Table Of Contents

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

AAA clients, configuring 4-49

access

connection security, understanding A-5

control, security and A-4

ACS

applications, registering 4-43

applications, registering through CLI 4-44

authentication failure 4-45

Common Services tasks 4-53

custom roles 4-52

predefined roles 4-52

roles on NDG basis, assigning 4-55

roles to user groups, assigning 4-54

roles to users, assigning 4-54

ACS Administrators, configuring 4-47

ACS Connection Status 3-5

adding devices to the device list 5-40

for AUS management 5-43

for cluster management 5-45

for standard management 5-41

using dcrcli 5-99

administering

Common Services 4-63

Daemon Manager, using 4-64

processes, back-end processes 4-68

processes, managing 4-65

processes, managing through CLI 4-70

processes, starting 4-67, 4-72

processes, stopping 4-68

processes, viewing 4-66

processes, viewing specific state processes 4-67

DCR 5-89

Master-Slave configuration, prerequisites 5-90

mode, changing 5-90

user-defined fields, adding 5-92

user-defined fields, deleting 5-93

user-defined fields, renaming 5-93

application registration, ACS 4-43

application registration through CLI, ACS 4-44

applications

Application panels in CiscoWorks Home Page 2-7

licensing

licensing information, viewing 4-84

licensing procedure 4-84

obtaining a license 4-84

updating licenses 4-85

registering with CiscoWorks Home Page 4-102

troubleshooting

applications not appearing 10-20

audience for this document 1-xv

Audit Log 4-61

AUS (Auto Update Server)

managing 5-69

adding 5-69

deleting 5-70

editing 5-70

setting up 5-43

Authentication failure in ACS 4-45

B

backing up data 4-72

back-up data

directory structure of 10-24

sample CMF backup directory 10-24

using CLI 4-74

Base64-encoded X.509 certificate format, definition A-7

browser issues 2-10

address bar, disabling 2-11

modal dialog box, enabling 2-11

popup dialog boxes, displaying 2-10

reports download, enabling 2-12

status bar, disabling 2-11

tabbed browsing, disabling 2-11

browsers, supported 2-10

browser-server security. See SSL

C

cautions

significance of 1-xv

cautions regarding

admin password, guest password 4-7

backups, and the CiscoWorks Daemon Manager 4-92

data restoration from a backup 4-75

restarting Daemon Manager on Solaris 4-64

restarting Daemon Manager on Windows 4-65

certificates

terms and definitions in A-6

Base64-encoded X-509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

understanding A-5

Cisco.com connection, managing 4-56

CiscoWorks - ACS Integration 4-46

ACS server, setting up 4-47

AAA clients, configuring 4-49

ACS Administrators, configuring 4-47

CiscoWorks Admin Users, configuring in ACS 4-50

Multiple ACS servers, configuring 4-51

NDG, creating 4-48

login module, changing 4-51

prerequisites 4-47

roles in ACS 4-51

Common Services Tasks 4-53

Custom roles 4-52

predefined roles 4-52

roles to Users and User groups, assigning 4-53

Network Access restrictions 4-56

CiscoWorks Administrative Users, configuring in ACS 4-50

CiscoWorks Home Page 2-1

Common Services panel 2-7

configuring 4-101

registering applications 4-102

registering links 4-104

setting up 4-105

invoking 2-2

normal mode (HTTP) 2-2

SSL Enabled mode (HTTPS) 2-3

dialog boxes, reducing     1

Firefox 2.0     1

Internet Explorer 6.0     1

Internet Explorer 7.0     1

security alerts, reducing     1

layout 2-6

logging in to Common Services 2-6

online help, using 2-12

using

Application panels 2-7

CiscoWorks Product Updates panel 2-8

Common Services panel 2-7

Device Diagnostic Tools panel 2-8

navigation tools 2-9

Resources panel 2-8

too lbar buttons 2-8

web server port numbers, changing 2-13

CiscoWorks LMS Portal

invoking 2-2

CiscoWorks Server, troubleshooting 10-1

collecting information on 10-1

FAQs 10-3

locked out of 10-5

MDC support 10-2

process status, checking 10-1

self-test, performing 10-1

CiscoWorks Server back-end process 4-68

CiscoWorks Server Processes 4-68, 4-70

CiscoWorks Trust Store or KeyStore, definition A-7

cmf as part of database path, explanation of 10-5

Common Services Home 3-1

Layout 3-2

Panes 3-3

Backup Status 3-6

Device Credentials and Admin Settings 3-8

Device Management Tasks 3-11

Management Tasks 3-13, 3-14

Online Users 3-7

Recently Completed Jobs 3-8

Reports 3-13

Security Settings 3-4

ACS Connection Status     1

System Tasks 3-11

Common Services Server, overview of 1-6

connection security, understanding A-5

security certificates A-5

terms and definitions A-6

Base64-encoded X.509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

connectivity

Connectivity Tools Tasks (table) 10-3

tasks 10-1

checking process status 10-1

collecting server information 10-1

MDC support 10-2

performing a self-test 10-1

testing 10-2

Custom roles in ACS 4-52

D

Daemon Manager, using 4-64

restarting on Solaris 4-64

restarting on Windows 4-65

database

inaccessible, troubleshooting 10-25

path includes "cmf," explanation 10-5

DCR

administering 5-89

Master-Slave configuration, prerequisites 5-90

mode, changing 5-90

user-defined fields, adding 5-92

user-defined fields, deleting 5-93

user-defined fields, renaming 5-93

architecture 5-8

Master DCR 5-8

Slave DCR 5-8

Standalone DCR 5-9

AUS management

adding devices 5-69

deleting AUS 5-70

editing devices 5-70

CSV file samples 5-59

CSV 2.0 5-59

CSV 3.0 5-60

devices, managing 5-40

adding 5-40

deleting 5-49

excluding 5-67

exporting 5-64

importing 5-51

viewing the device list 5-68

Device Selector, using (See Device Selector) 5-76

reports, generating 5-70

using features, Master-Slave Setup 5-110

dcr

implications on ACS 5-108

DCR (Device and Credential Repository) CLI interface, using 5-98

adding devices 5-99

CDR mode, changing 5-103

deleting devices 5-100

editing devices 5-101

exporting using 5-107

importing using 5-104

listing attributes 5-101, 5-102

viewing current DCR mode 5-102

viewing device details 5-102

deleting

AUS (Auto Update Server) 5-70

device groups 6-21

devices

from DCR 5-49

from the device list, using dcrcli 5-100

user-defined fields from DCR 5-93

users 4-10

Device and Credential Admin 5-1

Device Center 8-1

debugging tools, enabling 8-4

management station to device 8-4

packet capture 8-12

Ping, using 8-7

SNMP Set 8-10

SNMP Walk, using 8-8

Traceroute, using 8-8

invoking 8-2

launching 8-2

management functions

management tasks 8-16

reports, displaying 8-16

using 8-3

Device Selector 8-3

reports 8-16

Device Diagnostic Tools panel of CiscoWorks Home Page 2-8

devices, discovery 5-9

scheduling 5-31

adding 5-31

deleting 5-32

editing 5-32

viewing status 5-33

viewing details 5-33

devices added to DCR 5-38

devices updated to DCR 5-38

reachable devices 5-36

summary 5-33

total devices discovered 5-35

unreachable devices 5-37

devices, discovery settings

configuring 5-10

configuring filter settings 5-21

configuring global settings 5-24

configuring module settings 5-11

configuring seed devices 5-13

configuring SNMP settings 5-18

viewing 5-28

viewing summary 5-27

devices, discovery starting 5-30

devices, managing 5-40

adding 5-40

for AUS management 5-43

for cluster management 5-45

for standard management 5-41

credentials

editing 5-50

exporting 5-64

importing 5-51

deleting 5-49

device list, viewing 5-68

excluding 5-67

exporting 5-64

using CLI 5-107

using Device and Credential Admin user interface 5-66

importing 5-51

using CLI 5-104

using Device and Credential Admin user interface 5-53

See also Groups, administering

See also Software Center

Device Selector 5-76

Device Selector settings 5-82

searching devices 5-79

Advanced Search 5-79

Simple Search 5-79

selecting devices 5-78

using Device Selector 5-76

diagnosing problems. See troubleshooting

discovering devices 5-9

discovery, scheduling 5-31

discovery CLI interface, using 5-97

start 5-97

stop 5-98

view discovery 5-98

discovery features in

ACS mode 5-110

Master-Slave setup 5-110

discovery filter settings, configuring 5-21

discovery global settings, configuring 5-24

discovery module settings, configuring 5-11

discovery settings

viewing summary 5-27

discovery settings, viewing 5-28

discovery SNMP settings 5-18

discovery start 5-30

disk space, threshold configuring 4-99

documentation 1-xvi

additional online 1-xvi

audience for this 1-xv

related to this product 1-xvi

typographical conventions in 1-xv

E

editing

AUS (Auto Update Server) 5-70

device credentials in DCR 5-50

device group details 6-19

devices in the device list, using dcrcli 5-101

local user profile 4-8

user profiles 4-9

ESS (Event Service Software)

changing the port for

in Solaris 10-22

in Windows 10-22

excluding devices from the device list 5-67

expired server certificate, how to handle 10-12

exporting devices and credentials 5-64

using CLI 5-107

using Device and Credential Admin user interface 5-66

F

file ownership, and permissions A-2

G

Groups, administering 6-1

concepts 6-2

common 6-4

container groups 6-3

dynamic groups 6-3

group hierarchy 6-3

secured views 6-5

shared 6-4

static groups 6-3

system-defined, user-defined 6-3

creating 6-9

deleting

groups 6-21

details

modifying 6-19

viewing 6-18

editing 6-19

Group Administration 6-9

group membership, assigning 6-17

multi-server setup 6-6

properties, specifying 6-10

refreshing 6-20

rules, defining 6-11

composite rule 6-13

range operator 6-14

simple rule 6-12

single server scenario 6-6

single server setup 6-6

syntax checking 6-13, 6-14

system- and user-defined attributes 6-16

system defined attributes 6-16

H

help

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

online documentation 1-xvi

Hostname change script, using 4-106

I

IBM SecureWay Directory, changing login module to 4-30

importing devices and credentials 5-51

using CLI 5-104

using Device andf Credential Admin user interface 5-53

IP Address range operator, See range operator

J

Java Plug-in, version to use 10-4

jobs

managing 4-88

jrm, checking 10-7

K

KerberosLogin, changing login module to 4-31

L

licensing CiscoWorks applications

license information, viewing 4-84

licensing procedure 4-84

obtaining a license 4-84

updating licenses 4-85

links, registering with CiscoWorks Home Page 4-104

LMS Setup Center 7-1

categories 7-2

Data Collection Schedule 7-7

Data Collection Settings 7-5

Data Purge Schedule 7-9

Security Settings 7-4

System Settings 7-3

launching LMS Setup Center 7-2

local user policy setup 4-5

locked out of CiscoWorks Server, troubleshooting 10-5

log files, maintaining 4-91

Log File Status report, generating 4-58

on UNIX 4-94

on Windows 4-95

logrot utility, configuring 4-95

logrot utility, running 4-96

logrot utility, using 4-95

login module

setting to ACS 4-40

application, unregistering through CLI 4-44

application registration 4-43

application registration through CLI 4-44

setting to non-ACS 4-29

CiscoWorks Local, changing to 4-30

IBM SecureWay Directory, changing to 4-30

KerberosLogin, changing to 4-31

local NT system, changing to 4-33

Local UNIX system, changing to 4-32

MS Active Directory, changing to 4-34

Netscape Directory, changing to 4-37

Radius, changing to 4-38

TACACS+, changing to 4-38

logrot utility

configuring 4-95

running 4-96

using 4-95

M

managing

Common Services jobs 4-88

Common Services resources 4-90

messaging online users 4-88

MS Active Directory, changing login module to 4-34

Multiple ACS servers, configuring 4-51

multi-server mode, and security 4-18

N

NAR. See Network Access Restrictions.

navigation tools on CiscoWorks Home Page, using 2-9

NDG, creating 4-48

Netscape Directory, changing login module to 4-37

Network Access Restrictions 4-56

Network Device Groups, creating. See NDG, creating

O

online help, using 2-12

online users, messaging 4-88

osagent, changing the port for

Solaris 10-6

Windows 10-6

overview

authentication using login modules 4-26

overview of

CiscoWorks Common Services 1-1

Common Services Server information 1-6

time zone settings, understanding 1-6

what's new in this release 1-2

Common Services Server 1-6

P

packet capture, using 8-12

peer server certificates

setting up 4-20

Permissions report, generating 4-58

PKCS#8, definition A-6

port numbers for web servers, changing 2-13

Predefined roles in ACS 4-52

preferences for system, modifying 4-97

private key, definition A-6

processes, managing 4-70

Process Status report, generating 4-60

PSUCLI 9-11

device packages, installing 9-12

device packages, listing dependents 9-14

device packages, listing device packages 9-15

device packages, uninstalling 9-13

device updates, downloading 9-14

software updates, downloading 9-13

software updates, querying 9-12

public key, definition A-6

R

Radius, changing login module to 4-38

range operator 6-14

remote connectivity, security and A-4

reports

Common Services reports 4-57

Log File Status report 4-58

Permissions report 4-58

Process Status report 4-60

Users Logged In report 4-59

DCR Admin reports, generating 5-70

Device Center reports 8-16

resources, managing in Common Services 4-90

Resources panel of CiscoWorks Home Page 2-8

runtime security, understanding A-3

S

Secure Shell (SSH), definition A-6

security

access control, and A-4

certificates, understanding A-5

understanding A-1

general A-1

server A-2

security, setting up 4-2

AAA mode, setting up 4-25

Cisco.com login, setting up 4-56

Cisco Secure ACS support 4-27

configuring, ACS Integration 4-46

login module

setting to ACS 4-40

application, unregistering through CLI     1

application registration     1

application registration through CLI     1

setting to non-ACS 4-29

multi-server mode 4-18

peer server certificates

setting up 4-20

proxy server, setting up 4-56

security levels, understanding 4-7

SSL 4-2

enabling from the CiscoWorks Server 4-3

enabling from the CLI 4-3

SSO (Single Sign-On) mode

changing 4-24

enabling 4-21

user management

local user profile, modifying 4-8

peer server, setting up 4-18

user profiles, editing 4-9

users, adding 4-8

users, deleting 4-10

users, setting up through CLI 4-10

seed devices, configuring 5-13

Self Signed certificates 4-12

self-test information, collecting 4-87

server, configuring 4-1

AAA mode, setting up 4-25

authentication using login modules 4-26

ACS Integration 4-46

applications, licensing

licensing information, viewing 4-84

licensing procedure 4-84

obtaining a license 4-84

updating licenses 4-85

certificate setup 4-12

Cisco.com login, setting up 4-56

CiscoSecureACS support 4-27

Common Services, administering 4-63

backing up data 4-72

Daemon Manager, using 4-64

jobs, managing 4-88

processes, managing 4-65

processes, managing through CLI 4-70

resources, managing 4-90

server information, collecting 4-85

disk space, threshold configuring 4-99

log files, maintaining 4-91

List of log files 4-92

on UNIX 4-94

on Windows 4-95

logging, configuring 4-98

login module

ACS 4-40

application, unregistering through CLI     1

application registration     1

application registration through CLI     1

ACS, setting up 4-40

setting to ACS 4-40

setting to ACS, application registration 4-43

setting to ACS, application registration through CLI 4-44

setting to non-ACS 4-29

peer server certificates

setting up 4-20

proxy server, setting up 4-56

reports, generating 4-57

Log File Status report 4-58

Permissions report 4-58

Process Status 4-60

Users Logged In 4-59

security. See security, setting up

Self-signed certificates 4-12

SSO (Single Sign-On) mode

changing 4-24

enabling 4-21

system preferences, modifying 4-97

user management

adding 4-8

adding through CLI

import remote users     1

deleting 4-10

local user policy setup 4-5

local user profile, modifying 4-8

peer server, adding 4-18

setting up through CLI 4-10

user profile, editing 4-9

users, local, setting up 4-8

server certificate for CiscoWorks, expiration, how to handle 10-12

server information, collecting (Common Services) 4-85

server security, understanding A-2

administrator-imposed A-4

connection A-5

security certificates A-5

terms and definitions A-6

server-imposed A-2

access control A-4

files, file ownership, permissions A-2

other systems A-4

remote connectivity A-4

runtime A-3

setting up, local user policy 4-5

SNMP Set, using 8-10

SNMP settings, configuring 5-18

SNMP Walk, using 8-8

Software Center 9-1

activity logs, viewing 9-9

event log 9-10

scheduled job 9-10

device downloads, scheduling 9-8

device updates, checking 9-6

device updates, performing 9-5

packages, deleting 9-8

software updates, downloading 9-4

software updates, performing 9-2

list of applications installed, viewing 9-2

software updates, selecting 9-3

Software Center CLI utility 9-11

Solaris, changing ports in

for ESS 10-22

for osagent 10-6

SSL, enabling on the server 4-2

from the CiscoWorks Server 4-3

from the CLI 4-3

SSL, definition A-6

SSO (Single Sign-On) mode

changing 4-24

enabling 4-21

starting CiscoWorks applications, troubleshooting 10-5

supported browsers 2-10

T

TACACS+, changing login module to 4-38

technical support

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

terms and definitions in security certificates A-6

Base64-encoded X.509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

time zone settings, understanding 1-6

toolbar buttons on CiscoWorks Home Page, using 2-8

Tool Bar items on CiscoWorks Home Page, using 2-8

troubleshooting

applications not appearing 10-20

back-up data, directory structure of 10-24

CiscoWorks applications, starting 10-5

CiscoWorks Server 10-1, 10-3

device connectivity, testing 10-2

FAQs 10-4

locked out of, diagnosing 10-5

server status, verifying 10-1

database

inaccessability 10-25

path includes "cmf" 10-5

devices, with the Device Diagnostic Tools panel of CiscoWorks Home Page 2-8

ESS port change

Solaris 10-22

Windows 10-22

FAQs list 10-4

Apache and Tomcat 10-26

Backup-restore 10-23

CiscoWorks Home Page 10-19

Common Services General 10-4

Database 10-24

Device Center 10-18

Device Management 10-16

EDS and ESS 10-21

Security 10-10

Software Center 10-16

Java Plug-in, which version to use 10-4

jrm 10-7

osagent port change

Solaris 10-6

Windows 10-6

See also debugging tools under Device Center

suggestions 10-32

typographical conventions in this document 1-xv

U

UNIX systems

changing login module to local UNIX system 4-32

log files, maintaining on 4-94

user accounts

setting up

Cisco.com 4-56

local 4-8

Users Logged In report, generating 4-59

V

verifying CiscoWorks Server status 10-1

viewing

application license information 4-84

device list 5-68

group details 6-18

Software Center activity logs 9-9

W

web server port numbers, changing 2-13

Whats New In This Release 1-2

Windows 2003 or Windows NT systems

log files, maintaining on 4-95

Windows systems

changing the port

for ESS 10-22

for osagent 10-6

jrm, running 10-7