Table Of Contents

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

AAA clients, configuring 4-48

access

connection security, understanding A-5

control, security and A-4

ACS

applications, registering 4-43

applications, registering through CLI 4-43

authentication failure 4-44

Common Services tasks 4-53

custom roles 4-52

predefined roles 4-51

roles on NDG basis, assigning 4-55

roles to user groups, assigning 4-53

roles to users, assigning 4-54

ACS Administrators, configuring 4-47

ACS Connection Status 3-5

adding devices to the device list 5-8

for AUS management 5-11

for cluster management 5-13

for standard management 5-9

using dcrcli 5-63

administering

Common Services 4-64

Daemon Manager, using 4-65

processes, back-end processes 4-68

processes, managing 4-66

processes, managing through CLI 4-70

processes, starting 4-67, 4-71

processes, stopping 4-68

processes, viewing 4-66

DCR 5-55

default credentials, configuring 5-59

default credentials, deleting 5-62

default credentials, setting up 5-61

default credentials, using 5-60

default credential set 5-60

default credentials in multi-server setup 5-62

Master-Slave configuration, prerequisites 5-56

mode, changing 5-55

user-defined fields, adding 5-58

user-defined fields, deleting 5-59

user-defined fields, renaming 5-58

application registration, ACS 4-43

application registration through CLI, ACS 4-43

applications

Application panels in CiscoWorks Home Page 2-7

licensing

licensing information, viewing 4-83

licensing procedure 4-83

obtaining a license 4-82

updating licenses 4-83

registering with CiscoWorks Home Page 4-100

troubleshooting

applications not appearing 10-19

audience for this document 1-xv

audit logs, viewing 4-61

AUS (Auto Update Server)

managing 5-34

adding 5-34

deleting 5-35

editing 5-35

setting up 5-11

Authentication failure in ACS 4-44

B

backing up data 4-71

back-up data

directory structure of 10-22, 10-23

sample CMF backup directory 10-22

using CLI 4-73

Base64-encoded X.509 certificate format, definition A-6

browser issues 2-9

address bar, disabling 2-10

modal dialog box, enabling 2-11

popup dialog boxes, displaying 2-10

reports download, enabling 2-12

status bar, disabling 2-10

tabbed browsing, disabling 2-11

browsers, supported 2-9

browser-server security. See SSL

C

cautions

significance of 1-xv

cautions regarding

admin password, guest password 4-6

backups, and the CiscoWorks Daemon Manager 4-90

data restoration from a backup 4-74

restarting Daemon Manager on Solaris 4-65

restarting Daemon Manager on Windows 4-65

certificates

terms and definitions in A-5

Base64-encoded X-509 certificate format A-6

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

understanding A-5

Cisco.com connection, managing 4-56

CiscoWorks - ACS Integration 4-45

ACS server, setting up 4-46

AAA clients, configuring 4-48

ACS Administrators, configuring 4-47

CiscoWorks Admin Users, configuring in ACS 4-49

Multiple ACS servers, configuring 4-50

NDG, creating 4-47

login module, changing 4-50

prerequisites 4-46

roles in ACS 4-51

Common Services Tasks 4-53

Custom roles 4-52

predefined roles 4-51

roles to Users and User groups, assigning 4-53

Network Access restrictions 4-56

CiscoWorks Administrative Users, configuring in ACS 4-49

CiscoWorks Home Page 2-1

Common Services panel 2-6

configuring 4-100

registering applications 4-100

registering links 4-102

setting up 4-103

invoking 2-2

normal mode (HTTP) 2-2

SSL Enabled mode (HTTPS) 2-3

layout 2-6

logging in to Common Services 2-5

online help, using 2-12

using

Application panels 2-7

CiscoWorks Product Updates panel 2-8

Common Services panel 2-6

Device Diagnostic Tools panel 2-7

navigation tools 2-8

Resources panel 2-7

too lbar buttons 2-8

web server port numbers, changing 2-12

CiscoWorks LMS Portal

invoking 2-2

CiscoWorks Server, troubleshooting 10-1

collecting information on 10-1

FAQs 10-3

locked out of 10-5

MDC support 10-2

process status, checking 10-1

self-test, performing 10-1

CiscoWorks Server back-end process 4-68

CiscoWorks Server Processes 4-68, 4-70

CiscoWorks Trust Store or KeyStore, definition A-7

cmf as part of database path, explanation of 10-5

Common Services Home 3-1

Layout 3-2

Panes 3-3

Backup Status 3-6

Device Credentials and Admin Settings 3-8

Device Management Tasks 3-10

Management Tasks 3-12

Online Users 3-6

Recently Completed Jobs 3-7

Reports 3-11

Security Settings 3-3

System Tasks 3-9

Common Services Server, overview of 1-7

connection security, understanding A-5

security certificates A-5

terms and definitions A-5

Base64-encoded X.509 certificate format A-6

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

connectivity

Connectivity Tools Tasks (table) 10-3

tasks 10-1

checking process status 10-1

collecting server information 10-1

MDC support 10-2

performing a self-test 10-1

testing 10-2

credentials, secondary 5-6

Custom roles in ACS 4-52

D

Daemon Manager, using 4-65

restarting on Solaris 4-65

restarting on Windows 4-65

database

inaccessible, troubleshooting 10-23

path includes "cmf," explanation 10-5

DCR

administering 5-55

Master-Slave configuration, prerequisites 5-56

mode, changing 5-55

user-defined fields, adding 5-58

user-defined fields, deleting 5-59

user-defined fields, renaming 5-58

architecture 5-7

Master DCR 5-7

Slave DCR 5-7

Standalone DCR 5-7

AUS management

adding devices 5-34

deleting AUS 5-35

editing devices 5-35

CSV file samples 5-25

CSV 2.0 5-25

CSV 3.0 5-26

device attributes 5-3

mandatory attributes 5-4

device credentials 5-4

secondary credentials 5-6

device management types 5-3

devices, managing 5-8

adding 5-8

deleting 5-17

excluding 5-33

exporting 5-30

importing 5-19

viewing the device list 5-34

Device Selector, using. See Device Selector

reports, generating 5-36

understanding 5-2

using features, Master-Slave Setup 5-74

dcr

implications on ACS 5-72

DCR CLI interface, using 5-62

adding devices 5-63

DCR mode, changing 5-67

deleting devices 5-64

editing devices 5-65

exporting devices 5-71

exporting to ACS 5-71

importing 5-68

listing attributes 5-65

listing device IDs 5-66

viewing current DCR mode 5-66

viewing device details 5-67

Default credentials 5-59

deleting

AUS (Auto Update Server) 5-35

device groups 6-20

devices

from DCR 5-17

from the device list, using dcrcli 5-64

user-defined fields from DCR 5-59

users 4-8

Device Addition Status summary 5-16

Device and Credential Admin 5-1

Device Center 8-1

debugging tools, enabling 8-4

management station to device 8-4

packet capture 8-10

Ping, using 8-6

SNMP Set 8-9

SNMP Walk, using 8-7

Traceroute, using 8-7

invoking 8-2

launching 8-2

management functions

management tasks 8-14

reports, displaying 8-14

using 8-3

Device Selector 8-3

reports 8-14

Device Diagnostic Tools panel of CiscoWorks Home Page 2-7

devices, managing 5-8

adding 5-8

for AUS management 5-11

for cluster management 5-13

for standard management 5-9

credentials

editing 5-18

exporting 5-30

importing 5-19

deleting 5-17

delete status report 5-18

device list, viewing 5-34

excluding 5-33

exporting 5-30

using CLI 5-71

using Device and Credential Admin user interface 5-31

exporting to ACS

using CLI 5-71

importing 5-19, 5-20

using CLI 5-68

using Device and Credential Admin user interface 5-20

See also Groups, administering

See also Software Center

Device Selector 5-41

Device Selector settings 5-47

searching devices 5-44

advanced Search 5-45

expressions, using 5-45

range operator, using 5-45

rule text fields, using 5-46

simple search 5-44

selecting devices 5-43

using Device Selector 5-42

diagnosing problems. See troubleshooting

disk space, threshold configuring 4-97

documentation 1-xvi

additional online 1-xvii

audience for this 1-xv

related to this product 1-xvi

typographical conventions in 1-xv

E

editing

AUS (Auto Update Server) 5-35

device credentials in DCR 5-18

device group details 6-19

devices in the device list, using dcrcli 5-65

local user profile 4-7

user profiles 4-8

ESS (Event Service Software)

changing the port for

in Solaris 10-21

in Windows 10-21

excluding devices from the device list 5-33

expired server certificate, how to handle 10-11

exporting devices and credentials 5-30

using CLI 5-71

using Device and Credential Admin user interface 5-31

exporting devices and credentials to ACS

using CLI 5-71

F

file ownership, and permissions A-2

G

Groups, administering 6-1

concepts 6-2

common 6-4

container groups 6-3

dynamic groups 6-3

group hierarchy 6-3

secured views 6-5

shared 6-4

static groups 6-3

system-defined, user-defined 6-3

creating 6-9

deleting

groups 6-20

details

modifying 6-19

viewing 6-18

editing 6-19

Group Administration 6-8

group membership, assigning 6-17

multi-server setup 6-6

properties, specifying 6-10

refreshing 6-20

rules, defining 6-11

composite rule 6-13

range operator 6-14

simple rule 6-11

single server scenario 6-6

single server setup 6-6

syntax checking 6-12, 6-13

system- and user-defined attributes 6-16

system defined attributes 6-16

H

help

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

online documentation 1-xvii

Hostname change script, using 4-104

I

IBM SecureWay Directory, changing login module to 4-29

importing devices and credentials 5-19

using CLI 5-68

using Device and Credential Admin user interface 5-20

IP Address range operator, See range operator

J

Java Plug-in, version to use 10-4

jobs

managing 4-87

jrm, checking 10-7

K

KerberosLogin, changing login module to 4-30

L

licensing CiscoWorks applications

license information, viewing 4-83

licensing procedure 4-83

obtaining a license 4-82

updating licenses 4-83

links, registering with CiscoWorks Home Page 4-102

LMS Setup Center 7-1

categories 7-2

Data Collection Schedule 7-7

Data Collection Settings 7-5

Data Purge Schedule 7-9

Security Settings 7-4

System Settings 7-3

launching LMS Setup Center 7-2

locked out of CiscoWorks Server, troubleshooting 10-5

log files, maintaining 4-90

Log File Status report, generating 4-58

on UNIX 4-93

on Windows 4-93

logrot utility, configuring 4-94

logrot utility, running 4-94

logrot utility, using 4-93

login module

setting to ACS 4-39

application, unregistering through CLI 4-44

application registration 4-43

application registration through CLI 4-43

setting to non-ACS 4-28

CiscoWorks Local, changing to 4-29

IBM SecureWay Directory, changing to 4-29

KerberosLogin, changing to 4-30

local NT system, changing to 4-32

Local UNIX system, changing to 4-31

MS Active Directory, changing to 4-32

Netscape Directory, changing to 4-36

Radius, changing to 4-37

TACACS+, changing to 4-38

logrot utility

configuring 4-94

running 4-94

using 4-93

M

managing

Common Services jobs 4-87

Common Services resources 4-89

messaging online users 4-86

MS Active Directory, changing login module to 4-32

Multiple ACS servers, configuring 4-50

multi-server mode, and security 4-17

N

NAR. See Network Access Restrictions.

navigation tools on CiscoWorks Home Page, using 2-8

NDG, creating 4-47

Netscape Directory, changing login module to 4-36

Network Access Restrictions 4-56

Network Device Groups, creating. See NDG, creating

O

online help, using 2-12

online users, messaging 4-86

osagent, changing the port for

Solaris 10-6

Windows 10-6

overview

authentication using login modules 4-24

overview of

CiscoWorks Common Services 1-1

Common Services Server information 1-7

time zone settings, understanding 1-6

what's new in this release 1-2

Common Services Server 1-7

P

packet capture, using 8-10

peer server certificates

setting up 4-19

Permissions report, generating 4-58

PKCS#8, definition A-6

port numbers for web servers, changing 2-12

Predefined roles in ACS 4-51

preferences for system, modifying 4-95

private key, definition A-6

processes, managing 4-70

Process Status report, generating 4-60

PSUCLI 9-11

device packages, installing 9-12

device packages, listing dependents 9-14

device packages, listing device packages 9-15

device packages, uninstalling 9-13

device updates, downloading 9-14

software updates, downloading 9-13

software updates, querying 9-12

public key, definition A-6

R

Radius, changing login module to 4-37

range operator 6-14

remote connectivity, security and A-3

reports

Common Services reports 4-57

audit logs, viewing 4-61

Log File Status report 4-58

Permissions report 4-58

Process Status report 4-60

Users Logged In report 4-59

DCR Admin reports, generating 5-36

Audit report 5-38

Device List report 5-37

Devices not configured in ACS report 5-40

Excluded Devices report 5-39

Imported Device List report 5-40

Device Center reports 8-14

resources, managing in Common Services 4-89

Resources panel of CiscoWorks Home Page 2-7

runtime security, understanding A-3

S

Secondary credentials 5-6

Secure Shell (SSH), definition A-6

security

access control, and A-4

certificates, understanding A-5

understanding A-1

general A-1

server A-2

security, setting up 4-2

AAA mode, setting up 4-24

Cisco.com login, setting up 4-56

Cisco Secure ACS support 4-26

configuring, ACS Integration 4-45

login module

setting to ACS 4-39

setting to non-ACS 4-28

multi-server mode 4-17

peer server certificates

setting up 4-19

proxy server, setting up 4-56

security levels, understanding 4-6

SSL 4-2

enabling from the CiscoWorks Server 4-3

enabling from the CLI 4-4

SSO (Single Sign-On) mode

changing 4-22

enabling 4-20

user management

local user profile, modifying 4-7

peer server, setting up 4-17

user profiles, editing 4-8

users, adding 4-7

users, deleting 4-8

users, setting up through CLI 4-9

Self Signed certificates 4-11

self-test information, collecting 4-86

server, configuring 4-1

AAA mode, setting up 4-24

authentication using login modules 4-24

ACS Integration 4-45

applications, licensing

licensing information, viewing 4-83

licensing procedure 4-83

obtaining a license 4-82

updating licenses 4-83

certificate setup 4-11

Cisco.com login, setting up 4-56

CiscoSecureACS support 4-26

Common Services, administering 4-64

backing up data 4-71

Daemon Manager, using 4-65

jobs, managing 4-87

processes, managing 4-66

processes, managing through CLI 4-70

resources, managing 4-89

server information, collecting 4-84

disk space, threshold configuring 4-97

log files, maintaining 4-90

List of log files 4-91

on UNIX 4-93

on Windows 4-93

logging, configuring 4-96

login module

ACS 4-39

ACS, setting up 4-40

setting to ACS 4-39

setting to ACS, application registration 4-43

setting to ACS, application registration through CLI 4-43

setting to non-ACS 4-28

peer server certificates

setting up 4-19

proxy server, setting up 4-56

reports, generating 4-57

audit logs, viewing 4-61

Log File Status report 4-58

Permissions report 4-58

Process Status 4-60

Users Logged In 4-59

security. See security, setting up

Self-signed certificates 4-11

SSO (Single Sign-On) mode

changing 4-22

enabling 4-20

system preferences, modifying 4-95

user management

adding 4-7

adding through CLI

adding local user     1

import remote users     1

deleting 4-8

local user profile, modifying 4-7

peer server, adding 4-17

setting up through CLI 4-9

user profile, editing 4-8

users, local, setting up 4-7

server certificate for CiscoWorks, expiration, how to handle 10-11

server information, collecting (Common Services) 4-84

server security, understanding A-2

administrator-imposed A-4

connection A-5

security certificates A-5

terms and definitions A-5

server-imposed A-2

access control A-4

files, file ownership, permissions A-2

other systems A-4

remote connectivity A-3

runtime A-3

SNMP Set, using 8-9

SNMP Walk, using 8-7

Software Center 9-1

activity logs, viewing 9-9

event log 9-10

scheduled job 9-9

device downloads, scheduling 9-8

device updates, checking 9-6

device updates, performing 9-5

device map 9-5

package map 9-5

packages, deleting 9-7

software updates, downloading 9-4

software updates, performing 9-2

list of applications installed, viewing 9-2

software updates, selecting 9-3

Software Center CLI utility 9-11

Solaris, changing ports in

for ESS 10-21

for osagent 10-6

SSL, enabling on the server 4-2

from the CiscoWorks Server 4-3

from the CLI 4-4

SSL, definition A-6

SSO (Single Sign-On) mode

changing 4-22

enabling 4-20

starting CiscoWorks applications, troubleshooting 10-5

supported browsers 2-9

T

TACACS+, changing login module to 4-38

technical support

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

terms and definitions in security certificates A-5

Base64-encoded X.509 certificate format A-6

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

time zone settings, understanding 1-6

toolbar buttons on CiscoWorks Home Page, using 2-8

Tool Bar items on CiscoWorks Home Page, using 2-8

troubleshooting

applications not appearing 10-19

back-up data, directory structure of 10-22, 10-23

CiscoWorks applications, starting 10-5

CiscoWorks Server 10-1, 10-3

device connectivity, testing 10-2

FAQs 10-4

locked out of, diagnosing 10-5

server status, verifying 10-1

database

inaccessability 10-23

path includes "cmf" 10-5

devices, with the Device Diagnostic Tools panel of CiscoWorks Home Page 2-7

ESS port change

Solaris 10-21

Windows 10-21

FAQs list 10-4

Apache and Tomcat 10-25

Backup-restore 10-22

CiscoWorks Home Page 10-18

Common Services General 10-4

Database 10-23

Device Center 10-18

Device Management 10-15

EDS and ESS 10-20

Security 10-9

Software Center 10-15

Java Plug-in, which version to use 10-4

jrm 10-7

osagent port change

Solaris 10-6

Windows 10-6

See also debugging tools under Device Center

suggestions 10-31

typographical conventions in this document 1-xv

U

UNIX systems

changing login module to local UNIX system 4-31

log files, maintaining on 4-93

user accounts

setting up

Cisco.com 4-56

local 4-7

Users Logged In report, generating 4-59

V

verifying CiscoWorks Server status 10-1

viewing

application license information 4-83

audit logs 4-61

device list 5-34

group details 6-18

Software Center activity logs 9-9

W

web server port numbers, changing 2-12

Whats New In This Release 1-2

Windows 2003 or Windows NT systems

log files, maintaining on 4-93

Windows systems

changing the port

for ESS 10-21

for osagent 10-6

jrm, running 10-7