POWER7 information

Setting up AIX or Linux to use a management console to connect to service and support

Learn how to create a service connection to send service and support information from AIX® or Linux logical partitions and servers by using a management console.

Perform or verify steps 1 - 16 to set up connectivity for AIX or Linux logical partitions or servers using a management console.

Step 1. Before you begin

This procedure contains the complete list of steps that are needed to set up connectivity to service and support. Some of these steps might already have been completed during the initial server setup. If so, you can use this procedure to verify that the steps were completed correctly.

In this information, an Internet connection is defined as access to the Internet from a logical partition, server, or a management console by direct or indirect access. Indirect means that you are behind a network address translation (NAT) firewall. Direct means that you have a globally routable address without an intervening firewall, which would block the ports that are needed for communication to service and support.

Step 2. Decide on your connectivity method

If you have a management console and have multiple logical partitions, use one of the follow methods to connect the management console to service and support:

Direct Internet including virtual private network (VPN) or a Secure Sockets Layer (SSL) connection
Shared direct Internet
Shared dial-up connection

Note: If you have multiple management consoles on the same subnet, or management consoles that manage common systems, only one management console needs to connect to service and support. This allows connectivity to be concentrated through one management console, which simplifies firewall rules.

For AIX or Linux logical partitions, hardware errors are reported through the management console by using the connection method that is provided for the management console.

Step 3. Prerequisites

For direct Internet connections, contact the network administrator to verify the following:
- For Hardware Management Console (HMC) environments, if you plan on using VPN for transport, ensure that the following ports are open for communication:
  - Protocol UDP ports 500 and 4500 with the following IP addresses: Boulder: 207.25.252.196 and Rochester: 129.42.160.16
  - ESP (protocol 50) with the following IP addresses: Boulder: 207.25.252.196 and Rochester: 129.42.160.16
- For HMC environments, if you plan on using Secure Sockets Layer for transport and a firewall is in place between the HMC and the Internet, it must allow outgoing TCP/IP connections on port 443 from the HMC to each of the following IP addresses:
  - 129.42.160.48 and 207.25.252.200 (all regions)
  - 129.42.160.49 and 207.25.252.204 (North or South America)
  - 129.42.160.50 and 207.25.252.205 (all other regions)
    Note: You need to specify only the IP addresses necessary to set up access that is appropriate for your region.
- If multiple logical partitions are sharing an Internet connection, you will need the IP addresses or host names created for TCP/IP and for virtual Ethernet.
For a dial-up (modem) connection, determine the necessary configuration settings, including:
- Local area code
- Predial information, such as dialing 9 to dial outside the network
- Use of commas if delayed dialing is needed
- Any special telephone line conditions, such as pulse (rotary) dialing or no dial tone.
Ensure that TCP/IP is set up and configured correctly. If TCP/IP is not set up, contact the network administrator and consult your operating system documentation.

Step 4. Ensure that your physical networking is set up correctly

The underlying framework of your service environment is networking. The following networking connections are required for you to be able to take advantage of electronic services, such as reporting hardware problems and other server information and downloading updates:

Between the service processor and the management console
Between the management console and the server (AIX or Linux)
Between your site and service and support

Verify the physical connection between the service processor and the management console.
The service processor is part of your platform hardware, and it monitors hardware attributes and conditions on your server. The service processor is controlled by server firmware, and it does not require an operating system to perform its tasks. The connection to the service processor is recommended for all servers, whether or not you have logical partitions. This connection is represented in the following figure.

Figure 1. The Ethernet connection between your management console and the service processor on your server
Verify the physical connection between the management console and the server (AIX or Linux).
This connection allows your server to communicate with your management console.
How you set up this connection depends on your configuration:
- If your server is in its manufacturing default configuration, you will make this connection when you set up your server.
- If your server has multiple logical partitions, you must ensure that your management console can communicate with each logical partition and that the logical partitions can communicate with each other. You will set up these connections as you create your logical partitions.
You can use either of the following methods:
Note: Both of the following networking methods require basic TCP/IP configuration on your logical partitions. For instructions about how to configure TCP/IP, see your operating system documentation.
- Have an Ethernet adapter for one logical partition, most likely your service partition, and then use virtual Ethernet to enable the logical partitions to communicate with each other and with the management console. This option is the preferred option because it requires that you have only one physical adapter in the system. The following figure shows this configuration.
  Figure 2. The Virtual Ethernet connection between your logical partitions and the physical Ethernet connection between your service partition and the HMC
- Have a LAN adapter for each logical partition, and then have a physical connection between each logical partition and the management console. This option requires that you have a router and a physical LAN adapter for each logical partition. The following figure shows this configuration.
  Figure 3. The physical Ethernet connections between your logical partitions and your management console through a router
Verify the physical connection from your site to service and support.
This connection enables you to report hardware problems and other server information to service and support. It also enables you to install updates. This connection is represented in the following illustration:
Figure 4. This diagram shows the connection between service and support and a company that has a server and a management console.

Step 5. Obtain or verify an IBM ID

You will need an IBM® ID to register IBM Electronic Service Agent™ on the management console and for Electronic Service Agent on your operating system or systems. You also will need this ID to view information that has been reported to IBM through Electronic Service Agent.

Go to the My IBM Profile website.
Verify that you are registered.
- If you are registered, Welcome back will be displayed on the website. Or, you can select Sign in and see if your e-mail address is recognized.
- If you are not registered, select Register and fill out the registration form. Create an IBM ID for each of the people you want to have access to the information that Electronic Service Agent reports to IBM. You must associate these accounts with a server, usually your central server. (You can add other servers later.) The people for whom you create IDs must have system administrator authority on all registered servers.
Record your IBM ID (the e-mail address that you registered). You will need the ID when you verify the management console service settings.
Verify the management console service settings.
- To verify the HMC service settings, see Verify the HMC service settings.
- To verify the IBM Systems Director Management Console (SDMC) service settings, see Verify the SDMC service settings.

Step 6a. Verify the HMC service settings

To verify that the HMC service settings are set up correctly, use the Guided Setup wizard.

Note: If you have not set up your server, do that now.

Access the Guided Setup wizard by using the HMC interface:
- For HMC, perform the following steps:
  1. In the navigation area, click HMC Management.
  2. In the contents pane, click Launch the Guided Setup Wizard.
  The Guided Setup wizard guides you through the tasks that are required to set up your HMC, including the tasks that are required to set up your service environment.
- For SDMC, perform the following steps:
  1. In the contents pane, click Settings > Serviceability tasks > Service and Support Manager Getting Started Wizard.
For HMC, click Next to skip the tasks that are not specific to setting up service, including:
- Setting the date and time
- Changing passwords for the hscroot and root user IDs
- Creating user IDs and passwords for new users and setting their authorities
- Specifying network settings
Ensure that the following service tasks are completed correctly:
1. Specify customer contact information for service-related activities:
  - Contact name
  - Company name
  - Administrator name
  - E-mail address
  - Telephone numbers
  - Information regarding the location of the HMC
2. Configure connectivity for service-related activities:
  - Internet VPN
    Note: When configuring the HMC's network settings for connecting by using direct or indirect Internet, the HMC must be configured with a default gateway to access the Internet. Select HMC Management > Change Network Settings. Ensure that the Default Gateway Information field lists a gateway address and that a selection is made in the Gateway device field (for example, Any).
  - Internet: The SSL option must be configured manually:
    1. Select Service Management > Manage Outbound Connectivity.
    2. Click Configure.
    3. Click the Internet tab.
  - Dial-up connection from the local HMC
  - Connecting through other systems or logical partitions
3. Configure the network settings.
  - For direct or indirect Internet:
    - HMC host name
    - Domain name
    - Description of HMC
  - For a dial-up modem connection:
    - Dial prefix, if applicable
    - Modem configuration:
      - Dial type
      - Dial prefix, if applicable
    - Telephone number
4. Authorize two users for Electronic Service Agent by entering the ID (the e-mail address that you registered with the My Profile website at https://www.ibm.com/account/profile.
  Note: You will be able to authorize more users later.
5. Add e-mail addresses for those you want to be notified when problem events occur.
To test the connection from the HMC, open Service Management > Manage Outbound Connectivity.
Select the tab for the type of outbound connectivity that you chose for your HMC (Local Modem, Internet, Internet VPN, or Pass-Through Systems). For more information about these settings, see Choosing your connection method.
Click Test.
Choose from the following options:
- If the test is successful, Set up and configure your logical partitions.
- If the test fails, continue with the next step.
Ensure that your country or region is listed. Select Service Management > Manage Customer Information. Ensure that your country or region is selected from the list.
Choose from the following options:
- If you have a dial-up connection, perform the following steps:
  - Check the telephone line going into the HMC and the wall socket.
  - Check to make sure that you have the telephone number configured correctly, including predial information, such as dialing 9 to dial outside the network.
- If you have an Internet VPN connection, perform the following steps:
  - Ensure that the appropriate firewall rules have been added, if necessary.
  - Check that you have a default gateway set up on the HMC. Select HMC Management > Change Network Settings. Ensure that the Default Gateway Information field has a Gateway address listed and a selection is made in the Gateway device field (for example, Any).

Step 6b. Verify the SDMC service settings

To verify that the SDMC service settings are set up correctly, use the Service and Support Manager getting started wizard.

Note: If you have not set up your server, do that now.

Access the Guided Setup wizard by using the SDMC interface:
1. In the contents pane, click Settings > Serviceability tasks > Service and Support Manager Getting Started Wizard.
Ensure that the following service tasks are completed correctly:
1. Specify customer contact information for service-related activities:
  - Contact name
  - Company name
  - Administrator name
  - E-mail address
  - Telephone numbers
  - Information regarding the location of the SDMC
2. Configure connectivity for service-related activities:
  - Use direct connection
  - Use proxy server
3. To confirm correct settings, click Test Connection.
4. Authorize the user for Electronic Service Agent by entering the ID (the e-mail address that you registered with the My Profile website at https://www.ibm.com/account/profile.
  Note: You will be able to authorize more users later.

Step 7. Set up and configure your logical partitions

For details, see Partitioning the server.

Step 8. Install the operating systems on your server or logical partitions

For details, see Working with operating systems and software applications for POWER7 processor-based systemsWorking with operating systems and software applications for POWER7 processor-based systems.

Step 9. Configure your TCP/IP network

For instructions, see the operating system documentation.

Step 10. Activate TCP/IP on your server or logical partitions

TCP/IP starts automatically if the network adapter is recognized and can communicate with the network when the AIX or Linux operating system is started.

Step 11. Configure Electronic Service Agent for AIX or Linux

If you have a management console, you do not need to obtain and configure Electronic Service Agent for AIX or Linux.AIX or Linux inventory and hardware-problem information (or report) are sent through the management console. However, you might want to set up Electronic Service Agent on the AIX or Linux operating system to contact the software service organization.

Choose from the following options:
- If you have a management console and do not want to obtain and configure Electronic Service Agent, go to Step 14. Configure the service processor.
- If you want to obtain and configure Electronic Service Agent for the AIX or Linux operating system, continue with the next step.
Obtain Electronic Service Agent.
1. Go to the Electronic Service Agent website.
2. Follow the on-screen prompts to locate the instructions to obtain Electronic Service Agent.
Choose from the following options:
- To configure Electronic Service Agent for the AIX operating system, continue with the next step.
- To configure Electronic Service Agent for the Linux operating system, go to step 9.
To configure Electronic Service Agent for the AIX operating system, review the following information:
In this example, you will configure the following items:
- Electronic Service Agent on the server that has a modem for dial-up connection to service and support
  Notes:
  - SDMC does not provide a modem or VPN support for Call home function.
  - Alternatively, you can use an Internet or Secure Sockets Layer (SSL) connection instead of the modem to connect to service and support. SSL communication can be enabled to connect to the Internet through your proxy server. SSL connectivity is more likely to be compliant with corporate security guidelines. Advantages to using an Internet connection rather than a modem connection include:
    Significantly faster transmission speed.
    
    Reduced expense (for example, the cost of a dedicated analog telephone line).
    
    Greater reliability.
- Electronic Service Agent on the other clients to communicate with the server that has the modem
Figure 5. Three servers and their connection through a modem to service and support
Note: For complex network environments involving HTTP proxies, SOCKS proxies, or DMZs, see Electronic Service Agent for IBM pSeries and IBM RS/6000® User's Guide.
From the System Management Interface Tool (SMIT), configure and start the Service Agent Connection Manager (SACM). The SACM is responsible for establishing connectivity to service and support. It enables the gateway server and clients to use a single, secure connection.
Notes: For more details on SMIT, see the System Management Interface Tool SMIT red paper.
1. Verify that the host name for the SACM is correct. In this example, the SACM is located on the server or logical partition that has the modem. Therefore, the SACM is configured to the host name of the server or logical partition that has the modem.
2. Verify the default port 1198. In most cases, the default port is appropriate. You can change the port later, if necessary. This port is necessary for communication between the gateway server and the SACM.
Configure and start the Electronic Service Agent gateway server. This is the server or logical partition that acts as the central management server for all of the clients (monitored servers or logical partitions). The Electronic Service Agent gateway server contains the central database, and it starts communication to service and support. The Electronic Service Agent gateway communicates to service and support through the SACM.
1. Verify that the host name is correct. In this example, the SACM and Electronic Service Agent gateway server are located on the same server. It is the server or logical partition that has the modem. The Electronic Service Agent gateway server is the server or logical partition that has the modem. Therefore, the Electronic Service Agent gateway is configured to the host name of the server or logical partition that has the modem.
2. Verify that the machine type, model, and serial number are correct.
Configure and start the Electronic Service Agent client. This is the monitored server or logical partition for which system information is collected and reported to service and support.
1. Verify that the host names for the Electronic Service Agent clients and for the Electronic Service Agent gateway are correct.
2. Verify that the machine type, model, and serial number are correct.
Go to Step 12. Use the Electronic Service Agent (ESA) basic user interface.
To configure Electronic Service Agent for the Linux operating system, review the following information.
In this example, you will configure the following items:
- Electronic Service Agent on the server that has a modem for dial-up connection to service and support
  Notes:
  - SDMC does not provide a modem or VPN support for Call home function.
  - Alternatively, you can use an Internet or Secure Sockets Layer (SSL) connection instead of the modem to connect to service and support.
- The Electronic Service Agent on the other clients to communicate with the server that has the modem
Figure 6. Three servers and their connection through a modem to service and support
From the Linux command line, type the following command to configure and start the SACM:
```
startsrc -s sacm
```
The SACM application enables the gateway server and client servers to use a single, secure connection to reach service and support.
From the Linux command line, type the following command to configure and start the Electronic Service Agent gateway server:
```
/usr/svcagent/bin/sagatewayconfig
```
The Electronic Service Agent gateway server acts as the central management server for all of the clients (monitored servers or logical partitions). It contains the central database and starts communication to service and support.

Step 12. Use the Electronic Service Agent (ESA) basic user interface

You need to install the Electronic Service Agent on the AIX or Linux operating system to access the ESA basic user interface. For details, refer to the Electronic Service Agent website and search for the appropriate Electronic Service Agent user's guide.

Become familiar with the ESA basic user interface. The ESA basic user interface provides a list of properties and the associated fields that you need to configure Electronic Service Agent.
Specify information for the required property fields. Click each property on the left side of the interface, and complete the required fields on the right side of the interface. Required fields are indicated with an exclamation point.
For this example, where you have multiple servers or logical partitions running the AIX or Linux operating system and you use a modem for outbound connectivity, you need to complete specific information for the following properties:
ConnectionManager

Clear False for Connect to SDR using Dialer to enable the dialer. This property indicates that you want to use a modem to connect to service and support.

Dialer

Specify details about your modem and service and support connection parameters.

Machines

Add two ESA client servers.

Enroll

Register the servers with service and support. This property starts a call to service and support to enroll the servers in the service and support database. To complete the process, service and support sends you a key.

Call log

Check the status of the call to service and support. You can see whether the call to service and support is successful.

To learn about advanced features that go beyond the scope of this example, go to the Electronic Service Agent Web site and search for the appropriate Electronic Service Agent user's guide.

Step 13. Register the ID with the Electronic Service Agent for AIX or Linux

From the Electronic Service Agent basic user interface, click Enroll.
Complete the required fields on the right side of the interface. Required fields are indicated with an exclamation point.

Step 14. Configure the service processor

You might use this type of service connection if your server is not available, because the service processor does not require an operating system to perform its tasks.

To set up your service processor to connect to service and support, you need to attach a modem to the system port on your server. In addition, you need to use the Advanced System Management Interface (ASMI) menus to perform several configuration steps.

On the ASMI Welcome pane, specify your user ID and password, and click Log In.
Note: To perform these tasks, you must have an authority level of either administrator or service provider.
In the navigation area, expand System Service Aids.
To configure the service processor system port, follow these steps:
1. Select Serial Port Setup.
2. Modify the appropriate fields in the S1 (used with the call-home feature) and S2 (used with the call-in feature) sections.
3. Click Save settings to save the setting changes.
To configure the modem, follow these steps:
1. Select Modem Configuration.
2. Modify the appropriate fields in the S1 and S2 sections.
3. Click Save settings.
To configure the call-home and call-in policy, follow these steps:
1. Select Call-in/Call-home.
2. Enter the desired text into the specified fields.
3. Click Save settings to save changes.
To test the call-home policy, follow these steps:
1. Select Call-Home Test.
2. Click Initiate call-home test. A test of the call-home system is performed as specified by the current port and modem selections.

Step 15. Test the connection to service and support

If you use an HMC to connect to service and support, follow these steps to test the connection for the HMC:
- If you use an HMC to connect to service and support, complete the following steps to test the connection for the HMC:
  1. On the HMC, open Service Management > Create Serviceable Event.
  2. Select Test problem reporting.
  3. Select Request Service. A message is displayed when the service request is sent.
- If you use an SDMC to connect to service and support, follow these steps to test the connection for the SDMC:
  1. In the contents pane, click Manage > Service and Support Manager > Test Connection to IBM.
To test the connection for the AIX operating system (if you set up Electronic Service Agent on the server or logical partition), follow these steps:
1. From the System Management Interface Tool (SMIT) on your Electronic Service Agent server, activate the Electronic Service Agent.
2. Ensure that the Electronic Service Agent Connection Manager is active if it is located on a machine other than the Electronic Service Agent server.
3. From SMIT, start the Electronic Service Agent Advanced User Interface.
4. To use a modem, follow the instructions to configure the dialer on the Connection Manager window. The default is to connect to service and support by using an existing Internet connection.
5. Open the Manual Tools folder.
6. Select Connect.
7. Monitor the Call log for the following entry: TEST Connection (Success: 1, Fail: 0).
To test the connection for the Linux operating system (if you set up Electronic Service Agent on the server or logical partition), follow these steps:
1. On your Electronic Service Agent server, activate the Electronic Service Agent.
2. At a Linux command line, type the following command:
```
startsrc -g svcagent
```
3. Ensure that the Electronic Service Agent Connection Manager is active if it is located on a machine other than the Electronic Service Agent server.
4. At a Linux command line, type the following command:
```
startsrc -s sacm
```
5. Start the Electronic Service Agent Advanced User Interface.
6. At a Linux command line, type the following command:
```
/usr/svcagent/bin/sauiascii
```
7. If you want to use a modem, follow the instructions to configure the dialer on the Connection Manager window. The default is to connect to service and support by using an existing Internet connection.
8. Open the Manual Tools folder.
9. Click Connection.
10. Monitor the Call log for the following entry: TEST Connection (Success: 1, Fail: 0).

Step 16. View the server information that was reported

You can use the Internet to view details of the system you have enabled, and see the data collected by Electronic Service Agent. To use the advanced features and receive the full benefits of Electronic Service Agent, you must enter an IBM Registration ID (IBM ID). The first IBM ID entered will have Administrator authority and is able to authorize additional users on the website. The second IBM ID is available as a backup for the Administrator.

Go to the Electronic Service Agent Web site.
Click Sign in (in the upper-right corner).
Type the IBM ID and password.
Choose the following options from the navigation bar:
- To view your server information, click My systems.
- To search technical support using your server information to improve the search results, click Premium Search.
  Note: In some cases, the Premium Search feature is available only while your server is under warranty or afterward through a service contract.
- To view information related to your servers and interests, click My messages.
Enter the requested information.

Send feedback Rate this page

Last updated: Mon, June 02, 2014