Service Processor 2 Technical Reference MK-97HM85045-05
Service Processor 2 Technical Reference MK-97HM85045-05
Service Processor 2 Technical Reference MK-97HM85045-05
MK-97HM85045-05
April 2020
© 2015, 2020 Hitachi, Ltd. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including copying and
recording, or stored in a database or retrieval system for commercial purposes without the express written permission of Hitachi, Ltd., or
Hitachi Vantara LLC (collectively “Hitachi”). Licensee may make copies of the Materials provided that any such copy is: (i) created as an essential
step in utilization of the Software as licensed and is used in no other manner; or (ii) used for archival purposes. Licensee may not make any
other copies of the Materials. “Materials” mean text, data, photographs, graphics, audio, video and documents.
Hitachi reserves the right to make changes to this Material at any time without notice and assumes no responsibility for its use. The Materials
contain the most current information available at the time of publication.
Some of the features described in the Materials might not be currently available. Refer to the most recent product announcement for
information about feature and product availability, or contact Hitachi Vantara LLC at https://support.hitachivantara.com/en_us/contact-us.html.
Notice: Hitachi products and services can be ordered only under the terms and conditions of the applicable Hitachi agreements. The use of
Hitachi products is governed by the terms of your agreements with Hitachi Vantara LLC.
By using this software, you agree that you are responsible for:
1. Acquiring the relevant consents as may be required under local privacy laws or otherwise from authorized employees and other
individuals; and
2. Verifying that your data continues to be held, retrieved, deleted, or otherwise processed in accordance with relevant laws.
Notice on Export Controls. The technical data and technology inherent in this Document may be subject to U.S. export control laws, including
the U.S. Export Administration Act and its associated regulations, and may be subject to export or import regulations in other countries. Reader
agrees to comply strictly with all such regulations and acknowledges that Reader has the responsibility to obtain licenses to export, re-export, or
import the Document and any Compliant Products.
Hitachi and Lumada are trademarks or registered trademarks of Hitachi, Ltd., in the United States and other countries.
AIX, AS/400e, DB2, Domino, DS6000, DS8000, Enterprise Storage Server, eServer, FICON, FlashCopy, GDPS, HyperSwap, IBM, Lotus, MVS, OS/390,
PowerHA, PowerPC, RS/6000, S/390, System z9, System z10, Tivoli, z/OS, z9, z10, z13, z14, z/VM, and z/VSE are registered trademarks or
trademarks of International Business Machines Corporation.
Active Directory, ActiveX, Bing, Excel, Hyper-V, Internet Explorer, the Internet Explorer logo, Microsoft, the Microsoft Corporate Logo, MS-DOS,
Outlook, PowerPoint, SharePoint, Silverlight, SmartScreen, SQL Server, Visual Basic, Visual C++, Visual Studio, Windows, the Windows logo,
Windows Azure, Windows PowerShell, Windows Server, the Windows start button, and Windows Vista are registered trademarks or trademarks
of Microsoft Corporation. Microsoft product screen shots are reprinted with permission from Microsoft Corporation.
All other trademarks, service marks, and company names in this document or website are properties of their respective owners.
Copyright and license information for third-party and open source software used in Hitachi Vantara products can be found at https://
www.hitachivantara.com/en-us/company/legal.html.
This symbol on the product or on its packaging means that your electrical and electronic equipment should be disposed at the end of life
separately from your household wastes.
There are separate collection systems for recycling in the European Union. For more information, contact the local authority or the dealer
where you purchased the product.
Recycling
A nickel-metal hydride battery is used in the Cache Backup Battery.
A nickel-metal hydride battery is a resource that can be recycled. When you want to replace the Cache Backup Battery, call the service
personnel. They will dispose of it for you. This nickel-metal hydride battery, which is designated as recycling product by a recycling promotion
low, must be recycled.
The mark posted on the Cache Backup Battery is a three-arrow mark that indicates a recyclable part.
Preface..................................................................................................... 8
Intended audience............................................................................................... 8
Document conventions........................................................................................ 8
Changes in this revision.....................................................................................10
Conventions for storage capacity values........................................................... 10
Accessing product documentation..................................................................... 11
Getting help........................................................................................................11
Comments..........................................................................................................11
Contents
Service Processor Technical Reference 4
Installing the physical SVP into the rack...................................................... 28
Connecting to the physical SVP................................................................... 29
Turning on power to the physical SVP......................................................... 30
Operating the physical SVP in a non-bridged network configuration........... 31
Setting the SVP date, time, and time zone settings..................................... 32
Disconnecting the management console from the physical SVP................. 35
Contents
Service Processor Technical Reference 5
Chapter 9: Upgrading the SVP software............................................. 65
Chapter 10: Security patch and antivirus software........................... 66
Windows and Antivirus Update Policies............................................................ 66
Online update.................................................................................................... 66
Offline update.....................................................................................................67
Installing antivirus software on the SVP............................................................ 67
Windows upgrade path...................................................................................... 68
Contents
Service Processor Technical Reference 6
Reallocating automatically allocated port numbers........................................... 93
Initializing automatically allocated port numbers............................................... 94
Changing range of port numbers to be allocated automatically.........................95
Initializing range of port numbers to be allocated automatically........................ 97
Viewing the port number to be used in the SVP................................................ 98
Contents
Service Processor Technical Reference 7
Preface
Intended audience
This document is intended for Hitachi Vantara representatives, system administrators,
authorized service providers, or customers who install, configure, and operate the VSP
Fx00 models VSP Gx00 models.
Readers of this document should be familiar with the following:
■ Data processing and RAID storage systems and their basic functions
■ RAID storage system hardware components and operational specifications
Document conventions
This document uses the following typographic conventions:
Convention Description
pairdisplay -g group
(For exceptions to this convention for variables, see the entry for
angle brackets.)
Preface
Service Processor Technical Reference 8
Document conventions
Convention Description
Status-<report-name><file-version>.csv
■ Variables in headings.
| vertical bar Indicates that you have a choice between two or more options or
arguments. Examples:
[ a | b ] indicates that you can choose a, b, or nothing.
{ a | b } indicates that you must choose either a or b.
Preface
Service Processor Technical Reference 9
Changes in this revision
Logical capacity values (for example, logical device capacity, cache memory capacity) are
calculated based on the following values:
Preface
Service Processor Technical Reference 10
Accessing product documentation
Getting help
Hitachi Vantara Support Connect is the destination for technical support of products and
solutions sold by Hitachi Vantara. To contact technical support, log on to Hitachi Vantara
Support Connect for contact information: https://support.hitachivantara.com/en_us/
contact-us.html.
Hitachi Vantara Community is a global online community for Hitachi Vantara customers,
partners, independent software vendors, employees, and prospects. It is the destination
to get answers, discover insights, and make connections. Join the conversation today!
Go to community.hitachivantara.com, register, and complete your profile.
Comments
Please send us your comments on this document to
[email protected]. Include the document title and number, including
the revision level (for example, -07), and refer to specific sections and paragraphs
whenever possible. All comments become the property of Hitachi Vantara LLC.
Thank you!
Preface
Service Processor Technical Reference 11
Chapter 1: SVP overview
The Service Processor (SVP) provides out‑of‑band configuration and management of the
storage system, and collects performance data for key components to enable diagnostic
testing and analysis.
The Hitachi Vantara-provided SVP is available as a physical 1U management server or as
a 64-bit software application. For the latest SVP versions and platforms supported, see
https://support.hitachivantara.com/en/user/answers/interoperability.html.
Item Description
2 Reset button
3 Power button
Item Description
The SVP running Windows 10 operating system does not provide an option to disable
Spanning Tree Protocol (STP). If your network has BPDU enabled to prevent loops,
connect the user LAN port on controllers 1 and 2 to an Ethernet switch that is also
connected to the LAN1 port on the SVP.
After the Initial Startup Wizard is complete, the SVP can be used in non-bridge mode. In
this mode, the cables can be removed from SVP ports LAN3 and LAN4 and attached to
switches. For more information, contact customer support.
Item Specification
Item Specification
Item Specification
■ Europe/CE Mark
■ EN 60950/IEC 60950-Compliant
Item Specification
Item Description
2 Reset button.
Item Description
After the Initial Startup Wizard is run, the SVP can be used in non-bridge mode. In this
mode, the cables can be removed from SVP ports LAN3 and LAN4 and attached to
switches. For more information, contact customer support.
Item Specification
■ SmartCache: 2 MB
Hard drive 2 TB
Item Specification
Item Specification
■ Europe/CE Mark
■ EN 60950/IEC 60950-Compliant
Total 112.55 W
Item Specification
(-40°C ~ 60°C)
For information about configuring an SVP for a non-bridged network environment, see
Operating the physical SVP in a non-bridged network configuration (on page 31) .
The physical SVP is pre-configured with a default IP for the LAN 1/3/4 ports.
The user connects to the SVP using the IP address 192.168.0.15 for the LAN1/3/4 ports
(management) or 10.0.0.100 for LAN2 port (maintenance).
Procedure
1. Install the physical SVP in the top bay of the rack or as close to the top bay as
possible.
2. Leave approximately 25 inches in front of the rack to enable you to open the front
bezel.
3. Leave approximately 30 inches of clearance in the back of the rack to allow for
sufficient airflow and ease in servicing.
Procedure
1. Remove the chassis ears.
a. Locate and remove the three screws holding the chassis ear in place.
b. Repeat action with the other chassis ear.
2. Find the Front marking on the rails, and then orient the rails appropriately for
attaching to the SVP chassis.
3. Screw the internal racks onto the SVP chassis using the four large screws and the
two small screws.
4. Repeat steps 2 and 3 for the inner rail extension on the other side of the SVP
chassis.
Procedure
1. Attach the short bracket to the outside of the long bracket.
You must align the pin with the slide.
2. Using the directions on the rails, orient the rails so the front of the rail faces the
front of the rack. Adjust the short rail and long rail to the proper distance, so that
they fit snugly into the rack. Then insert two small screws and two large M5 screws
into the threaded holes in the slide area on the rails, as shown in the following
figure, to prevent the rails from moving.
3. Secure the long outer rail to the vertical rail at the front of the rack using a washer
and an M5 screw on one side of the rail and a safety nut on the other side. Then
connect the short outer rail to the vertical rail at the rear of the rack using another
washer and M5 screw.
Procedure
1. Align the SVP enclosure inner rails with the front of the horizontal outer rails on the
rack.
2. Slide the SVP enclosure inner rails into the outer rails on the rack, keeping the
pressure even on both sides.
If necessary, press the locking tabs when inserting.
When the SVP enclosure is pushed completely into the rack, the locking tabs snap
into the locked position.
Note: The SVP running Windows 10 operating system does not provide an
option to disable Spanning Tree Protocol (STP). If your network has BPDU
enabled to prevent loops, connect the user LAN port on controllers 1 and 2 to
an Ethernet switch that is also connected to the LAN1 port on the SVP.
Procedure
1. Connect the LAN1 port to a switch on your IP network.
4. Connect the LAN4 port to the user LAN port on storage system controller 2.
After you connect the physical SVP, you can set up an encrypted Secure Sockets
Layer (SSL) connection between the storage system and the SVP.
Procedure
1. Attach the supplied power cable to the power socket on the rear panel of the
physical SVP.
2. Plug the other end of the power cable into an AC power source.
After you turn on the power, you can change the physical SVP configuration from a
bridged network connection to a non-bridged network connection if BDPU guard is
enabled in your networking environment.
Procedure
1. Connect a PC to the LAN2 port on the SVP.
2. Log on to the SVP using the Remote Desktop Connection:
a. Configure the PC to use an IP address of 10.0.0.xxx, where xxx = 1-99 or
101-254, and a subnet mask of 255.255.255.0.
b. Click Start > All Programs, and then select Accessories > Remote Desktop
Connection.
c. In the Computer field, type 10.0.0.100 and click Connect.
d. In the Windows Security screen, type SVP-PC\SVP in the top field and raid-
login in the bottom field.
e. Click OK.
f. If prompted that the identity of the remote computer cannot be verified, click
Yes to continue.
3. In the Remote Desktop Connection window, select Control Panel > Network and
Sharing Center.
4. Click Change adapter settings.
5. Right-click the network bridge icon, and then click Disable.
The SVP internal bridge is now disabled.
6. Remove the Ethernet cables from SVP ports LAN3 and LAN4, and attach them to the
Ethernet switches.
The following figure shows a CBSS and CBSL storage system in a non-bridged
environment.
The following figure shows a CBLM and CBLH storage system in a non-bridged
environment.
Procedure
1. Using the Windows operating system on the SVP, change the year, month, day, time,
and UTC timezone according to the location in which the installed SVP resides. For
more information, refer to your Windows documentation.
5. In the Set Up Date & Time page, enter the date and time settings.
Field Description
UTC Time zone Select a time zone on the Coordinated Universal Time
map.
Automatically adjust clock This field is available only if the selected UTC time
for Daylight Saving Time zone supports daylight saving time. Check this option
if your location observes daylight saving time (also
known as summer time).
6. Click Apply.
7. In the confirmation message, click Close.
Procedure
1. Click the Start button on the SVP desktop.
2. Click Log off > Disconnect.
Result
The SVP disconnects from the PC.
Prior to installing the SVP software, use the Remote Desktop Connection to log on to the
SVP as the user who was specified during the Windows installation (for example,
Administrator). After logging on, configure the Windows operating system on the
customer-supplied server. Most of these settings can be configured using the Windows
Control Panel. For detailed information about configuring these settings, refer to the
documentation for your Windows operating system.
Note: These procedures assume that the operating system has already been
installed on the server.
SVP locale
■ The SVP and storage management software support the English and Japanese
languages.
■ To install the SVP software using a language other than English and Japanese, change
the SVP's locale setting to reflect the appropriate language.
Desktop icons
■ Configure the desktop for large icons.
Desktop configuration
■ Set the screen saver to blank.
■ Set the wait time to 60 minutes.
Taskbar and Start menu properties
■ Always show all icons and notifications on the taskbar.
■ Open the Taskbar and Start Menu Properties window. Click Customize in the Start
Menu tab. Check Run Command and Display on the All Programs menu and the Start
menu. Under Music, check Don’t display this item.
Time settings
■ Configure the SVP for Universal Coordinated Time.
■ Configure the SVP to not synchronize with an Internet time server.
Region settings
■ Hide the language bar.
■ Using System Locale, select the language for your region or preference, and then
restart the server.
■ In the Text Services and Input Language box, check whether Japanese(Japan) appears
under Installed services. If it does, click the current selection, and then click Remove.
Power management settings
■ Configure the high-performance power options to never turn off the display.
■ Change the advanced power settings to never turn off the hard disk.
■ Set the Minimum processor state percentage to 5.
ICMP reply settings. Click the following inbound rules, and then right-click and click
Enable Rules.
■ File and Printer Sharing (Echo Request - ICMPv4-In) (Profile=Domain)
■ File and Printer Sharing (Echo Request - ICMPv4-In) (Profile=Private)
■ File and Printer Sharing (Echo Request - ICMPv6-In) (Profile=Domain)
■ File and Printer Sharing (Echo Request - ICMPv6-In) (Profile=Private)
Computer name
■ Change the computer name to SVP-PC.
Note: The computer name, SVP-PC, can be changed either before or after
initial configuration.
Account name
■ Change the account name to SVP. Then open the Local Users and Groups window
and rename the user to SVP.
Password settings
■ Change the Windows administrator password to raid-login.
■ Change the password for the Windows operating system running on the SVP to raid-
login.
Internet Information Services (IIS) settings. IIS is an extensible web server created by
Microsoft for use with Windows operating systems.
■ Open and expand Internet Information Services, and then check the following check
boxes:
● FTP Server
● FTP Extensibility
● FTP Service
● Web Management Tools
● IIS 6 Management Compatibility
● IIS 6 Scripting Tools
● IIS 6 WMI Compatibility
● IIS Metabase and IIS 6 configuration compatibility
● IIS Management Console
● IIS Management Scripts and Tools
● IIS Management Service
■ Uncheck World Wide Web Services.
Procedure
1. Obtain the appropriate SVP ISO image for your storage system from the firmware
distribution set. Verify the ISO image corresponds to the firmware currently running
on the storage system.
2. Download the SVP ISO from TISC to the CE notebook, and then use an ISO reader to
mount the SVP ISO as the next available drive letter.
3. Launch Remote Desktop Connection and click the Show Options drop-down menu.
4. Click the Local Resources tab, and then click More.
5. Expand Drives, and then check the drive that has the ISO.
6. Click Connect.
7. When prompted to enter your credentials, enter your SVP password and click OK.
8. Perform the appropriate step:
■ If you have WinZip installed on the VM, extract the ISO locally, and then go to
step 9 to run the setup application.
■ Otherwise, click the mapped drive in the left pane and double-click the Setup
application in the workspace to the right of the pane (see the following figures),
and then go to step 9.
14. If the storage system firmware is current, click Select Update Objects and clear
Firmware (Storage System). Doing so adds the storage system without upgrading
the firmware Click Apply, and then click Confirm to added the storage system to
the SVP.
15. On the Desktop, click the Open StorageDevice List shortcut.
16. After the services are ready, click the storage system to start Hitachi Device Manager
- Storage Navigator.
Note: The Oracle Linux KVM server running the VM instance cannot be used
with the storage system if it belongs to different subnets, and if a router or a
firewall is filtering packets according to a defined condition. There is no
distance limit between the server running the SVP application and the storage
array being managed if they belong to the same subnet.
Note: In this figure, the HCS instance can also run as a VM instance.
Miscellaneous
■ WinZip
Hyper-threading
Verify that hyper-threading is active for the Oracle Linux KVM server and VM guest host.
(Hyper-threading is enabled by default.)
The following figure shows an example of hyper-threading on an Oracle Linux KVM
server.
Procedure
1. On the Oracle Linux KVM host, create a VM that is appropriate for the Windows
operating system being used.
2. Verify that the virtual network connection is properly assigned to the appropriate
virtual machine network.
3. Configure the network settings for the VM. The IP address must allow
communication with the storage system controllers.
Procedure
1. Configure the SVP guest OS.
2. Install the SVP software.
3. Deploy a cloned virtual SVP (optional).
4. Change the locale setting if the currently configured language is not appropriate.
Note: The ESXi server running the VM instance cannot be used with the
storage system they belong to different subnets, and if a router or a firewall is
filtering packets according to a defined condition. There is no distance limit
between the server running the SVP application and the storage array being
managed if they belong to the same subnet.
Miscellaneous
■ WinZip
Hyper-threading
To support a virtual SVP, verify that hyper-threading is active for the ESXi server and VM
guest host.
Procedure
1. Create a Windows 7 Professional x64 Service Pack 1 environment on the ESXi host.
2. Verify the virtual network connection is properly assigned to the appropriate virtual
machine network.
3. Configure network settings for the VM. The specified IP address must allow
communication with the storage system controllers.
Note: After completing the configuration task, configure the SVP guest
OS.
Procedure
1. Obtain the appropriate SVP ISO image for your storage system from the firmware
distribution set. Verify the ISO image corresponds to the firmware currently running
on the storage system.
2. Download the SVP ISO from TISC to the CE notebook, and then use an ISO reader to
mount the SVP ISO as the next available drive letter.
3. Launch Remote Desktop Connection and click the Show Options drop-down menu.
4. Click the Local Resources tab, and then click More.
5. Expand Drives, and then check the drive that has the ISO.
6. Click Connect.
7. When prompted to enter your credentials, enter your SVP password and click OK.
8. Perform the appropriate step:
■ If you have WinZip installed on the VM, extract the ISO locally, and then go to
step 9 to run the setup application.
■ Otherwise, click the mapped drive in the left pane and double-click the Setup
application in the workspace to the right of the pane (see the following figures),
and then go to step 9.
14. If the storage system firmware is current, click Select Update Objects and clear
Firmware (Storage System). Doing so adds the storage system without upgrading
the firmware Click Apply, and then click Confirm to added the storage system to
the SVP.
15. On the Desktop, click the Open StorageDevice List shortcut.
16. After the services are ready, click the storage system to start Hitachi Device Manager
- Storage Navigator.
Procedure
1. Prepare a master virtual SVP image:
a. Create the virtual SVP using the procedure in Configuring the virtual SVP (on
page 50) . You do not have to set up the network at this time.
b. Configure the SVP guest OS using the procedure in Configuring the SVP guest
OS (on page 53) .
c. Install the SVP using the procedure in Completing the configuration (on
page 40) . You do not have to configure the SVP IP address at this time. In
addition, do not register a DKC using the Storage Device List.
Hitachi Remote Ops No report from the agent Remote Ops detects SVP
during a 24-hour health failure -> SVP replacement.
check Contact a Hitachi Vantara
representative or
authorized service
provider.
Hitachi Command Suite RMI connection error (not See the Hitachi Command
alert) Suite Administrator Guide
(MK-90HC175).
Hitachi Ops Center Hardware alerts appear in See Hitachi Storage Advisor
Administrator Alert tiles, along with drill- User Guide (MK-94HSA004).
down views for detailed
information.
Note: The Hyper-V server running the VM instance cannot be used with the
storage system if it belongs to different subnets, and if a router or a firewall is
filtering packets according to a defined condition. There is no distance limit
between the server running the SVP application and the storage array being
managed if they belong to the same subnet.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 57
Minimum requirements for Hyper-V Server 2012 R2 VM
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 58
Installing and Configuring Hyper-V on Windows 2012 R2 Server
■ One-port NIC
■ SVP guest OS
■ 32-GB RAM
The SVP guest (1 DKC) (maximum one DKC per SVP guest OS)
For the latest interoperability updates and details, see https://
support.hitachivantara.com/en/user/answers/interoperability.html.
To use Hyper-V Manager successfully, you must first configure your hosts correctly. In
particular, confirm that each host:
■ Is licensed for Windows 2012R2 OS.
■ Meets the shared storage requirements for Hyper-V Management.
■ Meets the networking requirements for Hyper-V Management.
Procedure
1. Go to Start > Programs, and then click Administrative Tools > Server Manager.
2. In the Dashboard, click Add roles and features.
3. In the left pane of the Add Roles and Features Wizard window, click Hyper-V >
Virtual Switches. Then check the appropriate Ethernet controller.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 59
Installing the SVP software on a guest OS
4. Accept the default Hyper-V > Default Stores locations for storing files. If you need
to change the locations later, do so by using the Hyper-V settings.
Procedure
1. Double-click the Setup.exe file for Device Manager - Storage Navigator.
2. When prompted, select a language and accept the license agreement.
3. Accept the default directory or select a different one, and then click OK.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 60
Installing the SVP software on a guest OS
4. Select the IP addressing method (IPv4 or IPv5), enter the IP address of the SVP port
connecting the SVP and the storage system, and then click Apply.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 61
Installing the SVP software on a guest OS
Field Description
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 62
Installing the SVP software on a guest OS
Field Description
Not start service after addition Check if you do not want to start service
immediately2 after adding the storage system.
(Default is unchecked.)
1. Service personnel set the storage system information manually. User should
not select Manual to set it.
6. When the target storage systems list window opens, click Apply.
7. Confirm that the storage system appears in the Storage Device List.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 63
Installing the SVP software on a guest OS
This completes the procedure for installing the SVP software on a guest OS. If you
need to modify your configuration, refer to the instructions for installing the SVP on
a VMware ESXi host.
Chapter 8: Installing the SVP software on a Microsoft Hyper-V Server 2012 R2 Virtual Machine
Service Processor Technical Reference 64
Chapter 9: Upgrading the SVP software
Only a Hitachi Vantara representative or authorized service provider can install, upgrade,
and replace Hitachi Vantara physical and virtual SVPs. For more information, contact a
Hitachi Vantara representative.
Online update
Use automatic (recommended) or manual Windows updates to apply Microsoft security
patches for storage systems configured for online environment.
Offline update
You can apply appropriate Windows security patches by downloading stand-alone
packages from the Microsoft Update Catalog.
When the catalog appears, use the Search field at the top right of the page to find
security monthly rollups for Windows 7 or Windows 10, depending on the Windows
operating system running on your SVP.
Tip: Create a restore point before installing a patch. That way, you have a way
to back out of the patch if it causes issues after being installed.
About SSL
SSL is a protocol for transmitting data securely over the Internet. Two SSL-enabled peers
use their private key and public key to establish a secure communication session, with
each peer encrypting transmitted data with a randomly generated and agreed-upon
symmetric key.
The following terms are associated with SSL:
■ Keypair: A keypair is two mathematically related cryptographic keys consisting of a
private key and its associated public key.
■ Server certificate: A server certificate forms an association between an identity (in this
case, the SVP server) and a specific public key and private key. A server certificate is
used to identify the SVP server to a client, so that the server and client can
communicate using SSL. Certificates can be self-signed or issued by a certificate
authority (CA). Self-signed certificates are generated by you, and the subject of the
certificate is the same as the issuer of the certificate. A client PC and SVP on an
internal LAN behind a firewall might provide sufficient security. Certificates issued by
the CA are signed and trusted server certificates, where a Certificate Signing Request
(CSR) is sent to and certified by a trusted CA such as VeriSign. Using a certificate from
a CA provides higher reliability than a self-signed certificate, but is also more
expensive and can include several requirements.
To prevent a man-in-the middle attack, the encryption shown in notation B (between SVP
and storage system) verifies the validity of the connection by using the certificate that
was uploaded to the SVP in advance and by using the certificate of the storage system.
The same certificate must be uploaded to the SVP and the storage system.
Note: If a certificate for the SVP or the storage system is changed, the SVP
does not operate normally. Upload the certificate to the storage system
before uploading the certificate to the SVP.
Different certificates can be used to connect to the SVP and web server.
For connecting to the SVP SVP and storage system If a certificate for the SVP
or the storage system was
uploaded, the SVP will not
operate normally.
For connecting to the web SVP and storage system If a certificate for the SVP
server or storage system was
uploaded, the SVP will not
operate normally.
Creating private and public keys requires a dedicated program, such as those you can
download from the OpenSSL website.
Procedure
1. Download OpenSSL.
2. Create a private key.
3. Create a public key.
4. Acquire a signed certificate.
5. Upload the signed SSL certificate.
6. Import the certificate into the web browser (optional).
7. Block HTTP communications.
Procedure
1. Download and install the openssl.exe file from the OpenSSL website.
In the following example, the openssl.exe file is installed to the c:\openssl
folder.
2. If the read-only attribute is set, remove this attribute from the c:\openssl folder.
3. Open a command prompt.
4. Move the current directory to the folder to which the key file is output, such as
c:\key.
5. Execute the following command: c:\key > c:\openssl\bin\openssl genrsa
-out server.key 2048
A file called server.key is created in the c:\key folder. This file becomes the
private key.
Procedure
1. Open a command prompt and issue the following command: C:\key >
c:\openssl\bin\openssl req -sha256 -new -key server.key –config
c:\openssl\bin\openssl.cfg -out server.csr
This command uses SHA-256 as a hash algorithm. The server.csr file is created in
the C:\key folder as a public key.
Note: Do not use MD5 or SHA-1 for a hash algorithm due to its low
security level. Use SHA-256 for a hash algorithm.
2. Enter the following information in the prompt:
■ Country Name (two-letter code)
■ State or Province Name
■ Locality Name
■ Organization Name
■ Organization Unit Name
■ Common Name
■ To create a self-signed certificate, enter the IP address of the server (SVP). The
name you entered here is used as the server name (host name). To obtain a
signed and trusted certificate, verify that the server name matches the host
name of the SVP.
■ Email Address
■ Challenge password (optional)
■ Company name (optional)
The following example shows a sample command prompt input.
When you send a request to a certificate authority, specify SVP as the host name. There
will be an extra charge.
Best practice is to use self-signed certificates only when testing encrypted
communication.
To acquire a self-signed certificate:
Procedure
1. Open a command prompt.
2. Issue the following command: c:\key>c:\openssl\bin\openssl x509 -req -
sha256 -days 10000 -in server.csr -signkey server.key -out
server.crt
The validity period is set 10,000 days as an example. This command uses SHA-256
as a hash algorithm.
Note: Do not use MD5 or SHA-1 for a hash algorithm due to its low
security level. Use SHA-256 for a hash algorithm.
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. To verify a passphrase, move to the current directory to the folder (for example,
C:\key) to store the key file, and then issue the following command:
C:\key>c:\openssl\bin\openssl rsa -in [input_key_file] -out
[output_key_file]
Note: If you issue this command, the key file is overwritten. Therefore,
best practice is to back up a key file in advance and prepare the output
or input directory of the key file separately.
3. You cannot upload a passphrase-protected SSL certificate to the SVP. Enter the
passphrase that has been set and remove it using the command to verify a
passphrase: C:\key>c:\openssl\bin\openssl rsa –in server.key –out
server.key Enter pass phrase for server.key: Enter the
passphrase. Writing RSA key
4. If the path phrase entry is not required for the path phrase confirmation command,
you can upload a SSL certificate to the SVP :
a. Issue the following command: C:\key>c:\openssl\bin\openssl rsa -in
[input_key_file] -out [output_key_file].
b. Press the Enter key.
c. Issue the following command: Writing RSA key.
5. Verify that the path phrase is released, and then close the command prompt.
Note: In this procedure, the file name of the private key is set as client.key
and the file name of the SSL certificate, client.crt. In addition, the SSL
certificate file in the PKCS#12 format is output to c:\key.
This procedure assumes that the private key and the SSL certificate are stored in the
same folder, and that all users are logged out of Device Manager - Storage Navigator.
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. Issue the following command: C:\key>c:\openssl\bin\openssl pkcs12 -
export -in client.crt -inkey client.key -out
client.p12
3. Enter an arbitrary password. This password is used when uploading the SSL
certificate in the PKCS#12 format to the storage system. The characters used for the
password when creating the SSL certificate in the PKCS#12 format are shown as
follows. and specified by the character string of 128 characters or less: A-Z a-z 0-9 ! #
$ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ `{ | } ~
The client.p12 file is created in the C:\key folder. This file is the SSC certificate
converted into the PKCS#12 format.
4. Close the command prompt.
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. Move the current directory to the directory where the certificate update tool
(MappApacheCrtUpdate.bat) is located. Issue the following command: C:\MAPP
\wk\Supervisor\MappIniSet\ MappApacheCrtUpdate.bat r[absolute
path of the certificate file] r[absolute path of the private key
file].
3. At the message Press any key to continue the process…, enter an arbitrary
key.
4. Close the command prompt.
Procedure
1. On the SVP, start a Windows command prompt as an Administrator.
2. Move the current directory to the directory where the tool
(MappApacheCrtInit.bat) is located. Issue the following command: C:\MAPP\wk
\Supervisor\MappIniSet\ MappApacheCrtInit.bat
3. At the message Press any key to continue the process…, enter an arbitrary
key.
4. Close the command prompt.
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. Move the current directory to the directory where the certificate update tool
(MappL7SwitchGumSslCrtUpdate.bat) is located. Issue the following command:
C:\MAPP\wk\Supervisor\MappIniSet\
MappL7SwitchGumSslCrtUpdate.bat r[absolute path of the
certificate file]
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. Move the current directory to the directory where the certificate update tool
(MappSn2GumSslCrtUpdate.bat) is located. Issue the following command:
C:\MAPP\wk\Supervisor\MappIniSet\ MappSn2GumSslCrtUpdate.bat
r[absolute path of the certificate file]
Procedure
1. On the SVP, start a Windows command prompt as Administrator.
2. Move the current directory to the directory where the certificate update tool
(MappSn2GumSslCrtInit.bat) is located. Issue the following command: C:\MAPP
\wk\Supervisor\MappIniSet\MappSn2GumSslCrtInit.bat
3. At the message Press any key to continue the process…, enter an arbitrary
key.
4. Close the command prompt.
Procedure
1. Request all users to log out of HDvM - SN.
2. Using a management console PC attached to the SVP, connect to the SVP using
Windows Remote Desktop Client.
3. On the SVP, exit to a Windows command prompt as Administrator.
4. Move to the directory where the MappHttpBlock.bat tool is located, and then
issue the following command:
C:\MAPP\wk\Supervisor\MappIniSet\MappHttpBlock.bat
5. At the message Press any key to continue the process…, press any key,
and then close the command prompt window.
Procedure
1. Request all users to log out of HDvM - SN.
2. Using a management console PC attached to the SVP, connect to the SVP using
Windows Remote Desktop Client.
3. On the SVP, exit to a Windows command prompt as Administrator.
4. Move to the directory where the MappHttpBlock.bat tool is located, and then
enter the following command:
C:\MAPP\wk\Supervisor\MappIniSet\MappHttpRelease.bat
5. At the message Press any key to continue the process…, enter a port
number that is not being used by another device or application.
6. Close the command prompt window.
Caution: Do not connect network servers such as the proxy between the
client PC, SVP, and the storage system.
Procedure
1. Start the SVP, and then log on to it.
2. Configure the SVP to use a temporary port of 192.168.0.xxx, where xxx is a
number from 1 to 254, excluding 16 and 17.
3. Launch a web browser.
4. In the address bar, enter the IP address of controller 1.
When NAS modules are installed, the window for selecting Maintenance Utility or
NAS Manager is displayed. Select Maintenance Utility.
The Maintenance Utility logon window opens.
Note: Log on to the maintenance utility using a user account that has
administrative privileges.
5. The first time you log on to the maintenance utility, enter a password for the user
account:
a. On the Maintenance menu, click System Management > Change Password.
b. Enter a password.
c. Click Finish.
7. Change the storage system IP address in the Storage Device List window.
8. Set the SVP IP address.
9. Change the SVP IP address in the Storage Device List.
10. If you assigned a temporary IP address to the client PC, change it to meet the
subnet of your network environment.
Use this procedure if a storage system is not registered on the SVP or the storage system
service has not started.
Procedure
1. On the SVP, click Start > Control Panel > Network and Sharing Center.
2. Click Change adapter settings.
3. Click a network for which you want to set an IP address, and then set the IP address.
Procedure
1. On the SVP, click Start > All Programs > Device Manager - Storage Navigator >
StorageDeviceList.
The Storage Device List window opens.
2. In the top-right side of the window, click SVP IP Address.
Procedure
1. Request all users to log out of Device Manager - Storage Navigator.
2. On the SVP, exit to a Windows command prompt as Administrator.
3. Change to the directory to the location of the tool MappSetPortEdit.bat.
4. Enter the following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappSetPortEdit.bat _ [port number key name] _ [port number]
where _ indicates a space and the values [ ] indicate a parameter. For example:
>cd C:\Mapp\wk\Supervisor\MappIniset\mappsetportedit.bat
MAPPWebServer 10001
The following table shows the port numbers you can use. The communication
direction is outbound between the client PC to the SVP.
Note: Refer to the following table for port number assignments if the
storage system is using a physical service processor.
Port number
key name
(Windows
Firewall
inbound Initial value of Can the port SVP software
name) Protocol port number be closed? version
Automatic 83-03-01-
allocation xx/00 or later
Port number
key name
(Windows
Firewall
inbound Initial value of Can the port SVP software
name) Protocol port number be closed? version
Automatic 83-03-01-
allocation xx/00 or later
Note:
1. When the SVP software version is 83-03-01-xx/00 or later, unused port numbers
are allocated automatically from the described range during storage system
registration and a firewall is also set. The allocated ports numbers are used when
starting the storage system. When the SVP software version is earlier than
83-03-01-xx/00, ports 51100 and 5989 are used respectively.
The following TCP/IP port assignments are used by the storage system, other
devices, and applications.
161 UDP (SNMP uses this port to send traps from the
storage system) .
■ The effective range of the port number is 0 to 65535. Select a number that is not
already in use by another service.
■ Do not use port numbers from 1 to 1023 because they are reserved in other
applications. Instead, change the port numbers to 1024 or higher. However, the
port numbers of 2049, 4045, and 6000 cannot be used for MAPPWebServer and
MAPPWebServerHttps.
■ A management file of the port numbers used in the SVP follows. For example:
The management file of the port numbers is for reference only and should not
be changed. Close the management file of the port numbers when issuing the
change (initialization) command.
C:\Mapp\wk\Supervisor\mappiniset\mpprt\cnf
\mappsetportset.properties
■ Verify the port numbers to be used in the SVP. See Viewing the port number to
be used in the SVP (on page 98) .
■ The completion message is displayed following the service restart message.
■ The port number key name is case sensitive.
Procedure
1. On the SVP, exit to a Windows command prompt as Administrator.
2. Change to the directory where the tool MappSetPortEdit.bat is located, and then
issue the following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappSetPortEdit.bat
RMIClassLoader None
PreRMIServer None
DKCManPrivate None
CommonJettyStart None
CommonJettyStop None
RestAPIServerStop None
DeviceJettyStart None
DeviceJettyStop None
Note:
■ Stop the service of the storage system to be reallocated, and then perform
reallocation. If the service is performed without stopping it, stop the
service of the target storage system in the Storage Device List window,
and then start the service.
■ The DeviceJettyStart and DeviceJettyStop ports that are allocated when the
storage system service is started are not reallocated.
■ When the function using the ports is disabled, delete the allocated port
numbers.
Procedure
1. Log out of Hitachi Device Manager - Storage Navigator from the storage system to
be reallocated.
2. Stop the service of the storage system.
3. On the SVP, start a Windows command prompt as an Administrator.
4. Change the current directory to the directory where the tool exists. Run the
following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappPortManageRenum.bat_[Serial number](arbitrary)
The _ character indicates a space. The values in [ ] indicates a parameter.
When the [Serial number] is omitted, the command is performed for storage
systems running firmware version 83-03-01-xx/00 or later.
Procedure
1. Log out of Device Manager - Storage Navigator.
2. In the Storage Device List window, stop the services of all the storage systems that
have a Ready status.
3. On the SVP, start a Windows command prompt as an Administrator.
4. Change the current directory to the directory where the tool exists and run the
following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappPortManageInit.bat
8. At the confirmation message for reallocation, type y and press Enter to continue or
type n and press Enter to cancel the processing.
9. At the completion message, press any key to continue.
10. Repeat steps 6 through 9 to reallocate the port numbers for all the registered
storage systems.
11. Close the command prompt.
Procedure
1. On the SVP, start a Windows command prompt as an Administrator.
2. Change the current directory to the directory where the tool exists and run the
following command: C:\Mapp\wk\Supervisor
\MappIniSet>MappPortRangeSet.batr[Service port number]_[Range of
port numbers]
Note:
Port number key name and Default value of port number range can
be changed as shown in the following table. Zero number port is not
allocated regardless of this command setting.
■ The effective range of the port number range is 1 to 65535. Set the
port numbers so as to avoid conflict with those used in other
services.
■ Port numbers 1 to 1023 are reserved in other applications. If 1 to
1023 are excluded from the unavailable setting value, the applications
might not operate normally.
■ When changing a range of port numbers, enter a port range value
that is greater than or equal to the number of ports associated with
the number of storage systems registered in the Storage Device List.
■ The available character strings in the effective range are as follows:
"Number" "," "-" "rm"
To specify sequential values for the port number range, separate the
values with a hyphen. For example, to specify the range between
5989 and 5991 for SMIS_CIMOM port numbers, type:
MappPortRangeSet.bat SMIS_CIMOM 5989-5991.
To specify nonsequential values for the port range, separate each
value with a comma. For example, to specify the values 5989 and
5991 for SMIS_CIMOM port numbers, type: MappPortRangeSet.bat
SMIS_CIMOM 5989,5991.
You can also use a comma to specify one port number.For example,
to specify 5989 for SMIS_CIMOM port number, type:
MappPortRangeSet.bat SMIS_CIMOM 5989,5989
If "rm" is specified, delete the setting of the specified port number
key.
To remove the setting by each port number key name, use “rm” (for
example, PreRMIServer rm).
■ You can specify more than one command input parameter “[Port
number key name] * [Port number range] where * is a one-byte
space.
For example, MappPortRangeSet.bat PreRMIServer
51200-55000 SMIS_CIMOM 5989-6244,8000
■ The port number range set for unavailable cannot be used, even if it
is an effective range for other keys.
For example, when PreRMIServer 51100-51355 unavailable
51100-51200 is set, the port number range allocated by PreRMIServer
is 51201 to 51355.
Next steps
See Reallocating automatically allocated port numbers (on page 93) .
Procedure
1. On the SVP, start a Windows command prompt as an Administrator.
2. Change the current directory to the directory where the tool exists and run the
following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappPortRangeInit.bat.
Next steps
See Reallocating automatically allocated port numbers (on page 93) .
Procedure
1. On the SVP, start a Windows command prompt as an Administrator.
2. Change the current directory to the directory where the tool exists and run the
following command: C:\Mapp\wk\Supervisor\MappIniSet
\MappPortRefer.bat_[Serial number] (arbitrary)
The _ character indicates a space. The values in [ ] indicates a parameter.
When the serial numbers are omitted, the information of all the storage systems
registered in Storage Device List is displayed.
Procedure
1. If your network uses the spanning tree protocol (STP) Bridge Protocol Data Unit
(BPDU) guard on your network, perform the following Registry changes. Otherwise,
skip to step 2:
a. If you use the physical SVP supplied by Hitachi Vantara, verify the following
connections.
b. If you use the physical SVP supplied by Hitachi Vantara, remove the cable from
the LAN1 port on the SVP.
c. Click Start > Run.
d. In the Run dialog box, type regedit, and then click OK.
e. Go to the following key: HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Services\BridgeMP
g. For the DisableSTA DWORD, change the hexadecimal Value data value to 1,
and then click OK.
h. Restart the SVP, reconnect the cable to the LAN1 port on the SVP, and verify
connectivity through the network to the SVP.
2. Using Remote Desktop Connection, access the SVP using the storage system's
maintenance LAN port of 10.0.0.100.
3. In the Storage Device List window, click Stop Service. Wait up to five minutes for
the service to stop.
5. In the maintenance utility, click Administration > Network Setting, and then click
Set Up Network Settings.
10. Change the SVP IP address to match the new bridge IP address setting, and then
click Apply.
12. Select the Connect Information check box, change the IP addresses for CTL1 and
CTL2, and then click Apply.
14. Using Remote Desktop Connection, access the SVP using the new user LAN IP
address.
15. Open the Storage Device List window and verify that services are ready.
At the Confirm Remove message, click Yes. Repeat this step for the default
website and other FTP servers.
e. For Port, type 21. For SSL, click No SSL. Click Next.
g. From the Control Panel, open Administrative Tools and start Windows
Firewall with Advanced Security.
h. In the tree in the left pane, click Inbound Rules, and then click FTP Server
Passive, FTP Server Secure, and FTP Server. Right-click, and then click Enable
Rule.
Procedure
1. Stop the SVP service (see Stopping and restarting the service in each storage
system).
2. On the SVP desktop, double-click the Open StorageDeviceList icon.
The Storage Device List window opens.
3. In the Storage Device List window, click x for the storage system that you want to
delete.
Note: The upgrade time can take up to 9 hours to complete when NAS
modules are installed.
Procedure
1. At the console PC connected to the physical SVP or running the SVP software, insert
the media containing the SVP firmware media.
2. On the SVP, create a new folder, and then copy all of the files from the SVP firmware
media into the new folder.
3. In the new folder, right-click the Setup.exe file and click Execute as
Administrator.
4. In the following screens, click Next, accept the license agreement and click Next,
and then click Yes. If the Windows Security Alert window opens, click Allow
access.
5. Select the top option, and then click Finish.
6. When prompted, select the IP addressing method (IPv4 or IPv6), enter the IP
address of the port connecting the SVP and the storage system, and then click
Apply.
7. When the target storage systems list window opens, click Add.
Field Description
Field Description
Do not start service after addition Select if you do not want to start service
immediately2 after adding the storage system.
(Default is unchecked.)
Notes:
1. Service personnel set the storage system information manually. User should
not select Manual to set it.
2. To register multiple storage systems, best practice is to check this check box for
the settings so that they do not start services while they are added.
9. Click Apply.
The storage system is added to the target storage systems list window.
Note: If you added the wrong storage system, select it in the window,
and then click Remove.
10. To update the firmware and add storage systems at the same time, select the
storage systems and click Select Update Objects.
11. To update the firmware of the storage system being registered, check Firmware
(Storage System). Otherwise, leave it unchecked.
12. To register additional storage systems, repeat steps 6 through 10.
13. Click Apply in the target storage system list window.
14. To upgrade the firmware, click Confirm when the Update software and firmware
window opens.
The Run Update Firmware window opens and the upgrade starts automatically.
15. When the following screen opens, use the status bar under the Software (Storage
Navigator) column to monitor the update status. The following table lists the status
conditions.
Status Description
16. If you did not check Firmware (Storage System) in step 10, skip steps 15 through
18. Otherwise, update the firmware by clicking Update below the Firmware
(Storage System) column.
The Update Firmware[Online] window shows the status of the firmware upgrade.
When the upgrade completes, the following window opens.
Status Description
Note:
1. When NAS Modules are not installed, the installation time is approximately 3.5
hours. When NAS modules are installed, the installation time is approximately 9
hours.
Procedure
1. From a management console PC, connect to the SVP using Windows Remote
Desktop Connection.
2. Close all Device Manager - Storage Navigator sessions on the SVP.
3. On the SVP, exit to a Windows command prompt as Administrator.
4. Move to the directory where the tool exists, and then issue the following command:
Procedure
1. Copy the backup file to a folder on the SVP.
2. On the SVP, exit to a Windows command prompt as Administrator.
3. Move to the directory where the backup file exists, and then issue the following
command:
Hitachi Remote Ops No report from the agent Remote Ops detects SVP
during a 24-hour health failure -> SVP replacement.
check Contact a Hitachi Vantara
representative or
authorized service
provider.
Hitachi Command Suite RMI connection error (not See the Hitachi Command
alert) Suite Administrator Guide
(MK-90HC175).
Hitachi Ops Center Hardware alerts appear in See Hitachi Storage Advisor
Administrator Alert tiles, along with drill- User Guide (MK-94HSA004).
down views for detailed
information.
Note: If you perform this procedure while the cable connection between the
SVP and network switch is looped, it creates a logical loop of the network
connection and the entire network becomes inoperable. Verify the network
connection is not looped before performing this procedure.
Procedure
1. From the PC connected to the SVP, click Start > All Programs > Accessories >
Remote Desktop Connection.
2. Right-click the command prompt and click Run as Administrator.
3. At the command prompt, type regedit.
4. Edit the following registry settings:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BridgeMP
Name: DisableSTA
Value: DWORD(0x1)
5. Restart the SVP operating system. The SVP port no longer transmits BPDU frames.
If you cannot connect to the SVP by using the default IP address, use the following
emergency log on address: http://<default SVP IP address>/dev/storage/
<model number><system serial number>/emergency.do. The following table lists
the variables in the URL.
VSP G700
VSP F700