Dell EMC Unisphere For PowerMax
Dell EMC Unisphere For PowerMax
Version 9.1
Installation Guide
Rev 03
September 2019
Copyright © 2014-2019 Dell Inc. or its subsidiaries. All rights reserved.
Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.
THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS-IS.” DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND
WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED
IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.
Dell Technologies, Dell, EMC, Dell EMC and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property
of their respective owners. Published in the USA.
Dell EMC
Hopkinton, Massachusetts 01748-9103
1-508-435-1000 In North America 1-866-464-7381
www.DellEMC.com
Figures 5
Tables 7
As part of an effort to improve its product lines, Dell EMC periodically releases revisions of its
software and hardware. Therefore, some functions that are described in this document might not
be supported by all versions of the software or hardware currently in use. The product release
notes provide the most up-to-date information on product features.
Contact your Dell EMC technical support professional if a product does not function properly or
does not function as described in this document.
This document was accurate at publication time. New versions of this document might be released
on the Dell EMC Online Support website. Check the Dell EMC Online Support site https://
support.EMC.com to ensure that you are using the latest version of this document.
Purpose
This document describes how to configure and use Unisphere for PowerMax.
Related documentation
The following publications provide additional information:
l Dell EMC Unisphere for PowerMax Release Notes
l Dell EMC Unisphere for PowerMax Online Help
l Dell EMC Unisphere 360 Online Help
l Dell EMC Solutions Enabler Installation Guide
l Dell EMC Solutions Enabler Release Notes
l Dell EMC Solutions Enabler SRM CLI Product Guide
l Dell EMC Solutions Enabler CLI Command Reference
l Dell EMC PowerMax Family Security Configuration Guide
Dell EMC technical support, documentation, release notes, software updates, or information about
Dell EMC products can be obtained at https://support.emc.com (registration required) or https://
www.dellemc.com/en-us/documentation/vmax-all-flash-family.htm.
In a remote configuration, install the Unisphere software on a server that is connected to the
SYMAPI server. See the Unisphere server in the following image:
Figure 2 Remote installation: Unisphere for PowerMax on a server connected to a remote SYMAPI
server
Alternatively, starting with HYPERMAX OS Q3 2015, you can manage storage systems running
HYPERMAX OS 5977 or higher using the Embedded Management (eManagement) container
application. eManagement embeds management software (Solutions Enabler, SMI-S, Unisphere
for PowerMax) on the array, enabling management of the array without requiring software
installed on a host.
Authentication
Unisphere for PowerMax supports the following types of authentication:
Windows (local and domain-based)
Users log in by specifying the Windows domain, username, and password (if they have a
Windows account on the SMAS server).
LDAP
Users log in with their LDAP-SSL username and password (if they have a user account that is
stored on an LDAP-SSL server). To use this method, a Unisphere Administrator or
The Dell EMC PowerMax Family Security Configuration Guide provides more details about
authentication, authorization, and other issues related to security.
Network requirements
Before installing Unisphere for PowerMax, verify that the host is in a properly configured IP
network and that it can resolve IP addresses and hostnames.
When you are installing Unisphere for PowerMax, the use of IPv6 addresses is supported.
Solutions Enabler
Solutions Enabler 64-bit V9.1 is required in local and client/server modes. In client/server mode,
the storsrvd daemon must be running on the server.
Concurrent users
Unisphere for PowerMax supports up to 10 concurrent users, with performance degradation
occurring with more than five storage admin users.
Note: REST API sessions count as a concurrent user while the REST calls are running.
monitored environment. The procedure to install the Database Storage Analyzer Listener is
described here: Upgrading Database Storage Analyzer Listener on page 36.
EMC ControlCenter
Unisphere cannot be installed on the same host as EMC ControlCenter agents. This restriction is
because Unisphere requires a 64-bit version of Solutions Enabler and ControlCenter agents require
a 32-bit version of Solutions Enabler.
Firefox 68.0
Microsoft Edge 44
a. Required for the browser as it runs on the machine from which the console is launched .
b. Not supported in embedded NAS (eNAS) environments.
Server requirements
The table defines the client requirements for Unisphere for PowerMax.
a. For specific operating system information, see E-Lab™ Interoperability Navigator at:
https://support.EMC.com
b. The minimum amount of memory that is required on the server (before installation) to
successfully run Unisphere for PowerMax. It is not the total amount of memory on the
server. If a server has 12 GB of physical memory that is installed but there is only 6 GB
available before Unisphere for PowerMax is installed, you may experience performance
issues with the application. If running on a Virtual Machine, this amount must be dedicated
memory, not shared memory.
Other requirements
l DNS must be configured correctly on the host.
l The host system must have connectivity to one or more storage systems to add users and set
permissions in Unisphere.
l Unisphere for PowerMax can be installed on the same system as the SYMAPI server, or on a
system connected to the SYMAPI server. For more information, see Figure 1 on page 12 and
Figure 2 on page 13, respectively.
l Before you attempt to install Unisphere for PowerMax on Red Hat Linux 6.0 or a later release,
verify that the following packages are installed:
n libstdc++-devel-4.4.4-13.el6.x86_64.rpm
n libstdc++-4.4.4-13.el6.x86_64.rpm
n libaio-0.3.107-10.el6.x86_64.rpm
n ncurses-libs-5.7-3.20090208.el6.x86_64.rpm
Not all installer packages include these libraries by default, so verify their presence before
running the installation program. Do not attempt to run the installation process without them.
Without these items, the product fails to install and does not function properly.
l To install PostgreSQL on Linux, a minimum of 2 GB of shared memory must be available.
For more information about how to configure the size of a shared memory segment, using the
shmmax kernel parameter, see the documentation for your operating system.
l If you are changing your SYMAPI connection type, such as changing from a local connection to
a client/server configuration, you must perform a fresh installation.
l Before installing Unisphere for PowerMax on a host running Linux, ensure that the maximum
number of open file descriptors that are allowed is at least 4096.
l For installations on Microsoft Windows, Unisphere must be installed on a volume which has
Windows short file names (8dot3) enabled.
l Ensure that your system is configured to use a supported operating system, language, and
keyboard.
l Before installing Unisphere on a Microsoft Windows system, ensure that the language for the
system location is correct to avoid indecipherable characters on the install screens. To check
the language, go to Control Panel > Region and Language > Administrative tab > Language
for non-Unicode programs.
l Preinstallation configuration..................................................................................................20
l Installing Unisphere for PowerMax........................................................................................20
l Completing the installation.................................................................................................... 27
l Launching Unisphere for PowerMax...................................................................................... 31
Preinstallation configuration
Before you install Unisphere for PowerMax, complete the following tasks if they are appropriate
for your installation environment:
l Setting the event and statistics daemons to autostart on Linux on page 20
l Setting up the PostgreSQL user on Linux on page 20
l Configuring networking on Linux on page 20
groupadd postgres
useradd -g postgres postgres
::1
UNIVMAX_Vx.x.x.y_WINDOWS_X86_64.exe
UNIVMAX_Vx.x.x.y_LINUX_X86_64.bin
In the file names above, the x represents the release number and the y represents the software
build number. The build number varies based on when the software was built.
l Unisphere for PowerMax Online Help
l Unisphere for PowerMax Release Notes
l This installation guide
To access the software from online support:
Procedure
1. On the Dell EMC support website:
a. Search for Unisphere for PowerMax.
b. Locate the appropriate kit and download it to a directory on the host drive.
2. Continue with Step 2: Installing the software on page 21.
./UNIVMAX_Vx.x.x.x_LINUX_X86_64.bin -i swing
If the display manager is not enabled or the -i swing switch is not used, the installer
defaults to console mode.
On Linux systems, you must run the installer as a nonroot user.
c. Click Next.
6. On the Ports Configuration page, specify the ports to use or enable when connecting to
the Unisphere server.
The default ports of the Unisphere server (HTTPS Port No) and performance database (DB
Port No) are shown. To use the default ports, verify that they are available, and click Next
to accept and enable them. Or you can specify and enable different ports, and click Next.
7. On the Unisphere Lockbox Password page, configure the lockbox password.
Note: If you configure a Unisphere Lockbox Password other than the default one,
ensure that you take note of the new password. You need it for subsequent upgrade and
support operations.
To accept the default lockbox password:
a. Click Next.
b. In the Default Lockbox Password dialog box, click OK.
To change the lockbox password:
a. Select Overwrite default Unisphere lockbox password?.
b. In the Lockbox Password field, type the new lockbox password.
c. In the Confirm Lockbox Password field, type the new lockbox password again.
d. Click Next.
e. In the Custom Lockbox Password dialog box, click OK.
c. To specify Unisphere 360 X.509 common name, select Define Unisphere 360 X.509
Common Name.
d. In the Unisphere 360 X.509 Common Name field, type the Unisphere 360 X.509
common name.
e. Click Next.
f. On the Confirm Client Authentication dialog box, click OK.
If you enable X.509 certificate-based authentication, after installation completes, import the
certificate and start SMAS manually. For more information, see Importing CA certificates on
page 28.
9. To install Unisphere for PowerMax on a host with more than one network interface
configured, you are prompted to choose the IP address to which Unisphere for PowerMax
binds. On the Listening (bind) Address Selection page, select the server protocol (IPv4 or
IPv6), select the IP address, and then click Next.
10. If the disk space and/or memory requirements are not met, a warning is displayed. If you
want to continue with the installation regardless of the consequences described in the
message, click OK.
11. On the Pre-Installation Summary page, verify the summary information, and click Install
to continue the installation.
12. On the Install Complete page, click Done.
13. Refer to Completing the installation on page 27 for instructions on completing the
installation.
Step 2B: Installing Unisphere for PowerMax from the command line
About this task
Online help is available when installing from the command line by entering -?.
To install Unisphere for PowerMax from the command line:
Procedure
1. Save all files and exit all applications.
2. Change the directory to the location of the kit.
3. Run the following command to install Unisphere for PowerMax on Windows:
kit_name -i console
chmod +x kit_name
./kit_name -i console
UNIVMAX_Vx.x.x.y_WINDOWS_X86_64.exe
UNIVMAX_Vx.x.x.y_LINUX_X86_64.bin
In the file names above, the x represents the release number and the y represents the
software build number. The build number varies based on when the software was built.
On Linux systems, you must run the installer as a non-root user.
b. Specify a SymAPI Connection Type for the initial login based on the following:
l Local—On a host with Solutions Enabler installed and attached to PowerMax
systems.
l Remote—On a remote server that is connected to a SYMAPI server, specify the
SYMAPI server Node Name and Net Port. The default net port for SYMAPI is 2707.
For more information about each of the connection types, see Local, remote, and
embedded installation options on page 12.
8. On the Ports Configuration panel, specify the ports to use or enable when connecting to
the Unisphere server.
The default ports of the Unisphere server (HTTPS Port No) and performance database (DB
Port No) are shown. To use the default ports, verify that they are available, and click Next
to accept and enable them. Or you can specify and enable different ports, and click Next.
9. On the Unisphere Lockbox Password panel, click Enter to accept the default lockbox
password, or configure a new one and then press Enter.
Note: If you configure a Unisphere Lockbox Password other than the default one,
ensure that you take note of the new password. You need it for subsequent upgrade and
support operations.
a. At the Enable certificate based client authentication? prompt, type 2 for Yes.
b. Specify whether to use the CN or UPN of the client certificate as the certificate alias.
Note: Instances of the following special characters are stripped from the alias:
@:?;|<>[]+=,*/\
Typical response file contents are in the form of key-value pairs. The keys of the response files are
interpreted by the installer as InstallAnywhere variables and their values are replaced during
runtime. Typical contents of a response file are as follows:
EMC_SUNAME=smc
EMC_HTTPSPORT= [PORT NUM]
EMC_DBPORT=[PORT NUM]
EMC_CONNTYPE=[Local | Remote]
EMC_NODENAME=[localhost| remote host]
EMC_NETPORT=[PORT NUM]
DEFAULT_PASSWORD=[false|true]
CST_PASSPHRASE=[passphrase]
CST_CONFIRM_PASSPHRASE=[confirm passphrase]
BIND_ADDRESS=[IP ADRESS]
IS_RESPONSE_FILE=[always true]
USER_INSTALL_DIR=[install directory]
EMC_SUNAME=smc
EMC_HTTPSPORT=8443
EMC_DBPORT=3324
EMC_CONNTYPE=Local
EMC_NODENAME=localhost
EMC_NETPORT=2707
DEFAULT_PASSWORD=true
BIND_ADDRESS=198.51.100.99
IS_RESPONSE_FILE=TRUE
USER_INSTALL_DIR=C:\\Program Files\\EMC
2. Invoke a silent install from the command line by typing one of the following commands:
l For Linux:
l For Windows:
Note: For Windows you can use Start /wait to end the command execution:
Importing CA certificates
About this task
If you chose to use certificate-based user authentication at installation time, import the CA
certificates before you login.
You must have root/administrator permissions to complete this task.
When certificate-based user authentication is chosen at install time, the SMAS service does not
start automatically after installation completes. After you have imported the CA certificates,
manually start the SMAS service.
For more information about starting the SMAS service refer to Starting and stopping the SMAS
service on page 30.
To import a CA certificate:
Procedure
1. Open the domain.xml.init file.
For Linux:
install_dir/jboss/domain/configuration/domain.xml.init
For Windows:
install_dir\jboss\domain\configuration\domain.xml.init
cd install_dir\SMAS\jboss\bin
service.bat importcacert password CA_cert_alias CA_file_path
For Linux:
cd install_dir/SMAS/jboss/bin
initcst.sh importcacert password CA_cert_alias CA_file_path
Where:
l password is the password of the keystore, discovered in 3 on page 29
l CA_cert_alias is the alias of the CA cert chosen at installation time.
Note that when either the CN or UPN is chosen as the alias for the CA cert, instances of
the following special characters are stripped from the alias: @:?;|<>[]+=,*/\
l CA_file_path is the path to the CA certificate file.
Windows
About this task
To start or stop the EMC_smasdb service in Windows, use the Control Panel (Administrative
Tools > Services).
Alternatively, you can use the following commands to start or stop the Windows services using the
CLI:
Linux
About this task
Start the performance database before starting the SMAS service. In the same way, stop the
SMAS service before stopping the performance database.
To start or stop the performance database (PostgreSQL) in Linux, navigate to this directory:
install_dir/SMAS/jboss/standalone/data/pgsql and use the following commands:
Action Command
Start ./smasdb_unix_helper.sh -S
Stop ./smasdb_unix_helper.sh -k
Windows
About this task
To start or stop the EMC Symmetrix Management Application Server in Windows, use the
Services panel. Click Control Panel > Administrative Tools > Services to open the Services
panel.
Alternatively, you can use the following commands to start or stop the Windows services using the
CLI:
net start "EMC Symmetrix Management Application Server"
net stop "EMC Symmetrix Management Application Server"
Linux
About this task
Start the performance database before starting the SMAS service. In the same way, stop the
SMAS service before stopping the performance database.
You must run the SMAS service as a non-root user.
To start or stop the SMAS service in Linux, change to this directory: /etc/init.d and use the
following commands:
Action Command
https://host_IP:port_number
or
https://host_name:port_number
The port number is configured during installation. The default HTTPS port number is 8443.
If the host IP address is an IPv6 address, surround the IP address with square brackets, for
example:
https://[2001:db8:ffff:ffff:ffff:ffff:ffff:ffff]:8443
If the host IP address is an IPv4 address, type the IP address as normal, for example:
https://198.51.100.255:8443
Upgrade paths
You can upgrade to Unisphere for PowerMax V9.1 from Unisphere for PowerMax V9.0.x.
Note: To upgrade to V9.1 from a version lower than V9.0.x, first upgrade to V9.0.x.
Note: Unisphere for PowerMax release 9.1.0 onwards uses PostgreSQL version 10.
On SUSE Linux Enterprise Server (SLES) platforms, PostgreSQL version 10 is supported only
on SLES version 12 or later.
On Red Hat Enterprise Linux Server (RHEL) platforms, PostgreSQL version 10 is supported
only on RHEL version 6, or later.
The installation program automatically upgrades your installation according to the settings used in
the previous installation, including port and connection type.
The following Unisphere for PowerMax settings from your previous installation are maintained
through the upgrade process:
l Users
l Alert policies and threshold settings
l Email settings: Mailing list and SMTP configuration
l Performance dashboard settings
l Queries
When you are upgrading from V8.x, LDAP/AD configuration information is retained.
Install the DSA Listener on a Microsoft SQL Server host. The following Windows Server versions
are supported:
l Windows Server 2008 R2
l Windows Server 2012
l Windows Server 2012 R2
l Windows Server 2016
l Windows Server 2019
You must have Administrator privileges to complete the installation.
On Windows Server 2008 R2, PowerShell 4.0, or higher, is required.
Procedure
1. In Unisphere for PowerMax, select Database > Administration.
2. Click Register.
3. Select MS SQL Server.
4. To download the DSA Listener installer, click the DSA Listener download icon.
The UNIPMAX_DSA_LISTENER_WINDOWS_X86_64.exe file downloads in your browser.
5. Copy the downloaded file to the Microsoft SQL Server database host.
6. On the SQL server database host, double-click the executable file to start the upgrade.
7. Proceed through the installation wizard, accepting the default values.
The installation wizard installs and starts the required services.
Procedure
1. Navigate to the following directory:
install_dir/SMAS/_EMC_SMAS_installation
./Uninstall_EMC_SMAS_Installation
l Technical notes..................................................................................................................... 44
Technical notes
This appendix provides technical notes for the advanced configuration of this version of Unisphere
for PowerMax.
SYMAPI server
If you want to change the SYMAPI server that Unisphere is pointing to, uninstall Unisphere, and
then reinstall it.
During the install, you supply the new SYMAPI hostname and network port number.
Alerts
By default, most Unisphere status alerts are disabled. Configuring alert policies in the Unisphere for
PowerMax help includes instructions on enabling them.
Backups
Consider making regular backups of the system and performance databases, scheduling backup
tasks where appropriate and possible. For more information about managing backups, see the
Unisphere for PowerMax online help.
For more information about downloading database backups from Virtual Appliance manager, see
the Admin and Housekeeping section in the vApp Manager for Unisphere for PowerMax online help.
To resolve this issue, in Unisphere for PowerMax complete the following steps:
1. Click Performance > Settings > Databases.
2. Wait until the Status of the database of the appropriate storage system is set to OK before
attempting to start another database operation.
cd install_dir\SMAS\jboss\standalone\configuration
cd install_dir/SMAS/jboss/standalone/configuration
cd install_dir\SMAS\jboss\standalone\configuration
install_dir\SMAS\jre\bin\keytool -import -alias root^
-file Trusted_CA_cert_file -keystore keystore -trustcacerts
cd install_dir\SMAS\jboss\standalone\configuration
install_dir\SMAS\jre\bin\keytool -import -alias root /
-file Trusted_CA_cert_file -keystore keystore -trustcacerts
3. Send the generated certificate request file, tomcatcert.csr, to your CA for validation.
After the request file has been validated, you should receive a signed certificate back from
CA.
Using the CLI to import the CA-signed certificate into the keystore using CLI
About this task
Starting with HYPERMAX OS Q1 2015 SR, you can import CA-signed certificates using the CLI or
scripts.
To import the CA-signed certificate into the keystore using the CLI:
Procedure
1. If it is running, stop the SMAS server. For instructions, refer to Starting and stopping the
SMAS service on page 30
When X.509 certificate-based authentication is chosen at installation time, the SMAS
service is not started, by default.
2.
a. For Windows, enter the following commands:
cd install_dir\SMAS\jboss\standalone\configuration
install_dir\SMAS\jre\bin\keytool -import -alias tomcat^
-file signed_certificate_file keystore keystore -trustcacerts
cd install_dir/SMAS/jboss/standalone/configuration
install_dir/SMAS/jre/bin/keytool -import -alias tomcat \
-file signed_certificate_file keystore keystore -trustcacerts
Using scripts to import the CA-signed certificate into the keystore using scripts
About this task
To import the CA-signed certificate into the keystore using scripts:
Procedure
1. If it is running, stop the SMAS server. For instructions, refer to Starting and stopping the
SMAS service on page 30
When X.509 certificate-based authentication is chosen at installation time, the SMAS
service is not started, by default.
2.
a. For Windows, enter the following commands:
cd install_dir\SMAS\jboss\bin
service.bat importcacert password CA_certificate_alias^
signed_certificate_file
cd install_dir/SMAS/jboss/bin
initcst.sh importcacert password CA_certificate_alias \
signed_certificate_file
Listing certificates
Procedure
1. Type the following commands to list certificates:
l On Windows systems:
cd install_path\jboss\bin
l On Linux systems:
cd install_path\jboss\bin
Deleting certificates
Procedure
1. Type the following commands to delete certificates:
l On Windows systems:
cd install_path\jboss\bin
l On Linux systems:
cd install_path\jboss\bin
In these examples, password is the trust store password and cert_alias is tomcat.
smas_installation/jboss/domain/configuration/domain.xml
<ssl key-alias="tomacat"
ca-revocation-url="C:/SMAS/standalone/configuration/CRL_CAC.pem
If daemon STORSRVD on zOS is not listening on the default port (port 2707), set the
DMN_REMOTE_PORT.
For Windows:
install_dir\SMAS\jboss\domain\deploy\domain-symm.ear\domain-symm-
ejb.jar\META-INF
<env-entry>
<env-entry-name>StatsConnectionType</env-entry-name>
<env-entry-type>java.lang.String</env-entry-type>
<env-entry-value>SYMAPI_CONN_TYPE_LOCAL</env-entry-value>
</env-entry>
<env-entry>
<env-entry-name>NodeName</env-entry-name>
<env-entry-type>java.lang.String</env-entry-type>
<env-entry-value>198.51.100.90</env-entry-value>
</env-entry>
For Windows:
install_dir\SMAS\jboss\domain\
5. Restart the services as described in Starting and stopping the SMAS service on page 30.
When the services restart, the deploy0 directory is re-created automatically with correct
configuration.
6. Launch the Unisphere for PowerMax console. For more information, see Launching
Unisphere for PowerMax on page 31.