User Guide for CiscoWorks Common Services 3.0
Index

Table Of Contents

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

access

connection security, understanding A-7

control, security and A-6

adding devices to the device list 4-8

for AUS management 4-10

for cluster management 4-11

for standard management 4-9

using dcrcli 4-39

administering

Common Services 3-51

Daemon Manager, using 3-52

process details, viewing 3-54

processes, managing 3-53

processes, starting 3-54

processes, stopping 3-55

DCA 4-26

Master-Slave configuration, prerequisites 4-27

mode, changing 4-26

user-defined fields, adding 4-29

user-defined fields, deleting 4-31

user-defined fields, renaming 4-30

applications

Application panels in CWHP 2-6

applications on another server 2-6

traditional applications 2-7

licensing 3-68

licensing information, viewing 3-70

licensing procedure 3-69

obtaining a license 3-68

updating licenses 3-70

registering with CWHP 2-8

troubleshooting

applications not appearing 8-11

audience for this document xiii

audit logs, viewing 3-49

AUS (Auto Update Server)

managing 4-24

adding 4-24

deleting 4-25

editing 4-25

setting up 4-10

B

backing up data 3-55

back-up data

directory structure of 8-11

sample CMF backup directory 8-11

restoring data 3-58

using CLI 3-57

Base64-encoded X.509 certificate format, definition A-10

browser-server security (see SSL) 3-2

buttons on CWHP, using 2-8

C

cautions

significance of xiv

cautions regarding

admin password, guest password 3-5

backups, and the CiscoWorks Daemon Manager 3-78

data restoration from a backup 3-58

restarting Daemon Manager on Solaris 3-52

restarting Daemon Manager on Windows 3-53

CD One error message, troubleshooting 8-10

certificates

terms and definitions in A-8

Base64-encoded X-509 certificate format A-10

CA (certificate authority) A-11

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

understanding A-7

Cisco.com connection, managing 3-44

CiscoWorks Homepage (see CWHP) 2-1

CiscoWorks Server, troubleshooting 8-1

collecting information on 8-2

FAQs 8-6

locked out of 8-12

MDC support 8-3

process status, checking 8-2

self-test, performing 8-1

CiscoWorks Trust Store or KeyStore, definition A-11

cmf as part of database path, explanation of 8-12

Common Services Server, overview of 1-3

connection security, understanding A-7

security certificates A-7

terms and definitions A-8

Base64-encoded X.509 certificate format A-10

CA (certificate authority) A-11

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

connectivity

Connectivity Tools Tasks (table) 8-5

tasks 8-1

checking process status 8-2

collecting server information 8-2

MDC support 8-3

performing a self-test 8-1

testing 8-4

CWHP (CiscoWorks Homepage) 2-1

Common Services panel 2-5

configuring 2-8

registering applications 2-8

registering links 2-11

setting up 2-12

invoking 2-2

normal mode (HTTP) 2-2

SSL Enabled mode (HTTPS) 2-3

logging in to Common Services 2-4

online help, using 2-13

using 2-5

Application panels 2-6

CiscoWorks Product Updates panel 2-7

Common Services panel 2-5

Device Troubleshooting panel 2-7

Resources panel 2-7

toolbar buttons 2-8

web server port numbers, changing 2-14

D

Daemon Manager, using 3-52

restarting on Solaris 3-52

restarting on Windows 3-53

database

inaccessible, troubleshooting 8-13

path includes "cmf," explanation 8-12

DCA (Device and Credential Admin) 4-1

administering 4-26

Master-Slave configuration, prerequisites 4-27

mode, changing 4-26

user-defined fields, adding 4-29

user-defined fields, deleting 4-31

user-defined fields, renaming 4-30

architecture 4-5

Master DCR 4-6

Slave DCR 4-6

Standalone DCR 4-6

AUS management

adding devices 4-24

deleting AUS 4-25

editing devices 4-25

CSV file samples 4-31

CSV 2.0 4-31

CSV 3.0 4-32

devices, managing 4-7

adding 4-8

deleting 4-12

excluding 4-21

exporting 4-18

importing 4-14

viewing the device list 4-22

reports, generating 4-23

XML file sample 4-36

DCR (Device and Credential Repository) CLI interface, using 4-39

adding devices 4-39

CDR mode, changing 4-42

deleting devices 4-39

editing devices 4-40

exporting using 4-44

importing using 4-43

listing attributes 4-40

viewing current DCR mode 4-41

viewing device details 4-41

deleting

AUS (Auto Update Server) 4-25

device groups 5-22

devices

from DCA 4-12

from groups 5-19

from the device list, using dcrcli 4-39

peer server certificates 3-15

user-defined fields from DCA 4-31

users 3-8

Device and Credential Admin (see DCA) 4-1

Device Center 6-1

debugging tools, enabling 6-5

device connectivity, checking 6-6

packet capture 6-12

Ping, using 6-8

SNMP Set 6-11

SNMP Walk, using 6-9

Traceroute, using 6-9

invoking 6-3

launching 6-2

management functions

management tasks 6-15

reports, displaying 6-15

using 6-3

Device Selector 6-4

Device Summary 6-4

management functions 6-5

reports 6-15

devices, managing 4-7

(see also Groups, administering) 5-1

(see also Software Center) 7-1

adding 4-8

for AUS management 4-10

for cluster management 4-11

for standard management 4-9

credentials

editing 4-13

exporting 4-18

importing 4-14

deleting 4-12

device list, viewing 4-22

excluding 4-21

exporting 4-18

using CLI 4-44

using DCA user interface 4-19

importing 4-14

using CLI 4-43

using DCA user interface 4-15

Device Troubleshooting panel of CWHP 2-7

diagnosing problems (see troubleshooting) 8-1

documentation xiv

additional online xvi

audience for this xiii

related to this product xvi

typographical conventions in xiii

E

editing

AUS (Auto Update Server) 4-25

device credentials in DCA 4-13

device group details 5-20

devices in the device list, using dcrcli 4-40

local user profile 3-6

user profiles 3-8

EDS (Event Distribution Service), troubleshooting 8-10

ESS (Event Service Software)

changing the port for

in Solaris 8-17

in Windows 8-18

excluding devices from the device list 4-21

expired server certificate, how to handle 8-10

exporting devices and credentials 4-18

using CLI 4-44

using DCA user interface 4-19

F

file ownership, and permissions A-3

G

Groups, administering 5-1

concepts 5-2

common 5-4

container groups 5-3

dynamic groups 5-3

group hierarchy 5-2

secured views 5-6

shared 5-4

static groups 5-3

system-defined, user-defined 5-3

creating 5-14

deleting

devices from groups 5-19

groups 5-22

details

modifying 5-20

viewing 5-19

editing 5-20

Group Administration 5-14

membership, assigning 5-18

multi-server setup 5-7

properties, specifying 5-15

refreshing 5-22

rules, defining 5-17

single server setup 5-7

syntax checking 5-18

system- and user-defined attributes 5-23

H

help

CiscoWorks Product Updates panel of CWHP 2-7

online, using 2-13

online documentation xvi

I

IBM SecureWay Directory, changing login module to 3-25

importing devices and credentials 4-14

using CLI 4-43

using DCA user interface 4-15

J

Java Plug-in, version to use 8-10

jobs

managing 3-73

jrm, checking 8-15

K

KerberosLogin, changing login module to 3-27

L

licensing CiscoWorks applications 3-68

license information, viewing 3-70

licensing procedure 3-69

obtaining a license 3-68

updating licenses 3-70

links, registering with CWHP 2-11

locked out of CiscoWorks Server, troubleshooting 8-12

log files, maintaining 3-78

Log File Status report, generating 3-45

on UNIX 3-78

on Windows 3-80

logrot utility, configuring 3-81

logrot utility, running 3-82

logrot utility, using 3-81

login module

fallback options for, understanding

ACS 3-43

non-ACS 3-35

setting to ACS 3-35

setting to non-ACS 3-24

CiscoWorks Local, changing to 3-25

fallback options, understanding 3-35

IBM SecureWay Directory, changing to 3-25

KerberosLogin, changing to 3-27

local NT system, changing to 3-29

Local UNIX system, changing to 3-28

MS Active Directory, changing to 3-29

Netscape Directory, changing to 3-30

Radius, changing to 3-32

TACACS+, changing to 3-33

logrot utility

configuring 3-81

running 3-82

using 3-81

M

managing

Common Services jobs 3-73

Common Services resources 3-76

messaging online users 3-72

MS Active Directory, changing login module to 3-29

multi-server mode, and security 3-10

N

Netscape Directory, changing login module to 3-30

Netscape Navigator on UNIX systems, troubleshooting 8-10

O

online users, messaging 3-72

osagent, changing the port for

Solaris 8-16

Windows 8-15

overviews of

CiscoWorks Common Services 1-1

Common Services Server information 1-3

time zone settings, understanding 1-3

what's new in this release 1-2

Common Services Server 1-3

P

packet capture, using 6-12

peer server certificates

deleting 3-15

setting up 3-14

Permissions report, generating 3-46

PKCS#8, definition A-9

port numbers for web servers, changing 2-14

preferences for system, modifying 3-83

private key, definition A-9

Process Status report, generating 3-48

public key, definition A-9

R

Radius, changing login module to 3-32

remote connectivity, security and A-5

reports

Common Services reports 3-45

audit logs, viewing 3-49

Log File Status report 3-45

Permissions report 3-46

Process Status report 3-48

Users Logged In report 3-47

DCA reports, generating 4-23

Device Center reports 6-15

resources, managing in Common Services 3-76

Resources panel of CWHP 2-7

restoring backed-up data 3-58

runtime security, understanding A-4

S

Secure Shell (SSH), definition A-9

security

access control, and A-6

certificates, understanding A-7

understanding A-1

general A-2

server A-2

security, setting up 3-1

AAA mode, setting up 3-20

authentication, about 3-21

Cisco.com login, setting up 3-44

Cisco Secure ACS support 3-22

login module

fallback options, understanding 3-35

setting to ACS 3-35

setting to non-ACS 3-24

multi-server mode 3-10

peer server certificates

deleting 3-15

setting up 3-14

proxy server, setting up 3-44

security levels, understanding 3-5

self-signed certificates, creating 3-9

single server mode 3-1

SSL 3-2

enabling from the CiscoWorks Server 3-2

enabling from the CLI 3-4

SSO (Single Sign-On) mode

changing 3-18

enabling 3-15

user management

about user accounts 3-4

local user profile, modifying 3-6

peer server, setting up 3-11

user profiles, editing 3-8

users, adding 3-7

users, deleting 3-8

self-test information, collecting 3-72

server, configuring 3-1

AAA mode, setting up 3-20

applications, licensing 3-68

licensing information, viewing 3-70

licensing procedure 3-69

obtaining a license 3-68

updating licenses 3-70

Cisco.com login, setting up 3-44

CiscoSecureACS support 3-22

Common Services, administering 3-51

backing up data 3-55

Daemon Manager, using 3-52

jobs, managing 3-73

processes, managing 3-53

resources, managing 3-76

restoring data 3-58

server information, collecting 3-71

Common Services authentication, about 3-21

log files, maintaining 3-78

on UNIX 3-78

on Windows 3-80

login module

setting to ACS 3-35

setting to non-ACS 3-24

login module fallback options, understanding

for ACS mode 3-43

for non-ACS mode 3-35

peer server certificates

deleting 3-15

setting up 3-14

proxy server, setting up 3-44

reports, generating 3-45

audit logs, viewing 3-49

Log File Status report 3-45

Permissions report 3-46

Process Status 3-48

Users Logged In 3-47

security (see security, setting up) 3-1

self-signed certificates, creating 3-9

SSO (Single Sign-On) mode

changing 3-18

enabling 3-15

system preferences, modifying 3-83

user accounts, about 3-4

user management

adding 3-7

deleting 3-8

local user profile, modifying 3-6

peer server, adding 3-11

user profile, editing 3-8

users, local, setting up 3-6

server certificate for CiscoWorks, expiration, how to handle 8-10

server information, collecting (Common Services) 3-71

server security, understanding A-2

administrator-imposed A-7

connection A-7

security certificates A-7

terms and definitions A-8

server-imposed A-2

access control A-6

files, file ownership, permissions A-3

other systems A-6

remote connectivity A-5

runtime A-4

SNMP Set, using 6-11

SNMP Walk, using 6-9

Software Center 7-1

activity logs, viewing 7-9

device downloads, scheduling 7-7

device updates, performing 7-4

packages, deleting 7-6

software updates, performing 7-2

Solaris, changing ports in

for ESS 8-17

for osagent 8-16

SSL, enabling on the server 3-2

from the CiscoWorks Server 3-2

from the CLI 3-4

SSL, definition A-9

SSO (Single Sign-On) mode

changing 3-18

enabling 3-15

starting CiscoWorks applications, troubleshooting 8-11

T

TACACS+, changing login module to 3-33

technical support

CiscoWorks Product Updates panel of CWHP 2-7

terms and definitions in security certificates A-8

Base64-encoded X.509 certificate format A-10

CA (certificate authority) A-11

CiscoWorks TrustStore or KeyStore A-11

PKCS#8 A-9

public key, private key A-9

SSH A-9

SSL A-9

time zone settings, understanding 1-3

toolbar buttons on CWHP, using 2-8

troubleshooting

(see also debugging tools under Device Center) 6-5

applications not appearing 8-11

back-up data, directory structure of 8-11

CiscoWorks applications, starting 8-11

CiscoWorks Server 8-1

device connectivity, testing 8-4

FAQs 8-6

locked out of, diagnosing 8-12

server status, verifying 8-1

Server Tools Tasks (table) 8-1

database

inaccessability 8-13

path includes "cmf" 8-12

devices, with the Device Troubleshooting panel of CWHP 2-7

EDS not registered with daemon manager 8-10

ESS port change

Solaris 8-17

Windows 8-18

FAQs list 8-6

Java Plug-in, which version to use 8-10

jrm 8-15

Netscape Navigator on a UNIX system 8-10

osagent port change

Solaris 8-16

Windows 8-15

suggestions 8-33

UNIX systems, and Netscape Navigator 8-10

typographical conventions in this document xiii

U

UNIX systems

changing login module to local UNIX system 3-28

invoking Netscape Navigator on, troubleshooting 8-10

log files, maintaining on 3-78

user accounts

about 3-4

setting up

Cisco.com 3-44

local 3-6

Users Logged In report, generating 3-47

V

verifying CiscoWorks Server status 8-1

viewing

application license information 3-70

audit logs 3-49

device list 4-22

group details 5-19

process details 3-54

Software Center activity logs 7-9

W

web server port numbers, changing 2-14

what's new in this release 1-2

Windows 2000 or Windows NT systems

changing the port

for ESS 8-18

for osagent 8-15

ensuring that jrm is running 8-15

log files, maintaining on 3-80