StorageGuard collects configuration data for HPE XP storage systems by either running read-only API on the Intelligent Management Suite (IMS), or directly on the SVP if IMS is not used. It is recommended to also enable OS level access for complementary configuration collection.
Note: Intelligent Management Suite (IMS) is an OEM of the Hitachi Ops Center solution.
Preparation for Scanning HPE XP storage systems through IMS
The following table lists the requirements for scanning HPE XP storage arrays:
| # | Description |
| 1 | Ensure that the IMS API Configuration Manager software is installed, and that storage arrays have been registered to it. |
| 2 | Provide the name or IP address of an IMS host. |
| 3 | Provide an IMS application user and password assigned to the Security Administrator (View Only) group |
| 4 | Ensure that the same user account is also defined on the storage system. For REST API user authentication, use a user account registered in the storage system, or use a user account managed by the external authentication servers or approved external servers that are connected to the storage system. |
| 5 |
Ensure that the user can access:
API Examples:
|
| 6 | Make sure that IP connectivity through HTTPS is available between the StorageGuard server and each IMS server (ports 443, 23451, 23450). |
| 7 | Optional: Provide an IMS OS user account for the Ops Center host as described under Preparation for Scanning Storage Management hosts. |
Creating a User Account for Scanning HPE XP storage systems through IMS
The following suggested method can be used to create a user account with appropriate privileges:
- Login to the IMS interface with an administrative account.
- Access the Administration tab, click Users and Permissions.
- Click Add User
- Assign the user with the built-in Security Administrator (View Only) group - which includes the Security Administrator (View Only), Audit Log Administrator (View Only) and Storage Administrator (View Only) roles.
- Login to the SVP user interface with an administrative account.
- If a local user is used, create the same user account on the SVP by navigating to Administration > Users and Permissions > Create New User.
- Assign the user with the Security Administrator (View Only) group.
Preparation for Scanning HPE XP storage systems directly
The following table lists the requirements for scanning HPE XP storage arrays:
| # | Description |
| 1 | Provide the SVP IP address. |
| 2 | Provide a user and password assigned to a Security Administrator (View Only) group. |
| 3 |
Ensure that the user can access https://[SVP IP]:443/ConfigurationManager API Examples:
|
| 4 | Make sure that IP connectivity through HTTPS is available between the StorageGuard server and each SVP IP (port 443). |
| 5 | Optional: Provide an SVP OS user account for the svp host as described under Preparation for Scanning Storage Management hosts. |
Creating a User Account for Scanning HPE XP storage systems directly
The following suggested method can be used to create a user account with appropriate privileges:
- Login to the SVP user interface with an administrative account.
- Access the Administration tab, click Users and Permissions.
- Click New User
- Assign the user with the built-in Security Administrator (View Only) group - which includes the Security Administrator (View Only), Audit Log Administrator (View Only) and Storage Administrator (View Only) roles.
Note: The option of direct REST API is not available on older HPE XP models.
Comments
0 comments
Please sign in to leave a comment.