ITA web client

The IT Advisor web client is available on a computer, tablet, or mobile device with an internet browser, and provides easy web access to a subset of the features available in the ITA suite: Rack inventory management Dashboards Account settings Administration functions, such as License management Desktop client download User management Authentication server configuration Customer management (colo feature, available with the IT Advisor for Colo license) Supported browsers and OS IT Advisor web client minimum browser and OS requirements: Chrome Firefox Safari Microsoft Edge iOS 9.3.5 Android 5.1 Access and language settings To access the web client, use a browser to launch to the IP address or hostname of the ITA server  <serverIPaddress>  and log in. If you're not an English speaker, you can select your preferred language in Profile>Language (your profile image in the upper right corner). Security When connecting to the ITA server from a web browser, you may receive warnings about the security certificate needed for secure communication. The ITA server is installed with a self-signed security certificate. It is recommended, after the installation of ITA is complete, to replace this with a security certificate issued by a trusted certificate authority. For information about certificates and how to replace the default self-signed certificate with one you purchase from a trusted certificate authority, see Working with SSL certificates and Changing SSL certificate on the server. If you try logging in with the wrong credentials 5 times, your account will be locked for 10 minutes. Rack inventory and dashboards The web client rack inventory allows you to see any part of the ITA data center infrastructure model you have been granted access to and drill down through locations and rooms to the rack inventory. You may have been granted with rights to view or edit all or parts of the rack inventory. For example, depending on your user rights, you can: View a graphical representation of locations, rooms including walls, doors, windows, cages, and floor-mounted equipment View equipment in racks and their properties, such as servers, blade chassis, network equipment, and rack PDUs Edit equipment in racks and their properties, such as servers, blade chassis, network equipment, and rack PDUs Connect equipment in racks to rack PDUs for power or disconnect View power and space usage for the selected room, cage, or equipment View power history for the selected room, cage, or rack View capacity overview for the entire solution or a selected location View audit trail for the selected room, cage, or equipment, listing changes made to the infrastructure, such as connecting servers to rack PDUs or changing equipment names There's an upper limit to everything The web client does not include all functionality included in the graphical editor in the ITA desktop client. For example, you cannot: Add, change, or delete floor-mounted equipment (including racks) Configure network connections. Read-only at this time Use custom tags. You can use custom properties. Add, change, or delete work orders. You can track work order progress only.  

You may want to change some default settings of the ITA web client to brand your site with your own logo or color. These settings are available in the branding folder on your ITA server and can be changed in Webmin, the server management interface.   Replacing login background image, icon, company name, and logo   Replacing the icon changes the icon you see when you log in, and the small icon in the top left corner of the web client. Regardless of your image size, your images will automatically be scaled to fit into the position of the default image. Tip: It is recommended that you use a photo in a square shape for the logo.png file.   Rename your custom file(s): background image --> bg_login.jpg. logo --> logo.png company logo --> company_logo.png Open the server management web interface (Webmin). Type the address of your ITA server in a web browser followed by :10000, https://<server IP address>:10000 . Log on to Webmin using the user credentials created during the server installation. In the left menu, select System > Upload and Download. On the Upload to server tab:  Click Choose Files in Files to upload and navigate to your saved bg_login.jpg file. Same procedure for logo.png file and company_logo.png file. In File or directory to upload to navigate to the branding folder on your server: /var/www/web/assets/branding in ITA 9.4 and newer /var/www/web/resources/branding in ITA 9.3 and older In Owned by user and Owned by group, select dcojboss. Click Upload. Close and reopen your web browser and type the server address to access the login screen with your new custom images. 9570272172701_360038425393.png   Changing help link   The default help link goes to our support and help site. To redirect to your custom help site, change the settings in the branding.json file.   Open and log in to Webmin as described above and navigate to System > Upload and Download in the left menu. On the Download from server tab, navigate to the branding folder on your server: /var/www/web/assets/branding in ITA 9.4 and newer /var/www/web/resources/branding in ITA 9.3 and older and download the branding.json file. Open the branding.json file, make your changes to the link, and save the file. {    "subTitle": "EcoStruxure",    "title": "IT Advisor",    "helpUrl": "https://community.se.com/t5/EcoStruxure-IT-Help-Center/ct-p/ecostruxure-it-help-center",    "tenantPortalUrl": "" }   Reopen the Webmin interface and navigate to System > Upload and Download. On the Upload to server tab:  Click Choose Files in Files to upload and navigate to your saved branding.json file. In File or directory to upload to navigate to the branding folder on your server: /var/www/web/assets/branding in ITA 9.4 and newer /var/www/web/resources/branding in ITA 9.3 and older In Owned by user and Owned by group, select dcojboss. Click Upload. Close and reopen your web browser and type the server address to log in to the web client with your custom help link.  

Use the web client Configuration > Licenses menu, to monitor, add, and delete licenses or update expiring evaluation licenses on the ITA server through the ITA web client. Note: License management is not available to tenants.   About ITA licenses   ITA is available in a base version and is scalable with several license types to fit your business needs (10 racks, 100 racks, 200 racks, 500 racks, and enterprise). The base version includes a desktop client, a web client, and colocation features. The installation is also available with disaster recovery.    Separate add-on module licenses are available for use with ITA. The base ITA license must be added before you can add the add-on licenses.   Licenses are handled on the ITA server. If you have ITA running on multiple clients, restart the application to automatically update the licenses and access any additional features.   See available products or visit the Data Center Solutions website. Contact your local sales representative for information about purchasing additional licenses.   Note To get the full benefit of multiple modules, you need the same number of licenses for all modules. If you have a license type with a lower number of supported racks than another, this may prevent you from adding to your inventory. For example, if you have a solution with 200 racks running in ITA, Capacity, and Change and you subsequently extend with licenses for 100 additional racks in ITA, you should also add licenses for 100 additional racks in Capacity and Change.    Monitoring license usage   You can see a graphical overview of the registered modules on your ITA server in Licensed Modules. You'll see relevant usage information depending on the license type:   number of available nodes (e.g. racks) number of used nodes number of used nodes exceeding the number of licensed nodes If you exceed your license limits, you should purchase additional licenses to continue working with the application.   The status bar at the top of the page also illustrates this usage status. If you have enterprise licenses, the status bar will not show. If a license is limited by another license, a warning icon will appear.  The License Keys table provides details about all license keys added to the server, including license type and size, installation and expiration dates, and license key. Size indicates the node count/enterprise and, for Colo licenses, area. Expiration date shows for evaluation licenses to remind you to update expiring licenses. You can sort the table by column ascending/descending by clicking on a column header.   ITA_license_management_360037928534.jpg Adding licenses   In a browser, go to the EcoStruxure IT Entitlements web site to generate license keys from your passcodes/serial numbers and redeem software licenses against your base assets.   idea_icon_360037928534.png Set your notification preferences on the EcoStruxure IT Entitlements site to get announcements about product updates and more. See how   Exporting license keys   You may find it useful to have an external list of purchased licenses in a number of situations, such as when doing a backup/restore or upgrade of your system, for tracking expenses of your licenses, or in a support situation. Use the Licenses display to copy/paste the license key information into a document.

  When working with ITA in a secure environment, you need to verify and trust the authenticity of the ITA server and the servers it connects to for integrations, such as VMware, AD, or LDAP servers.   Verifying details of the installed ITA server certificate   To verify advanced details of a currently loaded SSL certificate for the ITA, such as key size, signature algorithm, etc., connect to the ITA server through a web browser and view the SSL certificate there.   As an example, follow these steps with Chrome browser on Mac:   Connect via HTTPS in a web browser to your ITA server.   Click the pad lock icon in the browser's address bar to display a security related dialog box.  Click Details > View certificate, you will see important technical details, such as the signature algorithm, signature hash algorithm, and key size.   106205800_484x250_360037928634.png   Verifying details of the installed certificate for servers communicating with the ITA server   To verify advanced details of a currently loaded SSL certificate for servers communicating with the ITA server, such as AD or LDAP servers:   In the ITA web client, go to Configuration > Certificates. You will see a list of the currently loaded certificates.  Click Show... to see important technical details, such as the signature algorithm, signature hash algorithm, and key size.

Account Click Account in the left navigation bar to manage the general settings for your user profile. General Profile Type your email address and full name. This option is not available if you're a remote user since your account is handled by an authentication server. More... The full name is the name displayed for your user account. Note: You cannot change your own username or delete your own user account.  In Preferred unit system, select to use metric or US customary settings.  This affects whether the equipment dimensions are displayed in meters or feet, for example. Change password Enter your old and new passwords. If you forgot your password, your system administrator (a user with administrator rights) can reset your password for you and send you a new password. This option is not available if you're a remote user since your account is handled by an authentication server. More... Language Change the language settings and view the web client in any of the supported languages (per user) in Account > Language). More... Download The desktop client installers are hosted on our cloud server. Click Download and then select the appropriate operating system next to the application description. About users User accounts are handled by the ITA server or authentication server. Changes to your user settings are effective on both the ITA web client (or Tenant Portal), and ITA desktop client. The same user may be able to access the desktop, and/or web client, or Tenant Portal depending on their user permissions. These are handled by system administrators through the Administration > Users menu. More... For colo, there are also customers and users at a customer's site. More...  

Click Account > Language to change the language settings and view the web client in any of the supported languages. The selected language will be used for texts on all pages, options, dialog boxes, status messages, etc. The language settings apply per user and the default language is English. Read about Desktop Client language settings here. 102924822_639x250_360037928414.png

The Asset Visuals feature allows you to upload or take pictures of the front and rear of your servers. ITA_asset_visuals_icon_360006854398.png You can apply asset visuals to all similar servers in a specific rack in one click. Navigate to a specific rack, select a server, and click the asset visual icon ITA_asset_visuals_icon_360006854398.png to add and edit server images. idea_icon_360006854398.png To enable asset visuals, select the overlays icon and then the visuals icon.   ITA_asset_visuals_selection_360006854398.png Once you add a picture, you can adjust the scaling and positioning of the picture before you upload it. Check Apply to all [model name + manufacturer] servers in this rack to add it to multiple similar servers. The system indicates how many servers the images apply to, and if/how many existing images it will override. The process is identical for deleting images across multiple similar servers. This feature is limited to servers at this time. ITA_server_image_rear_360006854398.png Once the pictures are uploaded, the generic server pictures on the rack view will be replaced. Screenshot_2_360006854398.png  

These instructions apply to ITA on-premises only. ITA hosted customers can leverage SSO in IT Expert.   Administrators can configure SAML 2.0 SSO on the Configuration > Authentication servers tab in the IT Advisor web client. Any identity provider (IdP) that supports the SAML protocol is supported.    Once you configure SSO, all users with an email address on one of the domains you specify must use your identity provider to log in to IT Advisor on-premises.   IMPORTANT: It is strongly recommended that at least one Administrator user who does not require SSO to log in is configured in the web client on the Administration > Users tab.   1. Configure your identity provider   Before you configure SSO in IT Advisor, configure the integration with ITA in your identity provider's user interface. Refer to your identity provider's documentation for more information. See Configure Azure for IT Advisor SAML SSO   2. Configure SAML SSO in in IT Advisor After you have added IT Advisor to your authentication providers user interface, configure the authentication server in the ITA web client.    Log in to the ITA web client as an Administrator.   Click the cogwheel in the upper right. Go to Configuration > Authentication Servers > Add Authentication Server.   In Authentication server settings, enter:   Type: Select SAML SSO. See the documentation for your IdP provider. Azure is used in the examples below.   Name: The name of the server, for example, Azure SSO   Service provider ID/Application ID/ Client ID: The UUID of IT Advisor in IdP. In Azure, copy the value from the Application (client) ID field.   SAML metadata is an XML document that contains information necessary for interaction with the SAML-enabled identity or service providers, for example, URLs of endpoints, information about supported bindings, identifiers and public keys. In ITA 9.5.0 and older: Enter the IdP Federation metadata document URL In ITA 9.5.1 and newer: Enter the SSO POST URL   User name attribute name: The unique name of the user. In Azure, copy the value from federation metadata: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name   User email attribute name:  The e-mail address of the user. In Azure, copy the value from federation metadata: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress   User display name/common name,attribute name: The common name of the user. Copy the value from federation metadata: http://schemas.microsoft.com/identity/claims/displayname   User groups/group name, attribute name: Group(s) the user is a member of. Copy the value from federation metadata: http://schemas.microsoft.com/ws/2008/06/identity/claims/groups   Default ITA user group name: Enter the ITA user group where the authorized users are assigned. Only one group name can be entered. If this value is defined, Mapping of IdP tenant group’s names to ITA group’s names is ignored. If this value is not defined, the group(s) defined in Mapping of IdP tenant group’s names to ITA group’s names are used.   Mapping of IdP tenant group name to ITA group names: If the value for Default ITA user group name is not defined, this mapping is used to assign users to defined group(s) in ITA. Use an equals sign  =  to separate group names, and use  a semicolon ; to separate each mapping. Note: If both the Default ITA user group name and Mapping of IdP tenant group name to ITA group names valuesare not defined, or the group’s names are incorrect, users are not automatically assigning to any group in ITA.   ITA endpoint URL callback: A SAML Assertion is the XML document the identity provider sends to the service provider that contains the user authorization. In ITA, it must always start with https and end with /api/current/authentication/saml2-callback. For example, https://address  _of _ITA server/api/current/authentication/saml2-callback   SAML Request certificate: SAML request signing certificates are X.509 certificates used in SAML responses to allow the Service Provider (SP) to verify the authenticity of a SAML response. In Azure, the value from federation metadata with the additional prefix ”-----BEGIN CERTIFICATE----- ” and suffix “-----END CERTIFICATE-----”   SAML Request certificate issuer: The issuer of the request certificate. In Azure, the value from federation metadata in the attribute “EntityDescriptor@entityID”    Click OK.