Contents

• Cisco Prime Service Catalog
• Cisco ONE Data Center Foundation for Compute versus Cisco ONE Enterprise Cloud Suite
• New Features and Enhancements in Prime Service Catalog 11.1.1
• IaaS Enhancements
• Refresh Functionality in IaaS
• Sync Task Plugin
• Sync VM Change
• Overwriting Quota information of a Tenant
• Restoring VDC and UCSD Container Details
• Sync Tenant Information from UCS Director
• Refresh the Data Table
• Cost and Performance Reports for Virtual Data Centers
• Viewing Email Notification on VDC Creation
• Additional Post Provisioning Operations for VACS Container
• Deleting a Tenant
• Security Enhancements
• Viewing User's Last Login Details
• Configuring and Viewing Security Audit Crypto Log Events
• Service Designer Enhancements
• Enabling Order Summary in the Service Form
• Configuring Maximum Quantity of a Service
• Limitations
• Installation Notes
• Upgrade Notes
• Platform Support
• Planning Upgrades to Prime Service Catalog 11.1.1 and Later
• Prime Service Catalog 11.1.1 Bugs
• Related Documentation
• Accessibility Features in Prime Service Catalog

First Published: February 29, 2016

Cisco Prime Service Catalog

---

Cisco Prime Service Catalog is a key component of the Cisco ONE Enterprise Cloud Suite, the solution for a software defined data center.

Cisco Prime Service Catalog provides out-of-box integration with UCS Director (UCSD) and Intercloud Fabric for Business (ICFB) and Virtual Application Container Services (VACS) to offer a user-friendly IT service storefront for private and hybrid cloud infrastructure as a service. Prime Service Catalog also provides support for automated application provisioning with UCS Director and VACS.

In addition, Cisco Prime Service Catalog is an IT service catalog that enterprises can use to implement traditional IT workplace services, such as employee onboarding, laptop refresh and other IT services.

Cisco ONE Data Center Foundation for Compute versus Cisco ONE Enterprise Cloud Suite

Cisco Prime Service Catalog is included in both Cisco ONE Data Center Foundation for Compute and Cisco ONE Enterprise Cloud Suite license tiers. However, these two licenses provide customers access to different levels of functionalities in Prime Service Catalog.

The following table illustrates the difference in the functionalities and the features provided in Cisco ONE Data Center Foundation for Compute versus Cisco ONE Enterprise Cloud Suite.

Feature Entitlement in Prime Service Catalog	Cisco ONE Data Center Foundation for Compute	Cisco ONE Enterprise Cloud Suite	Documented In
Infrastructure as a Service
Ordering Virtual Machine from UCS Director (UCSD) and performing life cycle operations, such as, shutting down, taking snapshots of virtual machines, and so on.	Yes	Yes	Cisco Prime Service Catalog User Guide
Ordering Fenced container and perform lifecycle operations	No	Yes
Ordering VACS container and perform lifecycle operations	No	Yes
Ordering APIC container and perform lifecycle operations	No	Yes
Support for multi-tenant Infrastructure as a Service (IaaS) on ACI	No	Yes	Cisco Prime Service Catalog Administrator Guide and Cisco Prime Service Catalog User Guide
Hybrid Cloud
Deploy and manage virtual machines on a public cloud infrastructure using Intercloud Fabric for Business (ICFB)	Yes	Yes	Cisco Prime Service Catalog Administrator Guide and Cisco Prime Service Catalog User Guide
Design and Deploy Application Stack
Support for application stack design and provisioning on UCSD using Stack Designer, built-in cloud orchestration, and Puppet integration	No	Yes	Cisco Prime Service Catalog Designer Guide

New Features and Enhancements in Prime Service Catalog 11.1.1

This section provides an overview of the significant new and changed features in this release.

IaaS Enhancements

Cisco Prime Service Catalog 11.1.1 includes the following IaaS enhancements:

Refresh Functionality in IaaS

When the tenant, VDC, virtual machine, or load balancer creation process fails on the UCS Director, you can request for the latest data from the UCS Director using the refresh functionality.

New Refresh Functionalities	Prime Service Catalog Web Interface Pages	Synchronizes
Tenant Refresh	Tenant Management > Tenant Dashboard	Status
VDC Refresh	Service Catalog > Manage My Stuff > Virtual Data Centers	Status and Entities like VMs, Load Balancer
VM Refresh	Service Catalog > Manage My Stuff > My servers Service Catalog > Manage My Stuff > Virtual Data Centers	Status
Load Balancer Service Refresh	Service Catalog > Manage My Stuff > Virtual Data Centers Select a VDC. Click Load Balancing tab.	Status

If the Prime Service Catalog request fails on the UCSD, the Refresh icon gets enabled on the above pages. After the refresh, the current status from UCSD is reflected in Prime Service Catalog.

Note	APIC-Container VM refresh is possible only when a VM is in FAILED status. Refresh request fails with an error message "Refresh Failed:VM needs to be in Failed Status" when any one of the VM in a container is in any other status such as: Inactive, Being Provisioned, Being Deleted etc.

For more information on creating Tenants, see the "Creating Organizations and Users"section in the Cisco Prime Service Catalog 11.1.1 User Guide.

For more information on creating VDCs, see the "Adding Virtual Data Center" section in the Cisco Prime Service Catalog 11.1.1 User Guide.

For more information on VACS virtual machines, see the "Managing Virtual Data Center" section in the Cisco Prime Service Catalog 11.1.1 User Guide.

For more information on VACS virtual machines, see the "Managing Virtual Data Center" section in the Cisco Prime Service Catalog 11.1.1 User Guide.

Sync Task Plugin

Prime Service Catalog now provides the support for a Sync Task plugin to do the following operations:

• Sync VM Change
• Overwriting Quota information of a Tenant
• Restoring VDC and UCSD Container Details
• Sync Tenant Information from UCS Director
• Refresh the Data Table

Sync VM Change

The Sync VM Change functionality allows you to synchronize the UCS Director virtual machine information with the Prime Service Catalog for Advanced Service Catalog only.

Overwriting Quota information of a Tenant

Replenish the quota for a tenant using the UCSD Tenant Error Remediation service. This service is available out of the box.

For more information, see “Using the Sync Task Plugin” section in Cisco Prime Service 11.1.1 User Guide.

Restoring VDC and UCSD Container Details

The Restoring VDC and UCSD Container Information functionality allows you to sync the VDC information from UCS Director to Prime Service Catalog and replenish the container details. If the VDC creation process fails, you can restore the VDC by using the UCSD Container Error Remediation service.

For more information, see “Using the Sync Task Plugin” section in Cisco Prime Service 11.1.1 User Guide.

Sync Tenant Information from UCS Director

The Sync Tenant Information functionality syncs the tenant resource limit details from the UCS Director to the Prime Service Catalog. This service is used to replenish the Tenant Quota and the End Point Group information.

For more information, see “Using the Sync Task Plugin” section in Cisco Prime Service 11.1.1 User Guide.

Refresh the Data Table

A Refresh button has been introduced in the following pages:

• Refresh the tenant details in the Tenant Dashboard.

• Refresh the load balancing data table. This refresh icon is available under Manage My Stuff > Virtual Data Center > Edit APIC Container > Load Balancing.

• Refresh the new server details after adding a Server in the Load Balancing page. Click the (+) icon under Servers column of the Load Balancing page.

Cost and Performance Reports for Virtual Data Centers

You can view the cost reports for VDC's or VM's. The reports can be filtered by category and time period (monthly, weekly, or daily).

Performance is a real time data and it's not stored in the Prime Service Catalog tables. Using the Performance tab, you can view the line charts representation of the performance of the resources under a vDC.

For more information on Cost and Performance Reports, see “Viewing and Downloading Usage Details or Cost Details for Virtual Data Centers” section in Cisco Prime Service 11.1.1 User Guide.

Viewing Email Notification on VDC Creation

You receive an email notification when you create a VDC or a standard virtual machine. A VDC can be an APIC, fenced, or VACS container, and a virtual machine can be a standard virtual machine or a cloned virtual machine. You also get an email notification while adding a virtual machine to a Fenced and VACS container.

When you order a new VDC successfully, an email notification is sent out, which includes VDC service item details, VDC subscription data, and specific details of the VDCs such as name, display name, description, cloud name, and status of the VDC with its corresponding virtual machines. You can view the details of all the virtual machines of a particular VDC.

For information on VDC creation, see the "Virtual Data Centers" section in the Cisco Prime Service 11.1.1 User Guide.

For the email notification to work, the following settings must be done:

1. Set the SMTP properties in the Administration module. These properties are, "Mail Server Address", "Mail Server Port", and "Support Email Address".

2. FTL files must adhere to the following guidelines:

   • FTL files are well formed. This includes naming the tags properly, ensuring that every opening tag has a closing tag, ensuring that at least one "to" address exists, in addition to the other precautions mentioned above.

   • FTL files must be placed in some custom template folder and the fully qualified path name to the folder must be specified in Administration > Settings > Path of the folder containing the FTL files. The path should navigate to the folder containing the FTL files and not the files itself. By default, these FTL files are available in the "RequestCenter.war/WEB-INF/classes/config/templates/ folder.

   • The FTL file path must be in Linux convention (which is a/b/c/d and not a\b\c\d) andmust mandatorily end with '/'.

   • For clustered environments, the URL ObjectCache.Application.URL must be hardcoded in the Newscale.properties file.

   • For clustered environments, each node must have the FTL files in the same folder, and this folder must exist in every node.

   • FTL files naming convention must not be changed. The FTL files should remain as follows:

     • create_vdc_fen.ftl—For creating Fenced Container VDC

     • create_vdc_apic.ftl—For creating APIC Container VDC

     • create_vdc_vacs.ftl—For creating VACS Container VDC

     • add_vm_fen.ftl—For adding a VM of a Fenced container

     • add_vm_vacs.ftl—For adding a VM to a VACS container

     • vm_operation.ftl—For cloning a VM of a Fenced container and an APIC container, and creating a Standard VM.

3. You can view, modify, show, hide, or remove the FTL file according to your requirement, but do not change the naming convention of the FTL files, as mentioned above. You can view all the details that are included in the email notification.

You can add more than one email address in the To field separated by a comma. This field can also contain namespaces, the supported namespaces are: #Requisition.Customer.Email#, #Requisition.Submitter.Email#, #Requisition.Customer.Supervisor.Email#. The To field can also contain a combination of email address and namespace separated by comma. The From field is optional. If used, this field can contain only one email address and must not be empty. By default, it is Support Email Address mentioned in the Administration > Settings tab. The Subject field of the email template can also be customized with a custom subject line for the email.

Note

By default, the <from> field has ToBeFilled as the value. If you want to use the <from> field, edit this field with an appropriate and valid email address. If you do not want to use the <from> field, remove this field or comment it out in the FTL. If the FTL is used as is as provided out of the box, then it would result in an error, since ToBeFilled is not a valid email address.

Apart from the customizations mentioned above, you can also add any static text inside of the FTL template. For this, no special tags need to be used. You can just mention the static text as is. The "subject" field of the email template can also be customized with a custom subject line for the email.

Additional Post Provisioning Operations for VACS Container

Additional post provisioning operations are now available for managing VACS containers. These new operations are:

• Add VMs

• Power On VACS Container

• Power Off VACS Container

• Delete VACS Container

• Configure Static NAT

For more details on these operations, see Cisco Prime Service 11.1.1 User Guide.

Deleting a Tenant

The following instructions are specific only to the customers who have access to the Tenant Management module.

To delete a tenant from the Tenant Management dashboard, make sure that you delete all the physical servers, VMs, VDCs, Organization users, or any service items associated with that tenant. Follow the steps in the same sequence as listed below.

There might be slight variations in steps depending on the database you are using.

1. (As a Tenant Administrator) Go to Service Item Manager > Manage Service Items, then click the delete icon to delete physical servers for the tenant.

2. Go to Manage My Stuff > Virtual Data Center, then select the VDCs corresponding to the tenant.

3. Delete the load balancer. To delete, select the Load Balancer from the Load Balancer tab and click the delete icon.

4. Delete the Firewall rule. To delete, select the Firewall rule from the Firewall Rule tab and click the delete icon.

5. Delete the VMs. To delete, click the Virtual Machines corresponding to the VDC. On the right of each VM, click the gear icon to delete it.

6. Delete the VDCs. Click the delete icon on the existing VDC to delete it.

7. (For Oracle only) Go to the Administration > Utilities and purge all the requisitions for the specific users.

8. Go to the Organization Designer module and do the following:

   1. Move all the OUs to some other parent OU, which is not a tenant.

   2. Remove the additional OUs (Other than Home OU) for users and then delete users.

   3. Delete the users by clicking the Remove button.

9. (As a Site Administrator) Go to the Tenant Management module and click the delete icon next to the tenant, which you want to delete.

Security Enhancements

Cisco Prime Service Catalog 11.1.1 includes the following Security enhancements:

Viewing User's Last Login Details

You can view the user's last login details such as IP Address and Timestamp in the Prime Service Catalog user interface from the Profile page.

The last user login details with the specified date format is displayed on the Profile page.

Configuring and Viewing Security Audit Crypto Log Events

Service Catalog maintains audit log files on the Prime Service Catalog interface to track the login activities of a user.

You can configure the security audit crypto log events by enabling the option to log the security events. To do this, go to Service Catalog > Administration > Settings and enable the Enable logs for Security Events radio button. Default is off.

All the audit logs are saved in server.log file for all the events. The security event logs are prefixed with SEC-AUD.

For example:

COR-ID=-4724008839792176768::SEC-AUD-Fri Jan 08 12:56:31 IST 2016 : EUI Person Not found or Imported or password error for: fdsfdsf @ 173.39.67.7:DREDDI-WS

To view the audit log files from the UI:

1. Go to Service Catalog > Administration > Utilities > Logs and Properties.

2. Select the Request Center - Log Files from the drop-down list to display all the logs available on the request center server.

3. Select the Server - Log Files from the log to read drop-down list.

4. Select the log file and click View File tab to view a particular log file.

5. Select the number of lines from the Last line drop-down and click View File.

Note	You can view the audit logs for a maximum of 2000 lines.

When one of the security events listed below occurs, it will be logged in the application server's log file.

• Invalid login name or password

• Forgot Password and Password Reset

• Person Profile Password Reset and Person Password Reset

• Password Warning Period

• Password Grace Period

• Password Expired and Account is Locked

Service Designer Enhancements

Cisco Prime Service Catalog 11.1.1 includes the following Service Designer enhancements:

Enabling Order Summary in the Service Form

The show order summary functionality allows you to add a summary page at the end of the paginated service form. This summary page is a read-only page that lists all the fields of the wizard. To enable the summary page:

1. Navigate to Service Designer > Services > General.

   Note	When the Pagination View Mode option is specified other than Classic View, the Show Order Summary option is displayed.

2. Check the Show Order Summary option.

3. Scroll down and click Save.

Configuring Maximum Quantity of a Service

Max quantity functionality allows you to configure the maximum quantity of a service that can be ordered in a single order. You can configure Maximum quantity at Service level and Category level from the Service Designer module.

To set max quantity at service or category level, navigate to Service Designer > Services / Category > General and enter a value for Max Quantity. The Maximum Quantity field takes any value ranging from 0—999.

Keep in mind

• If max quantity is configured at service level and at category level, then service level max quantity value overrides the category level max quantity value.

• If max quantity is configured at category level and for some of the services max quantity is configured at service level, then for those services alone service level max quantity will be considered.

• If a service belongs to multiple categories and max quantity value is not defined at service level, the least max quantity value of all the categories will be considered.

• If a service is bundled, the max quantity value of the parent service is applicable.

Unless you enable Allow Update Quantity option from the Administration > Settings My Services section, the max quantity configured in Service Designer is not effective.

The order submission nsAPI also uses max quantity to validate across applications i.e., cart, order management, Soap call, RAPI, and nsAPI.

Limitations

• On Windows operating system, when you stop the "Cisco Prime Service Catalog" service or "Cisco Prime Service Link" service, you may occasionally get an error message which says that Windows could not stop the service on Local computer, even though the service was actually stopped successfully. You can safely ignore the error message.
• Before starting the standalone WildFly server as Windows services, you must perform the following configuration changes in the servicecatalogwrapper.conf and servicelinkwrapper.conf files. These files can be located under <ServiceCatalog_Install_Dir>/conf.
  1. Modify the following JVM parameters:

     wrapper.java.additional.4=-XX:PermSize=256m
     wrapper.java.additional.5=-XX:MaxPermSize=256m

     to

     wrapper.java.additional.4=-XX:PermSize=512m
     wrapper.java.additional.5=-XX:MaxPermSize=512m

  2. Comment out the following line.

     wrapper.java.additional.24=-XX:ReservedCodeCacheSize=256m

• Provisioning of APIC containers through APIC container catalogs imported from UCSD, when UCS Director is in a non-MSP (Default) mode, has not been validated (certified) in this release.
• For Fenced Containers, you cannot delete application templates from My Stuff. To remove an application template, remove the application template entry from the Service Item Manager and then delete the corresponding application template from the Stack Designer web interface.
• Do not use hyphen in Advance Catalog name while creating these catalogs in UCS Director. This is to avoid the synchronization issues after integrating with Prime Service Catalog.
• The virtual appliance is supported only on VMware vSphere version 5.x.

• The dynamic strings coming from the UCS Director server on the Usage Reports and Usage Details tabs cannot be localized.

Installation Notes

In Prime Service Catalog 11.1.1, the installation is supported for both WildFly and WebLogic application servers and can be configured in both Standalone and Cluster configurations.

• Standalone Installer (zip file)

  • Use the setup.sh script on Linux and setup.cmd program on Windows for installing and upgrading Cisco Prime Service Catalog.

  • Use the reporting_setup.cmd program to install Cisco Prime Service Catalog Reporting. This is a separately licensed business intelligent product supported on Windows operating system.

    If you are using Cisco Prime Service Catalog Reporting, you must obtain the latest version of the Cognos software, and run the reporting_setup.cmd program to configure Cognos and the Data Mart database. For more information, see the Cisco Prime Service Catalog Installation and Upgrade Guide.

  • Use the setup.sh on Linux and setup.cmd on Windows for also installing Cisco Prime Service Catalog in clustered environment. Both WebLogic and WildFly application servers can be deployed in a cluster for failover scenarios.

• Virtual Appliance (OVF Files):

  The Virtual Appliance includes the following pre-installed and pre-configured software:

  • RHEL operating system, version 7.1

  • Red Hat OpenJDK, version 1.7.0_79

  • Apache HTTP Server, version 2.4.6

  • WildFly Application Server, version 8.2.0.Final

  • Oracle 12c Enterprise Edition, version 12.1.0.2

  • Puppet Master, version 3.8.1

  • RabbitMQ, version 3.3.5

  • Prime Service Catalog, version 11.1.1 (with Orchestration service, and contents for applications)

Note	There are some limitations in the WildFly installations. For more information, see Limitations.

Upgrade Notes

Before upgrading, read the important notes in Planning Upgrades to Prime Service Catalog 11.1.1 and Later.

• You can directly upgrade using the installer to Prime Service Catalog release 11.1.1, if your existing installation is one of the following releases:

  • 10.1

  • 11.0

  • 11.1

If you are upgrading from releases prior to 10.1, first upgrade your installation to release 10.1 using the 10.1 installer. Then without starting the Prime Service Catalog instance, run the 11.1.1 installer to upgrade the instance to release 11.1.1 For detailed information about the application upgrade, see the Upgrade Guide chapter of Cisco Prime Service Catalog Installation and Upgrade Guide.

Note	To upgrade Prime Service Catalog Virtual Appliance from release 11.0 or 11.1 to release 11.1.1, please use the migration instructions described in the Quick Start Guide for 11.1.1.

• To upgrade from 10.1 or 11.x release to 11.1.1 release, you must supply the same KEK file (i.e. Master Encryption Key) that was used for your current installation.

• If you are upgrading from a previous release databases and have an existing facet with display name as “Rating”, make sure that you rename this facet before upgrading. This is to avoid conflict with the new Rating facet available in Cisco Prime Service Catalog 11.1.1.

Platform Support

For information about platforms that are supported by Cisco Prime Service Catalog, see the Cisco Prime Service Catalog Compatibility Matrix.

Planning Upgrades to Prime Service Catalog 11.1.1 and Later

• The Bootstrap library has been upgraded to a latest version (3.3.4). If you are using the existing Bootstrap library for any customizations, consider reviewing or modifying these customizations while planning the upgrade.
• With the WildFly support, JBoss application server is no longer supported from Prime Service Catalog 11.1. If you are leveraging any features specific to the JBoss application server in your solution, consider this information while planning the upgrade.

Prime Service Catalog 11.1.1 Bugs

Use the Bug Search tool to search for a specific bug or to search for all bugs in 11.1.1 release:

Procedure

---

Step 1	Go to http:/​/​tools.cisco.com/​bugsearch.
Step 2	At the Log In screen, enter your registered Cisco.com username and password; then, click Log In. The Bug Search page opens. Note    If you do not have a Cisco.com username and password, you can register for them at http:/​/​tools.cisco.com/​RPF/​register/​register.do.
Step 3	To search for a specific bug, enter the bug ID in the Search For field, and click Return.
Step 4	To search for bugs in the current release, click the Search Bugs tab and specify the following criteria: In the Search For field, enter Prime Service Catalog and in the Releases field, enter 11.1.1 and click Return. (Leave the other fields empty). When the search results are displayed, use the filter tools to find the types of bugs you are looking for. You can search for bugs by modified date, status, severity, and so on. To export the results to a spreadsheet, click the Export All to Spreadsheet link .

---

Related Documentation

For the list of documents available for Prime Service Catalog, see Cisco Prime Service Catalog Documentation Overview Guide. You can download product patch readmes from Download Software link.

See the Cisco Prime Service Catalog support site for information about:

• Customizing custom style sheets (CSS) that you can use to implement company or departmental branding. For information about Customizing the appearance of Prime Service Catalog web pages, see Cisco Prime Service Catalog Administration and Operations Guide.

• How to use the HTTP/WS Service Link adapter to call REST API endpoints. For information about HTTP/WS adapter, see Cisco Prime Service Catalog Adapter Integration Guide.

Accessibility Features in Prime Service Catalog

For a list of accessibility features in Prime Service Catalog 11.1.1, see the Voluntary Product Accessibility Template (VPAT) on the Cisco website, or contact accessibility@cisco.com.

All product documents are accessible except for images, graphics, and some charts. If you would like to receive the product documentation in audio format, braille, or large print, contact accessibility@cisco.com.

Copyright © 2016, Cisco Systems, Inc. All rights reserved.