUI menu.The Certificates Management window opens.Figure 9. The Certificate Management screen2. Click the Import button. The Import Certificate (*.pem, *.p12) window opens.Figure 10. The Import Certificate windowa. Browse for the certificate file.b. Check the services that will use this certificate.c. Choose an alias for the imported certificate. This name can be anydistinguished name that will help you easily identify it among the rest ofyour certificates.d. Enter the password of the private key.3. Click Import. The certificate file is imported.12IBM XIV Management Tools: Operations Guide

Importing certificateGenerating a Certificate Signing Request (CSR)This task describes how to generate a Certificate Signing Request that will be sentto the Certificate Authority.Procedure1. Click the Import Certificate toolbar icon. The Generate CSR window opens.Figure 11. The Generate CSR window2. Enter a certificate name. This should be a distinguishable name for furtherreference.3. Enter the certificate subject in standard DN format. For example:/CN TestCert/O Organization/OU OrganizationUnit.4. Select a bit length from the list.Note: A bit length of 4096 requires unrestricted policies.5. Click Generate. Select a local path where to save the CSR file.6. Open the Certificate Management window and verify that the newly generatedcertificate is awaiting authentication. The value of the Authenticated field isNo.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates13

Figure 12. The newly generated certificate awaiting authenticationWhat to do nextProceed to “Importing a signed certificate request.”Importing a signed certificate requestImporting signed certificate request into the XIV in order to authenticate it.Before you beginIn order to replace a signed certificate, you need:v The certificate filev The password of the private keyAbout this taskOnce you have authorization from the certificate authority, you can import thesigned certificate.Procedure1. Click the Import Certificate toolbar icon.14IBM XIV Management Tools: Operations Guide

Figure 13. The Import Certificate window2. Select a certificate file (in PEM format).3. Select among the services that will use the certificate.4. Click Import. The certificate file is imported.Removing a certificateThis section describes how to remove a certificate.About this taskThis task removes the certificate from the system.Procedure1. Open Systems System Settings Manage Certificates on the XIV GUI menu.The Certificates Management screen opens.2. Select a certificate and click Delete. The certificate is removed.Renaming an XIV system certificateThis task describes how to rename an XIV system certificate.Procedure1. Select Systems System Settings Manage Certificates on the XIV GUI menu.The Certificates Management window opens.2. Right-click on a certificate and click Rename.3. Enter a new name and click OK.Regenerating a CSR for an XIV system certificateThis task describes how to regenerate a CSR (Certified Signing Request) for an XIVsystem certificate.Procedure1. Select Systems System Settings Manage Certificates on the XIV GUI menu.The Certificates Management window opens.2. Right-click on a certificate and click Regenerate CSR.3. Enter a new subject and click Generate.4. Select the local file path to save the generate CSR file into.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates15

Updating a certificate of an XIV systemBoth the certificate and the certified services can be updated.Procedure1. Select Systems System Settings Manage Certificates on the XIV GUI menu.The Certificates Management window opens.2. Right-click on a certificate and click Update certificate. The Update Certificatewindow opens.Figure 14. The Update Certificate window3. Optionally: browse to a new certificate file and import it.4. Optionally: check and un-check services according to your needs.5. Click Update.Managing the Manager certificateReplacing the IBM Hyper-Scale Manager certificateThis task describes how to replace the IBM Hyper-Scale Manager certificate.About this taskWhen the XIV GUI connects to a IBM Hyper-Scale Manager, it is attempting toidentify the certificate of the IBM Hyper-Scale Manager. If needed, you can replacethe certificate from either the GUI or from the IBM Hyper-Scale Manager menu.Procedure1. From the GUI:a. Open Systems Manager Configuration Administration on the XIV GUImenu.16IBM XIV Management Tools: Operations Guide

Figure 15. Replacing the Manager CertificateClick Show Certificate to view the certificate.b. Clicking Replace Certificate.Figure 16. Replacing the Manager Certificatec. Click Browse to import a certificate file in PKCS#12 format. Type thepassword and click Import.2. For steps from the IBM Hyper-Scale Manager menu, see the IBM Hyper-ScaleManager User Guide.Chapter 2. Managing the XIV and IBM Hyper-Scale Manager certificates17

18IBM XIV Management Tools: Operations Guide

Chapter 3. Setting the activity level for Support accessAn activity level can be set for Support access allowable by the customer.About this taskSelect the activity level for Support access. Any activity level above the selectedlevel is subject to customer permission.Procedurexiv106041. From the XIV GUI, select Systems System Settings Support. The followingwindow is displayed:Figure 17. Support settings window2. In the Support Access Level field, select one of the following options:v Undefined - No Support Access Level has been defin

This Management T ools set of documents describe how to install and use the IBM XIV Management T ools 4.7. Who should use this guide This document is for Storage Administrators who manage XIV Systems. If you ar e using IBM XIV Management T ools version 4.7 with IBM Spectr um Accelerate, r efer