63
User Guide ioSphere Software User Guide Version 3.2.1 English

ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

Embed Size (px)

Citation preview

Page 1: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

User Guide

ioSphere Software User Guide Version 321 English

ioSphere Software User GuideVersion 321

ioSphere Software User Guide | _____________________________________ ___ ___ 2

ioSphere Software User Guide for Version 321 4

Introduction 5

Getting Started 8

First Time Setup 8

Menu Bar 8

Sidebar 9

The ioSphere Feature Set 11

Overview Tab 11

Reserve Space 11

Operations 12

Go To Reports 12

ioMemory Tab 12

Device List 12

Columns 13

Pagination 13

All ioMemory 14

Format 14

Update Firmware 16

Assign Label 17

More Actions 19

All Cache 19

Remove 20

Enable 20

Disable 20

All Hosts 21

All Clusters 21

Alerts Tab 23

Active Alerts 23

Sidebar - Alerts History 24

Alerts List 24

For the Last ___ Days 24

Columns (Alerts Tab) 25

Archive 25

Reports Tab 25

Operations - Data Drop-Down 26

Date Range 26

ioSphere Software User Guide | _____________________________________ ___ ___ 3

Read and Write Buttons 26

Reports Sidebar 27

Settings Tab 27

Remote Access 28

Remote Access Key 29

Agents 29

Database 30

Local Accounts 30

Changing Passwords 33

Identity Providers 34

Rules 35

SMTP Server 38

Subscribers 39

Labels 41

Device Page 41

Configure Tab 42

directCache 43

Live Tab 45

Reports Tab (Device Page) 46

Operations Button 47

Data amp Endurance Button 47

Temperature 48

Cache Hit Requests 48

Cache Latency 48

Info Tab 48

Appendix A - Adding and Editing LDAP Providers 51

Connection 51

User Mapping 53

Role Mapping 55

Test LDAP Settings 58

Appendix B - Software Updates 60

Fusion Powered Support 62

ioSphere Software User Guide | _____________________________________ ___ ___ 4

ioSphere Software User Guide for Version 321

Legal Notices

The information contained in this document is subject to change without notice

Copyright copy 2012 Fusion-io Inc All rights reserved

Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of

Fusion-io Inc in the United States and other countries

The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)

of their respective owners Unless otherwise stated herein no association with any other organization or product

referenced herein is intended or should be inferred

Fusion-io

2855 E Cottonwood Parkway Suite 100

Salt Lake City UT 84121

USA

(801) 424-5500

Part Number D0003052-003_1

62812

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 2: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User GuideVersion 321

ioSphere Software User Guide | _____________________________________ ___ ___ 2

ioSphere Software User Guide for Version 321 4

Introduction 5

Getting Started 8

First Time Setup 8

Menu Bar 8

Sidebar 9

The ioSphere Feature Set 11

Overview Tab 11

Reserve Space 11

Operations 12

Go To Reports 12

ioMemory Tab 12

Device List 12

Columns 13

Pagination 13

All ioMemory 14

Format 14

Update Firmware 16

Assign Label 17

More Actions 19

All Cache 19

Remove 20

Enable 20

Disable 20

All Hosts 21

All Clusters 21

Alerts Tab 23

Active Alerts 23

Sidebar - Alerts History 24

Alerts List 24

For the Last ___ Days 24

Columns (Alerts Tab) 25

Archive 25

Reports Tab 25

Operations - Data Drop-Down 26

Date Range 26

ioSphere Software User Guide | _____________________________________ ___ ___ 3

Read and Write Buttons 26

Reports Sidebar 27

Settings Tab 27

Remote Access 28

Remote Access Key 29

Agents 29

Database 30

Local Accounts 30

Changing Passwords 33

Identity Providers 34

Rules 35

SMTP Server 38

Subscribers 39

Labels 41

Device Page 41

Configure Tab 42

directCache 43

Live Tab 45

Reports Tab (Device Page) 46

Operations Button 47

Data amp Endurance Button 47

Temperature 48

Cache Hit Requests 48

Cache Latency 48

Info Tab 48

Appendix A - Adding and Editing LDAP Providers 51

Connection 51

User Mapping 53

Role Mapping 55

Test LDAP Settings 58

Appendix B - Software Updates 60

Fusion Powered Support 62

ioSphere Software User Guide | _____________________________________ ___ ___ 4

ioSphere Software User Guide for Version 321

Legal Notices

The information contained in this document is subject to change without notice

Copyright copy 2012 Fusion-io Inc All rights reserved

Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of

Fusion-io Inc in the United States and other countries

The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)

of their respective owners Unless otherwise stated herein no association with any other organization or product

referenced herein is intended or should be inferred

Fusion-io

2855 E Cottonwood Parkway Suite 100

Salt Lake City UT 84121

USA

(801) 424-5500

Part Number D0003052-003_1

62812

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 3: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 2

ioSphere Software User Guide for Version 321 4

Introduction 5

Getting Started 8

First Time Setup 8

Menu Bar 8

Sidebar 9

The ioSphere Feature Set 11

Overview Tab 11

Reserve Space 11

Operations 12

Go To Reports 12

ioMemory Tab 12

Device List 12

Columns 13

Pagination 13

All ioMemory 14

Format 14

Update Firmware 16

Assign Label 17

More Actions 19

All Cache 19

Remove 20

Enable 20

Disable 20

All Hosts 21

All Clusters 21

Alerts Tab 23

Active Alerts 23

Sidebar - Alerts History 24

Alerts List 24

For the Last ___ Days 24

Columns (Alerts Tab) 25

Archive 25

Reports Tab 25

Operations - Data Drop-Down 26

Date Range 26

ioSphere Software User Guide | _____________________________________ ___ ___ 3

Read and Write Buttons 26

Reports Sidebar 27

Settings Tab 27

Remote Access 28

Remote Access Key 29

Agents 29

Database 30

Local Accounts 30

Changing Passwords 33

Identity Providers 34

Rules 35

SMTP Server 38

Subscribers 39

Labels 41

Device Page 41

Configure Tab 42

directCache 43

Live Tab 45

Reports Tab (Device Page) 46

Operations Button 47

Data amp Endurance Button 47

Temperature 48

Cache Hit Requests 48

Cache Latency 48

Info Tab 48

Appendix A - Adding and Editing LDAP Providers 51

Connection 51

User Mapping 53

Role Mapping 55

Test LDAP Settings 58

Appendix B - Software Updates 60

Fusion Powered Support 62

ioSphere Software User Guide | _____________________________________ ___ ___ 4

ioSphere Software User Guide for Version 321

Legal Notices

The information contained in this document is subject to change without notice

Copyright copy 2012 Fusion-io Inc All rights reserved

Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of

Fusion-io Inc in the United States and other countries

The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)

of their respective owners Unless otherwise stated herein no association with any other organization or product

referenced herein is intended or should be inferred

Fusion-io

2855 E Cottonwood Parkway Suite 100

Salt Lake City UT 84121

USA

(801) 424-5500

Part Number D0003052-003_1

62812

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 4: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 3

Read and Write Buttons 26

Reports Sidebar 27

Settings Tab 27

Remote Access 28

Remote Access Key 29

Agents 29

Database 30

Local Accounts 30

Changing Passwords 33

Identity Providers 34

Rules 35

SMTP Server 38

Subscribers 39

Labels 41

Device Page 41

Configure Tab 42

directCache 43

Live Tab 45

Reports Tab (Device Page) 46

Operations Button 47

Data amp Endurance Button 47

Temperature 48

Cache Hit Requests 48

Cache Latency 48

Info Tab 48

Appendix A - Adding and Editing LDAP Providers 51

Connection 51

User Mapping 53

Role Mapping 55

Test LDAP Settings 58

Appendix B - Software Updates 60

Fusion Powered Support 62

ioSphere Software User Guide | _____________________________________ ___ ___ 4

ioSphere Software User Guide for Version 321

Legal Notices

The information contained in this document is subject to change without notice

Copyright copy 2012 Fusion-io Inc All rights reserved

Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of

Fusion-io Inc in the United States and other countries

The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)

of their respective owners Unless otherwise stated herein no association with any other organization or product

referenced herein is intended or should be inferred

Fusion-io

2855 E Cottonwood Parkway Suite 100

Salt Lake City UT 84121

USA

(801) 424-5500

Part Number D0003052-003_1

62812

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 5: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 4

ioSphere Software User Guide for Version 321

Legal Notices

The information contained in this document is subject to change without notice

Copyright copy 2012 Fusion-io Inc All rights reserved

Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of

Fusion-io Inc in the United States and other countries

The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)

of their respective owners Unless otherwise stated herein no association with any other organization or product

referenced herein is intended or should be inferred

Fusion-io

2855 E Cottonwood Parkway Suite 100

Salt Lake City UT 84121

USA

(801) 424-5500

Part Number D0003052-003_1

62812

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 6: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 5

IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and

directCache across multiple servers throughout a data center This manual describes the ioSphere Management

Solutions controls and functionality

The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit

for the latest list of supported systemshttpsupporttsfujitsucom

All operating systems must be 64-bit architecture to support the ioMemory device

ioSphere Management Solution Features at a Glance

Management and Reports

Discovery and Inventory of multiple networked hosts

Remote Access of and configuration of ioMemory

ioMemory Configuration

Live Performance Metrics

Usage Warranty Forecast

User-defined alerting for ioMemory storage device performance and health

Performance trend reporting

Historical performance data collection and reporting

ioMemory Monitoring

Customized Alert Criteria

SMSEmail Alerts

Searchable Alerts History

User Authentication

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 7: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 6

LDAP Authentication

System Requirements

Server

ioSphere on a centralized server

RAM 2GB plus 20MB of free RAM for each ioMemory module managed

Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory

module

Agent

ioSphere has an Agent on each ioMemory host server

Fusion-io VSL Version 21 or later

Host may not be a server

RAM Minimum of 64MB of free RAM

Windows

The ioSphere Management Solution Agent and Server run on the following Windows distributions

Microsoft Windows XP Professional 64-Bit (with SP2 or higher)

Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)

Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)

Microsoft Windows XP Vista 7 64-bit all versions

Linux

The ioSphere Management Solution Agent and Server support the following Linux distributions

Red Hat Enterprise Linux 4 5 6

SUSE Linux Enterprise Server (SLES) 10 11

OpenSUSE 11

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 8: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 7

Debian Lenny Debian Squeeze

Fedora 13 14

Ubuntu 910 1004 1010

CentOS 4 5

ChaOS

Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)

Supported Browsers

To take advantage of all the ioSphere Management Solution features please use one of the following fully supported

browsers

Microsoft Internet Explorer 80 and later

Mozilla Firefox 3 and later (Windows Mac and Linux)

The following browsers have not been tested but are believed to work

Google Chrome (Windows Linux)

Safari (Mac)

Browsers with known issues

Google Chrome on Mac

Resolution

1024 x 768 or greater

Adobe Flash Player

For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11

directCache

To take advantage of the full functionality of ioSphere you will need directCache installed on your system

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 9: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 8

1

2

3

4

5

6

7

Getting Started

First Time Setup

Open your browser and go to httplocalhost9051

Set the admin password

Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less

frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent

but could affect performance if you are using many clients (for example more than 20 or 30)

Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this

ioSphere server

Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere

(requires Avahi on Linux or Bonjour on Windows)

Host Name Enter the remote host name here

Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port

here

Use pre-configured SSL certificate (optional)

The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that

you create and use a custom certificate

Menu Bar

When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 10: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 9

and Alerts Reports Settings

The menu bar is static and appears at the top of the window regardless of the page you are viewing

The right area of the menu bar includes a search box the name of user and links to and Logout Help

Search Box

The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports

based on a keyword but it does not give you as much power as (see below)Enhanced Search

Enhanced Search

Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search

devices using a variety of attributes

These attributes are based on the columns (categories) available on each page

Here is an example of some of the attributes you can search under on the tabioMemory

Search Breadcrumb

If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch

displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search

the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search

to clear all the items in the breadcrumb

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 11: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 10

Sidebar

Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters

information appearing in the right part of the screen

The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview

sidebar the page automatically loadsioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 12: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 11

The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution

Overview Tab

The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS

and Reserve Space Temperature

If there are Current Alerts they will show up on this tab otherwise not

Reserve Space

Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview

monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks

are retired with write operations tending to wear out blocks faster than reads do

An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available

threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in

order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only

mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages

should provide ample time for you to back up and migrate data on the device

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 13: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 12

Operations

Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS

Go To Reports

Click this link to take you to the information contained on the Reports Tab

ioMemory Tab

Device List

To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case

)All ioMemory

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 14: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 13

In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List

devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name

information displayed is different when the or are selectedAll Cache All Hosts All Clusters

Click the checkbox next to each device on which you want to perform an action or click the devices name to open its

(see the section for more information)Device Page Device Page

Columns

Click this link to select what information is displayed in the list for each device

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 15: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 14

Pagination

If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move

between result pages

All ioMemory

The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory

machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform

maintenance and management tasks on several devices at once

Format

Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before

proceeding

Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this

option However you would use it if any of these situations arise

You need to re-format the drive to change its logical size or modify write performance

Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device

accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format

option provides a larger format size when the sector size is increased

You are instructed to do so by Fusion-io Customer Support

ioSphere performs a low-level format that is different from a format performed by an operating system using standard

disk management utilities You do not need to perform a low-level format to create an operating system-specific

volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format

simultaneously

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 16: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 15

When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write

Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity

Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity

) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom

(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity

You can also modify the sector size here Click the link and enter a new sector size in bytesModify

Warning Changing sector size to something other than 512 (factory default) may cause unexpected application

behavior

The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the

arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Low-Level Format dialogRemove Group

If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular

device) it will display in a separate section titled at the bottom Unavailable for Formatting

When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 17: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 16

To exit the Low-Level Format dialog without formatting any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Update Firmware

Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates

for more information

The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware

firmware if

IoSphere presents a warning icon stating that the firmware is out of date

The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware

The ioMemory device stops working

You are instructed to do so by Fusion-io Customer Support

In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory

Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions

124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver

version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version

Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution

Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade

It is extremely important that the power not be turned off during a firmware upgrade as this could cause device

failure If a UPS is not already in place consider adding one to the system prior to performing a firmware

upgrade

Interrupting an update while it is in progress can result in permanent damage to the device Never use the

Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process

ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it

successfully before restarting the computer to prevent damage to the device

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 18: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 17

You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware

simultaneously

When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware

drop-down menu the version of the firmware you would like to install

The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to

the arrow to the left of the group to reveal more details and the option to remove devices from the group or click

to remove the device(s) from the Update Firmware dialogRemove Group

If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular

device) it will display in a separate section titled at the bottomUnable to Update

When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware

Or to exit the Update Firmware dialog without updating any devices click the linkCancel

When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History

information refer to the Config History sections of Appendix B - Software Updates

Assign Label

Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created

it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that

group

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 19: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 18

When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite

your sidebar favorites For more information about see that sectionLabels

You can also create new labels on the tabSettings

To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label

button then click the green button The drop-down appearsplus New Label

Type in the labels name and click Save Label

You can click the star next to the field to add the label to your list of favorites (describedEnter New Label

below)

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 20: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 19

Close the dialog with the link or the in the upper right cornerNew Label Cancel x

Favorites

The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite

every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites

including your own labels and those created by other users

More Actions

Here you can attach or detach the selected ioMemory Storage Devices

The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device

most cases the operating system driver automatically attaches the installed device at boot time so you only need to use

when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device

Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is

not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device

use this action because ioSphere automatically detaches when performing an update or format from the UI

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 21: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 20

All Cache

This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname

the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name

cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name

the hosts that are part of the cluster

Remove

Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing

store to their previous unbound state

Enable

Re-enables caching of a bound backing store and creates a cache block device

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 22: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 21

Disable

Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable

the caching by clicking the button Enable

All Hosts

When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP

hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS

Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name

is the last displayed

The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 23: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 22

All Clusters

In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster

and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address

nameMaster Host

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 24: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 23

Alerts Tab

This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or

notification purposes There are three types of alerts that are recorded and displayed in the alerts section

Error An error or problem has occurred

Warning A condition has occurred that might cause a problem in the future

Info Useful information

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 25: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 24

Active Alerts

Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be

acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts

(eg in this example 3)

Sidebar - Alerts History

All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts

in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory

Alerts List

Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device

methods All | Warnings | Errors | Info

Click one of these links to filter the alerts by type (or )All

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 26: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 25

For the Last ___ Days

Show alerts for the selected time span (the last 365 128 or 10 days)

Columns (Alerts Tab)

Click this link to select what information is displayed in the list for each device

Archive

Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts

You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule

failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive

viewable in the Alert History

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 27: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 26

Reports Tab

Operations - Data Drop-Down

Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)

corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data

boxes to display their information in the graph

Date Range

Select the start and end dates for the time range you wish to display

Read and Write Buttons

Click or under the graph to show or hide their dataRead Write

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 28: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 27

Reports Sidebar

Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph

Settings Tab

Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings

options subscribers ioMemory Storage Device labels and saved searches

Some features on the page are only available to a Server AdminSettings

Saved Searches

Saved searches let you easily return to a previous search multiple times Once a saved search is created on the

or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 29: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 28

Rename

To rename a saved search click on the name and type your changes

Favorite

To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a

favorite an empty start means it is not

Delete

To delete a saved search click on the Delete link next to the name

Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add

another users saved search to their favorites

Remote Access

Configure users and hosts remote access settings here

ioMemory Push Frequency

Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency

less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but

could affect performance if you are using many clients (more than 20 or 30 for example)

Increasing this number above 600 displays this message A high push frequency will potentially result in data

being out of date in ioSphere

Enable Remote Access

Allows remote access to the Management Server from Agent processes not located on the same machine as the

Management Server

Advertise Using Zeroconf

Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows

remote Agent services to automatically discover and communicate with the Management Server

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 30: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 29

The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on

Windows operating systems

Host Name

Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is

used by Agent services to communicate to the Management Server

Port

By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other

applications You may opt to change the port (to 443 for example) depending on your requirements

Use pre-configured SSL Certificate

A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a

certificate made specifically for your server that is signed by a trusted CA

Use my own custom SSL Certificate

Select this option to update your own Key Certificate and CA Chain

Remote Access Key

To manually configure an Agent to communicate with the Management Server you can download a remote access key

and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by

configuration or due to lack of Zeroconf support) or the network has multiple Management Servers

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 31: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 30

Agents

There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access

button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and

password in the database and has a full access key

Database

Here you can adjust the size of your history database by specifying how many days to include in the historical data

Click when you are doneSave Changes

By default ioSphere keeps the last 30 days of data This can be modified to store up to two years

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 32: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 31

Local Accounts

Here you can create and manage user accounts and user roles

Add User

To add a new user click the link Enter a unique username password and assign the users role which willAdd User

affect that users permissions

Edit User

To edit a user click on the username link

Delete User

To delete a user click on the link given in the Delete columnDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 33: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 32

Bulk Actions

Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable

)Delete

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 34: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 33

Change Role to

Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users

Changing Passwords

To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings

change your password while you are logged in click your user name in the upper right corner of the screen Either

action results in the dialog appearingEdit User

Click to change the users passwordChange Password

Resetting the Admin Password

If you change another users password you do not need to enter the old password and you must be an ioSphere

Admin However when you change the admins account password you must enter the old password

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 35: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 34

If you forget your admin password you can reset it by running at the command linefio-msrv -w

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 36: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 35

Identity Providers

Currently the ioSphere only supports LDAP identity providers

Add LDAP

Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role

test LDAP settings and add additional LDAP configurationsMapping

Edit LDAP

To edit an LDAP entry click on the linkProvider

Delete LDAP

To delete an LDAP entry click on the link next to the providerDelete

For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 37: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 36

Rules

Here you can create edit and review rules that generate alerts

Add Rule

Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert

In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add

button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search

button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter

parameters to the alert Click the button to continueNext Step

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 38: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 37

Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert

You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add

button to add the alert or the link to discard the alertAlert Cancel

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 39: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 38

Edit Rule

To edit custom rule entry click on the linkRule

Delete Rule

To delete a custom rule entry click on the link next to the Delete Rule

Only custom rules can be modified and deleted

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 40: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 39

SMTP Server

In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter

in the correct parameters clicking the button will save and test the SMTP settingsSave Changes

Subscribers

The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the

SMTP server settings you can create subscribers and assign them to receive specific alerts

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 41: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 40

Add Subscriber

Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber

address and assign the subscriber to be notified when an alert is Set or Cleared

Edit Subscriber

To edit a subscriber click on the subscriber email address link

Delete Subscriber

To delete a subscriber click on the link next to the subscriberDelete

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 42: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 41

Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple

text emails to a mobile phones Check with your provider to determine your Email to SMS email address

Labels

Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the

tab you can come here to rename it mark it as a favorite or delete itioMemory

Rename

To rename a label click on the name and type your changes

Favorite

To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite

favorite an empty start means it is not

Delete

To delete a label click on the link next to the nameDelete

Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users

label to their favorites

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 43: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 42

Device Page

The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice

several ways to navigate to the pageDevice

Click a hostname link from any table in ioSphere

Click an ioMemory link or Cache Instance name link from any table in ioSphere

When the displays information pertaining to the server running the Agent service appears in the upperDevice Page

left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right

monitors and lets you perform configuration tasks

The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT

compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 44: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 43

Configure Tab

Here you can edit the following settings

Alias (Name by default the serial number is used)

LabelsChange Labels link

Status (AttachDetach)

The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device

system In most cases the operating system driver automatically attaches the installed ioMemory Storage

Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage

Device (such as to perform a low-level format)

disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device

device is not accessible to users or applications (You need to use Attach Device to make it accessible) You

should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade

Swap Support (EnableDisable)

ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for

use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap

When you select here the device is ready to be used as swap space but your operating system still needsEnable

to be configured to use the device as swap You will need to configure the system to use the device in that

manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -

or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux

You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block

size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in

the loss of user processes and system instability

Beacon (OnDisable)

The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon

among several devices

You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates

reformat

directCache

directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage

volume called a backing store

The backing store can be any block storage device ranging from a single local hard drive within the server to a

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 45: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 44

redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a

fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)

directCache is good for you if you

need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash

ndash in a cost-effective model

are looking for the highest-performance-per-dollar storage systems

have applications that can use solid state storage today to increase performance and reduce latency

have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of

ownership

have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance

needs

How ioSphere Uses directCache

There is much information regarding directCache on the tab There are also a few directCache features youConfigure

can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add

or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache

directCache header A dialog opens over the tabConfigure

If your cache is controlled by cluster management software click the first checkbox

Backing Store list - This list shows all the storage devices that are able to be cached

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 46: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 45

Alias - This can be a short name that helps you remember this cache device

Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle

can include all alphanumeric characters except for or and must not begin or end with a space~` |character

Add Another - Click this if you want to add another cache device

When you are done adding cache devices click the buttonConfigure

The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History

directCache Information

From the tab you can see the following directCache-related informationConfigure

Driver Version - the version number of the directCache software you have installed

Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange

Handle - If you gave your cache a handle you can see it listed here

Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache

Backing Store - displays the path of the storage device being cached To remove the cache (and restore the

backing store to its original non-cached state) click the link next to the pathRemove Backing Store

Backing Store Size - displays the size of the backing store device

Click on and you will see a list of other important directCache information such as More Information Read Sector

how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 47: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 46

Live Tab

The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live

tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data

and Select or using the large button above the graphTemperature Reserve Space Data Operations

The tab also now displays information for Live PBW Endurance

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 48: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 47

Reports Tab (Device Page)

The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp

and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency

the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data

for different dates

Operations Button

Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations

the average and hits as the amount of IOPS Read Write

Data amp Endurance Button

Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 49: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 48

Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this

PBW Rating

When is selected the following message appears above the graph Future performance based onData amp Endurance

this date range suggests X PBW Usage Warranty will last for more than X years

If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory

Storage Device you can modify the date range to include data that better represents future behavior and thereby

include a better prediction of the warranty expiration

Temperature

The data shows you how temperature changes over time (over days or throughout a day)

Cache Hit Requests

This charts the percent of read requests which were serviced from the cache

Cache Latency

The graph shows for and Cache Latency Read Hits Read Misses Read Average

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 50: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 49

Info Tab

The tab provides details about a single ioMemory Storage Device including recent alertsInfo

As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information

(single or duo) the serial number and PCIe Bus voltage current power and bandwidth

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 51: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 50

The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details

in the tabConfigure

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 52: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 51

Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their

organization This section describes how to add and edit LDAP providers

To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears

Adding a new LDAP provider

Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start

with the sectionConnection

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 53: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 52

Connection

Enter a name for the LDAP configuration in the field For example Corporate DirectoryName

Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server

multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup

Mirror field

For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers

Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key

Instead it automatically trusts the servers certificate when performing the SSL handshake

The default field is optional If your users andor groups are located below a common branch in yourBase DN

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 54: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 53

LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user

mapping and role mappings later

The timeout used for making server connections and for searching is specified in the fieldTimeout

The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This

prevents the web application from encountering connection timeout problems

Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be

authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required

and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory

Best security practices call for a least privileged user to be created in the LDAP directory and used for this

purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree

where users and groups reside

The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL

checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer

Click the button to ensure that your configuration steps thus far are correct The test willTest Connection

Connect to the LDAP Server(s) specified

Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)

Perform an LDAP Bind with the Auth DN and Password if one is specified

Any errors encountered are displayed at the top of the dialog

When finished click to enter the sectionNext Step User Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 55: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 54

User Mapping

A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username

maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to

authenticate to the LDAP directory

The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder

(essentially a DN template) and a traditional search-based mapping configuration

DN Builder

In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to

configure the User Mapping In order to map a username like jdoe to an LDAP entry like

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 56: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 55

type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com

You will notice that an example DN is shown below the Template fields in the form of

This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username

Search

The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of

the entry which represents that user For example ActiveDirectory deployments often populate an attribute called

with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername

Enter the DN of the tree branch that is hierarchically above your user entries (for example

) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish

For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)

automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)

(UID=$username)

If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle

between entering attributes and editing the search filter)

The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication

The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope

Click to proceed to the sectionNext Step Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 57: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 56

Role Mapping

The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role

section configures the ways in which users are granted rolesMapping

Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User

Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)

Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true

(returns one or more entries) for a user then that user is granted the Role

Click to create a new role mappingAdd Role Mapping

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 58: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 57

Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName

For example Administrators

Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN

group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users

attributes (such as memberOf)

Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)

Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope

level otherwise it should be either Subtree or One level

Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole

users who are listed in and LDAP group entry full of administrators set the role to Server Admin)

Click to finish the Role Mapping sectionAdd Role Mapping

Continue to the sectionTest LDAP Settings

Example Role Mappings

Here are some examples of role mappings that might be configured for different LDAP directory deployments

Members of the Administrator group are in role Server Admin

Set the Search Base DN field to the Administrators group entry For example

CN=administratorsOU=groupsDC=exampleDC=com

Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter

(|(member=$dn)(uniqueMember=$dn))

Set the Scope to Base level

Set the Role to Server Admin

Members of the Administrator group are in role Server Admin (alternate AD config)

Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an

attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases

Set the Search Base DN field to the users entry $dn

Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)

Set the Scope to Base level

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 59: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 58

Set the Role to Server Admin

Users who have the title of manager are in the Device Admin role

In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role

Set the Search Base DN field to the users entry $dn

Set the Search Filter (title=manager)

Set the Scope to Base level

Set the Role to Device Admin

Click to test your settingsNext Step

Grant a specific user the Server Admin role

You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating

search criteria which matches true only for that user

Set the Search Base DN field to the users entry $dn

Set the Search Filter (sAMAccountName=jdoe)

Set the Scope to Base level

Set the Role to Server Admin

Grant the User role to everyone who is able to authenticate

If you want everyone who is able to log in to have at least the User role you can do this

Set the Search Base DN field to the users entry $dn

Set the Search Filter (objectclass=)

Set the Scope to Base level

Set the Role to User

Test LDAP Settings

This section lets you test your connection user mapping and role mappings configuration

Type the name of a user into the User field (like jdoe) and click Test

The results of the test will print out in a step-by-step manner Each step will also contain timing information This may

be helpful in fine-tuning your user mapping and role mappings

Ideally you will see results that look like this

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 60: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 59

setup 0 seconds

Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 61: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 60

1

2

1

2

3

4

Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host

machine and updating the firmware on the ioMemory Storage Device

To update the ioMemory VSL on the host machine

Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom

Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine

When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)

To install the firmware to the ioMemory Storage Devices

Open the ioSphere Management Solution

If you are using ioSphere click the Overview tab and click the devices have updates available link x

Click the button The dialog appears Update Firmware Update Firmware

Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware

screen Refer to the section below for more informationConfig History - ioSphere

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 62: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide | _____________________________________ ___ ___ 61

Config History - ioSphere

Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped

were selected but are not being updated Each devices progress is shown in the sidebar

When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices

were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED

FAILED or REQUIRES REBOOT link to see a list of those devices

Click the arrow at the left end of the Config History bar to expand the bar and see previous updates

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support
Page 63: ioSphere Software User Guide - Fujitsumanuals.ts.fujitsu.com/file/11268/iosphere-sw-ug-321-en.pdf · ioSphere Software User Guide €€€ _____ ___ | ___ 2 ioSphere Software User

ioSphere Software User Guide| ____________ ___ ___ 93

Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web

E-Mail

Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support

For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml

Web

It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml

  • ioSphere Software User Guide for Version 321
    • Introduction
    • Getting Started
      • First Time Setup
      • Menu Bar
      • Sidebar
        • The ioSphere Feature Set
          • Overview Tab
            • Reserve Space
            • Operations
            • Go To Reports
              • ioMemory Tab
                • Device List
                • Columns
                • Pagination
                • All ioMemory
                  • Format
                  • Update Firmware
                  • Assign Label
                  • More Actions
                    • All Cache
                      • Remove
                      • Enable
                      • Disable
                        • All Hosts
                        • All Clusters
                          • Alerts Tab
                            • Active Alerts
                            • Sidebar - Alerts History
                            • Alerts List
                            • For the Last ___ Days
                            • Columns (Alerts Tab)
                            • Archive
                              • Reports Tab
                                • Operations - Data Drop-Down
                                • Date Range
                                • Read and Write Buttons
                                • Reports Sidebar
                                  • Settings Tab
                                    • Remote Access
                                    • Remote Access Key
                                    • Agents
                                    • Database
                                    • Local Accounts
                                      • Changing Passwords
                                        • Identity Providers
                                        • Rules
                                        • SMTP Server
                                        • Subscribers
                                        • Labels
                                          • Device Page
                                            • Configure Tab
                                              • directCache
                                                • Live Tab
                                                • Reports Tab (Device Page)
                                                • Operations Button
                                                • Data amp Endurance Button
                                                • Temperature
                                                • Cache Hit Requests
                                                • Cache Latency
                                                • Info Tab
                                                    • Appendix A - Adding and Editing LDAP Providers
                                                      • Connection
                                                      • User Mapping
                                                      • Role Mapping
                                                      • Test LDAP Settings
                                                        • Appendix B - Software Updates
                                                        • Fusion Powered Support