Table Of Contents

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

access

connection security, understanding A-7

control, security and A-6

adding devices to the device list 4-9

for AUS management 4-11

for cluster management 4-14

for standard management 4-9

using dcrcli 4-48

administering

Common Services 3-63

Daemon Manager, using 3-64

process details, viewing 3-66

processes, managing 3-66

processes, starting 3-66

processes, stopping 3-67

DCA 4-42

Master-Slave configuration, prerequisites 4-43

mode, changing 4-43

user-defined fields, adding 4-46

user-defined fields, deleting 4-47

user-defined fields, renaming 4-46

applications

Application panels in CWHP 2-6

applications on another server 2-7

traditional applications 2-7

licensing 3-79

licensing information, viewing 3-81

licensing procedure 3-80

obtaining a license 3-80

updating licenses 3-81

registering with CWHP 2-9

troubleshooting

applications not appearing 8-11

audience for this document xv

audit logs, viewing 3-60

AUS (Auto Update Server)

managing 4-39

adding 4-39

deleting 4-41

editing 4-40

setting up 4-11

B

backing up data 3-67

back-up data

directory structure of 8-11

sample CMF backup directory 8-11

restoring data 3-69

using CLI 3-68

Base64-encoded X.509 certificate format, definition A-10

browser-server security (see SSL) 3-3

buttons on CWHP, using 2-8

C

cautions

significance of xvi

cautions regarding

admin password, guest password 3-6

backups, and the CiscoWorks Daemon Manager 3-89

data restoration from a backup 3-70

restarting Daemon Manager on Solaris 3-64

restarting Daemon Manager on Windows 3-65

certificates

terms and definitions in A-8

Base64-encoded X-509 certificate format A-10

CA (certificate authority) A-10

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

understanding A-7

Cisco.com connection, managing 3-55

CiscoWorks Homepage (see CWHP) 2-1

CiscoWorks Server, troubleshooting 8-1

collecting information on 8-2

FAQs 8-6

locked out of 8-12

MDC support 8-3

process status, checking 8-2

self-test, performing 8-1

CiscoWorks Trust Store or KeyStore, definition A-11

cmf as part of database path, explanation of 8-12

Common Services Server, overview of 1-3

connection security, understanding A-7

security certificates A-7

terms and definitions A-8

Base64-encoded X.509 certificate format A-10

CA (certificate authority) A-10

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

connectivity

Connectivity Tools Tasks (table) 8-5

tasks 8-1

checking process status 8-2

collecting server information 8-2

MDC support 8-3

performing a self-test 8-1

testing 8-5

CWHP (CiscoWorks Homepage) 2-1

Common Services panel 2-6

configuring 2-9

registering applications 2-9

registering links 2-12

setting up 2-13

invoking 2-2

normal mode (HTTP) 2-2

SSL Enabled mode (HTTPS) 2-3

logging in to Common Services 2-4

online help, using 2-14

using 2-5

Application panels 2-6

CiscoWorks Product Updates panel 2-8

Common Services panel 2-6

Device Troubleshooting panel 2-7

Resources panel 2-8

toolbar buttons 2-8

web server port numbers, changing 2-15

D

Daemon Manager, using 3-64

restarting on Solaris 3-64

restarting on Windows 3-65

database

inaccessible, troubleshooting 8-13

path includes "cmf," explanation 8-12

DCA (Device and Credential Admin) 4-1

administering 4-42

Master-Slave configuration, prerequisites 4-43

mode, changing 4-43

user-defined fields, adding 4-46

user-defined fields, deleting 4-47

user-defined fields, renaming 4-46

architecture 4-7

Master DCR 4-7

Slave DCR 4-7

Standalone DCR 4-8

AUS management

adding devices 4-39

deleting AUS 4-41

editing devices 4-40

CSV file samples 4-27

CSV 2.0 4-27

CSV 3.0 4-28

devices, managing 4-8

adding 4-9

deleting 4-17

excluding 4-37

exporting 4-34

importing 4-19

viewing the device list 4-38

reports, generating 4-41

XML file sample 4-31

DCR (Device and Credential Repository) CLI interface, using 4-48

adding devices 4-48

CDR mode, changing 4-52

deleting devices 4-49

editing devices 4-50

exporting using 4-57

importing using 4-54

listing attributes 4-50

viewing current DCR mode 4-51

viewing device details 4-52

deleting

AUS (Auto Update Server) 4-41

device groups 5-23

devices

from DCA 4-17

from groups 5-20

from the device list, using dcrcli 4-49

peer server certificates 3-23

user-defined fields from DCA 4-47

users 3-10

Device and Credential Admin (see DCA) 4-1

Device Center 6-1

debugging tools, enabling 6-5

device connectivity, checking 6-5

packet capture 6-12

Ping, using 6-8

SNMP Set 6-10

SNMP Walk, using 6-9

Traceroute, using 6-8

invoking 6-2

launching 6-2

management functions

management tasks 6-15

reports, displaying 6-15

using 6-3

Device Selector 6-3

Device Summary 6-4

management functions 6-4

reports 6-15

devices, managing 4-8

(see also Groups, administering) 5-1

(see also Software Center) 7-1

adding 4-9

for AUS management 4-11

for cluster management 4-14

for standard management 4-9

credentials

editing 4-17

exporting 4-34

importing 4-19

deleting 4-17

device list, viewing 4-38

excluding 4-37

exporting 4-34

using CLI 4-57

using DCA user interface 4-35

importing 4-19

using CLI 4-54

using DCA user interface 4-19

Device Troubleshooting panel of CWHP 2-7

diagnosing problems (see troubleshooting) 8-1

documentation xvi

additional online xviii

audience for this xv

related to this product xviii

typographical conventions in xv

E

editing

AUS (Auto Update Server) 4-40

device credentials in DCA 4-17

device group details 5-21

devices in the device list, using dcrcli 4-50

local user profile 3-7

user profiles 3-9

ESS (Event Service Software)

changing the port for

in Solaris 8-17

in Windows 8-18

excluding devices from the device list 4-37

expired server certificate, how to handle 8-10

exporting devices and credentials 4-34

using CLI 4-57

using DCA user interface 4-35

F

file ownership, and permissions A-3

G

Groups, administering 5-1

concepts 5-3

common 5-5

container groups 5-4

dynamic groups 5-3

group hierarchy 5-3

secured views 5-7

shared 5-5

static groups 5-3

system-defined, user-defined 5-4

creating 5-15

deleting

devices from groups 5-20

groups 5-23

details

modifying 5-21

viewing 5-20

editing 5-21

Group Administration 5-15

membership, assigning 5-19

multi-server setup 5-8

properties, specifying 5-16

refreshing 5-22

rules, defining 5-18

single server setup 5-7

syntax checking 5-19

system- and user-defined attributes 5-25

H

help

CiscoWorks Product Updates panel of CWHP 2-8

online, using 2-14

online documentation xviii

I

IBM SecureWay Directory, changing login module to 3-34

importing devices and credentials 4-19

using CLI 4-54

using DCA user interface 4-19

J

Java Plug-in, version to use 8-10

jobs

managing 3-84

jrm, checking 8-15

K

KerberosLogin, changing login module to 3-35

L

licensing CiscoWorks applications 3-79

license information, viewing 3-81

licensing procedure 3-80

obtaining a license 3-80

updating licenses 3-81

links, registering with CWHP 2-12

locked out of CiscoWorks Server, troubleshooting 8-12

log files, maintaining 3-89

Log File Status report, generating 3-56

on UNIX 3-89

on Windows 3-90

logrot utility, configuring 3-92

logrot utility, running 3-93

logrot utility, using 3-91

login module

fallback options for, understanding

ACS 3-54

non-ACS 3-44

setting to ACS 3-44

setting to non-ACS 3-33

CiscoWorks Local, changing to 3-34

fallback options, understanding 3-44

IBM SecureWay Directory, changing to 3-34

KerberosLogin, changing to 3-35

local NT system, changing to 3-37

Local UNIX system, changing to 3-36

MS Active Directory, changing to 3-38

Netscape Directory, changing to 3-40

Radius, changing to 3-41

TACACS+, changing to 3-42

logrot utility

configuring 3-92

running 3-93

using 3-91

M

managing

Common Services jobs 3-84

Common Services resources 3-87

messaging online users 3-83

MS Active Directory, changing login module to 3-38

multi-server mode, and security 3-19

N

Netscape Directory, changing login module to 3-40

Netscape Navigator on UNIX systems, troubleshooting 8-10

O

online users, messaging 3-83

osagent, changing the port for

Solaris 8-16

Windows 8-15

overviews of

CiscoWorks Common Services 1-1

Common Services Server information 1-3

time zone settings, understanding 1-3

what's new in this release 1-2

Common Services Server 1-3

P

packet capture, using 6-12

peer server certificates

deleting 3-23

setting up 3-22

Permissions report, generating 3-57

PKCS#8, definition A-9

port numbers for web servers, changing 2-15

preferences for system, modifying 3-94

private key, definition A-9

Process Status report, generating 3-59

public key, definition A-9

R

Radius, changing login module to 3-41

remote connectivity, security and A-5

reports

Common Services reports 3-56

audit logs, viewing 3-60

Log File Status report 3-56

Permissions report 3-57

Process Status report 3-59

Users Logged In report 3-58

DCA reports, generating 4-41

Device Center reports 6-15

resources, managing in Common Services 3-87

Resources panel of CWHP 2-8

restoring backed-up data 3-69

runtime security, understanding A-4

S

Secure Shell (SSH), definition A-9

security

access control, and A-6

certificates, understanding A-7

understanding A-1

general A-2

server A-2

security, setting up 3-3

AAA mode, setting up 3-29

authentication, about 3-30

Cisco.com login, setting up 3-55

Cisco Secure ACS support 3-32

login module

fallback options, understanding 3-44

setting to ACS 3-44

setting to non-ACS 3-33

multi-server mode 3-19

peer server certificates

deleting 3-23

setting up 3-22

proxy server, setting up 3-55

security levels, understanding 3-6

self-signed certificates, creating 3-10

single server mode 3-3

SSL 3-3

enabling from the CiscoWorks Server 3-4

enabling from the CLI 3-5

SSO (Single Sign-On) mode

changing 3-27

enabling 3-24

user management

about user accounts 3-5

local user profile, modifying 3-7

peer server, setting up 3-19

user profiles, editing 3-9

users, adding 3-8

users, deleting 3-10

self-test information, collecting 3-83

server, configuring 3-1

AAA mode, setting up 3-29

applications, licensing 3-79

licensing information, viewing 3-81

licensing procedure 3-80

obtaining a license 3-80

updating licenses 3-81

Cisco.com login, setting up 3-55

CiscoSecureACS support 3-32

Common Services, administering 3-63

backing up data 3-67

Daemon Manager, using 3-64

jobs, managing 3-84

processes, managing 3-66

resources, managing 3-87

restoring data 3-69

server information, collecting 3-82

Common Services authentication, about 3-30

log files, maintaining 3-89

on UNIX 3-89

on Windows 3-90

login module

setting to ACS 3-44

setting to non-ACS 3-33

login module fallback options, understanding

for ACS mode 3-54

for non-ACS mode 3-44

peer server certificates

deleting 3-23

setting up 3-22

proxy server, setting up 3-55

reports, generating 3-56

audit logs, viewing 3-60

Log File Status report 3-56

Permissions report 3-57

Process Status 3-59

Users Logged In 3-58

security (see security, setting up) 3-3

self-signed certificates, creating 3-10

SSO (Single Sign-On) mode

changing 3-27

enabling 3-24

system preferences, modifying 3-94

user accounts, about 3-5

user management

adding 3-8

deleting 3-10

local user profile, modifying 3-7

peer server, adding 3-19

user profile, editing 3-9

users, local, setting up 3-7

server certificate for CiscoWorks, expiration, how to handle 8-10

server information, collecting (Common Services) 3-82

server security, understanding A-2

administrator-imposed A-7

connection A-7

security certificates A-7

terms and definitions A-8

server-imposed A-3

access control A-6

files, file ownership, permissions A-3

other systems A-6

remote connectivity A-5

runtime A-4

SNMP Set, using 6-10

SNMP Walk, using 6-9

Software Center 7-1

activity logs, viewing 7-10

device downloads, scheduling 7-8

device updates, performing 7-5

packages, deleting 7-8

software updates, performing 7-2

Solaris, changing ports in

for ESS 8-17

for osagent 8-16

SSL, enabling on the server 3-3

from the CiscoWorks Server 3-4

from the CLI 3-5

SSL, definition A-9

SSO (Single Sign-On) mode

changing 3-27

enabling 3-24

starting CiscoWorks applications, troubleshooting 8-11

T

TACACS+, changing login module to 3-42

technical support

CiscoWorks Product Updates panel of CWHP 2-8

terms and definitions in security certificates A-8

Base64-encoded X.509 certificate format A-10

CA (certificate authority) A-10

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

time zone settings, understanding 1-3

toolbar buttons on CWHP, using 2-8

troubleshooting

(see also debugging tools under Device Center) 6-5

applications not appearing 8-11

back-up data, directory structure of 8-11

CiscoWorks applications, starting 8-11

CiscoWorks Server 8-1

device connectivity, testing 8-5

FAQs 8-6

locked out of, diagnosing 8-12

server status, verifying 8-1

Server Tools Tasks (table) 8-1

database

inaccessability 8-13

path includes "cmf" 8-12

devices, with the Device Troubleshooting panel of CWHP 2-7

ESS port change

Solaris 8-17

Windows 8-18

FAQs list 8-7

Java Plug-in, which version to use 8-10

jrm 8-15

Netscape Navigator on a UNIX system 8-10

osagent port change

Solaris 8-16

Windows 8-15

suggestions 8-34

UNIX systems, and Netscape Navigator 8-10

typographical conventions in this document xv

U

UNIX systems

changing login module to local UNIX system 3-36

invoking Netscape Navigator on, troubleshooting 8-10

log files, maintaining on 3-89

user accounts

about 3-5

setting up

Cisco.com 3-55

local 3-7

Users Logged In report, generating 3-58

V

verifying CiscoWorks Server status 8-1

viewing

application license information 3-81

audit logs 3-60

device list 4-38

group details 5-20

process details 3-66

Software Center activity logs 7-10

W

web server port numbers, changing 2-15

Windows 2000 or Windows NT systems

changing the port

for ESS 8-18

for osagent 8-15

ensuring that jrm is running 8-15

log files, maintaining on 3-90