Table Of Contents

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - R - S - T - U - V - W -

Index

A

AAA clients, configuring 4-52

access

connection security, understanding A-5

control, security and A-4

ACS

applications, registering 4-46

applications, registering through CLI 4-47

authentication failure 4-48

Common Services tasks 4-57

custom roles 4-56

predefined roles 4-55

roles on NDG basis, assigning 4-59

roles to user groups, assigning 4-57

roles to users, assigning 4-58

ACS Administrators, configuring 4-51

ACS Connection Status 3-5

adding devices to the device list 5-43

for AUS management 5-46

for cluster management 5-48

for standard management 5-44

using dcrcli 5-101

administering

Common Services 4-66

Daemon Manager, using 4-67

processes, back-end processes 4-71

processes, managing 4-68

processes, managing through CLI 4-73

processes, starting 4-70, 4-76

processes, stopping 4-71

processes, viewing 4-69

processes, viewing specific state processes 4-70

DCR 5-91

Master-Slave configuration, prerequisites 5-92

mode, changing 5-92

user-defined fields, adding 5-94

user-defined fields, deleting 5-95

user-defined fields, renaming 5-95

application registration, ACS 4-46

application registration through CLI, ACS 4-47

applications

Application panels in CiscoWorks Home Page 2-7

licensing

licensing information, viewing 4-87

licensing procedure 4-87

obtaining a license 4-87

updating licenses 4-87

registering with CiscoWorks Home Page 4-108

troubleshooting

applications not appearing 10-20

audience for this document xv

audit logs, viewing 4-65

AUS (Auto Update Server)

managing 5-71

adding 5-72

deleting 5-73

editing 5-72

setting up 5-46

Authentication failure in ACS 4-48

B

backing up data 4-76

back-up data

directory structure of 10-23

sample CMF backup directory 10-23

using CLI 4-77

Base64-encoded X.509 certificate format, definition A-7

browser issues 2-10

address bar, disabling 2-11

modal dialog box, enabling 2-11

popup dialog boxes, displaying 2-10

reports download, enabling 2-12

status bar, disabling 2-11

tabbed browsing, disabling 2-11

browsers, supported 2-10

browser-server security. See SSL

C

cautions

significance of xv

cautions regarding

admin password, guest password 4-9

backups, and the CiscoWorks Daemon Manager 4-95

data restoration from a backup 4-78

restarting Daemon Manager on Solaris 4-67

restarting Daemon Manager on Windows 4-68

certificates

terms and definitions in A-6

Base64-encoded X-509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

understanding A-5

Cisco.com connection, managing 4-60

CiscoWorks - ACS Integration 4-49

ACS server, setting up 4-50

AAA clients, configuring 4-52

ACS Administrators, configuring 4-51

CiscoWorks Admin Users, configuring in ACS 4-54

Multiple ACS servers, configuring 4-54

NDG, creating 4-51

login module, changing 4-55

prerequisites 4-50

roles in ACS 4-55

Common Services Tasks 4-57

Custom roles 4-56

predefined roles 4-55

roles to Users and User groups, assigning 4-57

Network Access restrictions 4-60

CiscoWorks Administrative Users, configuring in ACS 4-54

CiscoWorks Home Page 2-1

Common Services panel 2-7

configuring 4-107

registering applications 4-108

registering links 4-110

setting up 4-111

invoking 2-2

normal mode (HTTP) 2-2

SSL Enabled mode (HTTPS) 2-3

layout 2-6

logging in to Common Services 2-6

online help, using 2-12

using

Application panels 2-7

CiscoWorks Product Updates panel 2-8

Common Services panel 2-7

Device Diagnostic Tools panel 2-8

navigation tools 2-9

Resources panel 2-8

too lbar buttons 2-8

web server port numbers, changing 2-13

CiscoWorks LMS Portal

invoking 2-2

CiscoWorks Server, troubleshooting 10-1

collecting information on 10-1

FAQs 10-3

locked out of 10-5

MDC support 10-2

process status, checking 10-1

self-test, performing 10-1

CiscoWorks Server back-end process 4-71

CiscoWorks Server Processes 4-71, 4-73

CiscoWorks Trust Store or KeyStore, definition A-7

cmf as part of database path, explanation of 10-5

Common Services Home 3-1

Layout 3-2

Panes 3-3

Backup Status 3-6

Device Credentials and Admin Settings 3-9

Device Management Tasks 3-12

Management Tasks 3-14

Online Users 3-7

Recently Completed Jobs 3-8

Reports 3-13

Security Settings 3-4

System Tasks 3-11

Common Services Server, overview of 1-5

connection security, understanding A-5

security certificates A-5

terms and definitions A-6

Base64-encoded X.509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

connectivity

Connectivity Tools Tasks (table) 10-3

tasks 10-1

checking process status 10-1

collecting server information 10-1

MDC support 10-2

performing a self-test 10-1

testing 10-3

Custom roles in ACS 4-56

D

Daemon Manager, using 4-67

restarting on Solaris 4-67

restarting on Windows 4-67

database

inaccessible, troubleshooting 10-24

path includes "cmf," explanation 10-5

DCR

administering 5-91

Master-Slave configuration, prerequisites 5-92

mode, changing 5-92

user-defined fields, adding 5-94

user-defined fields, deleting 5-95

user-defined fields, renaming 5-95

architecture 5-8

Master DCR 5-8

Slave DCR 5-8

Standalone DCR 5-9

AUS management

adding devices 5-72

deleting AUS 5-73

editing devices 5-72

CSV file samples 5-61

CSV 2.0 5-61

CSV 3.0 5-62

devices, managing 5-43

adding 5-43

deleting 5-52

excluding 5-70

exporting 5-67

importing 5-55

viewing the device list 5-71

Device Selector, using (See Device Selector) 5-78

reports, generating 5-73

using features, Master-Slave Setup 5-112

dcr

implications on ACS 5-111

DCR (Device and Credential Repository) CLI interface, using 5-100

adding devices 5-101

CDR mode, changing 5-105

deleting devices 5-102

editing devices 5-103

exporting using 5-109, 5-110

importing using 5-106

listing attributes 5-103, 5-104

viewing current DCR mode 5-104

viewing device details 5-105

deleting

AUS (Auto Update Server) 5-73

device groups 6-21

devices

from DCR 5-52

from the device list, using dcrcli 5-102

user-defined fields from DCR 5-95

users 4-12

Device and Credential Admin 5-1

Device Center 8-1

debugging tools, enabling 8-5

management station to device 8-5

packet capture 8-14

Ping, using 8-8

SNMP Set 8-11

SNMP Walk, using 8-9

Traceroute, using 8-9

invoking 8-2

launching 8-2

management functions

management tasks 8-18

reports, displaying 8-18

using 8-3, 8-4

Device Selector 8-3

reports 8-18

Device Diagnostic Tools panel of CiscoWorks Home Page 2-8

devices, discovery 5-9

scheduling 5-31

adding 5-32

deleting 5-33

editing 5-33

viewing status 5-34

viewing details 5-35

devices added to DCR 5-40

devices updated to DCR 5-40

reachable devices 5-38

summary 5-36

total devices discovered 5-37

unreachable devices 5-39

devices, discovery settings

configuring 5-10

configuring filter settings 5-21

configuring global settings 5-24

configuring module settings 5-11

configuring seed devices 5-13

configuring SNMP settings 5-18

viewing 5-29

viewing summary 5-28

devices, discovery starting 5-31

devices, managing 5-43

adding 5-43

for AUS management 5-46

for cluster management 5-48

for standard management 5-44

credentials

editing 5-53

exporting 5-67

importing 5-55

deleting 5-52

device list, viewing 5-71

excluding 5-70

exporting 5-67

using CLI 5-109, 5-110

using Device and Credential Admin user interface 5-68

importing 5-55

using CLI 5-106

using Device and Credential Admin user interface 5-56

See also Groups, administering

See also Software Center

Device Selector 5-78

Device Selector settings 5-84

searching devices 5-81

Advanced Search 5-81

Simple Search 5-81

selecting devices 5-80

using Device Selector 5-79

diagnosing problems. See troubleshooting

discovering devices 5-9

discovery, scheduling 5-31

discovery CLI interface, using 5-99

start 5-99

stop 5-100

view discovery 5-100

discovery features in

ACS mode 5-113

Master-Slave setup 5-113

discovery filter settings, configuring 5-21

discovery global settings, configuring 5-24

discovery module settings, configuring 5-11

discovery settings

viewing summary 5-28

discovery settings, viewing 5-29

discovery SNMP settings 5-18

discovery start 5-31

disk space, threshold configuring 4-105

documentation xvi

additional online xvii

audience for this xv

related to this product xvi

typographical conventions in xv

E

editing

AUS (Auto Update Server) 5-72

device credentials in DCR 5-53

device group details 6-19

devices in the device list, using dcrcli 5-103

local user profile 4-10

user profiles 4-11

ESS (Event Service Software)

changing the port for

in Solaris 10-22

excluding devices from the device list 5-70

expired server certificate, how to handle 10-10

exporting devices and credentials 5-67

using CLI 5-109, 5-110

using Device and Credential Admin user interface 5-68

F

file ownership, and permissions A-2

G

Groups, administering 6-1

concepts 6-2

common 6-4

container groups 6-3

dynamic groups 6-3

group hierarchy 6-3

secured views 6-5

shared 6-4

static groups 6-3

system-defined, user-defined 6-3

creating 6-9

deleting

groups 6-21

details

modifying 6-19

viewing 6-18

editing 6-19

Group Administration 6-9

group membership, assigning 6-17

multi-server setup 6-6

properties, specifying 6-10

refreshing 6-20

rules, defining 6-11

composite rule 6-13

range operator 6-14

simple rule 6-12

single server scenario 6-6

single server setup 6-6

syntax checking 6-13, 6-14

system- and user-defined attributes 6-16

system defined attributes 6-16

H

help

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

online documentation xvii

Hostname change script, using 4-113

I

IBM SecureWay Directory, changing login module to 4-34

importing devices and credentials 5-55

using CLI 5-106

using Device andf Credential Admin user interface 5-56

IP Address range operator, See range operator

J

Java Plug-in, version to use 10-5

jobs

managing 4-91

jrm, checking 10-7

K

KerberosLogin, changing login module to 4-35

L

licensing CiscoWorks applications

license information, viewing 4-87

licensing procedure 4-87

obtaining a license 4-87

updating licenses 4-87

links, registering with CiscoWorks Home Page 4-110

LMS Setup Center 7-1

categories 7-2

Data Collection Schedule 7-7

Data Collection Settings 7-5

Data Purge Schedule 7-9

Security Settings 7-4

System Settings 7-3

launching LMS Setup Center 7-2

local user policy setup 4-7

locked out of CiscoWorks Server, troubleshooting 10-5

log files, maintaining 4-94

Log File Status report, generating 4-62

on UNIX 4-97

on Windows 4-98

logrot utility, configuring 4-101

logrot utility, running 4-101

login module

setting to ACS 4-43

application, unregistering through CLI 4-48

application registration 4-46

application registration through CLI 4-47

setting to non-ACS 4-32

CiscoWorks Local, changing to 4-33

IBM SecureWay Directory, changing to 4-34

KerberosLogin, changing to 4-35

local NT system, changing to 4-36

Local UNIX system, changing to 4-35

MS Active Directory, changing to 4-37

Netscape Directory, changing to 4-40

Radius, changing to 4-41

TACACS+, changing to 4-41

logrot utility

configuring 4-101

running 4-101

M

managing

Common Services jobs 4-91

Common Services resources 4-93

messaging online users 4-90

MS Active Directory, changing login module to 4-37

Multiple ACS servers, configuring 4-54

multi-server mode, and security 4-21

N

NAR. See Network Access Restrictions.

navigation tools on CiscoWorks Home Page, using 2-9

NDG, creating 4-51

Netscape Directory, changing login module to 4-40

Network Access Restrictions 4-60

Network Device Groups, creating. See NDG, creating

O

online help, using 2-12

online users, messaging 4-90

osagent, changing the port for

Solaris 10-6

Windows 10-6

overview

authentication using login modules 4-29

overview of

CiscoWorks Common Services 1-1

Common Services Server information 1-5

time zone settings, understanding 1-4

what's new in this release 1-2

Common Services Server 1-5

P

packet capture, using 8-14

peer server certificates

setting up 4-23

Permissions report, generating 4-63

PKCS#8, definition A-6

port numbers for web servers, changing 2-13

Predefined roles in ACS 4-55

preferences for system, modifying 4-102

private key, definition A-6

processes, managing 4-73

Process Status report, generating 4-64

PSUCLI 9-11

device packages, installing 9-12

device packages, listing dependents 9-14

device packages, listing device packages 9-15

device packages, uninstalling 9-13

device updates, downloading 9-14

software updates, downloading 9-13

software updates, querying 9-12

public key, definition A-6

R

Radius, changing login module to 4-41

range operator 6-14

remote connectivity, security and A-4

reports

Common Services reports 4-61

audit logs, viewing 4-65

Log File Status report 4-62

Permissions report 4-63

Process Status report 4-64

Users Logged In report 4-63

DCR Admin reports, generating 5-73

Device Center reports 8-18

resources, managing in Common Services 4-93

Resources panel of CiscoWorks Home Page 2-8

runtime security, understanding A-3

S

Secure Shell (SSH), definition A-6

security

access control, and A-4

certificates, understanding A-5

understanding A-1

general A-1

server A-2

security, setting up 4-2

AAA mode, setting up 4-28

Cisco.com login, setting up 4-60, 4-61

Cisco Secure ACS support 4-31

configuring, ACS Integration 4-49

login module

setting to ACS 4-43

setting to non-ACS 4-32

multi-server mode 4-21

peer server certificates

setting up 4-23

proxy server, setting up 4-61

security levels, understanding 4-9

SSL 4-2

enabling from the CiscoWorks Server 4-3, 4-5

enabling from the CLI 4-4, 4-6

SSO (Single Sign-On) mode

changing 4-27

enabling 4-24

user management

local user profile, modifying 4-10

peer server, setting up 4-21

user profiles, editing 4-11

users, adding 4-10

users, deleting 4-12

users, setting up through CLI 4-12

seed devices, configuring 5-13

Self Signed certificates 4-15

self-test information, collecting 4-90

server, configuring 4-1

AAA mode, setting up 4-28

authentication using login modules 4-29

ACS Integration 4-49

applications, licensing

licensing information, viewing 4-87

licensing procedure 4-87

obtaining a license 4-87

updating licenses 4-87

certificate setup 4-15

Cisco.com login, setting up 4-60, 4-61

CiscoSecureACS support 4-31

Common Services, administering 4-66

backing up data 4-76

Daemon Manager, using 4-67

jobs, managing 4-91

processes, managing 4-68

processes, managing through CLI 4-73

resources, managing 4-93

server information, collecting 4-88

disk space, threshold configuring 4-105

log files, maintaining 4-94

List of log files 4-95

on UNIX 4-97

on Windows 4-98

logging, configuring 4-103

login module

ACS 4-43

ACS, setting up 4-43

setting to ACS 4-43

setting to ACS, application registration 4-46

setting to ACS, application registration through CLI 4-47

setting to non-ACS 4-32

peer server certificates

setting up 4-23

proxy server, setting up 4-61

reports, generating 4-61

audit logs, viewing 4-65

Log File Status report 4-62

Permissions report 4-63

Process Status 4-64

Users Logged In 4-63

security. See security, setting up

Self-signed certificates 4-15

SSO (Single Sign-On) mode

changing 4-27

enabling 4-24

system preferences, modifying 4-102

user management

adding 4-10

adding through CLI

deleting 4-12

local user policy setup 4-7

local user profile, modifying 4-10

peer server, adding 4-21

setting up through CLI 4-12

user profile, editing 4-11

users, local, setting up 4-10

server certificate for CiscoWorks, expiration, how to handle 10-10

server information, collecting (Common Services) 4-88

server security, understanding A-2

administrator-imposed A-5

connection A-5

security certificates A-5

terms and definitions A-6

server-imposed A-2

access control A-4

files, file ownership, permissions A-2

other systems A-4

remote connectivity A-4

runtime A-3

setting up, local user policy 4-7

SNMP Set, using 8-11

SNMP settings, configuring 5-18

SNMP Walk, using 8-9

Software Center 9-1

activity logs, viewing 9-9

event log 9-10

scheduled job 9-10

device downloads, scheduling 9-8

device updates, checking 9-6

device updates, performing 9-5

packages, deleting 9-8

software updates, downloading 9-4

software updates, performing 9-2

list of applications installed, viewing 9-2

software updates, selecting 9-3

Software Center CLI utility 9-11

Solaris, changing ports in

for ESS 10-22

for osagent 10-6

SSL, enabling on the server 4-2

from the CiscoWorks Server 4-3, 4-5

from the CLI 4-4, 4-6

SSL, definition A-6

SSO (Single Sign-On) mode

changing 4-27

enabling 4-24

starting CiscoWorks applications, troubleshooting 10-5

supported browsers 2-10

T

TACACS+, changing login module to 4-41

technical support

CiscoWorks Product Updates panel of CiscoWorks Home Page 2-8

terms and definitions in security certificates A-6

Base64-encoded X.509 certificate format A-7

CA (certificate authority) A-7

CiscoWorks TrustStore or KeyStore A-7

PKCS#8 A-6

public key, private key A-6

SSH A-6

SSL A-6

time zone settings, understanding 1-4

toolbar buttons on CiscoWorks Home Page, using 2-8

Tool Bar items on CiscoWorks Home Page, using 2-8

troubleshooting

applications not appearing 10-20

back-up data, directory structure of 10-23

CiscoWorks applications, starting 10-5

CiscoWorks Server 10-1, 10-3

device connectivity, testing 10-3

FAQs 10-4

locked out of, diagnosing 10-5

server status, verifying 10-1

database

inaccessability 10-24

path includes "cmf" 10-5

devices, with the Device Diagnostic Tools panel of CiscoWorks Home Page 2-8

ESS port change

Solaris 10-22

FAQs list 10-4

Apache and Tomcat 10-26

Backup-restore 10-23

CiscoWorks Home Page 10-20

Common Services General 10-4

Database 10-24

Device Center 10-19

EDS and ESS 10-22

Security 10-9

Software Center 10-15

Java Plug-in, which version to use 10-5

jrm 10-7

osagent port change

Solaris 10-6

Windows 10-6

See also debugging tools under Device Center

suggestions 10-32

typographical conventions in this document xv

U

UNIX systems

changing login module to local UNIX system 4-35

log files, maintaining on 4-97

user accounts

setting up

Cisco.com 4-60, 4-61

local 4-10

Users Logged In report, generating 4-63

V

verifying CiscoWorks Server status 10-1

viewing

application license information 4-87

audit logs 4-65

device list 5-71

group details 6-18

Software Center activity logs 9-9

W

web server port numbers, changing 2-13

Whats New In This Release 1-2

Windows 2003 or Windows NT systems

log files, maintaining on 4-98

Windows systems

changing the port

for osagent 10-6

jrm, running 10-7