Accessing the storage system
You can access the storage system using the Hitachi Storage Navigator web user interface running on the SVP. A management client that meets the criteria can be used to connect to the SVP. Learn to set up a management client and log in to your storage system.
Initial setup of the management client
The management client is the computer used to log in to and manage your storage system. The management client is LAN-attached to the storage system and communicates with the service processor (SVP). You can use Hitachi Device Manager - Storage Navigator (HDvM - SN) as well as other management software such as Hitachi Ops Center Administrator to manage your storage system.
Workflow for setting up the management client
Before you can start managing the storage system, you must set up a management client to use the management software for your storage system. Perform the following tasks to set up the management client for use of Device Manager - Storage Navigator (HDvM - SN).
- Confirm that the management client meets the hardware and software requirements for running HDvM - SN (Requirements for management clients).
- Configure the management client to connect through a firewall (Connecting through a firewall).
- Set up IPv4/IPv6 communications on the management client (Setting up IPv4/IPv6 communications).
- Register the primary SVP host name on the management client (Registering the SVP host name).
- Configure the web browser on the management client (Configuring the web browser on the management client).
- For a management client running Windows, add the SVP to the trusted sites zone (Adding your SVP to the trusted sites zone for Windows Server computers).
- Enable JavaScript for Windows (Enabling JavaScript for Windows).
- Install Storage Device Launcher on the management client (Installing Storage Device Launcher on the management client). Storage Device Launcher is required to use HDvM - SN with Adobe AIR from HARMAN.
- Configure the management client for the HDvM - SN secondary window (Configuring the management client for the HDvM - SN secondary window).
Requirements for management clients
The Device Manager - Storage Navigator administrator is responsible for setting up management clients. Device Manager - Storage Navigator runs on supported versions of the Windows and UNIX/Linux operating systems. If you use a physical or virtual server running on Windows as a management client, you must configure the server to run Device Manager - Storage Navigator.
General requirements
- The management client must be connected to the network via LAN. Device Manager - Storage Navigator connects to the SVP through a TCP/IP network.
- Use category 5e or 6a LAN cable for LAN connections when the transfer speed is 1 Gbps. Maximum cable length is 328 feet (100 meters). For assistance, contact customer support.
- Several storage systems can be managed by one management client. Device Manager - Storage Navigator must be set up for each storage system.
- A maximum of 32 management clients (Device Manager - Storage Navigator) can access the same storage system at the same time.
Requirements for Windows-based management clients
The management client must meet hardware and software requirements to run Device Manager - Storage Navigator (HDvM - SN) in a Windows® environment.
Item | Requirement |
Processor (CPU) | Pentium 4 640 3.2 GHz or better (Recommended: Core2Duo E6540 2.33 GHz or better) |
Memory (RAM) | 2 GB or more Recommended: 3 GB |
Available storage space | 500 MB or more (+ 80 MB for each managed storage system) When HDvM - SN is using Adobe® AIR® from HARMAN™, an additional 80 MB of free space is required for each storage system managed by HDvM - SN. |
Monitor | True Color 32-bit or better Resolution: 1280 x 1024 or better |
Keyboard and mouse | You cannot use the mouse wheel feature. |
Ethernet LAN card for TCP/IP network | 100BASE-TX 1000BASE-T |
Set the locale of the HDvM - SN management client to either English or Japanese. The storage management software and SVP software installed on the SVP support only English and Japanese.
On a Windows management client, you can use HDvM - SN with Adobe AIR from HARMAN. The following table specifies the requirements for using HDvM with AIR. The combinations and versions of operating system, architecture, browser, and TLS specified below are fixed requirements. Using other combinations or versions might produce unpredictable results such as the inability to use the HDvM - SN windows.
Requirements for using HDvM with AIR from HARMAN
Operating system | Architecture | Web browser | TLS |
Windows 10 | 64 bit | Microsoft Edge 92.0 or later1 Google Chrome 63.0 or later Internet Explorer 11.02, 3 | TLS1.2 TLS1.2 must be enabled. AIR does not support TLS1.3. |
Windows 8.1 | 64 bit | Microsoft Edge 92.0 or later1 Google Chrome 48.0 or later Internet Explorer 11.02, 3 | |
Notes:
|
Requirements for UNIX/Linux-based management clients
The management client must meet hardware and software requirements to run Device Manager - Storage Navigator (HDvM - SN) in a UNIX® or Linux® environment.
Item | Requirement |
Processor (CPU) | Pentium 4 640 3.2 GHz or better (Recommended: Core2Duo E6540 2.33 GHz or better) |
Memory (RAM) | 2 GB or more Recommended: 3 GB |
Available storage space | 500 MB or more |
Monitor | Resolution: 1280 x 1024 or better |
Keyboard and mouse | You cannot use the mouse wheel feature. |
Ethernet LAN card for TCP/IP network | 100BASE-TX 1000BASE-T |
Set the locale of the HDvM - SN management client to either English or Japanese. The storage management software and SVP software installed on the SVP support only English and Japanese.
The following table specifies the software requirements for using HDvM - SN in a UNIX or Linux environment. The combinations of operating system, architecture, browser, and Java Runtime Environment described below are fixed requirements. Using other combinations or versions might produce unpredictable results such as the inability to use the HDvM - SN windows.
Operating system | Browser | Java Runtime Environment (JRE) |
Red Hat Enterprise Linux 7.5 | Firefox 52.7 or later IPv6 HTTPS connection from Firefox is not supported. | OpenJDK 11.0.2+9 or earlier |
Chrome 67.0 or later | OpenJDK 11.0.2+9 or earlier | |
Red Hat Enterprise Linux 7.4 | Firefox 58.0 or later IPv6 HTTPS connection from Firefox is not supported. | OpenJDK 11.0.2+9 or earlier |
Chrome 63.0 or later | OpenJDK 11.0.2+9 or earlier |
Connecting through a firewall
To connect the management client and the SVP through a firewall, configure the firewall so that the TCP/IP port for the protocol you use becomes available.
When attaching Device Manager - Storage Navigator to multiple storage systems, the installer must log in to the SVP of each storage system using separate Device Manager - Storage Navigator sessions and separate web browser instances.
The following table shows the type of the protocol and the port used. When accessing the management GUI directly from the SVP without using the management client, it is not necessary to register ports of protocols other than RMI, SLP, and SMI-S in the table below.
Protocol |
Port number |
Direction of communication |
HTTP |
80 |
From the Device Manager - Storage Navigator web client to the SVP |
HTTPS |
443 | |
RMI |
1099 | |
RMI (SSL) |
5443 | |
RMI |
51099 | |
RMI |
51100-51355 | |
SLP |
427 | |
SMI-S |
5989-6244 |
Setting up IPv4/IPv6 communications
You should assign the SVP the same type of IP addresses (IPv4 or IPv6) as those used on the storage system. You must also configure the client computers with the same IP version that you assign to the SVP. In addition, use the same communication options for the management client and the SVP. If the SVP uses IPv6, you must configure the management clients to use IPv6 for communication.
If you use IPv6 to display the Device Manager - Storage Navigator main window when both IPv4 and IPv6 are available, IPv6 addresses are displayed in the Device Manager - Storage Navigator secondary window but IPv4 communication is actually used.
For information about how to configure IP communication from an SVP, see the hardware guide for your storage system model.
Configuring IPv6 communication in Windows 7
If the SVP uses IPv6, you must configure Windows 7 management clients to use IPv6 for communication.
Procedure
Select
.Right-click the network where the SVP resides, and then click Properties in the pop-up menu.
If the User Account Control dialog box opens click Continue. Otherwise, the Networking dialog box opens.In the Networking dialog box, clear the Internet Protocol Version 4 (TCP/IPv4) check box.
Click OK to save the changes and close the dialog box.
Configuring IPv6 communication in Solaris 10
Procedure
Start a command window or system console.
Execute the following command:
ifconfig network-interface-name inet down
Registering the SVP host name
You must register the SVP host name before you can complete any of the following tasks.
- Specifying a host name instead of an IP address when accessing Device Manager - Storage Navigator.
- Obtaining the public key certificate for SSL-encrypted communication from the CA (Certificate Authority). You must register the server name as the host name to the DNS server or the hosts file. The server name is entered in the certificate as a common name.
Enter the SVP host name and IP address in the DNS server or hosts file of the management client. You can register any host name to the DNS server or the hosts file, but there are restrictions on the characters you can use for the host name.
- Registering the IP address and host name of the SVP to the DNS server that manages the network to which the SVP is connected.
- Entering the IP address and host name of the SVP to the hosts file of the management client. The general directory of the hosts file is:
- For Windows: C:\Windows\System32\drivers\etc\hosts
- For UNIX: /etc/hosts
Configuring the web browser on the management client
Configure the web browser on the Hitachi Device Manager - Storage Navigator (HDvM - SN) management client as described below.
- The browser must allow first-party, third-party, and session cookies.
- The pop-up blocker and plug-ins must be disabled.
- Settings for Microsoft Edge:
- Enable cookies (Settings > Cookies and site permissions > Manage and delete cookies and site data > Allow sites to save and read cookie data (recommended)).
- Allow pop-ups (Settings > Cookies and site permissions > Pop-ups and redirects > Add, and then enter the IP address or host name of the SVP).
- Settings for Windows Server 2016, Windows Server 2012 Update, Windows Server 2012 R2 Update, Windows Server 2012, and Windows 8.1, JavaScript must be enabled. For details, see Enabling JavaScript for Windows.
- Settings for Windows Server and Internet Explorer:
- Configure Internet Explorer so it does not save encrypted pages to disk (Tools > Internet Options > Advanced > Do not save encrypted pages to disk).
- Register the URL of the SVP in Internet Explorer (Tools > Internet Options > Security).
- Disable compatibility view mode. Open the Compatibility View Setting dialog box, clear the check box for Display intranet sites in Compatibility View, and delete the IP address or host name of the SVP added to Websites you've added to Compatibility View.
- For Windows Server 2012, set the IE security level for the trusted sites to Medium-high (Tools > Internet Options > Security > Trusted sites > Security level for this zone).
- For the Japanese version of Firefox, the browser must be configured to use the C locale (default system language) by using the X Server Emulator.
In a B Shell, enter the following command:
LANG=C export LANG
In a C Shell, enter the following command:
setenv LANG C
Adding your SVP to the trusted sites zone for Windows Server computers
If you are using Device Manager - Storage Navigator on a Windows Server computer, the following message may appear during login. If it does, you must add the SVP to the trusted sites zone.
The message below may appear differently depending on the Windows version you are using.
Procedure
Click Add in the message dialog box. The Trusted Sites dialog box opens.
In Add this web site to the zone, enter the URL of the SVP that you want to log in to. For example, if the host name is
host01
, the URL ishttp://host01
. If the IP address is127.0.0.1
, the URL ishttp://127.0.0.1
.Click Add to add the URL of the SVP to the web sites list.
Click Close to close the dialog box.
Preventing errors while using virus detection programs on the SVP
Running virus detecting programs on an SVP* that has Device Manager - Storage Navigator installed might cause operation errors while using Device Manager - Storage Navigator.
To prevent errors caused by virus detection programs, exclude the Device Manager - Storage Navigator installation directory from the real-time virus scan target in your virus detection program.
Perform virus scans regularly on the excluded directory during periods when Device Manager - Storage Navigator is not in use or when the service stops.
Enabling JavaScript for Windows
You must enable JavaScript if you use any of the following Windows versions:
- Windows Server 2016
- Windows Server 2012 R2 Update
- Windows Server 2012 Update
- Windows 10
- Windows 8.1
Procedure
In Edge, enable the Allow setting for JavaScript:
Open the Settings window (click the Settings and more icon (⋯), and then click Settings from the drop-down menu).
Select Cookies and site permissions in the left pane, and then click JavaScript in the right pane.
In the right pane, set Allow (recommended) to enabled.
Exit and then restart Edge.
In Internet Explorer, enable the Active scripting security setting:
Open the Internet Options window ( ).
Click the Security tab, and then click Custom Level.
On the Security Settings - Internet Zone window, set Active scripting to Enable, and then click OK.
Click YES on the Warning dialog box, and then click OK.
Exit and then restart Internet Explorer.
Installing Storage Device Launcher on the management client
The Storage Device Launcher application is required to run Hitachi Device Manager - Storage Navigator (HDvM - SN) with Adobe AIR from HARMAN. Storage Device Launcher is included in the Web Console Launcher setup file on the SVP. Use the following procedure to download and install Storage Device Launcher on the management client.
Procedure
Download the Web Console Launcher setup file for Windows from the SVP to the management client.
- If you can log in to HDvM - SN by using a web browser, click WCLauncher_win.zip). in the HDvM - SN menu bar, and then download the Web Console Launcher setup file for Windows (
- If you cannot log in to HDvM - SN by using a web browser, open the download the Web Console Launcher setup file as follows:
- Open a web browser on the management client, and enter the following URL:
https://IP-address-or-host-name-of-SVP/sanproject/ToolDownload
NoteIf the SVP firmware version is earlier than 90-04-03/xx, enter the following URL instead:https://IP-address-or-host-name-of-SVP/tool/tooldownload.html
After the download page opens, go to step (c). - In the authentication window, enter the user name and password.
- Download the Web Console Launcher setup file for Windows (WCLauncher_win.zip).
- Open a web browser on the management client, and enter the following URL:
Expand the downloaded Web Console Launcher setup file.
Make sure to expand the setup file in a folder or directory that meets the following requirements:
- Use only 1-byte alphanumeric characters for the expanded folder or directory name.
- Use an expanded folder (excluding directly under C: drive) that can be accessed (Read/Write) by management client users who do not have administrator permissions.
- If you are installing Storage Device Launcher two or more times on the same management client, expand the setup file each time in the same folder or directory (the one used for the initial installation). If you expand the setup file in a different folder or directory from the first installation, other users will not be able to run Storage Device Launcher.
NoteIf a security warning or a window blocking the operation is displayed, do not expand the setup file. Change the properties of the setup file as follows and then expand the file:- Right-click WCLauncher_win.zip, and then click Properties.
- In Security, select Unblock, and then click OK.
Install Storage Device Launcher as follows:
- If you are logged in to the management client with administrator permissions, right-click WCLauncher_win\WCLauncher\Setup_SDLauncher.bat, and run it by selecting Run as Administrator.
- If you are not logged in to the management client with administrator permissions:
- Right-click WCLauncher_win\WCLauncher\Setup_SDLauncher.bat, and then click Create Shortcut.
- Move the created shortcut onto the desktop.
Open
WCLauncher_win\WCLauncher\log\Setup.log
with a text editor, and confirm that "completed" is displayed.CautionDo not move or delete theWCLauncher_win
folder after Storage Device Launcher installation is complete. This folder contains files required for running Storage Device Launcher.
Next steps
Logging in to HDvM - SN in a browser
There are three ways to log in to Device Manager - Storage Navigator (HDvM - SN) running in a web browser:
- If you are an administrator, you can log in to HDvM - SN with a one-time-only initial login.
- If you are a superuser, you can log in first to HDvM - SN to create other user accounts.
- If you are a HDvM - SN user or administrator, you can log in normally.
- If you cannot log in three times with the same user ID, HDvM - SN stops responding for one minute. This is for security purposes and is not a system failure.
- The operations (roles) and resource groups that the logged-in user can access are determined when the user logs in. If the roles or resource allocations are changed while the user is logged in, the changes will take effect the next time the user logs back in.
Initial superuser login
When you log in to the storage system for the first time, you must log in as the superuser (includes all permissions) so you can set up the other user accounts.
- To prevent unauthorized use of the superuser account, you must change the password for the superuser account immediately after the initial login.
- To prevent unauthorized access to the functions available to service representatives, you must create user accounts that do not have the "Support Personnel (Vendor Only)" role and that have limited access to individual tools. Users that have the "Support Personnel (Vendor Only)" role can perform the same operations as service representatives.
Use the following procedure to log in for the first time by using Device Manager - Storage Navigator.
Procedure
Contact customer support to obtain the superuser ID and password.
Start a web browser on the management client.
In the web browser, enter the URL for your SVP:
https://IP-address-or-host-name-of-SVP/sanproject/
If you changed the port number of the HTTP protocol from the initial value (443), specify the following URL:https://IP-address-or-host-name-of-SVP:port-number-of-the-protocol/
The following actions might be required to open the login window, depending on your environment:
- If a message indicates that the enhanced security configuration is enabled on the management client, select In the future, do not show this message and then click OK.
- If the SVP is configured to support SSL-encrypted communication and security messages appear, make sure the certificate is correct and follow the instructions in the dialog box.
- If a message indicates that certain websites are blocked, you need to add the SVP to the trusted sites zone (see Adding your SVP to the trusted sites zone for Windows Server computers).
Type the superuser ID and password, and then click Login.
If the Security Information dialog box appears, click Yes.
After you log in, the Device Manager - Storage Navigator main window opens. You can navigate using the menu, tree, or General Tasks.
Important: Change the superuser password immediately after you log in to prevent unauthorized use of the superuser account. To change the password, click
.
Logging in to as a user
Procedure
Start a web browser on the management client.
In the web browser, specify the following URL:
https://IP-address-or-host-name-of-SVP/sanproject/
The following actions might be required to open the login window, depending on your environment:
- If a message indicates that the enhanced security configuration is enabled on the management client, select In the future, do not show this message and then click OK.
- If the SVP is set to support SSL-encrypted communication and security messages appear, make sure the certificate is correct and follow the instructions in the dialog box.
- If a message indicates that certain web sites are blocked, you need to add the SVP to the trusted sites zone (see Adding your SVP to the trusted sites zone for Windows Server computers).
Type the user ID and password, and then click Login.
If the Security Information dialog box appears, click Yes.
Results
Logging in to HDvM - SN by using AIR
Use the following procedure to log in to HDvM - SN by using AIR for the first time.
Before you begin
- Storage Device Launcher must be installed on the management client.
- You must be logged in to the management client as the user who installed Storage Device Launcher.
Procedure
Open the HDvM - SN login dialog box.
You can open the HDvM - SN login dialog box by running Storage Device Launcher on the management client or by opening a web browser and running Storage Device Launcher on the SVP.- To open the HDvM - SN login dialog box by running Storage Device Launcher:
- If you are logged in to the management client with administrator permissions, on the desktop or start menu, right-click the Storage Device Launcher batch file, and then run it by selecting Run as Administrator.
If you are not logged in to the management client with administrator permissions, on the desktop run the shortcut for the Storage Device Launcher batch file.
NoteIf a security warning or a window blocking the operation is displayed, do not run Storage Device Launcher. Change the properties of the batch file (right-click SDLauncher.bat, click Properties, and then select Unblock in Security), and then run the file. - Enter the IP address or host name of the SVP.
- Specify 443 for the HTTPS port number, and then click Connect.
If a security warning message is displayed, verify that the security certificate is correct, and then follow the instructions in the dialog box.
- If you are logged in to the management client with administrator permissions, on the desktop or start menu, right-click the Storage Device Launcher batch file, and then run it by selecting Run as Administrator.
- To open the HDvM - SN login dialog box by opening a web browser and running Storage Device Launcher on the SVP:
- Start the web browser on the management client with administrator permissions.
- Enter the following URL in the web browser:
sdlauncher://IP-address-or-host-name-of-SVP/
If the HTTPS port number was changed from the default (443), also specify the new port number as follows:
sdlauncher://IP-address-or-host-name-of-SVP:HTTPS-port-number/
NoteIf a security warning or a window blocking the operation is displayed, do not run the file. Change the properties of the batch file (right-click SDLauncher.bat, click Properties, and select Unblock in Security), and then run the file. - If a warning message appears and the login window does not open:
For Microsoft Edge: If the message "This site is trying to open SDLauncher.bat." appears, click Open in the pop-up window to start Storage Device Launcher.
For Internet Explorer: If a security warning message is displayed, verify that the security certificate is correct, and then follow the instructions in the dialog box.
- To open the HDvM - SN login dialog box by running Storage Device Launcher:
Wait about 10 seconds for the CBA file to be downloaded to the management client.
If you are using one management client to access multiple storage systems, CBA is downloaded for each storage system.When the download is complete, the HDvM - SN login dialog box opens. You can close the web browser.NoteThe following actions might be required to open the login window, depending on your environment:- If a message indicates that the enhanced security configuration is enabled on the management client, select In the future, do not show this message, and then click OK.
- If the SVP is configured to support SSL-encrypted communication and security messages appear, make sure the certificate is correct and follow the instructions in the dialog box.
- If a message indicating that the site is trying to open SDLauncher.bat, click Open in the pop-up window, and then start Storage Device Launcher.
Enter the user name and password, and then click Login.
If the Security Information dialog box opens, click Yes.When the storage system configuration information is finished loading, the HDvM - SN main window opens.
Download/Upload window for HDvM - SN with AIR
When you use Device Manager - Storage Navigator (HDvM - SN) with Adobe AIR, a character string that depends on the Adobe AIR environment is displayed in the title of the window used for selecting a file to be downloaded or uploaded.
Changing the administrator password
You can change the administrator password using the maintenance utility.
Before you begin
- Before changing the password of a user account specified by the registered storage system in the Storage Device List window, click Stop Service for the registered storage system. After changing the password of the user account, click Edit and set the new password, then click Start Service for the storage system.
Procedure
In the maintenance utility Menu navigation tree, click System Management.
Click Change Password.
Enter your current password and a new password. Enter the password again in the Re-enter Password field.
Click Finish.
Configuring the management client for the HDvM - SN secondary window
If you plan to use any of the following functions, you must configure the management client for use of the Device Manager - Storage Navigator (HDvM - SN) secondary window:
- Login Message function
- Compatible PAV
- Compatible XRC
- Data Retention Utility
- Volume Retention Manager
- Server Priority Manager
The Device Manager - Storage Navigator (HDvM - SN) secondary window runs within the Java Runtime Environment (JRE) on the management client. The secondary window is disabled by default in HDvM - SN and must be enabled by using HDvM - SN or Web Console Launcher (when Java 11 or later is installed on the HDvM - SN management client). If the secondary window is not enabled, the functions listed above are not accessible in HDvM - SN.
- When you open the secondary window, Microsoft Edge displays the following message in the upper right of the browser window: <file name>.jnlp was blocked because this type of file can harm your device.
Click Other actions > Save in the message window, save the object file, and then open the file. You can continue the operation even though a Java security warning is displayed when you open the file.
- When you open the secondary window, Google Chrome displays the following message in the lower left of the browser window: This type of file can harm your computer. Are you sure you want to download <file name>.jnlp? . Click Save in the message window and save the object file. Then open the file. You can continue the operation even though a Java security warning is displayed when you open the file.
- The SJsvlSNStartServlet (<serial number>).jnlp file is saved in the download folder and duplicated every time you open the secondary window (because it is not overwritten or deleted automatically). To prevent shortage of capacity, delete extraneous downloaded SJsvlSNStartServlet (<serial number>).jnlp files periodically.
- To confirm the download location in Microsoft Edge, follow Settings > Downloads > Location.
- To confirm the download location in Google Chrome, follow Chrome Menu > Settings > Show advanced settings > Downloads.
- When you are using Google Chrome, do not click Discard in the message window. If you do, you will not be able to use HDvM - SN for a while until error (20020-108000) appears. When error (20020-108000) appears, click OK to close the error, and then continue working in HDvM - SN.
If you don't want to wait for the error to appear, you can close Chrome and then log in to HDvM - SN again.
The error also appears if you do not click Save or if you do not open the saved file for some time.
Enabling the HDvM - SN secondary window
The HDvM - SN secondary window runs within the Java Runtime Environment (JRE) on the management client. The secondary window is disabled by default in HDvM - SN and must be enabled by using HDvM - SN, or by using Web Console Launcher when Java 11 or later is installed on the HDvM - SN management client. If the secondary window is not enabled, the functions listed above are not accessible in HDvM - SN.
Before you begin
- Required role: Storage Administrator (View Only)
Procedure
From the Settings menu, click .
The Edit Information Display Settings window opens.In Secondary window, click Enable.
Click Apply.
Using Web Console Launcher to enable the secondary window (Java 11 or later)
When Java 11 or later is installed on the Device Manager - Storage Navigator (HDvM - SN) management client, you must download and execute Web Console Launcher to enable the HDvM - SN secondary window. The setup file that you download contains the following applications:
- Web Console Launcher: This application is required to enable the HDvM - SN secondary window when HDvM - SN is running on a web browser with Java 11 or later installed.
- Security settings command file: This command file enables the settings of server certificate on the HDvM - SN management client to enhance communication security.
- Storage Device Launcher: This application is required to start HDvM - SN in the Adobe AIR environment. Storage Device Launcher is contained only in the setup file for Windows.
When the HDvM - SN secondary window is opened, you must enable the .jnlp file included in the setup file.
Procedure
From the Menu bar, click
.Download the Web Console Launcher tool for Windows or UNIX.
Expand and execute the download file by the following OS method:
Windows: Expand the file, right click
WCLauncher\Setupwin.bat
and execute it by selecting Run as Administrator. If the SVP certificate has been updated, runSecurityToolWin.bat
to register the root certificate or self-signed certificate for the SVP.UNIX:Enter
tar zxvf WCLauncher_unix.tgz
to expand the file. In the directory to which the file was expanded, entersudo sh
andsetupunix.sh
to run the shell script. If the SVP certificate has been updated, runSecurityToolUnix.sh
to register the root certificate or self-signed certificate for the SVP.NoteWhen you execute Web Console Launcher, Java8 is disabled.
Next steps
WCLauncher_win
folder. This folder contains files required to run Web Console Launcher.Verifying the SVP server certificate
If you updated the initial SVP certificate, you can verify whether the connection destination is correct by registering the server certificate or self-signed certificate for the SVP on the Device Manager - Storage Navigator (HDvM - SN) management client. When verification is enabled, if verification fails, the communication is interrupted, and starting the HDvM - SN secondary window fails. Even when verification is disabled, verification processing is performed. In this case, if verification fails, a confirmation window appears indicating the following message:
The certificate security verification for the TLS communication cannot be performed. Are you sure you want to stop the certificate security verification to continue the connection?
After you click Confirm, the communication continues.
If the server certificate registered on the SVP is a signed public key certificate issued by a Certificate Authority (CA), register the root certificate of the CA on the HDvM - SN management client. If the server certificate is a self-signed certificate, register the server certificate registered on the SVP onto the HDvM - SN management client. A certificate that can be registered on the HDvM - SN management client is in X509 PEM or X509 DER format.
Verification item | What is verified? | Note |
Validity period verification | Verifies whether the server certificate is within the validity period. | Before you verify the validity, ensure that the validity period for the server certificate registered on the SVP is not expired. |
Revocation verification | Verifies whether the server certificate is not invalidated by using the CRL (list of digital certificates that were invalidated before the expiration date) or OCSP (online check). | You need a network environment in which the CRL repository or OCSP responder can be accessed from the HDvM - SN management client. |
SAN/CN verification | Verifies whether the host name (including FQDN) or IP address (IPv4 or IPv6) that is specified for SAN (Subject Alternative Name: additional name that is an extension of CN) or CN (Common Name) in the server certificate is the same as the connection destination. | The host name or IP address of the SVP that you specify as the connection destination on the HDvM - SN management client must be contained in SAN or CN in the server certificate registered on the SVP. For the IP address, specify the IP address displayed in the HDvM - SN main window. |
Certificate chain verification | Verifies whether the root certificate, intermediate certificates, and server certificate are correctly associated with each other in the certificate chain. | If the sever certificate is signed by an intermediate CA, all intermediate certificates including the server certificate must be registered in the certificate to be registered on the SVP. |
If you did not update the initial SVP certificate, disable the verification function to continue the communication as it did before.
If you enable the verification function, verification fails, the communication is interrupted, and starting the HDvM - SN secondary window fails.
Registering a certificate on the HDvM - SN management client (Windows)
If you updated the initial SVP certificate, you must register the root certificate or self-signed certificate for the SVP on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Store the certificate file on the HDvM - SN management client.
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command.
SecurityToolWin.bat import
alias-of-the-SVP path-to-the-certificateExample:
SecurityToolWin.bat import SVP1 "C:\monitor\cert.crt"
Ensure that the trust store
WCLauncher.dat
exists in the current directory.
Viewing a certificate on the HDvM - SN management client (Windows)
You can view the root certificate or self-signed certificate that is registered on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command:
SecurityToolWin.bat list
Check the displayed contents
Output example:Alias name: abc Creation date: 2020/05/14 Entry type: trustedCertEntry Owner: EMAILADDRESS=svp@str.hitachi.co.jp, CN="Hitachi, Ltd.", OU=IT Platform Division Group, O="Hitachi, Ltd.", L=Odawara, ST=Kanagawa, C=JP Issuer: EMAILADDRESS=svp@str.hitachi.co.jp, CN="Hitachi, Ltd.", OU=IT Platform Division Group, O="Hitachi, Ltd.", L=Odawara, ST=Kanagawa, C=JP Serial number: dc52873fdb5cc76b Valid from: Fri Apr 18 09:16:04 GMT+09:00 2014 until: Thu Apr 18 09:16:04 GMT +09:00 2024 Certificate fingerprints: MD5: B3:A5:60:17:17:91:9D:0E:F7:31:DC:1C:06:FA:51:CA SHA1: 43:14:DF:80:1D:64:AA:09:B8:F3:1C:13:74:2B:7E:95:1D:2F:E9:6F SHA256: 9B:A8:68:45:95:91:3C:72:9B:4C:6A:FE:BB:B9:32:F0:04:E5:9E:DF:B1:47:2F:59:EA:0C:26:1A: BC:70:E8:15 Signature algorithm name: SHA256withRSA Version: 1
Deleting a certificate on the HDvM - SN management client (Windows)
You can delete the root certificate or self-signed certificate that is registered on the Device Manager - Storage Navigator (HDvM - SN) client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Check the alias of the SVP connected by using the root certificate or self-signed certificate that is registered on the HDvM - SN management client.
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command:
SecurityToolWin.bat delete alias-of-the-SVP
Example:
SecurityToolWin.bat delete SVP1
Ensure that the certificate was deleted.
Setting server verification on the HDvM - SN management client (Windows)
You can enable or disable server verification on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command:
SecurityToolWin.bat verify setting-value
Example:
SecurityToolWin.bat verify enable
NoteIf you specify enable, a security settings command file is created in the folder that stores command files.
If you specify disable, the security settings command file is deleted.
Viewing whether server verification is enabled on the HDvM - SN management client (Windows)
You can view whether server verification is enabled on the Device Manager - Storage Navigator management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command:
SecurityToolWin.bat verifysetting
Check the displayed contents.
Output example:
disabled
Viewing the Help on the HDvM - SN management client (Windows)
You can view the Help on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Open a command prompt with administrator permissions.
Move the current directory to the folder to which the downloaded file was expanded.
Run the following command:
SecurityToolWin.bat help
Output example:
Command Line Syntax import <alias> <certificate-file-path> alias: alias of specified certificate certificate-file-path: relative or absolute certificate file path delete <alias> alias: alias of specified certificate list verify <value> value: enable or disable verifysetting help
Registering a certificate on the HDvM - SN management client (UNIX)
If you updated the initial SVP certificate, you must register the root certificate or self-signed certificate for the SVP on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Store the certificate file on the HDvM - SN management client.
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh import alias-of-the-SVP path-to-the-certificate
Example:
SecurityToolUnix.sh import SVP1 /tmp/cert.crt"
Ensure that the trust store
WCLauncher.dat
exists in the current directory.
Viewing a certificate on the HDvM - SN management client (UNIX)
You can view the root certificate or self-signed certificate that is registered on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh list
Check the displayed contents.
Output example:
Alias name: test Creation date: 2020/05/14 Entry type: trustedCertEntry Owner: EMAILADDRESS=svp@str.hitachi.co.jp, CN="Hitachi, Ltd.", OU=IT Platform Division Group, O="Hitachi, Ltd.", L=Odawara, ST=Kanagawa, C=JP Issuer: EMAILADDRESS=svp@str.hitachi.co.jp, CN="Hitachi, Ltd.", OU=IT Platform Division Group, O="Hitachi, Ltd.", L=Odawara, ST=Kanagawa, C=JP Serial number: dc52873fdb5cc76b Valid from: Fri Apr 18 09:16:04 JST 2014 until: Thu Apr 18 09:16:04 JST 2024 Certificate fingerprints: MD5: B3:A5:60:17:17:91:9D:0E:F7:31:DC:1C:06:FA:51:CA SHA1: 43:14:DF:80:1D:64:AA:09:B8:F3:1C:13:74:2B:7E:95:1D:2F:E9:6F SHA256: 9B:A8:68:45:95:91:3C:72:9B:4C:6A:FE:BB:B9:32:F0:04:E5:9E:DF:B1:47:2F:59:EA:0C:26:1A: BC:70:E8:15 Signature algorithm name: SHA256withRSA Subject Public Key Algorithm: 2048-bit RSA key Version: 1
Deleting a certificate on the HDvM - SN management client (UNIX)
You can delete the root certificate or self-signed certificate that is registered on the Device Manager - Storage Navigator (HDvM - SN)r management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Check the alias of the SVP connected by using the root certificate or self-signed certificate that is registered on the HDvM - SN management client.
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh delete alias-of-the-SVP
Example:
SecurityToolUnix.sh delete SVP1
Ensure that the certificate was deleted.
Setting server verification on the HDvM - SN management client (UNIX)
You can enable or disable server verification on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh verify setting-value
Example:
SecurityToolUnix.sh verify enable
NoteIf you specify enable, a security settings command file is created in the directory that stores command files.
If you specify disable, the security settings command file is deleted.
Viewing whether server verification is enabled on the HDvM - SN management client (UNIX)
You can view whether server verification is enabled on the Device Manager - Storage Navigator management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh verifysetting
Check the displayed contents
Output example:
disabled
Viewing the Help on the HDvM - SN management client (UNIX)
You can view the Help on the Device Manager - Storage Navigator (HDvM - SN) management client.
Before you begin
You must have logged into the HDvM - SN management client.
Procedure
Run the shell as superuser.
Move the current directory to the directory to which the downloaded file was expanded.
Run the following command as superuser:
SecurityToolUnix.sh help
Output example:
Command Line Syntax import <alias> <certificate-file-path> alias: alias of specified certificate certificate-file-path: relative or absolute certificate file path delete <alias> alias: alias of specified certificate list verify <value> value: enable or disable verifysetting help
Changing your initial HDvM - SN password
When the system administrator adds users to HDvM - SN, each user is assigned a user ID and an initial password. When you log in to HDvM - SN for the first time using your initial password, you must change your password to prevent unauthorized access to the storage system.
Procedure
Log in to Device Manager - Storage Navigator with the user ID and password given to you by the administrator.
Click
.Enter your initial password and your new password on the Change Password window, and then click Finish.
In the confirmation window:
- Enter a task name or accept the default task name.
- If you want the Tasks window to open after you click Apply, select Go to tasks window for status.
- Click Apply.
Setting storage system information
You can set the name, contact information, and location of the storage system.
Make sure to document the configured values, because they are required to use SNMP agents.
Before you begin
- You must have the Storage Administrator (Initial Configuration) role to complete this procedure.
- You must have at least one resource group assigned to the user group.
Procedure
In the Device Manager - Storage Navigator Storage Systems tree, select the storage system.
From Settings, click .
Enter the items that you want to set.
You can enter up to 180 alphanumeric characters (ASCII codes) excluding several symbols (\ , / ; : * ? " < > | & % ^). Do not use a space at the beginning or the end.Click Finish.
In the Confirm window, check the settings and enter a task name in Task Name.
Click Apply. The task is now registered. If the Go to tasks window for status check box is checked, the Tasks window opens to show the status of the task.
Creating a login message
You can create text to be displayed on the Device Manager - Storage Navigator login page.
Prerequisites
- You must have Security Administrator (View & Modify) role to perform this task.
- You must enable the Device Manager - Storage Navigator secondary window. See Enabling the HDvM - SN secondary window.
Procedure
Click
The Device Manager - Storage Navigator secondary window opens. .Click to change to Modify mode.
Enter the message in the window.
Alphanumeric characters and symbols can be used in the message. The maximum length of the message is 2,048 characters.Click Apply to save the message and close the dialog box.
Setting the status refresh interval of the Tasks window
By default, the Tasks window in Device Manager - Storage Navigator is set to refresh automatically every 60 seconds. You can change this refresh time interval or, if desired, you can disable the automatic refresh for the Tasks window.
Procedure
In the Device Manager - Storage Navigator main window, click
.For Task Screen Refresh Interval, specify the desired refresh interval (range: 10 - 3600 seconds) or select No Update.
If you select No Update, the Tasks window will not be automatically updated after it has been opened. In this case, you must use Refresh or to update the Tasks window while it is open.Click Apply.
Changing advanced system settings
You can change alert display settings and data acquisition settings in advanced system settings.
Before you begin
- You must have the Storage Administrator (Initial Configuration) role to perform this task.
Procedure
In the Device Manager - Storage Navigator main menu, click
.Select the desired advanced system settings, and then click Enable to enable the selected settings or Disable to disable the selected settings.
Setting Description Hide alert information If you enable this setting, the Alert window in the Device Manager - Storage Navigator main window does not open. Refresh forcibly after Apply If you enable this advanced system setting, after settings changes are applied to the storage system, the configuration information for the storage system is always updated to the latest information. Disable data polling If you enable this advanced system setting, polling stops. Disable retry of data updating If you enable this advanced system setting, retry does not occur even if data cannot be acquired. Enable Storage Navigator 2 All Function If you enable this advanced system setting, the restrictions on login from Device Manager - Storage Navigator's login window are cleared, including the restrictions on the users who can log in and on the functions available after login. When enabling or disabling this advanced system setting, log in again. Switch the control of differential bitmaps of volumes used for TC/TCMF/UR/URMF/GAD pairs whose capacity is 4TB or less (for open volumes)/262,668Cyl or less (for MF volumes) at creation or resynchronization of pairs
When enabled, for a TC, TCMF, UR, URMF, or GAD pair that uses an open volume (DP-VOL) with user capacity of 4,194,304 MB or less, or a mainframe volume with user capacity of 262,668 Cyl or less, the differential data management for the target volume is enabled by the hierarchical difference at new pair creation or pair resynchronization (hierarchical difference management).
In addition, for a TC, TCMF, UR, URMF, or GAD pair that uses an open volume (DP-VOL) with user capacity exceeding 4,194,304 MB, or a mainframe volume with user capacity exceeding 262,668 Cyl, the differential data management for the target volume is enabled by the hierarchical difference at the new pair creation regardless of this setting.
For details about this setting, see the Hitachi TrueCopy® User Guide, Hitachi Universal Replicator User Guide, or Global-Active Device User Guide.
Switch the control of differential bitmaps of volumes used for TC/TCMF/UR/URMF/GAD pairs whose capacity is 4TB or less (for open volumes)/262,668Cyl or less (for MF volumes) at creation of pairs
When enabled, for a TC, TCMF, UR, URMF, or GAD pair that uses an open volume (DP-VOL) with user capacity of 4,194,304 MB or less, or a mainframe volume with user capacity of 262,668 Cyl or less, the differential data management for the target volume is enabled by the hierarchical difference at new pair creation (hierarchical difference management).
In addition, for a TC, TCMF, UR, URMF, or GAD pair that uses an open volume (DP-VOL) with user capacity exceeding 4,194,304 MB, or a mainframe volume with user capacity exceeding 262,668 Cyl, the differential data management for the target volume is enabled by the hierarchical difference at the new pair creation regardless of this setting.
For details about this setting, see the Hitachi TrueCopy® User Guide, Hitachi Universal Replicator User Guide, or Global-Active Device User Guide.
External Authentication Compatibility option If you enable this setting, the authentication method is switched from VSP 5000 series to VSP. Enable reboot of background service If you enable this setting, when either of the following values exceeds its threshold value, the background service process for managing configuration information is restarted. Enable this setting only when requested.
- The amount of memory used in the background service process.
- Time elapsed after the background service process is started.
Notify an alert when tier relocation is suspended by system If you enable this setting, when tier relocation is suspended by the system, an alert is issued to users. For details about an alert (SIM) to be issued, see the Troubleshooting chapter of the Provisioning Guide for Open Systems or Provisioning Guide for Mainframe Systems. The consistency time of a Hitachi Universal Replicator software for Mainframe pair shows the time stamp of the data that has just been copied to a restored journal volume When enabled, the time included in the time stamp of the data that has just been copied to a restored journal volume shows the consistency time. After delta resync, the pair status remains COPY during journal data copy If you enable this setting, when a delta resync is performed in a 3DC multi-target configuration with TC and UR, the pair status remains COPY during journal data copy. One minute after remote path failure detection, the mirror is split If you enable this setting, when a remote path failure is detected, the mirror is split if the remote path is not restored within one minute after the detection. This setting is enabled only when After remote path failure detection, the mirror is split is enabled. When No. 16 is disabled, the mirror is not split even if a remote path failure is detected.
After remote path failure detection, the mirror is split When enabled, after a remote path failure is detected, the mirror is split. The copy pace for mirror option (Medium) becomes one level faster When enabled, the pace for copying data during initial copy becomes one level faster when the copy pace for journal option is Medium. This setting can be used to make the initial copy operation in Medium speed mode perform faster. The copy pace for mirror option (Medium) becomes two levels faster When enabled, the pace for copying data during initial copy becomes two levels faster when the copy pace for journal option is Medium. This setting can be used to make the initial copy operation in Medium speed mode perform faster. Click Finish.
In the confirmation window, check the settings and enter a task name in Task Name.
Click Apply. The task is now registered. If the Go to tasks window for status check box is checked, the Tasks window opens to display the status of the task.
After you have enabled or disabled the desired advanced system settings, log off Device Manager - Storage Navigator and then log in again.
Updating Captive Bundle Application on the SVP
Storage_Device_Launcher_installation_directory\WCLauncher\SDLauncher\micro
.Before you begin
- You must have the CBA file to be uploaded to the SVP on the management client. If you do not have the CBA file, contact customer support.
- You must have the Security Administrator (View & Modify) role to perform this task.
Procedure
On the management client, open a web browser.
Open the Tool Panel dialog box by specifying the following URL:
https://IP-address-or-host-name-of-SVP/cgi-bin/utility/toolpanel.cgi
Click CaptiveBundleUpload.
Enter the administrator user ID and password, and then click Login.
Click Browse, navigate to and select the CBA file on the management client, and then click Upload.
- If the CBA version to be uploaded is earlier than the CBA version on the SVP, a message asking if you want to downgrade CBA is displayed. If you are sure about downgrading the CBA version, click OK to continue. If you are not sure, click Cancel to cancel the upload, and then contact customer support.
- If the SVP firmware version and the CBA version to be uploaded are not compatible, a message is displayed. Click OK to cancel the upload, and then contact customer support.
Verify the CBA version on the SVP and the CBA version to be uploaded, and then click OK to upload CBA to the SVP.
Wait up to 10 minutes for the upload to complete.When the version confirmation message is displayed, click OK.
You are returned to the Login dialog box.If the Security Alert dialog box for the certificate opens before you are returned to the Login dialog box, click View Certificate, verify that the certificate is correct, and then click Yes.
CautionOn the management client, do not delete the CBA file that you uploaded to the SVP. This CBA file might be required for SVP failure recovery or other purposes.Log in to HDvM - SN by using AIR, and then verify that the CBA version in the Storage Systems window is correct (same as the CBA version you uploaded).
Disabling use of Flash Player with HDvM - SN
If desired, you can disable use of Flash Player with HDvM - SN after you start using HDvM - SN with Adobe AIR from HARMAN.
Before you begin
- You must have the Storage Administrator (View & Modify) role to perform this task.
Procedure
On the management client, open a web browser.
Open the Tool Panel on the SVP by specifying the following URL:
https://IP-address-or-host-name-of-SVP/cgi-bin/utility/toolpanel.cgi
Click Flash Disable/Enable.
On the Login dialog box, enter the administrator user ID and password, and then click Login.
In the Flash Disable/Enable dialog box, select Disable, and then click OK.
If the Security Alert dialog box for the certificate opens before you are returned to the Login dialog box, click View Certificate, verify that the certificate is correct, and then click Yes.