Table Of Contents

A - B - C - D - E - F - H - I - J - L - M - N - O - P - R - S - T - U - V - W -

Index

A

access

connection security, understanding   B-7

control, security and   B-6

security levels

approver   3-2

help desk   3-2

network administrator   3-2

network operator   3-2

system administrator privileges   3-2

understanding   3-2

adding

AAA client   7-11

event filters   4-42

external connections to the CiscoWorks Server   5-1

creating and installing connections   5-1

Management Connection Tasks (table)   5-2

using CCO connections   5-2

administration

CiscoWorks Server administrative tasks   4-1

back-end processes, managing   4-38

basic administrative tools, using   4-2

data management tasks, performing   4-32

jobs and resources, managing   4-39

log files, maintaining   4-30

secure connections, managing   4-2

third-party certificates, working with   4-18

system administrator information

administrative preferences, setting   7-2

Basic Administrative Tasks (table)   4-2

logging in as   2-6

network administrator access, security level   3-2

passwords reserved for initial login   2-6

security levels, understanding   3-2

username reserved for   3-3

ANI (Asynchronous Network Interface) Server, configuring   3-8

applications not appearing, troubleshooting   9-14

applying for security certificates from the CA   4-21

approver access, security level   3-2

audience for this document   ix

audit logs, viewing   8-6

authentication modules, pluggable, using   3-4

authorization and authentication, configuring

authentication, about   7-4

Cisco Secure ACS mode

AAA client, adding   7-11

administrator account, adding   7-9

authentication server, selecting   7-14

login module, setting to TACACS+   7-13

user account, adding   7-16

local mode   7-6

authentication server, synchronizing   7-7

login module, setting to CiscoWorks local   7-6

B

back-end processes, managing   4-38

back-up data, directory structure of   9-15

Backup Directory Structure (table)   4-33

Sample CMF Backup Directory (table)   9-15

Base64-encoded X.509 certificate format, definition   B-10

browser function, troubleshooting

browser not responding   9-12

exception message on Java security, troubleshooting   9-10

C

CA (Certificate Authority)

applying for security certificates from   4-21

definition   4-18

cautions

regarding

database, restoring   6-4

default password at installation   2-6

file back-up procedure   4-30

user accounts, setting up   3-2

significance of   x

CCO connections, using with CiscoWorks Server   5-2

CD One error message, troubleshooting   9-13

certificates

managing

creating self-signed   4-15

modifying   4-17

terms and definitions in   B-8

Base64-encoded X-509 certificate format   B-10

Certificate Authority (CA)   4-18

CiscoWorks TrustStore or KeyStore   B-11

Java Secure Socket Extension (JSSE)   2-2

PKCS#8   B-8, B-9

public key, private key   B-9

SSH   B-9

SSL   B-9

third-party, working with   4-18

obtaining   4-19

requirements for   4-18

uploading   4-22

understanding   B-7

Certificate Signing Request (CSR) file, creating   4-19

Cisco.com, accessing   xiii

Cisco Secure ACS

authorization and authentication through, configuring

AAA client, adding   7-11

administrator account, adding   7-9

authentication server, selecting   7-14

login module, setting to TACACS+   7-13

user account, adding   7-16

CiscoWorks Classic, migrating to CiscoWorks   A-1

CiscoWorks Data Migration (table)   A-2

data migration   A-2

nontransitioned features   A-4

partially transitioned features   A-3

transitioned features   A-2

CiscoWorks daemon manager shutdown, caution regarding   4-30

CiscoWorks Server

administering   4-1

back-end processes, managing   4-38

basic administrative tools, using   4-2

data management tasks, performing   4-32

jobs and resources, managing   4-39

log files, maintaining   4-30

secure connections, managing   4-2

third-party certificates, working with   4-18

applications, and   1-2

server options, enabling   1-2

time zone settings, understanding   1-3

applications, verifying installation and versions   9-3

CCO connections, using with   5-2

collecting information on   9-2

configuring   3-1

ANI Server, configuring   3-8

Java Plug-in, installing   3-7

pluggable authentication modules, using   3-4

user accounts   3-1

diagnosing problems with (see troubleshooting)   9-1

external connections, adding to   5-1

creating and installing connections   5-1

Management Connection Tasks (table)   5-2

using CCO connections   5-2

learning more about   1-4

locked out of, troubleshooting   9-15

performing tasks on   1-3

Tasks Accessible By All Users (table)   1-3

process failures, checking   9-2

process status, checking   9-3

self-test, performing   9-2

setting up   3-1

troubleshooting lock out   9-15

CiscoWorks Server, setting up

configuring the ANI Server   3-8

Java Plug-in, installing   3-7

pluggable authentication modules, using   3-4

user accounts   3-1

user accounts security levels, understanding   3-2

user accounts security tasks, performing   3-3

CiscoWorks Trust Store or KeyStore, definition   B-11

CLI

disabling SSL from   4-12

enabling SSL from   4-5

cmf as part of database path, explanation of   9-15

configuring

CiscoWorks Server   3-1

Java Plug-in, installing   3-7

pluggable authentication modules, using   3-4

user accounts, setting up   3-1

connections, external, adding to the CiscoWorks Server   5-1

creating and installing connections   5-1

Management Connection Tasks (table)   5-2

using CCO connections   5-2

connection security, understanding   B-7

security certificates   B-7

terms and definitions   B-8

Base64-encoded X.509 certificate format   B-10

Certificate Authority (CA)   4-18

CiscoWorks TrustStore or KeyStore   B-11

Java Secure Socket Extension (JSSE)   2-2

PKCS#8   B-8, B-9

public key, private key   B-9

SSH   B-9

SSL   B-9

connectivity

Connectivity Tools Tasks (table)   9-4

tasks   9-2

checking process failures   9-2

checking process status   9-3

collecting server information   9-2

performing a self-test   9-2

verifying installation of applications and versions   9-3

testing   9-4

creating

Certificate Signing Request (CSR) files   4-19

external connections for the CiscoWorks Server   5-1

Management Connection Tasks (table)   5-2

self-signed security certificates   4-15

shortcuts to tasks   2-8

D

daemon manager

not starting, troubleshooting   9-7

shutdown, caution regarding   4-30

database

administration   6-1

backing up the database   6-1

database passwords, changing   6-6

data management basics   6-1

restoring the database   6-4

inaccessible, troubleshooting   9-16

path includes "cmf," explanation   9-15

data management tasks, performing   4-32

deleting event filters   4-43

desktop, navigation and use   2-1

Common Navigation Tree Items (table)   2-7

invoking the desktop   2-2

in normal mode   2-2

in SSL enabled mode   2-3

logging in   2-6

online help   2-9

using   2-6

diagnosing problems (see troubleshooting)   9-1

documentation   x

audience for this   ix

feedback, submitting electronically   xiv

obtaining   xiii

CD-ROM   xiii

Cisco.com   xiii

ordering   xiii

other Cisco publications and information   xvii

typographical conventions in   ix

E

editing

event filters   4-43

scheduled jobs   8-3

EDS (Event Distribution Service), managing   4-40

Event Distribution Service Tasks (table)   4-40

not registered with daemon manager, troubleshooting   9-13

ESS (Event Service Software)

changing the port for

in Solaris   9-22

in Windows   9-23

managing   4-43

event filters, managing

adding   4-42

changing   4-43

deleting   4-43

expired server certificate, how to handle   9-12

exporting and importing user information   4-44

external connections, adding to the CiscoWorks Server   5-1

F

fall back options, understanding   3-5

files

CSR files, creating   4-19

file back-up procedure, caution regarding (table)   4-30

file ownership, and permissions   B-3

log files, maintaining   4-30

UNIX   4-30

Windows   4-31

filters (see event filters, managing)   4-41

H

help   xiv

(see also troubleshooting)   9-1

Cisco.com   xv

collecting information before a call   7-20

online (CiscoWorks desktop)   2-9

TAC   xv

Escalation Center   xvi

website   xvi

help desk access, security level   3-2

I

importing and exporting user information   4-44

installing

applications   9-3

external connections to the CiscoWorks Server   5-1

Java Plug-in   3-7

invalid server certificate, troubleshooting   9-12

invoking the desktop   2-2

in normal mode   2-2

in SSL enabled mode   2-3

J

Java Plug-in

installing   3-7

troubleshooting

not enabled after enabling in the control panel   9-13

not enabled in client browser   9-13

which version to use   9-14

Java Secure Socket Extension (JSSE), definition   2-2

jobs

backup, viewing   8-5

completed, viewing   8-2

restore, viewing   8-5

scheduled, viewing and editing   8-3

jobs and resources, managing   4-39

jrm, checking   9-20

L

licensing information, updating   7-2

locked out of CiscoWorks Server, troubleshooting   9-15

log files, maintaining   4-30

on UNIX   4-30

on Windows 2000 or Windows NT   4-31

logging   8-1

audit logs, viewing   8-6

backup jobs, viewing   8-5

completed jobs, viewing   8-2

operation logs, viewing   8-8

restore jobs, viewing   8-5

schedule jobs, viewing and editing   8-3

login

IDs, predefined   3-2

Login Module Fall Back Options (table)   3-5

Login Module Options on Supported Platforms (table)   3-6

modules, selecting a new   3-6

procedure   2-6

M

migrating from CiscoWorks Classic (see CiscoWorks Classic)   A-1

modules

login, selecting a new   3-6

pluggable authentication, using   3-4

selecting a new login   3-6

N

navigation tree, using   2-9

Netscape Navigator on UNIX systems, troubleshooting   9-14

network

administrator (see system administrator)   3-2

events, managing

EDS (Event Distribution Service)   4-40

ESS (Event Service Software)   4-43

filters, creating   4-41

user information, exporting and importing   4-44

operator access, security level   3-2

O

online help (CiscoWorks desktop)   2-9

operation logs, viewing   8-8

osagent, changing the port for

Solaris   9-21

Windows   9-20

overview of CiscoWorks   1-1

applications and the CiscoWorks Server   1-2

server options, enabling   1-2

time zone settings, understanding   1-3

learning more about the CiscoWorks Server   1-4

performing tasks on the CiscoWorks Server   1-3

P

passwords reserved for initial system administrator login   2-6

PKCS#8, definition   B-8, B-9

pluggable authentication modules, using   3-4

predefined login IDs provided by CiscoWorks   3-2

private key, definition   B-9

Process Management Tasks (table)   4-38

public key, definition   B-9

R

remote connectivity, security and   B-5

runtime security, understanding   B-4

S

secure connections, managing   4-2

SSL, disabling   4-10

SSL, enabling   4-3

from the CLI   4-5

from the desktop   4-4

Secure Shell (SSH), definition   B-9

Secure Socket Layer (see SSL)   2-3

security

access control, and   B-6

certificates, managing   4-14

creating self-signed   4-15

modifying   4-17

certificates, third-party, working with   4-18

obtaining   4-19

requirements for   4-18

uploading   4-22

certificates, understanding   B-7

levels, understanding   3-2

partially transitioned security features   A-3

device- and application-level   A-3

Security Manager (SA Password)   A-3

tasks, performing   3-3

understanding   B-1

general   B-2

server   B-2

server certificate for CiscoWorks expires, how to handle   9-12

server security, understanding   B-2

administrator-imposed   B-7

connection   B-7

security certificates   B-7

terms and definitions   B-8

server-imposed   B-2

access control   B-6

files, file ownership, permissions   B-3

other systems   B-6

remote connectivity   B-5

runtime   B-4

setting up the CiscoWorks Server   3-1

configuring the ANI Server   3-8

Java Plug-in, installing   3-7

pluggable authentication modules, using   3-4

user accounts   3-1

user account security levels, understanding   3-2

user account security tasks, performing   3-3

shortcuts to tasks, creating   2-8

Solaris, changing ports in

for ESS   9-22

for osagent   9-21

SSL

certificate, changing   7-18

definition   B-9

disabling   4-10

from the CLI   4-12

from the desktop   4-11

enabled mode, invoking the desktop in   2-3

enabled mode, troubleshooting   9-11

enabling   4-3

from the CLI   4-5

from the desktop   4-4

initialization, troubleshooting   9-12

Initializer class not found, troubleshooting   9-7

starting CiscoWorks applications, troubleshooting   9-14

system administration   7-1

administrative preferences, specifying   7-2

authentication and authorization, configuring   7-4

about authentication   7-4

Cisco Secure ACS mode   7-8

local mode   7-6

licensing information, updating   7-2

SSL certificate, changing   7-18

troubleshooting information, collecting   7-20

user information, editing   7-20

system administrator

access, security level   3-2

access privileges   3-2

logging in as   2-6

network administrator access, security level   3-2

username reserved for   3-3

T

TAC (Technical Assistance Center)   xv

Escalation Center   xvi

website   xvi

TACACS Manager application, nontransitioned feature   A-4

technical support   xiv

(see also troubleshooting)   9-1

Cisco.com   xv

collecting information before a call   7-20

TAC   xv

Escalation Center   xvi

website   xvi

terms and definitions in security certificates   B-8

Base64-encoded X.509 certificate format   B-10

Certificate Authority (CA)   4-18

CiscoWorks TrustStore or KeyStore   B-11

Java Secure Socket Extension (JSSE)   2-2

PKCS#8   B-8, B-9

public key, private key   B-9

SSH   B-9

SSL   B-9

third-party certificates, working with   4-18

obtaining   4-19

applying for from the CA   4-21

Certificate Signing Request (CSR) file, creating   4-19

requirements for   4-18

uploading   4-22

time zone settings, understanding   1-3

troubleshooting

applications not appearing   9-14

back-up data, directory structure of   9-15

Backup Directory Structure (table)   4-33

Sample CMF Backup Directory (table)   9-15

browser

exception message about Java   9-10

no longer responding   9-12

CiscoWorks applications, starting   9-14

CiscoWorks Server   9-1

device connectivity, testing   9-4

locked out of, diagnosing   9-15

server status, verifying   9-2

Server Tools Tasks (table)   9-2

daemon manager does not start after installing an application from the 2.0 release   9-7

database

inaccessability   9-16

path includes "cmf"   9-15

EDS not registered with daemon manager   9-13

ESS port change

Solaris   9-22

Windows   9-20, 9-23

FAQs list   9-5

information, collecting for a support call   7-20

invoking the desktop in secure mode   9-11

Java Plug-in

not enabled after enabling in the control panel   9-13

not enabled in client browser   9-13

which version to use   9-14

Netscape Navigator, using on UNIX systems   9-14

osagent port change

Solaris   9-21

Windows   9-20

SSL

initialization   9-12

Initializer class not found   9-7

Troubleshooting Suggestions (table)   9-29

UNIX systems and Netscape Navigator   9-14

typographical conventions in this document   ix

U

UNIX systems

invoking Netscape Navigator on, troubleshooting   9-14

maintaining log files on   4-30

user accounts, setting up

caution regarding   3-2

security

levels, understanding   3-2

tasks, performing   3-3

user information

editing   7-20

exporting and importing   4-44

user name reserved for system administrator   3-3

V

verifying

application installation and versions   9-3

CiscoWorks Server status   9-2

viewing

audit logs   8-6

backup jobs   8-5

jobs, completed   8-2

operation logs   8-8

restore jobs   8-5

schedule jobs   8-3

W

Windows 2000 or Windows NT systems

changing the port

for ESS   9-23

for osagent   9-20

ensuring that jrm is running   9-20

maintaining log files on   4-31