ITA server (on-premises only)

These instructions apply to the OS user on the ITA server, that is, the user used during the ITA server installation process, and not the ITA user on the desktop and web clients. To reset the user password on the ITA server: Insert the ITA installation media, a USB key, DVD, or out-of-band management (OOM) interface, reboot the server, and make sure the ITA installation media is booted up. In the installation boot menu, select Troubleshooting > Rescue a CentOS system. In rescue mode, you have 4 options. Type 1 for 1) Continue and press <return>. When you see Rescue Mount, press <return> and type chroot /mnt/sysimage . To change the password type passwd <username> where username <username> is the name of the user created during setup. Type the new password. To exit chroot type: exit . Reboot the server by typing reboot . Remember to remove the ITA installation media. See Managing ITA users and user rights

You can configure an up-to-date backup recovery server in a remote location for resuming operation in the event of a disaster.   You can add one disaster recovery node to a stand-alone IT Advisor (ITA) server. Licensing for a disaster recovery node (DR) is part of the base IT Advisor license.   PostgresSQL streaming replication is used to move data to the disaster recovery node. Communication is necessary through ports 22, 80 and 5432. The disaster recovery node also needs to able to 'ping' the IP address that it gets attached to.   The connection between the ITA server and the disaster recovery node must be stable and quick enough to transfer a full backup.   102237419_360038096374.png   Configuring disaster recovery   Allow the Disaster Recovery node to connect to the ITA server. Selecting Administration > Webmin in the ITA web client to open the Webmin web interface on theITA server. Alternatively, type the address of your ITA server in a Web browser followed by :10000, <https://>:10000 . Log into Webmin and select EcoStruxure IT Advisor > Disaster Recovery. Select the option Allow another node to connect to this node. Enter the IP to allow as disaster recovery node. Push Attach. And then Accept the fingerprint and allow the Disaster Recovery node (.53 in the example) to connect to this node (.52 in the example). Figure 1. Configure the Disaster Recovery node. Install ITA on a dedicated remote server with stand-alone Disaster Recovery configuration (.53 in the example). See how. Open the Webmin interface on the Disaster Recovery server. Type the Disaster Recovery server's IP address in a Web browser. On the download page, click Server Configuration. This opens the Webmin server configuration interface on the Disaster Recovery server. Log into Webmin using the user credentials created during installation (step 2a). Select EcoStruxure IT Advisor > Disaster Recovery. Select the option Attach this node as a disaster recovery node to another node. Enter the IP address of server to be attached to. Attach. And then, Accept the fingerprint and attach this node as Disaster Recovery node. Figure 2.   You have now configured Disaster Recovery. In case of a disaster and shutdown of the ITA server, you can promote the Disaster Recovery to a stand-alone ITA server.   Note If the Disaster Recovery node is monitored, for example by DCE via SNMP, it is important to set the device scan timeout in DCE high enough for the Disaster Recovery to respond. Otherwise, it will return 'communication lost'. How you set the device scan timeout depends on the network speed between the Disaster Recovery and the ITA server.   Figure 1 102237442_360038096374.png   Figure 2 102237415_360038096374.png   Promoting disaster recovery   Open the Webmin interface on the Disaster Recovery server (.53 in the example). Type the Disaster Recovery server's IP address in a Web browser. On the download page, click Server Configuration. This opens the Webmin server configuration interface on the Disaster Recovery server. Log into Webmin and select EcoStruxure IT Advisor > Disaster Recovery. Verify the data shown is correct, and select Promote disaster recovery node. You have now restored a copy of your ITA server.   102237534_360038096374.png   Re-enabling after disaster recovery   Reconfigure your main server as it was before the disaster occurred, and then follow the steps below to re-enable the disaster recovery node:   Create a backup of the disaster recovery server. Restore the backup on your main ITA server(s). Repeat the steps in Configuring disaster recovery to reconfigure your setup as it was before promoting disaster recovery.   102237525_360038096374.png

You can configure daily log rotation and save an archive of log files for audit and troubleshooting. JBoss log files Enabling daily rotation of JBoss log files Log on to the IT Advisor server with an SSH client. For example, use PuTTY. You can download it from here. Type the command sudo nano /opt/jboss-as/server/isxo/conf/jboss-log4j.xml Find all occurrences of org.jboss.logging.appender.RollingFileAppender and replace them with org.jboss.logging.appender.DailyRollingFileAppender Find all occurrences of <param name="MaxFileSize" value="100MB"/><param name="MaxBackupIndex" value="1"/> and replace them with <param name="DatePattern" value="'.'yyyy-MM-dd"/> The server rolls the log files in /opt/jboss/server/isxo/log every day. You must now configure log archiving, otherwise the log files will continue to grow and take up too much space on the server. Configuring archiving of JBoss log files On the IT Advisor server, mount a folder in which to store the log files, for example /data/logarchive . Open the Webmin web interface. Type the address of your IT Advisor server in a Web browser. On the IT Advisor server's download page, click Server Configuration. Log on to Webmin using the user credentials created during the installation. In the left menu, select System>Scheduled Cron Jobs. Click Create a new scheduled cron job. In Job Details Type to execute job as root . Type the command: mv /opt/jboss-as/server/isxo/log/*.log.* /data/logarchive Type a description. If you want to save the log archive to a different folder than /data/logarchive , change the path in the command. In When to execute, select Daily (at midnight). 102237359_360038096354.png Other log files You can configure log rotation for other server log files in the Webmin web interface. Open the Webmin web interface. Type the address of your IT Advisor server in a Web browser. On the IT Advisor server's download page, click Server Configuration. Log on to Webmin using the user credentials created during the installation. In the left menu, select System>Log File Rotation. Select the log files you want to rotate. Click a log file line to open the Edit Log File page and change the default settings according to your wishes, such as location of the files or rotation interval. 102237350_360038096354.png Client log files In IT Advisor, select Help>Download Log Files and save the server and client log files to a location of your choice. The client log file is rolled in this location when the .log file exceeds 1 MB. The latest 10 files will be stored.

In the Webmin server management interface, you can see a list of all services installed on the IT Advisor server (DC Operation>About). You can also monitor and manage the status of services running on the IT Advisor server. All services must be OK for IT Advisor to function properly. 110020160_1098x250_360038096454.png Services Web status of services ensuring the web server functions, used for example in configurations running secure connections. Application status of services ensuring the IT Advisor process functions. Database status of services ensuring the configuration database functions. The database contains all the data about your configuration, such as the rooms, equipment, power path, and network, etc. If this service is down, the database on this server cannot synchronize with other databases. Backup status of services ensuring the backup configuration (default or custom setup) functions. The default backup location on the ITA server is /data/backup . 123 Steps to... See also Monitoring and changing the status of a service Open the Webmin web interface by selecting Administration>Webmin in the ITA web client. Alternatively, type the address of your ITA server in a Web browser followed by :10000, <https://>:10000. Log on to Webmin using the user credentials created during the installation. In the left menu, select DC Operation>Status and verify that the status of all services are OK. If the status of one or more components does not seem OK, click to reboot the IT Advisor server and wait 5 minutes for the reboot to complete, search EcoStruxure IT Help Center questions or troubleshooting documentation or contact technical support for assistance on how to resolve this. Managing ITA server settings

Some of the systems communicating with ITA do not support https communication. Http communication must be enabled on ITA 8.0 for you to be able to use ITA with these systems, like IT Advisor: Mobile, Portal, and IT Advisor: PRO Pack. To handle this, a setting to disable redirecting http to https has been introduced in the server management interface (Webmin).   Warning   Use this option with caution and be aware of the reduction in security since your data will no longer be encrypted! Unless you have enabled a secure connection in the ITA desktop and web clients, disabling the redirection will also mean your communication between the server and clients may be at risk. 106203035_1059x250_360038620053.png Server configuration (Webmin) settings

This page is under review as some of the commands are not available on CentOS 7. The locale settings on the IT Advisor server control the language of the alarm messages, etc. displayed in IT Advisor. The locale is configured during installation and you can subsequently reconfigure it as follows: Log on to the server with an SSH client. For example, use PuTTY. You can download it from here. Type the command sudo dpkg-reconfigure locales and press Enter. 102237509_360038096514.png 3. Select one of the locales supported in IT Advisor, and select OK. Language Country Code Brazilian Portuguese pt_BR.UTF-8 UTF-8 Chinese Simplified zh_CN.UTF-8 UTF-8 Chinese Traditional zh_TW.UTF-8 UTF-8 English en_US.UTF-8 UTF-8 French fr_FR.UTF-8 UTF-8 German de_DE.UTF-8 UTF-8 Italian it_IT.UTF-8 UTF-8 Japanese ja_JP.UTF-8 UTF-8 Korean ko_KR.UTF-8 UTF-8 Russian ru_RU.UTF-8 UTF-8 Spanish es_ES.UTF-8 UTF-8 Tip   Use the arrows to move up and down the list, space key to select an option, and Tab key to move the cursor to OK. 102237507_360038096514.png 4. Select the locale that you want to use again, and select Ok. Tip   Use the arrows to move up and down the list, space key to select an option, and Tab key to move the cursor to OK. 102237524_360038096514.png 5. Type reboot and wait for the server to restart. 6. Type exit to close the command prompt.

Log on to Webmin using the user credentials created during the installation. Change the IP address. In the left menu, select System>Network Configuration. Select Network Interfaces. Click the Activated at Boot tab. Click a line in the list of network interfaces to edit boot time interface parameters. Set Activate to Yes. Click the interface you want to change (for example eth0). Select Static configuration and type the IP address in IPv4 address and the Netmask, then save. It is recommended that you do not use IPv6 (not supported). Specify the Gateway. In the left menu, select Network Configuration. Select Routing and Gateways. In the Boot time configuration tab, set Default router to Gateway and type the default route, then save. If you see this error message: Failed to save routing: '' is not a valid IPv6 gateway, ignore it. Specify the DNS server. In the left menu, select Network Configuration. Select Hostname and DNS Client. In DNS servers, type the primary and secondary DNS servers, then save. Restart the server. In the left menu, select Boot and Shutdown. Click Reboot System and wait for the system to finish rebooting. 106206523_360038096334.png 106206524_695x250_360038096334.png

Monitoring IT Advisor through Data Center Expert requires that you enable server communication in Webmin and in Data Center ExpertsnmpExpert. Webmin Configuration IT Advisor 8.x Open the Webmin web interface. Type the address of your IT Advisor server in a Web browser. On the IT Advisor server's download page, click Server Configuration. Log on to Webmin using the user credentials created during the installation. In the left menu, select DC Operation>Setup. Configure the server protocol settings, for example enable SNMPv1 and type community. The SNMP server requires a specific SNMP community from the monitoring systems. If the SNMP community is not correct, it will not reveal any information to the monitoring system. You can think of SNMP community as a password. Tip   For added security, change the SNMP community to something other than "public" and make the monitoring system use this (see below). Tip   For added security, disable SNMPv1 and configure SNMPv3. Version 8.x 120133129_1148x250_360038620073.jpg Data Center Expert configuration In the Data Center ExpertDevice Discovery wizard, select the corresponding SNMPv1 or SNMPv3 settings, ensuring the community or username and password matches the one specified in the Webmin configuration (see above). Set the Timeout to minimum 20 seconds to allow time for the server communication. For further information about Data Center Expert configurations, see the Data Center Expert user assistance User assistance for Data Center Expert (DCE) 7.x   SNMPv1 102237357_360038620073.png   SNMPv3 102237475_360038620073.png  

The IT Advisor server configuration is handled in the Webmin web interface and so are the Webmin user accounts. 102237529_360038096494.png Creating a new user account (A) Open the Webmin web interface Type the address of your IT Advisor server in a Web browser. On the IT Advisor server's download page, click Server Configuration. Log on to Webmin using the user credentials created during the installation. In the left menu, select System>Users and Groups. Click the Local Users tab. Click Create a new user. In User Details, type username, real name, and Normal password. Select Shell /bin/bash to ensure you can copy command examples in the user assistance or sent to you by technical support as these have been written as bash scripts. In Group Membership, select New group with same name as user as Primary group. In Secondary groups, select sudo and click the arrow to move this group into the In groups box. This is needed for performing administration tasks on the IT Advisor server. Click Create and test the new user account by logging out of Webmin and logging on using the credential created for this user. 102237536_360038096494.png Changing a user account (B) Open the Webmin web interface Type the address of your IT Advisor server in a Web browser. On the IT Advisor server's download page, click Server Configuration. Log on to Webmin using the user credentials created during the installation. In the left menu, select System>Users and Groups. Click the Local Users tab. Open the Edit User page by clicking the Username of the user. In User Details, change the password by selecting Normal password and typing the new password. Click Save and test the password change by logging out of Webmin and logging on using the new credentials. You can also change other password or group membership options. However, do not remove the sudo group membership as this is needed for performing administration tasks on the IT Advisor server. Recommendation   Do not change the username of an existing user. Instead, create a new user with a new username and disable the old user account by selecting the old user and clicking Disable Selected. You can change the password for IT Advisor in the IT Advisor client. 102237530_360038096494.png

Webmin allowed IP addresses As an extra security layer, we recommend that you limit access to Webmin to local IP addresses. Enter IP addresses as a comma-separated list. IP subnets can be entered by typing address/mask. The mask can be either a network mask or a plain number, specifying the number of 1's at the left side of the network mask. Thus, a mask of 24 is equivalent to 255.255.255.0. You can use this Wolfram Alpha widget to calculate which net mask corresponds to which address range. Disable Webmin session authentication To avoid Webmin session cookies, go to Webmin Configuration > Authentication and disable session authentication.

In the ITA server management web interface (Webmin), you can see a list of installed software packages and services on the ITA server, including version specific information. All services must be running in order for ITA to function properly. To monitor and manage the status of services running on the IT Advisor server, go to the Webmin menu DC Operation>Status.