IBM Advanced Technical Support

1. IBM Advanced Technical Support Introduction to HMC on i5 Servers Allyn Walsh, IBM Partner World for Developers Technical Support © IBM Corporation 2004

2. Agenda • IBM eServer i5LPAR Changes • Hardware Management Console Overview • Hardware overview • Connection options • Features and functions • LPAR • Operations Console options on i5

3. Power5LPAR CUoDandHardware Management Console

4. Hardware Management Console (HMC) • Single console for POWER5 servers • Pre-installed embedded OS • Supports local consoles, including 5250 • Web-based System Manager enables local or remote management for HMC control and status • LPAR and CUoD • Now configured and managed via HMC • May 2004 - announce HMC Limits • One HMC can manage a maximum of two i5 Servers • One i5 server can be managed by only one HMC • 40 partitions per HMC • July 2004 - announce HMC Limits • One HMC can manage a maximum of 16 Power5 Servers (any mix of i5 or p5 servers) • A single Power5 Server can be managed by two HMCs (providing redundancy) • Maximum of 64 partitions per HMC • Replaces primary partition and improves system resiliency

5. Why a Hardware Management Console (HMC)? • Servers are becoming more virtualized • Operating systems will continue to have less direct visibility and control over “real” server hardware • A place for hosting advanced platform management applications, outside of the operating systems, to do: • Server configuration prior to operating system deployment • Service when operating systems are unavailable • Coordination of platform-related operations across multiple operating system images, in an independent security model • Presentation of virtual operating system consoles • These functions should have common user and programming interfaces, independent of any one operating system • Supporting both local and remote operation • A common delivery vehicle, which enables IBM to deliver more function, more quickly

6. When is an HMC Required on i5 System? • Systems with multiple Partitions (LPAR) • Systems with Capacity on Demand • Systems with redundant service processors • Systems yet to be announced (High-end)

7. 7310-C03 (desktop) 7310-CR2 (rack) What is an HMC • Based on xSeries server technology, built upon pSeries HMC device • Runs an IBM-provided GUI console application • Not to be used with customer applications • Helps ensure a more stable console environment • Required • To create/modify partition – not to run it • For Capacity on Demand functions • Not required to operate the partition • Saves the cost of typical primary partition • 5250 interface for optional i5/OS console provided • Remote console by other workstations through HMC • 5250 interface via Telnet5250 client • Windows/Linux/AIX Client interface for HMC interface • At August 2004 iSeries GA, one HMC can support a maximum of 64 partitions across up to 16 Power5 servers. http://www-1.ibm.com/servers/eserver/iseries/literature/index.html

8. HMC – More Details • Based on xSeries server technology • Minimum HMC configuration includes: 1 GB memory, 40 GB disk, DVD-RAM, 10/100/1000 Mbps Ethernet port, diskette drive, etc • Selectable options for HMC’s display, keyboard, etc (ordered separately) • HMC connects to POWER5 service processor which has two dedicated HMC ports. The ports are Ethernet ports. (Different from the two generic 10/100/1000Mbps Ethernet LANs.) • Standard HMC maintenance support is CRU. Suggest upgrading support to IBM On-Site Repair to be more consistent with POWER5 server’s support agreement. • HMC not used on earlier iSeries servers • non-HMC i5/OS consoles are still supported • High availability suggestion: attached two HMCs to critical Power5 servers or redundancy. * Product preview

9. HMC “network” possibilities • Local HMC: any physical HMC that is directly connected to the system it manages via a private network. Usually the first or only local HMC in your private network is a DHCP server in your private network and a DHCP client in your open network. • Remote HMC: any HMC used to remotely access another HMC or managed system. Remote HMCs are usually present in an open network Remote HMCs can also be local HMCs. • Web-based System Manager Remote Client: usually a PC installed with “Web-based System Manager” software. Use this PC to access other HMCs remotely. Web-based System Manager Remote Clients can be present in private and open networks. You can perform most management tasks using the Web-based System Manager Remote Client

10. HMC User Interfaces and Access • Local GUI • Starts automatically whenever the HMC is started • Requires user login prior to access • Remote GUI • Uses an installable standalone remote client application (WebSM Client) • Windows (NT,XP) or Linux • Downloadable as an installable application directly from the HMC, using a web browser • Also supported from one HMC to another, or from AIX 5L • Can be SSL secured through public/private key files • Generate on the HMC, and transfer to client systems • Local Command Line • Launched from a right-click menu option on the HMC desktop • Restricted to a set of supported HMC commands • Remote Command Line • Accessed through encryption-protected Secure Shell (SSH) • Key files can be set up and exchanged to avoid password prompts • Very useful for automation and scripting without human intervention

11. Web-based System Manager Remote Client • Two remote clients install options available: • Web-based System Manager Remote Client • Web-based System Manager Remote Client for Java Web Start • Either client works the same after installation • You can access your HMC remotely by installing the WebSM client on your PC workstation • The WebSM client provides flexibility by allowing you to manage your system from virtually anywhere you have a PC. Up to 5 remote clients can be logged in simultaneously • SSL security is optional • Remote console, i5 OS using TN5250 to HMC and share the HMC console session • Some tasks not performed using the remote client • These tasks include determining the level of HMC code, restarting the HMC interface, and configuring System Manager Security for certificate authority or viewing overview and status information. • For more information: eServer Information Center....

12. HMC Security • Restricted Shell • Provides access to supported HMC command line functions • Accessible remotely through SSH enabled client • Also accessible as a command prompt window on the HMC itself • Granular User Access Controls • Define Task and Resource Roles that define accessible lists of user tasks and resources (systems, partitions, etc) • Assign roles to users to define their access rights • For example, access could be limited to a single partition • Network Security Firewall Controls • Define which HMC network services should be accessible on which physical network interfaces • For example, limit remote WebSM or SSH access to a single interface, or none

13. HMC Communications M = Memory P = Processor A= PCI Adapter Part#1 Part#4 Part#2 Part#3 Service processor • HMC SSL communication • Power control • Error event handling • Licensed Internal Code updates i5 OS i5 OS Linux AIX 5L PPPP PPP PPP PP PPP P MMMMM MMMM M MM Hypervisor (pass-through) • System configuration data • Partitioning control • Virtual I/O definition • Capacity on Demand • Concurrent Service maintenance AAAAAAA AAAAA AAA AAAA SLIC SLIC Linux Kernel AIX Kernel Hypervisor Service Processor Operating Systems • Gather hardware error events • Gather hardware inventory • Shutdown/reboot (AIX/Linux) • Dynamic LPAR (AIX/Linux) • Use of i5 OS VPN connections Ethernet HMC Ethernet Open Network

14. HMC DHCP Server Private SSL-Encrypted Remote HTTPS connection from web browser ASMI (Advanced System Manager) “Private” and “Open” Network Options HMC can automatically assign IP address and connects to systems Manual setup of Service Processor IP parameters IBM Open network Network Service Processors request IP addresses from HMC Manually enter IP address or range on HMC, HMC finds and connects to systems

15. HMC GUI top-level navigation Manage HMC configuration, users, services, ... Guide setup wizard and online documents Update your Licensed Internal Code Manage your servers and partitions Service tools to analyze and repair Set up security for remote GUI access

16. Advanced System Management User Interface • Service Processor Menus (SP is part of the Power5 server) • Accessed by web browser • Secure (HTTPS) access • Password authentication • Basic server operations • No partition functions • Remotely manage some system functions (VPD, logs, dumps etc) • Many of these functions are also on the HMC • A few less common ones only in ASMI • Browser interface can be launched on the HMC

17. Linux I5/OS Partition 1 Partition 2 LPAR Setup with HMC Unassigned Resources Status Command/Response Virtual Consoles HMC POWER5 Hypervisor Service Processor Processors LPAR Allocation Tables Non-Volatile RAM Ethernet Mem Regions I/O Slots Server

18. i5/OS V5R3 Logical Partitioning • Interface on pre-POWER5 systems remains (Service Tools, iSeries Navigator) • POWER5: IBM Virtualization Engine systems technologies include POWER Hypervisor™ • Supports i5/OS, AIX 5L* and Linux • All OS/400 partitions require V5R3 • Improve server utilization rates across multiple workloads • Automatic processor balancingwith uncapped partitions • Improve fault tolerance and lower partition management costs • Primary partition replaced by Hardware Management Console (HMC)

19. Applications, .... AIX 5L Applications, .... I5/OS Applications, .... POWER5 Linux TIMI POWER5 Hypervisor SF / RTAS i5 SLIC SF / RTAS POWER5 64-bit RISC Hardware Multiple Operating Systems – more details And underneath the operating systems ... TIMI = Technology Independent Machine Interface SLIC = System Licensed Internal Code SF = System Firmware RTAS = Run-Time Abstraction Services

20. HMC Guided Setup Wizard

21. LPAR Creation Wizard – Default Type Partition type default is now based on system type (iSeries, pSeries or Linux)

22. LPAR Creation Wizard – Virtual Processors HMC automatically establishes appropriate defaults for virtual processor amounts, but these can be modified through advanced settings

23. LPAR Creation Wizard – Memory Information The memory panel for profile creation now shows both the installed memory, and the amount of memory available for use by partitions

24. LPAR Creation Wizard – I/O Information I/O Configuration panels provide additional detailed information on each adapter slot, accessed through a “Properties” button

25. LPAR Creation Wizard – Required I/O I/O Devices marked as “Required” will be reserved for the exclusive use of this partition, and cannot be accidentally moved through dynamic LPAR

26. System Profile Verification System Profile Validation can be used to ensure that there are sufficient resources and no resource conflicts, when activating a set of partitions

27. System and Partition Names and State Information State names have been changed. A running system is now shown as “Operating” state, and inactive partitions are now shown as “Not Activated” state

28. System Properties – I/O View Overall list of I/O resources and their partition ownerships can be seen by selecting the “Properties” task on a managed system

29. HMC Service Functions • Guided setup • Leads users through all the tasks needed to set up an HMC • Service Focal Point • Collection of hardware and LIC serviceable events • Licensed Internal Code updates from the HMC • For initial release, requires system to be shut down • Concurrent firmware update capability is in plan • System dump captures to the HMC • Hardware scan dump, or hypervisor dump sent to HMC • Automatic capture for remote support • Guided Hardware Service Procedures • More concurrent maintenance functions are in plan • Service Utilities • LED controls, monitoring policies, partition operations

30. HMC Electronic Connections to IBM • Local Modem • This option enables you to send problem information and system data to your service provider using the modem on your HMC. You may want to select this option if the following are true: • Your HMC does not have access to a high-speed Internet connection. • You do not have any I5/OS logical partitions with high-speed Internet connections • Internet VPN • This option enables you to send problem information to your service provider using a high-speed Internet connection on your HMC • This is the fastest connection option available on the HMC, but some environments restrict this type of connectivity for security reasons. Before you select this option, be sure your company's security policy permits this type of connection

31. HMC Electronic connections to IBM (cont’d) • Connecting through other systems or logical partitions • This option enables you to send problem information to your service provider through a pass-through system. This pass-through system can be another HMC or a logical partition on your server that supports the Layer 2 Tunneling Protocol (L2TP). • Currently, only logical partitions with the V5R3 level of I5/OS can support L2TP, so are the only logical partitions that can be used as pass-through systems • You may want to select this option if the following are true: • Your HMC does not have access to a high-speed Internet connection • You have an I5/OS logical partition with high-speed Internet connections, running V5R3

32. Customizing Connectivity Settings

33. LPAR Service and Support Configuration Examples Basic set up http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/index.htm

34. i5/OS Console Choices • Starting in V5R3, the types of consoles that can be used to control i5/OS are: • Twinax terminal • Operations Console direct-connect • Operations Console LAN-connect • Hardware Management Console (HMC)

35. i5/OS Console Choices

36. i5/OS Console Choices

37. HMC Education • 1. Go to http://www.ibm.com/servers/resourcelink • 2. On the Home page select "Register for a user ID and password • 3. On the Register for Access page, select the type of userid requested • 4. On the Self-registration page, fill in your email address and a preferred ID, then click Submit

38. HMC Education

39. HMC Education

40. Information Centers • The eServer Hardware Info Center contains information on the POWER5 models...everything from planning for the hardware, installing the hardware (and the consoles), setting up partitioning and CoD, to servicing the hardware • http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/index.htm • http://www.ibm.com/eserver/iseries/infocenter. Select eServer Information Center in the left navigation bar. • iSeries pre POWER5 and OS/400 V5R3 (i5/OS) • http://publib.boulder.ibm.com/infocenter/iseries/v5r3/ic2924/index.htm

41. IBM                  i5 Hardware Planning Site http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/index.htm

42. IBM                  i5 Hardware Planning Site http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/index.htm

43. Trademarks and Disclaimers © IBM Corporation 1994-2004. All rights reserved.References in this document to IBM products or services do not imply that IBM intends to make them available in every country.The following terms are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both: Lotus, Freelance Graphics, and Word Pro are registered trademarks of Lotus Development Corporation and/or IBM Corporation. Domino is a trademark of Lotus Development Corporation and/or IBM Corporation. C-bus is a trademark of Corollary, Inc. in the United States, other countries, or both. Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. ActionMedia, LANDesk, MMX, Pentium and ProShare are trademarks of Intel Corporation in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. SET and the SET Logo are trademarks owned by SET Secure Electronic Transaction LLC. Other company, product and service names may be trademarks or service marks of others. Information is provided "AS IS" without warranty of any kind. All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer. Information in this presentation concerning non-IBM products was obtained from a supplier of these products, published announcement material, or other publicly available sources and does not constitute an endorsement of such products by IBM. Sources for non-IBM list prices and performance numbers are taken from publicly available information, including vendor announcements and vendor worldwide homepages. IBM has not tested these products and cannot confirm the accuracy of performance, capability, or any other claims related to non-IBM products. Questions on the capability of non-IBM products should be addressed to the supplier of those products. All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Contact your local IBM office or IBM authorized reseller for the full text of the specific Statement of Direction. Some information in this presentation addresses anticipated future capabilities. Such information is not intended as a definitive statement of a commitment to specific levels of performance, function or delivery schedules with respect to any future products. Such commitments are only made in IBM product announcements. The information is presented here to communicate IBM's current investment and development activities as a good faith effort to help with our customers' future planning. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput or performance improvements equivalent to the ratios stated here. Photographs shown are of engineering prototypes. Changes may be incorporated in production models.

44. Audience Questions • Allyn will be taking audience questions on this topic following the event. You can submit your specific questions for Allyn by clicking the Ask a Question button in the lower left corner of your presentation screen. • Answers to your questions will be posted shortly after the webcast in a featured tip on the Search400.com site. • Visit the Search400.com tip section often, as new tips are posted daily. http://search400.techtarget.com/tips/0,289484,sid3,00.html

45. Thank You • Thank you for participating in a Search400.com webcast. • For more information on upcoming Search400.com webcasts or to pre-register for an event, go to http://search400.techtarget.com/webcasts/ • To submit your comments or suggestions for future webcasts, send an e-mail to the Search400.com site editor at editor@search400.com.