EMC® Unisphere™ For VMAX® PDF

EMC Unisphere for VMAX
Version 8.3.0
Installation Guide
REV 02
Copyright 2014-2017 EMC Corporation All rights reserved.
Published February 2017
Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.
THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS-IS. DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND
WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED
IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.
Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property of their respective owners.
Published in the USA.
EMC Corporation
Hopkinton, Massachusetts 01748-9103
1-508-435-1000 In North America 1-866-464-7381
www.EMC.com
2 EMC Unisphere for VMAX 8.3.0 Installation Guide

CONTENTS
Figures 5
Tables 7
About this content 9
Chapter 1 Pre-installation considerations 13

Before you begin......................................................................................... 14
Unisphere Initial Setup User........................................................... 14
Local, remote, and embedded installation options.......................... 14
Unisphere for VMAX licensing........................................................ 15
Unisphere for VMAX virtual appliance............................................ 15
Unisphere Lockbox Password.........................................................16
Authentication................................................................................16
Environment and system requirements....................................................... 17
Network requirements....................................................................17
Solutions Enabler............................................................................17
Supported HYPERMAX OS/Enginuity versions.............................. 17
Host systems and storage operating environment.......................... 17
Concurrent users............................................................................17
Symmetrix Management Console................................................... 17
VMware and Hyper-V guests..........................................................17
Database Storage Analyzer requirements.......................................18
EMC ControlCenter....................................................................... 18
Client screen requirements............................................................ 18
Client browser requirements.......................................................... 18
Server requirements.......................................................................19
Other requirements........................................................................ 19
Chapter 2 Installing Unisphere for VMAX 21

Pre-installation configuration..................................................................... 22
Setting the event and statistics daemons to autostart on Linux.... 22
Setting up the PostgreSQL user on Linux...................................... 22
Configuring networking on Linux................................................... 22
Installing Unisphere for VMAX.................................................................... 22
Step 1: Accessing the software......................................................23
Step 2: Installing the software....................................................... 23
Step 2A: Installing Unisphere for VMAX using the wizard.............. 23
Step 2B: Installing Unisphere for VMAX from the command line... 25
Completing the installation......................................................................... 27
Configuring language and regional settings....................................28
Installing a Unisphere for VMAX license.........................................28
Configuring third-party utilities......................................................28
Importing CA certificates...............................................................28
Starting and stopping the performance database.......................... 29
Starting and stopping the SMAS service....................................... 30
Launching Unisphere for VMAX.................................................................. 31
EMC Unisphere for VMAX 8.3.0 Installation Guide 3

CONTENTS
Launching Database Storage Analyzer........................................................32
Chapter 3 Upgrading Unisphere for VMAX 33

Upgrade paths ........................................................................................... 34
Before upgrading Unisphere for VMAX.......................................................34
Running the Unisphere for VMAX upgrade................................................. 34
Upgrading Unisphere for VMAX on Windows.................................35
Upgrading Unisphere for VMAX on Linux.......................................35
After upgrading Unisphere for VMAX......................................................... 36
Renewing link and launch client registrations.................................36
Restoring and verifying system and performance data.................. 36
Upgrading Database Storage Analyzer Listener..........................................36
Chapter 4 Uninstalling Unisphere for VMAX 39

Before you begin........................................................................................ 40
Uninstalling from Windows......................................................................... 40
Using Windows Add/Remove Programs........................................ 40
Using the Windows command line................................................. 40
Using the Windows wizard............................................................. 41
Uninstalling from Linux................................................................................41
Using the wizard.............................................................................41
Using the Linux command line........................................................ 41
Appendix A Technical notes 43

Technical notes.......................................................................................... 44
Managing thin pools.......................................................................44
SYMAPI server.............................................................................. 44
Local replication management....................................................... 44
Advanced configuration settings................................................... 44
Resetting the host system stable values........................................44
Alerts.............................................................................................45
Protecting against POODLE SSL v3 vulnerability.......................... 45
Troubleshooting the "database is in maintenance mode" message....
45
Appendix B Security configuration 47

Replacing the Unisphere for VMAX and CA server certificates...................48
Step 1: Obtaining the keystore password.......................................48
Step 2: Generating a certificate request........................................48
Step 3: Importing the CA-signed certificate into the keystore.......49
Step 4: Starting the SMAS server................................................. 50
Resetting the host system SSVs................................................................ 50
Listing certificates...................................................................................... 51
Deleting certificates....................................................................................51
Configuring a Certificate Revocation List for X.509 certificate-based
authentication............................................................................................. 51
Appendix C Configuring SMAS to work in z/OS 53

Configuring SMAS to work in z/OS............................................................54

FIGURES
1 Local installation: Unisphere for VMAX....................................................................... 14

2 Remote installation: Unisphere for VMAX on a server connected to a remote SYMAPI
server..........................................................................................................................15

FIGURES

TABLES
1 Typographical conventions used in this content..........................................................10

2 Unisphere for VMAX client requirements.................................................................... 19
3 Server requirements and limitations............................................................................ 19

TABLES

About this content
As part of an effort to improve its product lines, EMC periodically releases revisions of
its software and hardware. Therefore, some functions described in this document
might not be supported by all versions of the software or hardware currently in use.
The product release notes provide the most up-to-date information on product
features.
Contact your EMC technical support professional if a product does not function
properly or does not function as described in this document.
This document was accurate at publication time. New versions of this document might
be released on the EMC Online Support website. Check the EMC Online Support site
https://support.EMC.com to ensure that you are using the latest version of this
document.
Purpose
This document describes how to configure and use Unisphere for VMAX.
Related documentation
The following EMC publications provide additional information:
l EMC Unisphere for VMAX Release Notes
l EMC Unisphere for VMAX Online Help
l EMC Unisphere 360 Online Help
l EMC Solutions Enabler Installation Guide
l EMC Solutions Enabler Release Notes
l EMC Solutions Enabler SRM CLI Product Guide
l EMC Solutions Enabler CLI Command Reference
l EMC VMAX Family Security Configuration Guide
Special notice conventions used in this document
EMC uses the following conventions for special notices:
DANGER
Indicates a hazardous situation which, if not avoided, will result in death or

serious injury.
WARNING
Indicates a hazardous situation which, if not avoided, could result in death or

serious injury.
CAUTION
Indicates a hazardous situation which, if not avoided, could result in minor or

moderate injury.
NOTICE
Addresses practices not related to personal injury.
About this content 9

About this content
Note
Presents information that is important, but not hazard-related.
Typographical conventions
EMC uses the following type style conventions in this document:
Table 1 Typographical conventions used in this content
Bold Used for names of interface elements, such as names of windows,

dialog boxes, buttons, fields, tab names, key names, and menu paths
(what the user specifically selects or clicks)
Italic Used for full titles of publications referenced in text

Monospace Used for:
l System code
l System output, such as an error message or script
l Pathnames, filenames, prompts, and syntax
l Commands and options
Monospace italic Used for variables

Monospace bold Used for user input
[] Square brackets enclose optional values
| Vertical bar indicates alternate selections - the bar means or
{} Braces enclose content that the user must specify, such as x or y or

z
... Ellipses indicate nonessential information omitted from the example

About this content
Where to get help

EMC support, product, and licensing information can be obtained as follows:
Product information
EMC support, product, and licensing information can be obtained on the EMC
Online Support site asdescribed next.
To open a service request through the EMC Online Support site, you must have a
valid support agreement. Contact your EMC sales representative for details about
obtaining a valid support agreement or to answer any questions about your
account.
Technical support
EMC offers a variety of support options.
Support by Product EMC offers consolidated, product-specific information on
the Web at: https://support.EMC.com/products.
The Support by Product web pages offer quick links to Documentation, White
Papers, Advisories (such as frequently used Knowledgebase articles), and
Downloads, as well as more dynamic content, such as presentations, discussion,
relevant Customer Support Forum entries, and a link to EMC Live Chat.
EMC Live Chat Open a Chat or instant message session with an EMC Support
Engineer.
eLicensing support
To activate your entitlements and obtain your VMAX license files, visit the Service
Center on https://support.EMC.com, as directed on your License Authorization
Code (LAC) letter emailed to you.
For help with missing or incorrect entitlements after activation (that is, expected
functionality remains unavailable because it is not licensed), contact your EMC
Account Representative or Authorized Reseller.
For help with any errors applying license files through Solutions Enabler, contact
the EMC Customer Support Center.
If you are missing a LAC letter, or require further instructions on activating your
licenses through the Online Support site, contact EMC's worldwide Licensing
team at licensing@emc.com or call:
North America, Latin America, APJK, Australia, New Zealand: SVC4EMC
(800-782-4362) and follow the voice prompts.
EMEA: +353 (0) 21 4879862 and follow the voice prompts.
Your comments
Your suggestions help us improve the accuracy, organization, and overall quality of the
documentation. Send your comments and feedback to:
VMAXContentFeedback@emc.com
11
About this content

CHAPTER 1
Pre-installation considerations
This section contains steps and information you need to take and consider before the
actual installation happens.
l Before you begin.................................................................................................14

l Environment and system requirements............................................................... 17
Pre-installation considerations 13
Before you begin

The following sections contain steps to take and information to consider before
beginning the installation.
Unisphere Initial Setup User

While installing the software, you are prompted to specify a Unisphere Initial Setup
User. You can either specify the user ID you currently use to access the storage
system (if User Authorization is enabled), or you can use the default user ID smc. If
you plan on using the default ID, there must be no user IDs listed in the User
Authorization database. If there are user IDs in the database (regardless of whether
user authorization is enabled), then you must use SYMCLI to add the default user ID
(smc) to the database.
For more information about users and roles, see the VMAX3 Family Security
Configuration Guide.
The role of the Unisphere Initial Setup User is to install and set up the Unisphere
environment (create users and add roles). It is intended to be a temporary role as it
allows you only to perform administrative tasks on storage systems that do not have
defined user roles (authorization rules). After an Administrator or a SecurityAdmin is
assigned to a storage system, the Unisphere Initial Setup User can no longer access or
even see the system from the Unisphere console. Therefore, it is recommended that
users do not operate in this role for any longer than necessary.
Local, remote, and embedded installation options

Unisphere for VMAX can be installed in local, remote, or embedded configurations.
In a local configuration, install the Unisphere for VMAX software on a server running
Solutions Enabler attached to storage systems (see the Unisphere server in the
following image).
Figure 1 Local installation: Unisphere for VMAX
Unisphere
Server
SRDF
Unisphere Clients
In a remote configuration, install the Unisphere software on a server connected to the

SYMAPI server (see the Unisphere server in the following image).

Figure 2 Remote installation: Unisphere for VMAX on a server connected to a remote SYMAPI
server
Alternatively, starting with HYPERMAX OS Q3 2015, you can manage VMAX3 arrays
using the Embedded Management (eManagement) container application.
eManagement embeds VMAX3 management software (Solutions Enabler, SMI-S,
Unisphere for VMAX) on the VMAX3 array, enabling management of the array without
requiring software installed on a host.
Unisphere for VMAX licensing

Unisphere for VMAX uses VMAX-based eLicensing.
As a result, you can only manage a storage system from a Unisphere host, if the
storage array contains a Unisphere for VMAX (SMC) eLicense. However, you can use
Unisphere for VMAX to obtain and install the proper eLicense on the storage system.
Note
Storage systems running Enginuity 5875.198.148 or lower do not require a license key.
After a storage system that has been managed by SMC is upgraded to Enginuity 5876
or higher, Unisphere will operate with the storage array even if the proper eLicense is
not present. The Unisphere for VMAX (SMC) eLicense is noted as In Use in the
Unisphere eLicensing report. This designation means that the required eLicense is
missing, but access to the system is still allowed to avoid service disruption. To clear
this designation, you must obtain and apply the proper eLicense.
With the incorporation of Performance Analyzer into Unisphere for VMAX, the former
Symmetrix Performance Analyzer host-based eLicense is no longer required.
For more information on eLicensing, refer to the EMC Solutions Enabler Installation
Guide.
Unisphere for VMAX virtual appliance

The Unisphere for VMAX virtual appliance (vApp) is available for ESX/ESXi V4.0 (and
higher) servers in a VMware environment.
For instructions on installing the appliance, refer to the EMC Virtual Appliance Manager
Installation Guide 8.3.0.
Unisphere for VMAX licensing 15

Unisphere Lockbox Password

In previous releases, a lockbox was created at installation time. The lockbox is a vault
containing user and password information, secured with a key. As a security
improvement, you can now configure a password, known as the Unisphere Lockbox
Password, for the lockbox.
As part of the installation, you can accept the default password
(host_name@Smas-1) or you can configure a custom one. If you configure a
password other than the default one, you will need that password to perform any
subsequent upgrades or support operations that require access to the lockbox.
Authentication
Unisphere for VMAX supports the following types of authentication:
Windows(local and domain-based)
Users log in by specifying the Windows domain, username and password (if they
have a Windows account on the SMAS server).
LDAP
Users login with their LDAP-SSL username and password (if they have a user
account stored on a LDAP-SSL server).
To use this method, a Unisphere Administrator or SecurityAdmin sets up LDAP-
SSL authentication in Unisphere for VMAX. The Unisphere for VMAX Online Help
contains instructions on performing these tasks.
Local Unisphere users

Users login with their Unisphere username and password (if they have a local
Unisphere user account).
To use this method, a Unisphere Initial Setup User, Administrator, or
SecurityAdmin creates a local Unisphere user account for the user. Local user
accounts are stored locally on the SMAS server host and work in much the same
way as the other methods to validate user credentials. The Unisphere for VMAX
Online Help contains instructions on performing these tasks.
X.509 certificate-based user authentication

Certificate-based user authentication using X.509 certificates is supported on
fresh installations on Windows and Linux servers. You can use a certificate issued
by a trusted public third-party certificate authority (CA) to authenticate your
identity when using the Unisphere for VMAX web client or REST API interfaces.
The use of digital identity smartcards such as Common Access Card (CAC) and
Personal Identity Verification (PIV) as part of a multi-factor authentication
process is also supported.
You can enable certificate-based user authentication as part of the installation
and after you have confirmed your intentions, the choice becomes irreversible.
You must import the CA certificates before certificate-based user authentication
can be used.
The EMC VMAX Family Security Configuration Guide provides additional details about
authentication, authorization and other issues related to security.

Environment and system requirements

The Unisphere web server is supported on the platforms listed in Table 3 on page
19. Unisphere for VMAX can be used in remote client/server mode to communicate
with SYMAPI servers on other systems, including supported versions of AIX, Linux,
Solaris, HP-UX, z/OS, and Windows.
Network requirements
Prior to installing Unisphere for VMAX, verify that the host is in a properly configured
IP network and that it can resolve IP addresses and hostnames.
When installing, the use of IPv6 addresses is supported.
Solutions Enabler
Solutions Enabler 64-bit V8.3.0 is required in local and client/server modes. In client/
server mode, the storsrvd daemon must be running on the server.
In V8.0.2, and higher, the Solutions Enabler STP daemon collects data using a new
format. Therefore, features that rely on the earlier STP data format (for example, the
Performance Analyzer) will not support the Solutions Enabler V8.0.2, or higher, STP
daemon.
Supported HYPERMAX OS/Enginuity versions

Unisphere for VMAX V8.3.0 supports:
l VMAX Family systems running HYPERMAX OS 5977 or higher
l Symmetrix VMAX 10K/20K/40K Series systems running Enginuity 5876
l Symmetrix DMX systems running Enginuity 5773
Host systems and storage operating environment

Unisphere for VMAX runs on a wide range of operating systems and works with
certain Enginuity and HYPERMAX OS versions. For detailed interoperability
information, refer to E-Lab Interoperability Navigator at https://support.EMC.com.
Concurrent users
Unisphere for VMAX supports up to 10 concurrent users, with performance
degradation occurring with more than 3 storage admin users.
Symmetrix Management Console

Unisphere cannot be installed on the same host as SMC because Unisphere for VMAX
and SMC/SPA are not qualified to run on the same machine together due to system
resource requirements. However, they can run on separate virtual machines (VMs) on
the same server, provided that each VM meets the system and memory requirements.
VMware and Hyper-V guests

Unisphere for VMAX is supported on a guest operating system on the following
platforms, provided the guest is listed in the EMC Support Matrix and in VMware/
Hyper-V support documentation, and Unisphere for VMAX supports the platform.
Environment and system requirements 17

Note that the guest must provide the same CPU, memory, disk, gatekeeper, and other
requirements as if Unisphere for VMAX were installed on a physical machine:
l VMware ESX/ESXi Server versions 4.0, 4.1, 5.0, 5.1, 5.5, and 6.0 (and all updates
of each version).
l Windows Server versions 2008 R2 (Standard and Enterprise), 2012, and 2012 R2.
l Virtual machines must not run on shared memory or resources.
Database Storage Analyzer requirements

Database Storage Analyzer monitors the performance of the following databases:
l Oracle 10, 11.1, 11.2, 11 RAC, 12 (not container), 12 - both CDB and PDB. For CDB
DSA guest user name should be started with c## and 12 RAC
l SQL Server 2008, 2012, 2014
The following operating systems are supported:
l AIX, version 5.2 and above (64-bit)
l Sun Solaris 10 and above (64-bit, SPARC only)
l Red Hat Enterprise Linux 5 and above (64-bit)
l Linux SUSE 10 and higher
l Oracle Linux Server release 5 and higher
l HP UX Itanium, version 11.23 and higher
The following storage platforms are supported:
l Symmetrix systems running Enginuity 5671 5876
l VMAX systems running HYPERMAX OS 5977 or higher
You can use VMware VMDK virtual disks and RDM virtual environments. Other virtual
environments (Solaris containers, AIX VIO, VPLEX, and so on) are not supported.
10GB is required on the monitored database host for storing the mapping output.
A monitored Oracle database must have an Oracle diagnostic pack license.
To use Database Storage Analyzer packaged with Unisphere for VMAX to monitor a
SQL Server database, you need to install the latest Database Storage Analyzer
Listener on the monitored environment. For more information about installing the
Database Storage Analyzer Listener, refer to the ReadMe in the
EmcUnisphereDsaListener install zip file. The process is also outlined here:
Upgrading Database Storage Analyzer Listener on page 36
EMC ControlCenter
Unisphere cannot be installed on the same host as EMC ControlCenter agents
because Unisphere requires a 64-bit version of Solutions Enabler and ControlCenter
agents require a 32-bit version of Solutions Enabler.
Client screen requirements

The minimum client screen resolution required is 1280 x 1024.
Client browser requirements

The Unisphere for VMAX client is browser based and does not use dynamic ports, so it
works with most VPN solutions.

The table below defines the client requirements for Unisphere for VMAX.
Table 2 Unisphere for VMAX client requirements
Browser Version Memory a Platform

Internet Explorer 11.0 (Desktop only) 600 MB Windows
Firefox 30 or higher
Chromeb 21.0.1180 or higher
a. Required for the browser as it runs on the machine from which the console is launched .
b. Not supported in embedded NAS (eNAS) environments.
For the installed browser, the following additional software is required:

l The latest version of the Adobe Flash Player plug-in.
Server requirements
The table defines the client requirements for Unisphere for VMAX.
Table 3 Server requirements and limitations
Operating Maximum Minimum Minimum Minimum Maximum

systema volume processor available available managed
count specificatio memoryb disk space storage
n system
count
Windows 0 - 64,000 Minimum of a 12 GB 120 GB 10
2-core, 1.8
Linux
GHz
processor
Windows 64,001 - Minimum of a 16 GB 140 GB 20

128,000 2-core, 1.8
Linux
GHz
processor
Windows 128,001 - Minimum of a 20 GB 180 GB 20

256,000 4-core, 1.8
Linux
GHz
processor
a. For specific operating system information, refer to E-Lab Interoperability Navigator at:
https://support.EMC.com
b. This is the minimum amount of memory required on the server (before installation) to
successfully run Unisphere for VMAX; it is not the total amount of memory on the server. If
a server has a total of 12 GB of physical memory installed but there is only 6 GB available
before Unisphere for VMAX is installed, you may experience performance issues with the
application. If running on a Virtual Machine, this amount must be dedicated memory, not
shared memory.
Windows servers require Microsoft Visual C++ 2005 SP1 Redistributable Package to
be installed before installing Unisphere for VMAX.
Other requirements
l Ensure that DNS is configured correctly on the host.
Server requirements 19
l The host system must have connectivity to one or more storage systems to add
users and set permissions in Unisphere.
l Unisphere for VMAX can be installed on the same system as the SYMAPI server,
or on a system connected to the SYMAPI server. For more information, refer to
Figure 1 on page 14 and Figure 2 on page 15, respectively.
l Before you attempt to install Unisphere for VMAX on Red Hat Linux 6.0 or a later
release, verify that the following packages are installed. Not all installer packages
include these libraries by default, so it is important to verify their presence before
running the installation program. Do not attempt to run the installation process
without them. Without these items, the product fails to install and does not
function properly. The packages are:
n libstdc++-devel-4.4.4-13.el6.x86_64.rpm
n libstdc++-4.4.4-13.el6.x86_64.rpm
n libaio-0.3.107-10.el6.x86_64.rpm
n ncurses-libs-5.7-3.20090208.el6.x86_64.rpm
l To install PostgreSQL on Linux, a minimum of 2 GB of shared memory must be
available.
For more information about how to configure the size of a shared memory
segment, using the shmmax kernel parameter, see the documentation for your
operating system.
l If you are changing your SYMAPI connection type, such as changing from a local
connection to a client/server configuration, you must perform a fresh installation.
l Before installing Unisphere for VMAX on a host running Linux, ensure that the
maximum number of open file descriptors allowed is at least 4096. To do this,
complete the following steps:
1. Check the current limit for the number of open file descriptors. At the
command line, enter the following command:
ulimit -n
2. If the value returned is less than 4096, set it to the correct limit:
ulimit -n 4096

CHAPTER 2
Installing Unisphere for VMAX
This section describes how to access, install, and run the Unisphere for VMAX
software.
l Pre-installation configuration............................................................................. 22
l Installing Unisphere for VMAX........................................................................... 22
l Completing the installation................................................................................. 27
l Launching Unisphere for VMAX.......................................................................... 31
l Launching Database Storage Analyzer............................................................... 32
Installing Unisphere for VMAX 21

Pre-installation configuration
Before you install Unisphere for VMAX, complete the following tasks if they are
appropriate for your installation environment:
l Setting the event and statistics daemons to autostart on Linux on page 22
l Setting up the PostgreSQL user on Linux on page 22
l Configuring networking on Linux on page 22
Setting the event and statistics daemons to autostart on Linux

To install Unisphere for VMAX on a local Linux 64-bit host, complete this task.
To set the event and statistics daemons to autostart:
1. Set the event and statistics daemons to autostart using the following commands:
stordaemon install storevntd -autostart

stordaemon install storstpd -autostart
2. Start the same daemons using the following commands:
stordaemon start storstpd

stordaemon start storevntd
Setting up the PostgreSQL user on Linux

Before starting a new installation of Unisphere for VMAX or Unisphere 360 on Linux,
the PostgreSQL user (postgres) and group (postgres), must be present. In
addition, the user must be a member of the postgres group.
Use the following commands to create the postgres group and add the postgres
user to the postgres group:
groupadd postgres
useradd -g postgres postgres
Configuring networking on Linux

If your Linux server is configured to use IPv4, ensure that the IPv6 entry ( ::1) is
commented out of the /etc/hosts file.

To install Unisphere for VMAX:
Procedure
1. Accessing the software: Step 1: Accessing the software on page 23 .
2. Installing the software: Step 2: Installing the software on page 23.
3. Installing Unisphere for VMAX using the wizard: Step 2A: Installing Unisphere
for VMAX using the wizard on page 23.

4. Installing Unisphere for VMAX from the command line: Step 2B: Installing
Unisphere for VMAX from the command line on page 25.
Step 1: Accessing the software

The Unisphere for VMAX V8.3.0 software and documentation is available on EMC
Online Support at: https://support.emc.com/
It consists of the following:
l For Windows 64-bit:
UNIVMAX_V8.3.0.x_WINDOWS_X86_64.exe
l For Linux 64-bit:
UNIVMAX_V8.3.0.x_LINUX_X86_64.bin
l For Virtual Appliance:
univmaxpa830_x_suse11__x86_64_vapp_OVF10.ova
In the file names above, x represents the software build number. That number
varies, based on when the software was built.
l Unisphere for VMAX Online Help
l Unisphere for VMAX Release Notes
l This installation guide.
To access the software from online support:
Procedure
1. On the EMC Online Support site:
a. Click Support By Product in the main navigation bar.
b. In the Find a Product box, type Unisphere for VMAX and click the arrow.
c. Locate the appropriate kit and download it to a directory on the host drive.
2. Continue with Step 2: Installing the software on page 23.
Step 2: Installing the software

You can install Unisphere for VMAX using an installation wizard, as described in Step
2A: Installing Unisphere for VMAX using the wizard on page 23, or from the
command line, as described in Step 2B: Installing Unisphere for VMAX from the
command line on page 25.
Step 2A: Installing Unisphere for VMAX using the wizard

To install Unisphere for VMAX using the wizard:
Procedure
1. Save all files and exit all applications.
2. Change the directory to the location of the kit and run the appropriate
executable for your operating system.
Step 1: Accessing the software 23

To install Unisphere for VMAX using the wizard in Linux, the display manager
must be enabled and the -i swing switch used, for example:
./UNIVMAX_V8.3.0.x_LINUX_X86_64.bin -i swing
If the display manager is not enabled or the -i swing switch is not used, the
installer defaults to console mode.
3. On the Introduction page, review the recommendations and click Next.

4. On the Choose Install Folder page, click Next to accept the default directory,
or click Choose to select another directory.
5. On the Initial Setup User and SymAPI Configuration page:
a. Specify a Unisphere Initial Setup User name (default is smc). You can
either accept the default or use your Windows username if you have
authorization enabled on the Unisphere server host. For more information
about the role of the Unisphere Initial Setup User, see Unisphere Initial Setup
User on page 14.
b. Specify a SymAPI Connection Type for the initial login based on the
following:
l LocalOn a host with Solutions Enabler installed and attached to VMAX
systems.
l RemoteOn a remote server connected to a SYMAPI server, specify
the SYMAPI server Node Name and Net Port. The default net port for
SYMAPI is 2707.
For more information about each of the connection types, see Local, remote,
and embedded installation options on page 14.
c. Click Next.
6. On the Ports Configuration page, specify the ports to use or enable when
connecting to the Unisphere server.
The default ports of the Unisphere server (HTTPS Port No) and performance
database (DB Port No) are shown. To use the default ports, verify that they
are available, and click Next to accept and enable them. Or you can specify and
enable different ports, and click Next.
7. On the Unisphere Lockbox Password page, configure the lockbox password.
Note
If you configure a Unisphere Lockbox Password other than the default one,
ensure that you take note of the new password. You will need it for subsequent
upgrade and support operations.
To accept the default lockbox password:

a. Click Next.
b. In the Default Lockbox Password dialog box, click OK.
To change the lockbox password:
a. Select Overwrite default Unisphere lockbox password?.
b. In the Lockbox Password field, type the new lockbox password.

c. In the Confirm Lockbox Password field, type the new lockbox password
again.
d. Click Next.
e. In the Custom Lockbox Password dialog box, click OK.
8. (Optional) On the X.509 Certificate-based Client Authentication page,

configure certificate-based user authentication options. The default behavior is
for X.509 certificate-based authentication to remain disabled.
To enable X.509 certificate-based authentication, complete the following steps:
a. Select Enable certificate based client authentication?.

b. Specify whether to use the CN or UPN of the client certificate as the
certificate alias. Note that instances of the following special characters are
stripped from the alias: @:?;|<>[]+=,*/\
c. To specify Unisphere 360 X.509 common name, select Define Unisphere
360 X.509 Common Name.
d. In the Unisphere 360 X.509 Common Name field type the Unisphere 360
X.509 common name.
e. Click Next.
f. On the Confirm Client Authentication dialog box, click OK.
If you enable X.509 certificate-based authentication, after installation
completes, import the certificate and start SMAS manually. For more
information, refer to Importing CA certificates on page 28.
9. To install Unisphere for VMAX on a host with more than one network interface
configured, you are prompted to choose the IP address to which Unisphere for
VMAX will bind. On the Listening (bind) Address Selection page, select the
server protocol (IPv4 or IPv6), select the IP address, and then click Next.
10. If the disk space and/or memory requirements are not met, a warning is
displayed. If you want to continue with the installation regardless of the
consequences described in the message, click OK.
11. On the Pre-Installation Summary page, verify the summary information, and
click Install to continue the installation.
12. On the Install Complete page, click Done.
13. Refer to Completing the installation on page 27 for instructions on completing
the installation.
Step 2B: Installing Unisphere for VMAX from the command line
Online help is available when installing from the command line by entering -?.
To install Unisphere for VMAX from the command line:
Procedure
1. Save all files and exit all applications.
2. Change the directory to the location of the kit.
3. Run the following command to install Unisphere for VMAX on Windows:
kit_name -i console
Step 2B: Installing Unisphere for VMAX from the command line 25
Run the following commands to install Unisphere for VMAX on Linux:
chmod +x kit_name
./kit_name -i console
Where kit_name is one of the following operating system-specific kit names:

l For Windows 64-bit:
UNIVMAX_V8.3.0.x_WINDOWS_X86_64.exe
l For Linux 64-bit:
UNIVMAX_V8.3.0.x_LINUX_X86_64.bin
In the file names above, the x represents the software build number. That
number varies based on when the software was built.
4. On the Introduction panel, review the recommendations and press Enter.
5. On the Choose Install Folder panel, press Enter to accept the default
directory, or specify a different directory and press Enter.
6. On the postgres User and Group panel, you are instructed to create the
postgres group and postgres user before continuing. When complete, press
Enter.
7. On the Initial Setup User and SymAPI Configuration panel, complete the
following steps:
a. Specify a Unisphere Initial Setup User name (default is smc).
You can either accept the default username or use your Windows username
if you have authorization enabled on the Unisphere server host. For more
information about the role of the Unisphere Initial Setup User, see Unisphere
Initial Setup User on page 14.
b. Specify a SymAPI Connection Type for the initial login based on the
following:
l LocalOn a host with Solutions Enabler installed and attached to VMAX
systems.
l RemoteOn a remote server connected to a SYMAPI server, specify
the SYMAPI server Node Name and Net Port. The default net port for
SYMAPI is 2707.
For more information about each of the connection types, see Local, remote,
and embedded installation options on page 14.
8. On the Ports Configuration panel, specify the ports to use or enable when
connecting to the Unisphere server.
The default ports of the Unisphere server (HTTPS Port No) and performance
database (DB Port No) are shown. To use the default ports, verify that they
are available, and click Next to accept and enable them. Or you can specify and
enable different ports, and click Next.
9. On the Unisphere Lockbox Password panel, click Enter to accept the default
lockbox password, or configure a new one and then press Enter.

Note
If you configure a Unisphere Lockbox Password other than the default one,
ensure that you take note of the new password. You will need it for subsequent
upgrade and support operations.
10. (Optional) On the X.509 Certificate-based Client Authentication panel,

configure certificate-based user authentication options. The default behavior is
for X.509 certificate-based authentication to remain disabled.
To enable X.509 certificate-based authentication, complete the following steps:
a. At the Enable certificate based client authentication? prompt, type 2 for

Yes.
b. Specify whether to use the CN or UPN of the client certificate as the
certificate alias. Note that instances of the following special characters are
stripped from the alias:
@:?;|<>[]+=,*/\
c. Press Enter to continue.

d. (Optional) To specify Unisphere 360 X.509 common name, type 2 and type
the Unisphere X.509 common name. Press Enter to continue.
e. On the Confirm Client Authentication panel, confirm your selection.
If you enable X.509 certificate-based authentication, after installation
completes, import the certificate and start SMAS manually. For more
information, refer to Importing CA certificates on page 28.
11. On the Listening(bind) Address Selection panel, to install Unisphere for
VMAX on a host with more than one network interface configured, you are
prompted to choose the IP address to which Unisphere for VMAX will bind and
specify if it is an IPv4 or an IPv6 address.
displayed. If you want to continue with the installation regardless of the
consequences described in the message, type 1.
13. On the Pre-Installation Summary panel, verify the summary information, and
the press Enter to continue the installation.
14. On the Install Complete panel, press Enter.
15. Refer to Completing the installation on page 27 for instructions on completing
the installation.
Completing the installation

This section describes the tasks to perform after the installation has been completed:
l Configuring language and regional settings: Configuring language and regional
settings on page 28
l Installing a Unisphere for VMAX license: Installing a Unisphere for VMAX license
on page 28
l Configuring third-party utilities: Configuring third-party utilities on page 28
Completing the installation 27

l Importing CA certificates: Importing CA certificates on page 28

l Starting and stopping the performance database: Starting and stopping the
performance database on page 29
l Starting and stopping the SMAS service: Starting and stopping the SMAS service
on page 30
Configuring language and regional settings

For Windows users outside the United States, you must configure your regional and
language settings to English (United States) if you plan on using the graph feature of
the Quality of Service (QoS) and Replication Monitors.
The exact steps you need to follow might vary from those listed here, depending on
the version of Windows you are using.
To configure the language and regional settings:
Procedure
1. Stop the EMC SMAS service (if it is running). See Starting and stopping the
SMAS service on page 30.
2. In the Windows Control Panel, double-click Regional and Language Options.
3. On the Regional Options tab, set the Standards and formats to English
(United States).
4. On the Advanced tab, set the Language for non-Unicode programs to
English (United States) and select Apply all setting to the current user
account and to the default user profile.
5. Restart the service.
Installing a Unisphere for VMAX license

Before you can manage a VMAX array running Enginuity 5876 or higher, you must
install a Unisphere for VMAX (SMC) eLicense on the VMAX array. For instructions on
installing licenses, refer to Installing Licenses in the Unisphere for VMAX online help.
Configuring third-party utilities

To ensure that third-party software utilities (including virus scanning and backup
tools) do not affect the operation of the Unisphere for VMAX software installed on the
host, you might need to carry out some additional configuration.
Exclude the install_dir\SYMAPI\stp\spa directory and all subdirectories from
any virus scan.
Exclude the performance database directory, install_dir\SMAS\jboss
\standalone\data\pgsql\data, and all subdirectories, from the actions
performed by any third-party software utility.
Note
Not following this advice may lead to data corruption in the performance database or
problems with data collection.
Importing CA certificates
If you chose to use certificate-based user authentication at installation time, import
the CA certificates before you login.
You must have root/administrator permissions to complete this task.

When certificate-based user authentication is chosen at install time, the SMAS service
does not start automatically after installation completes. After you have imported the
CA certificates, manually start the SMAS service.
For more information about starting the SMAS service refer to Starting and stopping
the SMAS service on page 30.
To import a CA certificate:
Procedure
1. Open the domain.xml.init file.
For Linux:
install_dir/jboss/domain/configuration/domain.xml.init
For Windows:
install_dir\jboss\domain\configuration\domain.xml.init
2. Search for the instance of "ssl key-alias="tomcat"

password=password".
3. Take note of the value of the password attribute.
4. For each root CA and intermediate CA certificate, run the appropriate
commands.
For Windows:
cd install_dir\SMAS\jboss\bin
service.bat importcacert password CA_cert_alias CA_file_path
For Linux:
cd install_dir/SMAS/jboss/bin
initcst.sh importcacert password CA_cert_alias CA_file_path
Where:
l password is the password of the keystore, discovered in 3 on page 29
l CA_cert_alias is the alias of the CA cert chosen at installation time.
Note that when either the CN or UPN is chosen as the alias for the CA cert,
instances of the following special characters are stripped from the alias:
@:?;|<>[]+=,*/\
l CA_file_path is the path to the CA certificate file.
Starting and stopping the performance database

If required to do so, you can start and stop the performance database manually.
Starting and stopping the performance database 29

Windows
To start or stop the EMC_smasdb service in Windows, use the Control Panel
(Administrative Tools > Services).
Alternatively, you can use the following commands to start or stop the Windows
services using the CLI:
net start "EMC_smasdb"

net stop "EMC_smasdb"
Linux
Start the performance database before starting the SMAS service. In the same way,
stop the SMAS service before stopping the performance database.
To start or stop the performance database (PostgreSQL) in Linux, navigate to this
directory: install_dir/SMAS/jboss/standalone/data/pgsql and use the
following commands:
Action Command
Start ./smasdb_unix_helper.sh -S
Stop ./smasdb_unix_helper.sh -k
Starting and stopping the SMAS service

If required to do so, you can start and stop the SMAS service manually.
Windows
To start or stop the EMC Symmetrix Management Application Server in Windows, use
the Services panel. Click Control Panel > Administrative Tools > Services to open
the Services panel.
Alternatively, you can use the following commands to start or stop the Windows
services using the CLI:
net start "EMC Symmetrix Management Application Server"
net stop "EMC Symmetrix Management Application Server"
Linux
Start the performance database before starting the SMAS service. In the same way,
stop the SMAS service before stopping the performance database.
To start or stop the SMAS service in Linux, change to this directory: /etc/init.d
and use the following commands:
Action Command
Start server ./smas start
Stop server ./smas stop

Launching Unisphere for VMAX

Note
After performing any of the following operations, it can take up to 30 minutes

(depending on the size of the storage environment) before Unisphere for VMAX
becomes available:
l Installing
l Upgrading
l Rebooting
l Restarting the SMAS service
To launch Unisphere for VMAX:
Procedure
1. Type the following URL in a browser:
https://host_IP|host_name:port_number
The port number is configured during installation. The default HTTPS port
number is 8443.
Note
The use of localhost is not supported.
If the host IP address is an IPv6 address, surround the IP address with square
brackets, for example:
https://[2001:db8:ffff:ffff:ffff:ffff:ffff:ffff]:8443
If the host IP address is an IPv4 address, type the IP address as normal, for
example:
https://198.51.100.255:8443
For your browser to access the Unisphere for VMAX console, Flash Player 11.2
or a later release is required. Flash Player is available from the Adobe website.
2. Do one of the following:

l At the login window, type the Unisphere Initial Setup User username and
password, and click Login.
The default username for the Unisphere Initial Setup User is smc and the
default password is smc.
l If you are using certificate-based user authentication, click Options to
display more options, and select Use Client Certificate. If the Unisphere for
VMAX login window does not display correctly, ensure that the CA
certificates have been imported correctly.
3. Click Login.
Launching Unisphere for VMAX 31

Launching Database Storage Analyzer

Database Storage Analyzer is an application included with Unisphere for VMAX. It
provides a database performance troubleshooting solution for Oracle (version 11g and
above) and MS SQL Server databases running on EMC storage systems.
When logging into Database Storage Analyzer, you can use the default Unisphere
Initial Setup User. If you have removed the smc user or defined another admin user on
the system, create a Database Storage Analyzer admin user in Unisphere for VMAX
(Home > Administration > Security > Authorized Users & Groups).
Note
To use Database Storage Analyzer with certificate-based user authentication, you

must launch Database Storage Analyzer in a standalone fashion, rather than from
within Unisphere for VMAX.
To launch Database Storage Analyzer:

Procedure
1. Do one of the following:
l To launch Database Storage Analyzer:
a. Type the following URL in a browser: https://host_IP:port_number/
univmax/dsa
The port number is configured during installation. The default HTTPS port
number is 8443.
b. At the login window, type the Unisphere Initial Setup User username and
password.
If certificate-based user authentication was enabled when Unisphere for
VMAX was installed, the Database Storage Analyzer login window displays
with Use Client's X.509 Certificate selected and the User and Password
fields dimmed.
c. Click Login.
l To launch Database Storage Analyzer from within Unisphere for VMAX:
a. In Unisphere for VMAX, select a storage system.
b. Select Databases > Databases to open the Database list view.
c. Click Database Storage Analyzer.
d. At the login window, type the Unisphere Initial Setup User username and
password, and click Login.

CHAPTER 3
Upgrading Unisphere for VMAX
This chapter explains how to upgrade Unisphere for VMAX:
l Upgrade paths ...................................................................................................34

l Before upgrading Unisphere for VMAX.............................................................. 34
l Running the Unisphere for VMAX upgrade.........................................................34
l After upgrading Unisphere for VMAX.................................................................36
l Upgrading Database Storage Analyzer Listener................................................. 36
Upgrading Unisphere for VMAX 33

Upgrade paths
You can upgrade to Unisphere for VMAX V8.3.0 from the following releases:
l Unisphere for VMAX V1.6.2
l Unisphere for VMAX V8.x
The installation program automatically upgrades your installation according to the
settings used in the previous installation, including port and connection type.
The following Unisphere for VMAX settings from your previous installation are
maintained through the upgrade process:
l Users
l Alert policies and threshold settings
l Email settings: Mailing list and SMTP configuration
l Performance dashboard settings
l Queries
When upgrading from V1.6.2, or lower, LDAP/AD configuration information is not
retained.
When upgrading from V8.x, LDAP/AD configuration information is retained.
Before upgrading Unisphere for VMAX

Before upgrading Unisphere for VMAX, check the size of the performance database
folder. For Unisphere for VMAX V1.6.1, the performance database folder is install_
dir\EMC\SMAS\jboss\standalone\data\msq and for Unisphere for VMAX
V8.0.1, and higher, it is install_dir\EMC\SMAS\jboss\standalone\data
\pgsql.
Ensure that the minimum RAM and disk space requirements for Unisphere for VMAX
V8.3.0 are met. For more information about server requirements, see Pre-installation
considerations on page 13.
Before commencing any upgrade process, ensure that backups of all data have been
made.
As a safeguard, follow these steps:
Procedure
1. For each registered storage system, backup the performance database. You
must restore each database backup after the upgrade.
2. Take note of the systems registered for collecting performance data. Record
the settings for data collection and diagnostic interval for each one.
3. Export the Performance settings (metric and alert definitions and user
templates). This operation requires setting a password to use when you import
the saved settings to the new system.
Running the Unisphere for VMAX upgrade

This section describes how to upgrade the Unisphere for VMAX software.

Upgrading Unisphere for VMAX on Windows

To upgrade Unisphere for VMAX using the wizard on Windows:
Procedure
1. Access the software, as described in Step 1: Accessing the software on page
23.
2. Navigate to the location of the kit and run the appropriate executable for your
operating system.
3. In the Unisphere for VMAX Instance Detected dialog box, click Yes to
continue and upgrade.
4. A database backup warning displays. Click OK to continue with the upgrade. To
preserve performance data, ensure that a backup has been performed.
5. In the Introduction - Upgrade Unisphere for VMAX page, click Next.
displayed. If you want to continue with the upgrade regardless of the
7. In the Pre-Installation Summary page, click Install.
8. When the upgrade process completes, click Done.
Upgrading Unisphere for VMAX on Linux

To upgrade Unisphere for VMAX using the command line on Linux:
Procedure
1. Stop the SMAS service, as described in Starting and stopping the SMAS
service on page 30.
2. Access the software, as described in Step 1: Accessing the software on page
23.
3. Navigate to the location of the kit and run the appropriate executable for your
operating system.
4. When prompted to do so, confirm that you want to upgrade the installed
features.
5. The installation script displays the current Unisphere version and the version to
which you will upgrade. Press Enter.
6. A database backup warning displays. Click OK to continue with the upgrade. To
preserve performance data, ensure that a backup has been performed.
7. In the Introduction - Upgrade Unisphere for VMAX page, click Next.
8. In the Pre-Installation Summary page, click Install.
displayed. If you want to continue with the upgrade regardless of the
10. Press Enter through each option in the upgrade process.
The upgrade process completes.
After you finish
Complete the tasks described in After upgrading Unisphere for VMAX on page 36.
Upgrading Unisphere for VMAX on Windows 35

After upgrading Unisphere for VMAX

This section describes the tasks to perform after the installation has been completed.
Renewing link and launch client registrations

Procedure
1. If you were using link and launch client registrations to launch Unisphere from
ProSphere, or vSphere VSI clients, re-register your host with Unisphere for
VMAX. The Unisphere help information shows how to do this.
Restoring and verifying system and performance data

To restore and verify system and performance data:
Procedure
1. Re-register the systems that were collecting performance data before the
upgrade.
2. Verify your data collection and diagnostic intervals against the values recorded
before the upgrade.
3. Restore your performance database backups using the Unisphere for VMAX
console and verify each database.
4. Verify the Performance settings (metric and alert definitions and user
templates). If you need to import the Performance settings, use the password
you set when you exported the settings.
The Unisphere for VMAX Online Help contains instructions on performing these
tasks.
Upgrading Database Storage Analyzer Listener

To use Database Storage Analyzer packaged with Unisphere for VMAX 8.3, you need
to upgrade the Database Storage Analyzer Listener on the SQL Server database
monitored environment.
Procedure
1. If the listener service is already installed, uninstall it. To do this, complete the
following steps:
a. Navigate to EmcUnisphereDsaListener folder and right-click
uninstallListener.bat.
b. Select Run as administrator.
c. Remove the EmcUnisphereDsaListener folder.
2. Copy the new installation zip file to a folder in the monitored database's server.
3. Unzip it to C:\Windows\Temp.
4. As an administrator, open a Windows Command Processor console.
5. Navigate to the C:\Windows\Temp\EmcDBAgent folder.
6. Run installListener.bat.
A service EMCDBAgent listener is created and started.

7. Delete the C:\Windows\Temp\EmcDBAgent folder.

8. To check if the service is running, complete the following steps:
a. In the services list, check that a EMCDBAgent service is started.
b. In the Windows Task Manager, check that a sshd.exe process is running.
Upgrading Database Storage Analyzer Listener 37


CHAPTER 4
Uninstalling Unisphere for VMAX
This chapter explains how to uninstall Unisphere for VMAX:
l Before you begin................................................................................................ 40

l Uninstalling from Windows.................................................................................40
l Uninstalling from Linux....................................................................................... 41
Uninstalling Unisphere for VMAX 39

Before you begin

Before uninstalling Unisphere for VMAX, note the following:
l Uninstalling Unisphere removes the performance database. The Unisphere online
help provides instructions on backing up/restoring the performance database
should you want to reuse it at a later time.
l During an uninstallation, the installation program prompts you to export your
customized performance settings (metrics and threshold settings only) to a file
that can be imported to another Unisphere environment. The Unisphere online
help provides instructions on exporting/importing your customized performance
settings.
l Uninstalling Unisphere terminates all client sessions to the SMAS server and any
SYMAPI operations in progress.
Note
Before uninstalling Unisphere for VMAX, it is recommended that you unregister any
storage systems that are registered for performance data.
Uninstalling from Windows

You can uninstall Unisphere for VMAX from a Windows host using either the Windows
Add/Remove Programs window, the command line, or a wizard.
Using Windows Add/Remove Programs

The exact steps you need to follow might vary from those listed here, depending on
the version of Windows you are using.
To uninstall Unisphere for VMAX from the Windows Add/Remove Programs window:
Procedure
1. From the Windows Start menu, select Settings > Control Panel > Add/
Remove Programs.
2. In the Add/Remove Programs dialog, select EMC Unisphere for VMAX and
click Change/Remove.
3. Complete the remaining steps in the wizard.
Using the Windows command line

To uninstall Unisphere for VMAX using the command line:
Procedure
1. Change folder location to install_dir\SMAS\_EMC_SMAS_installation.
2. Type the following to launch the uninstallation console procedure:
Uninstall_EMC_SMAS_Installation.exe -i console
3. Follow the steps on screen.
A few files remain after the uninstallation operation. To remove them, delete the
SMAS folder.

Using the Windows wizard

To uninstall Unisphere for VMAX using the wizard:
Procedure
1. Change folder location to install_dir\SMAS\_EMC_SMAS_installation.
2. Launch the wizard: Uninstall_EMC_SMAS_Installation.exe
3. Complete the steps in the wizard.
SMAS folder.
Uninstalling from Linux

You can uninstall Unisphere for VMAX from a Linux host using either the wizard or the
command line.
Using the wizard

Using the wizard to uninstall Unisphere for VMAX is not supported on virtual
machines.
To uninstall Unisphere for VMAX from a Linux host using the wizard:
Procedure
1. Navigate to the following directory: install_dir/SMAS/
_EMC_SMAS_installation.
2. Type the following to launch the uninstallation wizard: ./
Uninstall_EMC_SMAS_Installation -i swing
3. Complete the steps in the wizard.
SMAS folder.
Using the Linux command line

To uninstall Unisphere for VMAX from a Linux host using the command line:
Procedure
1. Navigate to the following directory: install_dir/SMAS/
_EMC_SMAS_installation.
2. Type the following to launch the uninstallation console procedure:
Uninstall_EMC_SMAS_Installation.exe -i console
3. Follow the steps on screen.
SMAS folder.
Using the Windows wizard 41


APPENDIX A
Technical notes
This appendix provides technical notes for advanced configuration of Unisphere for
VMAX V8.3.0.
l Technical notes.................................................................................................. 44
Technical notes 43
Technical notes
Technical notes
This appendix provides technical notes for advanced configuration of Unisphere for
VMAX V8.3.0.
Managing thin pools

It is recommended that thin pools contain DATA volumes of the roughly the same size.
SYMAPI server
If you want to change the SYMAPI server that Unisphere is pointing to, uninstall
Unisphere, and then reinstall it.
During the install, you supply the new SYMAPI host name and network port number.
The Unisphere for VMAX Installation Guide provides more information on these
requirements.
Local replication management

Unisphere for VMAX manages replication operations (TimeFinder family) through
device groups. If the SMAS server does not have visibility to the device groups used
to manage replication, you cannot perform any replication actions in Unisphere for
VMAX. Similarly, replication sessions managed exclusively by device files cannot be
managed by Unisphere for VMAX.
Advanced configuration settings

Unisphere provides a dialog box for setting storage system preferences, including
debug settings. The debug settings are restricted to Unisphere administrators.
Use the debug settings only at the direction of EMC Customer Service.
Resetting the host system stable values

This section describes the steps to reset the host system SSVs using the CLI utility.
To reset the lockbox used by Unisphere for VMAX:
Procedure
1. Stop the SMAS service.
For more information about how to start and stop the server, refer to Starting
and stopping the SMAS service on page 30.
2. Find the lockbox_password used on install.

For more information on the lockbox password, refer to Unisphere Lockbox
Password on page 16.
3. Change directory location to:

l Windows: install_location\jboss\bin
l Linux: install_location/jboss/bin
4. Type the following command:
l Windows: service.bat updatessv lockbox_password

Technical notes
l Linux: ./initcst.sh updatessv lockbox_password

5. Restart the SMAS service.
Alerts
By default, most Unisphere status alerts are disabled. Managing alert policies in the
Unisphere for VMAX help includes instructions on enabling them.
Protecting against POODLE SSL v3 vulnerability

To protect your system from the Padding Oracle On Downgraded Legacy Encryption
vulnerability, ensure that following is set in your browser:
l SSL v3 protocol is disabled
l TLS protocol is enabled
For instructions, refer to the documentation for your browser.
Troubleshooting the "database is in maintenance mode" message

If a database restore, backup, or startup operation is in progress and an attempt is
made to start a backup, restore, or registration operation, the following message
might display:
The following Symmetrixs database is in maintenance mode:

storage_system_number
To resolve this issue, in Unisphere for VMAX complete the following steps:
1. Click Performance > Settings > Databases.
2. Wait until the Status of the database of the appropriate storage system is set to
OK before attempting to start another database operation.
Alerts 45
Technical notes

APPENDIX B
Security configuration
This appendix explains how to configure security settings for Unisphere for VMAX.
The EMC VMAX Family Security Configuration Guide provides additional details about
authentication, authorization and other issues related to security.
l Replacing the Unisphere for VMAX and CA server certificates.......................... 48

l Resetting the host system SSVs........................................................................50
l Listing certificates.............................................................................................. 51
l Deleting certificates........................................................................................... 51
l Configuring a Certificate Revocation List for X.509 certificate-based
authentication.................................................................................................... 51
Security configuration 47
Replacing the Unisphere for VMAX and CA server

certificates
At installation, the installer generates and installs the self-signed server certificate
used for HTTPS transport-level security. This appendix describes the steps to replace
this certificate with the one issued by a trusted third-party.
Step 1: Obtaining the keystore password

You need the keystore password to complete the following procedure. The keystore
password is generated during installation and is stored in the following file:
install_dir/SMAS/jboss/domain/configuration/host.xml.
Open the file and search for key-alias="tomcat". The password is designated by
the keystore-password attribute.
Generate a new JKS key/trust store file with the server certificate alias tomcat
and keystore password as described above. The key/trust store must contain all CA
certificates needed for full certificate trust chain verification.
Step 2: Generating a certificate request

To generate a certificate request:
Procedure
1.
a. For Windows, enter the following commands:
cd install_dir\SMAS\jboss\standalone\configuration
install_dir\SMAS\jre\bin\keytool -certreq -alias tomcat^

-file tomcatcert.csr -keystore Keystore
b. For Linux, enter the following commands:
cd install_dir/SMAS/jboss/standalone/configuration
install_dir/SMAS/jre/bin/keytool -certreq -alias tomcat \

-file tomcatcert.csr - keystore Keystore
2. When prompted to do so, enter the keystore password.

A file named tomcatcert.csr is generated. This file is a certificate request. If
the Failed to establish chain from reply error message appears, your CA is not in
the keystore's default trust chain (the keystore comes with a default set of
trusted CAs).
To import a trusted certificate into your keystore:

install_dir\SMAS\jre\bin\keytool -import -alias root^

-file Trusted_CA_cert_file -keystore keystore -trustcacerts
b. For Linux, enter the following commands:
install_dir\SMAS\jre\bin\keytool -import -alias root /
-file Trusted_CA_cert_file -keystore keystore -trustcacerts
3. Send the generated certificate request file, tomcatcert.csr, to your CA for

validation. After the request file has been validated, you should receive a signed
certificate back from CA.
Step 3: Importing the CA-signed certificate into the keystore

Starting with HYPERMAX OS Q1 2015 SR, you can import CA-signed certificates
using the CLI or scripts.
In the following instructions:
l signed_certificate_file is the signed certificate you received from your
CA.
l password is the password obtained in Step 1: Obtaining the keystore password
on page 48
l CA_certificate_alias is tomcat.
Using the CLI to import the CA-signed certificate into the keystore using CLI
Starting with HYPERMAX OS Q1 2015 SR, you can import CA-signed certificates
using the CLI or scripts.
To import the CA-signed certificate into the keystore using the CLI:
Procedure
1. If it is running, stop the SMAS server. For instructions, refer to Starting and
stopping the SMAS service on page 30
When X.509 certificate-based authentication is chosen at installation time, the
SMAS service is not started, by default.
2.
install_dir\SMAS\jre\bin\keytool -import -alias tomcat^
-file signed_certificate_file keystore keystore -
trustcacerts
a. For Linux, enter the following commands:
cd install_dir/SMAS/jboss/standalone/configuration
install_dir/SMAS/jre/bin/keytool -import -alias tomcat \
Step 3: Importing the CA-signed certificate into the keystore 49

-file signed_certificate_file keystore keystore -

trustcacerts
3. When prompted, enter the keystore password.
Using scripts to import the CA-signed certificate into the keystore using scripts
To import the CA-signed certificate into the keystore using scripts:
Procedure
1. If it is running, stop the SMAS server. For instructions, refer to Starting and
stopping the SMAS service on page 30
When X.509 certificate-based authentication is chosen at installation time, the
SMAS service is not started, by default.
2.
cd install_dir\SMAS\jboss\bin
service.bat importcacert password CA_certificate_alias^
signed_certificate_file
a. For Linux, enter the following commands:
cd install_dir/SMAS/jboss/bin
initcst.sh importcacert password CA_certificate_alias \
signed_certificate_file
Step 4: Starting the SMAS server

Start the SMAS server. For instructions, refer to Starting and stopping the SMAS
service on page 30.
Resetting the host system SSVs

This task describes the steps to reset the host system SSVs using the CLI. To reset
the lockbox used by Unisphere for VMAX:
Procedure
1. Ensure that the SMAS service is running.
For more information about starting the SMAS server, refer to Starting and
stopping the SMAS service on page 30.
2. Find the lockbox passphrase used during installation.
3. Change directory location to:
Windows: install_location\jboss\bin
Linux: install_location/jboss/bin
4. Type the following command:

Windows: service.bat updatessv CST_PASSPHRASE

Linux: ./initcst.sh updatessv CST_PASSPHRASE
Listing certificates
Procedure
1. Type the following commands to list certificates:
l On Windows systems:
cd install_path\jboss\bin
service.bat listcerts password
l On Linux systems:
initcst.sh listcerts password
where password is the trust store password.
Deleting certificates
Procedure
1. Type the following commands to delete certificates:
l On Windows systems:
service.bat deletecert password cert_alias
l On Linux systems:
initcst.sh deletecert password cert_alias
where password is the trust store password and cert_alias is tomcat.
Configuring a Certificate Revocation List for X.509

certificate-based authentication
Unisphere installations with X.509 certificate-based authentication enabled may
optionally configure a Certificate Recovation List (CRL) for greater PKI security. The
CRL could be replaced periodically, based on the PKI security requirements set by the
enterprise.
Listing certificates 51
Procedure
1. Stop the SMAS server.
2. Edit the file:
smas_installation/jboss/domain/configuration/domain.xml
where smas_installation is the directory where SMAS is installed.

3. Open the file and search for ssl key-alias="tomcat".
4. Insert the new ca-recvocation-url="crl" attribute to point to the
location, where crl is either the absolute filename or URL.
For example,
<ssl key-alias="tomacat"
ca-revocation-url="C:/SMAS/standalone/configuration/
CRL_CAC.pem
5. Start the SMAS server.

APPENDIX C
Configuring SMAS to work in z/OS
This appendix describes how to configure the Symmetrix Management Application

Server to work in a z/OS environment.
l Configuring SMAS to work in z/OS................................................................... 54
Configuring SMAS to work in z/OS 53


These instructions apply to systems running Enginuity 5876 or higher. Install
Unisphere for VMAX on a Open Systems server in a client-server mode. For more
information about installing Unisphere for VMAX, refer to Installing Unisphere for
VMAX on page 21. Define the remote host as the IP address of the mainframe.
To configure SMAS to work in a z/OS environment:
Procedure
1. Shut down the services as described in Starting and stopping the SMAS service
on page 30.
2. Do the following on the mainframe side:
a. Install Solutions Enabler 8.0 or a later release on the mainframe LPAR. Refer
to the EMC Solutions Enabler Installation Guide for instructions.
b. Start the API server, API base daemon, GNS daemon, and event daemon on
the mainframe LPAR.
3. Do the following on the qualified open system server:
a. Make the following changes in the file called daemon_option, which is
located under install_dir/symapi/config on Linux, or install_dir
\symapi\config on Windows:
Enable the DMN_REMOTE_MODE parameter.
Set the DMN_REMOTE_ADDRESS parameter to the mainframe IP address.
If daemon STORSRVD on zOS is not listening on the default port (port

2707), set the DMN_REMOTE_PORT.
b. Start the STP daemon (storstpd).

c. Open the ejb-jar.xml file, which is found in one of the following
locations:
For Linux:
install_dir/SMAS/jboss/domain/deploy/domain-symm.ear/
domain-symm-ejb.jar/META-INF
For Windows:
install_dir\SMAS\jboss\domain\deploy\domain-symm.ear
\domain-symm-ejb.jar\META-INF
d. In the ejb-jar.xml file, make the following updates:

l Set the value of the StatsConnectionType entry to
SYMAPI_CONN_TYPE_LOCAL.
l Set the value of the StatsNodeName entry to the IP address of the
Unisphere/API server.
l Set the value of StatsNetPort entry, if it was changed when Solutions
Enabler was installed on the Unisphere/API server.
l Uncomment the XML lines. The beginning comment value is  These values should be deleted.

The following extract is from a sample ejb-jar.xml file:
<env-entry>
<env-entry-name>StatsConnectionType</env-entry-name>
<env-entry-type>java.lang.String</env-entry-type>
<env-entry-value>SYMAPI_CONN_TYPE_LOCAL</env-entry-value>
</env-entry>
<env-entry>
<env-entry-name>NodeName</env-entry-name>
<env-entry-type>java.lang.String</env-entry-type>
<env-entry-value>198.51.100.90</env-entry-value>
</env-entry>
4. Delete any directories named deployX (where X is an integer) under the

following directory:
For Linux:
install_dir/SMAS/jboss/domain
For Windows:
install_dir\SMAS\jboss\domain
For example, delete deploy0, deploy1, deploy2, and so on. The number of
deploy directories depends on how many Java Virtual Machines (JVMs) are
configured.
Note
Ensure that you do not delete the install_dir/SMAS/jboss/domain/

deploy directory, in which you configured the ejb-jar.xml file.
5. Restart the services as described in Starting and stopping the SMAS service on
page 30.
When the services restart, the deployX directories are recreated automatically
with correct configuration. Do not attempt to delete any of the deployX
directories at this time.
6. Launch the Unisphere for VMAX console. For more information, see Launching
Unisphere for VMAX on page 31.
Configuring SMAS to work in z/OS 55

EMC® Unisphere™ For VMAX® PDF

Uploaded by

Copyright:

Available Formats

EMC® Unisphere™ For VMAX® PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

EMC® Unisphere™ For VMAX® PDF

Uploaded by

Copyright:

Available Formats

EMC Unisphere for VMAX

Published February 2017

2 EMC Unisphere for VMAX 8.3.0 Installation Guide

About this content 9

Chapter 1 Pre-installation considerations 13

Chapter 2 Installing Unisphere for VMAX 21

EMC Unisphere for VMAX 8.3.0 Installation Guide 3

Launching Database Storage Analyzer........................................................32

Chapter 3 Upgrading Unisphere for VMAX 33

Chapter 4 Uninstalling Unisphere for VMAX 39

Appendix A Technical notes 43

Appendix B Security configuration 47

Appendix C Configuring SMAS to work in z/OS 53

4 EMC Unisphere for VMAX 8.3.0 Installation Guide

1 Local installation: Unisphere for VMAX....................................................................... 14

EMC Unisphere for VMAX 8.3.0 Installation Guide 5

6 EMC Unisphere for VMAX 8.3.0 Installation Guide

1 Typographical conventions used in this content..........................................................10

EMC Unisphere for VMAX 8.3.0 Installation Guide 7

8 EMC Unisphere for VMAX 8.3.0 Installation Guide

Indicates a hazardous situation which, if not avoided, will result in death or

Indicates a hazardous situation which, if not avoided, could result in death or

Indicates a hazardous situation which, if not avoided, could result in minor or

Addresses practices not related to personal injury.

About this content 9

Presents information that is important, but not hazard-related.

Table 1 Typographical conventions used in this content

Bold Used for names of interface elements, such as names of windows,

Italic Used for full titles of publications referenced in text

Monospace italic Used for variables

[] Square brackets enclose optional values

| Vertical bar indicates alternate selections - the bar means or

{} Braces enclose content that the user must specify, such as x or y or

... Ellipses indicate nonessential information omitted from the example

10 EMC Unisphere for VMAX 8.3.0 Installation Guide

Where to get help

12 EMC Unisphere for VMAX 8.3.0 Installation Guide

l Before you begin.................................................................................................14

Before you begin

Unisphere Initial Setup User

Local, remote, and embedded installation options

In a remote configuration, install the Unisphere software on a server connected to the

14 EMC Unisphere for VMAX 8.3.0 Installation Guide

Unisphere for VMAX licensing

Unisphere for VMAX virtual appliance

Unisphere for VMAX licensing 15

Unisphere Lockbox Password

Local Unisphere users

X.509 certificate-based user authentication

16 EMC Unisphere for VMAX 8.3.0 Installation Guide

Environment and system requirements

Supported HYPERMAX OS/Enginuity versions

Host systems and storage operating environment

Symmetrix Management Console

VMware and Hyper-V guests

Environment and system requirements 17

Database Storage Analyzer requirements

Client screen requirements

Client browser requirements