Device configuration

In this article   Overview Create or modify users Modify super user Modify default user settings Delete users Common reasons for configuration failures   Overview   In IT Expert, go to Device configuration > User configuration to create, modify, or delete users on selected APC NMC 2 and NMC 3 devices with APC AOS v6.x or later (excluding v6.0.6-6.1.1). Need NMC help?   Only supported NMC 2 and NMC3 devices in your organization are available to configure.   It is recommended that you enable strong passwords. If you enable strong passwords, new passwords created for user accounts require:   A minimum of 8 and maximum of 64 characters Not found in a list of 5000 known compromised passwords NMC 3 Security Handbook   It is required that all the Gateways in your organization to be updated to version 1.23 or newer. If a device is monitored by multiple Gateways, one of the Gateways is automatically selected to apply the configuration change. All Gateways monitoring a device should be properly configured with file transfer credentials to reduce the risk of failure.   IMPORTANT: User credentials are also configured in the Gateway for device communication. Changes made to these user credentials in IT Expert must also be made in the Gateway, and the devices must be rediscovered. Otherwise, communication with the Gateway will be lost.  Configure APC NMC device credentials in the Gateway Configure Gateway device file transfer settings   You can modify user configurations on up to 500 devices at a time.   NMC 3 devices can accept no more than 11 parameters for each device including the username and password.     Choose only a few devices to test the configuration before you update all your devices.   User configuration options are different for each action:   Create or modify users Modify super user Modify default user settings Delete users       Create or modify users Log out of any devices where you are modifying the user configuration.   1. Select devices   Select the devices where you want to create or modify user configurations. Filter the list by location, model, or device as needed.   2. Configure users   Check the box   to acknowledge that user settings you modify using IT Expert may also need to be modified in the Gateway.  Note: You cannot proceed until you acknowledge you understand that additional configuration in the Gateway may be required.   Click Add user entry to create the list of users you want to create or modify. Username and password fields are required for every entry.   Depending on the devices you select, a new user might be created on some devices and existing users might be updated on others. If the username you enter already exists on the device, the password you specify and any custom options will be updated. If the username you enter does not exist on the device, a new user will be created with the specified username and password and any custom options.   Click the settings icon in each entry   to customize the user settings.    When you update an existing user, Using default options means the existing settings for the user will not be modified on the device.   When you create a new user, Using default options means the default user options defined by the device are used.   Toggle the button next to each custom option modify it.     Any options not defined in Customize user settings use the device's default options for the user.   Custom options that can be modified using IT Expert include:   User settings Enable/disable user Role: Administrator. Device, Network only, Read only Note: You cannot create or modify Outlet role users on rPDUs that support it. You must configure the Outlet role directly on the device. Description: Modify the existing description, or leave blank to remove the existing description.   Security settings Session timeout (1-60 minutes) Serial remote authentication override: Disabled/Enabled   Display settings Units: Metric, US Customary Date format Language: The language setting will not take effect if the language you choose is not installed on the destination device.   Log settings Event log color coding: Disabled/Enabled Log export format: CVS/Tab   3. Confirm and apply   Show or hide the list of devices affected by user configuration changes. Click Apply to send the user configuration to the devices.       Modify super user Log out of any devices where you are modifying the user configuration.   The apc super user is the system admin user.  You cannot change the username, change the role, or delete this user.   1. Select devices   Select the devices where you want to modify the super user configuration. Filter the list by location, model, or device as needed.     2. Modify super user   Check the box   to acknowledge that user settings you modify using IT Expert may also need to be modified in the Gateway. Note: You cannot proceed until you acknowledge you understand that additional configuration in the Gateway may be required.   The current password for the apc super user is required to modify the settings.   Toggle the button next to each custom option modify it.     Options that can be modified using IT Expert include:   User settings New password Enable user Description: Modify the existing description, or leave blank to remove the existing description.   Security settings Session timeout (1-60 minutes) Serial remote authentication override: Disabled/Enabled   Display settings Units: Metric, US Customary Date format Language: The language setting will not take effect if the language you choose is not installed on the destination device.   Log settings Event log color coding: Disabled/Enabled Log export format: CVS   3. Confirm and apply   Show or hide the list of devices affected by user configuration changes. Click Apply to send the user configuration to the devices.       Modify default user settings Log out of any devices where you are modifying the user configuration.   1. Select devices   Select the devices where you want to modify the default user configuration. Filter the list by location, model, or device as needed.     2. Modify default user   Configure settings applied when new users are created. Note: Settings modified in IT Expert are not retroactively applied to existing users.   Toggle the button next to each custom option modify it.     Any options not defined in Customize user settings use the device's default options for the user.   Custom options that can be modified using IT Expert include:   User settings   Enable/disable user Role: Administrator. Device, Network only, Read only Description: Modify the existing description, or leave blank to remove the existing description.   Note: You cannot create or modify Outlet role users on devices that support it. You must configure the Outlet role directly on the device.   Security settings Require strong passwords  Require password change (0-365 days, 0 = Disabled) Session timeout (1-60 minutes) Serial remote authentication override: Disabled/Enabled   Display settings Units: Metric, US Customary Date format Language: The language setting will not take effect if the language you choose is not installed on the destination device.   Log settings Event log color coding: Disabled/Enabled Log export format: CVS/Tab   3. Confirm and apply   Show or hide the list of devices affected by user configuration changes. Click Apply settings.       Delete users Log out of any devices where you are modifying the user configuration.   1. Select devices   Select the devices where you want to modify the super user configuration. Filter the list by location, model, or device as needed.     2. Delete users   Check the box   to acknowledge that user settings you modify using IT Expert may also need to be modified in the Gateway. Note: You cannot proceed until you acknowledge you understand that additional configuration in the Gateway may be required.   Click Add user entry to create the list of users you want to delete.   If the username you enter exists on the device, the user will be deleted.     3. Confirm and apply   Show or hide the list of devices affected by user configuration changes. Click Apply settings.     View progress and results   Results are listed on the User configuration main page including the configuration action, the IT Expert user who initiated the action, the time the action occurred, the number of devices affected, any ongoing progress, and final results.   Click the link in the Devices column to see results listed by device:   Complete: The configuration was sent to all devices successfully. Partial: The configuration was sent to some devices. Failure: The configuration was not sent to any devices.   Check the device's event log for more details about configuration changes.     Common reasons for failures   IT Expert - Device communication failure   IT Expert - Device not recognized   IT Expert - Device is offline      

On the Device Configuration page of the IT Expert web interface, select an APC SNMP device to use as the source to configure settings on other APC SNMP devices monitored by an EcoStruxure IT.   Requirements   FTP and/or SCP credentials for all the APC SNMP devices must be correctly configured in the Device File Transfer Settings option in the Gateway. Note: SCP is supported in Gateway version 1.9.0 and newer.   Only the values exposed in the config.ini for both the source and destination device can be configured. User management settings may not be available on some devices. Note: Device configuration is not supported for monitored NMC 4 devices. There is no config.ini file on NMC 4 devices.   About device settings   The list of device settings does not dynamically refresh. Device settings update during a discovery, a rediscovery, and after the FTP or SCP settings change as a result of a running device configuration on multiple devices or a Single device configuration.    The date and time indicate when the device settings were most recently updated.  Sensitive values, such as username, password, IP address, and location are masked.    Configure devices   Select an APC SNMP device to use as the source to configure settings on other APC SNMP devices monitored by an EcoStruxure IT Gateway 1.5.0.x and greater. IMPORTANT: Both the source device and the destination devices you want to configure must be monitored by the same Gateway.   Log in to your ecostruxureit.com account. Click Device Configuration in the left sidebar. Click Begin. Choose the Gateway monitoring the devices you want to configure.  Both the source device and the destination devices you want to configure must be monitored by the same Gateway. Select the device you want to use as the source to configure settings on other devices.  Select the device settings you want to write to other devices. Select the destination devices you want to configuration settings on. Review your changes, and click Finish.   A progress bar shows the number of devices Completed, Failed, In progress, and Not started. TIP: Filter, search, and sort to locate devices.   Get latest Click to refresh the list of settings to be sure the latest settings are displayed. This list does not automatically refresh if a config change was made directly on the device.   Previous results list Once configuration has finished, you can click Begin and click the Settings icon for any destination device to confirm that the settings were applied.   Also see Configure event actions for APC SNMP devices in IT Expert    Troubleshooting device configuration failures   You can click Don't see the device you're looking for? in the Device Configuration wizard to see troubleshooting tips.   I can't find my device The device you searched for isn't monitored by the Gateway you selected.   Exit the Device Configuration wizard and click Begin. Select the Gateway that is monitoring the device you searched for. Both the source device for the template and the destination devices you want to configure must be monitored by the same Gateway.   There is no configuration for the device. Make sure the FTP and/or SCP settings are configured correctly in the Device File Transfer Settings option of the Gateway.   Log in to the Gateway that monitors the device. Verify the FTP and/or SCP settings. Rediscover the device. Note: You do not need to delete the device to rediscover it. Simply run a discovery again.   Results list All destination devices that support config.ini are listed regardless of whether the settings from the source device are valid. Settings from the source device that are selected but cannot be applied are ignored.   Comm failed: Cannot communicate with the device. Check network settings and SNMP community names, and try again.   Invalid credentials: Check that the device credentials match the Device File Transfer Settings option of the Gateway.