Upload
trinhdieu
View
255
Download
1
Embed Size (px)
Citation preview
User Guide
ioSphere Software User Guide Version 321 English
ioSphere Software User GuideVersion 321
ioSphere Software User Guide | _____________________________________ ___ ___ 2
ioSphere Software User Guide for Version 321 4
Introduction 5
Getting Started 8
First Time Setup 8
Menu Bar 8
Sidebar 9
The ioSphere Feature Set 11
Overview Tab 11
Reserve Space 11
Operations 12
Go To Reports 12
ioMemory Tab 12
Device List 12
Columns 13
Pagination 13
All ioMemory 14
Format 14
Update Firmware 16
Assign Label 17
More Actions 19
All Cache 19
Remove 20
Enable 20
Disable 20
All Hosts 21
All Clusters 21
Alerts Tab 23
Active Alerts 23
Sidebar - Alerts History 24
Alerts List 24
For the Last ___ Days 24
Columns (Alerts Tab) 25
Archive 25
Reports Tab 25
Operations - Data Drop-Down 26
Date Range 26
ioSphere Software User Guide | _____________________________________ ___ ___ 3
Read and Write Buttons 26
Reports Sidebar 27
Settings Tab 27
Remote Access 28
Remote Access Key 29
Agents 29
Database 30
Local Accounts 30
Changing Passwords 33
Identity Providers 34
Rules 35
SMTP Server 38
Subscribers 39
Labels 41
Device Page 41
Configure Tab 42
directCache 43
Live Tab 45
Reports Tab (Device Page) 46
Operations Button 47
Data amp Endurance Button 47
Temperature 48
Cache Hit Requests 48
Cache Latency 48
Info Tab 48
Appendix A - Adding and Editing LDAP Providers 51
Connection 51
User Mapping 53
Role Mapping 55
Test LDAP Settings 58
Appendix B - Software Updates 60
Fusion Powered Support 62
ioSphere Software User Guide | _____________________________________ ___ ___ 4
ioSphere Software User Guide for Version 321
Legal Notices
The information contained in this document is subject to change without notice
Copyright copy 2012 Fusion-io Inc All rights reserved
Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of
Fusion-io Inc in the United States and other countries
The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)
of their respective owners Unless otherwise stated herein no association with any other organization or product
referenced herein is intended or should be inferred
Fusion-io
2855 E Cottonwood Parkway Suite 100
Salt Lake City UT 84121
USA
(801) 424-5500
Part Number D0003052-003_1
62812
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User GuideVersion 321
ioSphere Software User Guide | _____________________________________ ___ ___ 2
ioSphere Software User Guide for Version 321 4
Introduction 5
Getting Started 8
First Time Setup 8
Menu Bar 8
Sidebar 9
The ioSphere Feature Set 11
Overview Tab 11
Reserve Space 11
Operations 12
Go To Reports 12
ioMemory Tab 12
Device List 12
Columns 13
Pagination 13
All ioMemory 14
Format 14
Update Firmware 16
Assign Label 17
More Actions 19
All Cache 19
Remove 20
Enable 20
Disable 20
All Hosts 21
All Clusters 21
Alerts Tab 23
Active Alerts 23
Sidebar - Alerts History 24
Alerts List 24
For the Last ___ Days 24
Columns (Alerts Tab) 25
Archive 25
Reports Tab 25
Operations - Data Drop-Down 26
Date Range 26
ioSphere Software User Guide | _____________________________________ ___ ___ 3
Read and Write Buttons 26
Reports Sidebar 27
Settings Tab 27
Remote Access 28
Remote Access Key 29
Agents 29
Database 30
Local Accounts 30
Changing Passwords 33
Identity Providers 34
Rules 35
SMTP Server 38
Subscribers 39
Labels 41
Device Page 41
Configure Tab 42
directCache 43
Live Tab 45
Reports Tab (Device Page) 46
Operations Button 47
Data amp Endurance Button 47
Temperature 48
Cache Hit Requests 48
Cache Latency 48
Info Tab 48
Appendix A - Adding and Editing LDAP Providers 51
Connection 51
User Mapping 53
Role Mapping 55
Test LDAP Settings 58
Appendix B - Software Updates 60
Fusion Powered Support 62
ioSphere Software User Guide | _____________________________________ ___ ___ 4
ioSphere Software User Guide for Version 321
Legal Notices
The information contained in this document is subject to change without notice
Copyright copy 2012 Fusion-io Inc All rights reserved
Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of
Fusion-io Inc in the United States and other countries
The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)
of their respective owners Unless otherwise stated herein no association with any other organization or product
referenced herein is intended or should be inferred
Fusion-io
2855 E Cottonwood Parkway Suite 100
Salt Lake City UT 84121
USA
(801) 424-5500
Part Number D0003052-003_1
62812
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 2
ioSphere Software User Guide for Version 321 4
Introduction 5
Getting Started 8
First Time Setup 8
Menu Bar 8
Sidebar 9
The ioSphere Feature Set 11
Overview Tab 11
Reserve Space 11
Operations 12
Go To Reports 12
ioMemory Tab 12
Device List 12
Columns 13
Pagination 13
All ioMemory 14
Format 14
Update Firmware 16
Assign Label 17
More Actions 19
All Cache 19
Remove 20
Enable 20
Disable 20
All Hosts 21
All Clusters 21
Alerts Tab 23
Active Alerts 23
Sidebar - Alerts History 24
Alerts List 24
For the Last ___ Days 24
Columns (Alerts Tab) 25
Archive 25
Reports Tab 25
Operations - Data Drop-Down 26
Date Range 26
ioSphere Software User Guide | _____________________________________ ___ ___ 3
Read and Write Buttons 26
Reports Sidebar 27
Settings Tab 27
Remote Access 28
Remote Access Key 29
Agents 29
Database 30
Local Accounts 30
Changing Passwords 33
Identity Providers 34
Rules 35
SMTP Server 38
Subscribers 39
Labels 41
Device Page 41
Configure Tab 42
directCache 43
Live Tab 45
Reports Tab (Device Page) 46
Operations Button 47
Data amp Endurance Button 47
Temperature 48
Cache Hit Requests 48
Cache Latency 48
Info Tab 48
Appendix A - Adding and Editing LDAP Providers 51
Connection 51
User Mapping 53
Role Mapping 55
Test LDAP Settings 58
Appendix B - Software Updates 60
Fusion Powered Support 62
ioSphere Software User Guide | _____________________________________ ___ ___ 4
ioSphere Software User Guide for Version 321
Legal Notices
The information contained in this document is subject to change without notice
Copyright copy 2012 Fusion-io Inc All rights reserved
Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of
Fusion-io Inc in the United States and other countries
The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)
of their respective owners Unless otherwise stated herein no association with any other organization or product
referenced herein is intended or should be inferred
Fusion-io
2855 E Cottonwood Parkway Suite 100
Salt Lake City UT 84121
USA
(801) 424-5500
Part Number D0003052-003_1
62812
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 3
Read and Write Buttons 26
Reports Sidebar 27
Settings Tab 27
Remote Access 28
Remote Access Key 29
Agents 29
Database 30
Local Accounts 30
Changing Passwords 33
Identity Providers 34
Rules 35
SMTP Server 38
Subscribers 39
Labels 41
Device Page 41
Configure Tab 42
directCache 43
Live Tab 45
Reports Tab (Device Page) 46
Operations Button 47
Data amp Endurance Button 47
Temperature 48
Cache Hit Requests 48
Cache Latency 48
Info Tab 48
Appendix A - Adding and Editing LDAP Providers 51
Connection 51
User Mapping 53
Role Mapping 55
Test LDAP Settings 58
Appendix B - Software Updates 60
Fusion Powered Support 62
ioSphere Software User Guide | _____________________________________ ___ ___ 4
ioSphere Software User Guide for Version 321
Legal Notices
The information contained in this document is subject to change without notice
Copyright copy 2012 Fusion-io Inc All rights reserved
Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of
Fusion-io Inc in the United States and other countries
The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)
of their respective owners Unless otherwise stated herein no association with any other organization or product
referenced herein is intended or should be inferred
Fusion-io
2855 E Cottonwood Parkway Suite 100
Salt Lake City UT 84121
USA
(801) 424-5500
Part Number D0003052-003_1
62812
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 4
ioSphere Software User Guide for Version 321
Legal Notices
The information contained in this document is subject to change without notice
Copyright copy 2012 Fusion-io Inc All rights reserved
Fusion-io the Fusion-io logo ioDrive and directCache are registered trademarks and VSL is a registered trademark of
Fusion-io Inc in the United States and other countries
The names of other organizations and products referenced herein are the trademarks or service marks (as applicable)
of their respective owners Unless otherwise stated herein no association with any other organization or product
referenced herein is intended or should be inferred
Fusion-io
2855 E Cottonwood Parkway Suite 100
Salt Lake City UT 84121
USA
(801) 424-5500
Part Number D0003052-003_1
62812
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 5
IntroductionWelcome to the ioSphere Management Solution where you can easily manage ioMemory Storage Devices and
directCache across multiple servers throughout a data center This manual describes the ioSphere Management
Solutions controls and functionality
The ioSphere Management Solution runs on both Windows and Linux platforms as does directCache Visit
for the latest list of supported systemshttpsupporttsfujitsucom
All operating systems must be 64-bit architecture to support the ioMemory device
ioSphere Management Solution Features at a Glance
Management and Reports
Discovery and Inventory of multiple networked hosts
Remote Access of and configuration of ioMemory
ioMemory Configuration
Live Performance Metrics
Usage Warranty Forecast
User-defined alerting for ioMemory storage device performance and health
Performance trend reporting
Historical performance data collection and reporting
ioMemory Monitoring
Customized Alert Criteria
SMSEmail Alerts
Searchable Alerts History
User Authentication
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 6
LDAP Authentication
System Requirements
Server
ioSphere on a centralized server
RAM 2GB plus 20MB of free RAM for each ioMemory module managed
Storage Up to 10MB minimum hard drive space plus up to 3 MB additional space for each ioMemory
module
Agent
ioSphere has an Agent on each ioMemory host server
Fusion-io VSL Version 21 or later
Host may not be a server
RAM Minimum of 64MB of free RAM
Windows
The ioSphere Management Solution Agent and Server run on the following Windows distributions
Microsoft Windows XP Professional 64-Bit (with SP2 or higher)
Microsoft Windows 2003 Server 64-Bit (with SP2 or higher)
Microsoft Windows 2008 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows 2008 R2 Server 64-Bit all versions (with SP1 or higher)
Microsoft Windows XP Vista 7 64-bit all versions
Linux
The ioSphere Management Solution Agent and Server support the following Linux distributions
Red Hat Enterprise Linux 4 5 6
SUSE Linux Enterprise Server (SLES) 10 11
OpenSUSE 11
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 7
Debian Lenny Debian Squeeze
Fedora 13 14
Ubuntu 910 1004 1010
CentOS 4 5
ChaOS
Solaris 10 U8 amp U9 11 (Agent Only) Open Solaris 10 (Agent Only)
Supported Browsers
To take advantage of all the ioSphere Management Solution features please use one of the following fully supported
browsers
Microsoft Internet Explorer 80 and later
Mozilla Firefox 3 and later (Windows Mac and Linux)
The following browsers have not been tested but are believed to work
Google Chrome (Windows Linux)
Safari (Mac)
Browsers with known issues
Google Chrome on Mac
Resolution
1024 x 768 or greater
Adobe Flash Player
For an optimal viewing experience we recommend that you install the latest version of Adobe Flash Player 11
directCache
To take advantage of the full functionality of ioSphere you will need directCache installed on your system
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 8
1
2
3
4
5
6
7
Getting Started
First Time Setup
Open your browser and go to httplocalhost9051
Set the admin password
Enter the ioMemory Push Frequency Default is 15 seconds Increasing this number will make updates less
frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent
but could affect performance if you are using many clients (for example more than 20 or 30)
Enable Remote Access (optional) Unchecked by default Check this box to allow remote access to this
ioSphere server
Advertise Using Zeroconf (optional) This allows Agents to automatically discover and connect to ioSphere
(requires Avahi on Linux or Bonjour on Windows)
Host Name Enter the remote host name here
Port This is set to 9051 by default Fusion-io owns this port You have the option of entering a different port
here
Use pre-configured SSL certificate (optional)
The ioSphere Management Solution includes a pre-configured SSL certificate but it is recommended that
you create and use a custom certificate
Menu Bar
When using ioSphere the application is divided into five main sections (also known as tabs) Overview ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 9
and Alerts Reports Settings
The menu bar is static and appears at the top of the window regardless of the page you are viewing
The right area of the menu bar includes a search box the name of user and links to and Logout Help
Search Box
The box is active on the and tabs Search is a quick method of filtering itemsSearch ioMemory Alerts Reports
based on a keyword but it does not give you as much power as (see below)Enhanced Search
Enhanced Search
Enhanced Search is much more powerful than the default search allows you to search forEnhanced Search
devices using a variety of attributes
These attributes are based on the columns (categories) available on each page
Here is an example of some of the attributes you can search under on the tabioMemory
Search Breadcrumb
If a current search criteria is applied on any of the pages where the box is active you will see that criteriaSearch
displayed at the top of the list as a Use to add additional search criteria toSearch Breadcrumb Enhanced Search
the search breadcrumb Click on the criteria itself to remove an item from the search criteria or click on Clear Search
to clear all the items in the breadcrumb
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 10
Sidebar
Each of the main pages in the ioSphere Management Solution has a sidebar on the left side of the screen that filters
information appearing in the right part of the screen
The and pages sidebars are identical and when you click a selection in the Overview ioMemory Overview
sidebar the page automatically loadsioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 11
The ioSphere Feature SetThis section describes the controls and features of the ioSphere Management Solution
Overview Tab
The tab summarizes key information gathered from all ioMemory Storage Devices including Overview IOPS
and Reserve Space Temperature
If there are Current Alerts they will show up on this tab otherwise not
Reserve Space
Reserve Space (as shown on the tab) displays helpful information regarding the health of the device beingOverview
monitored as determined by the percentage of reserve space available The reserve space decreases as NAND blocks
are retired with write operations tending to wear out blocks faster than reads do
An early warning message is sent by the driver when the amount of reserve is close to reaching the 10-available
threshold If the reserve space decreases to 0 of its original size the device enters write-reduced mode (degraded) in
order to prolong the lifespan of the device Sometime after the reserve space is depleted the device enters read-only
mode and no further writes to the device can be done If crossed these thresholds and their accompanying messages
should provide ample time for you to back up and migrate data on the device
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 12
Operations
Shows a historical trend of for all devices being managed by the ioSphere Management SolutionIOPS
Go To Reports
Click this link to take you to the information contained on the Reports Tab
ioMemory Tab
Device List
To the right of the sidebar is a grid that contains all items that match the currently-selected sidebar item (in this case
)All ioMemory
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 13
In the image shown above the filter has been selected in the sidebar so the shows eachioMemory Device List
devices amount of s and TheStatus Hostname Reserve Space Serial Number Filesystem Cluster Name
information displayed is different when the or are selectedAll Cache All Hosts All Clusters
Click the checkbox next to each device on which you want to perform an action or click the devices name to open its
(see the section for more information)Device Page Device Page
Columns
Click this link to select what information is displayed in the list for each device
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 14
Pagination
If a search of ioMemory Storage Devices results in multiple pages use the controls at the bottom of the list to move
between result pages
All ioMemory
The screen gives you detailed information about the ioMemory devices directCache cache instancesAll ioMemory
machines which host ioMemory devices clusters of which those host machines may be a part and lets you perform
maintenance and management tasks on several devices at once
Format
Warning Formatting a device will destroy any data still remaining on it Please be sure to back up your data before
proceeding
Your ioMemory Storage Device comes pre-formatted to factory capacity so generally it is not necessary to use this
option However you would use it if any of these situations arise
You need to re-format the drive to change its logical size or modify write performance
Your application supports sector sizes larger than 512 bytes (the default) and you want to tune your device
accordingly Larger sector sizes allow for more optimal CPUmemory use and the Maximum Capacity format
option provides a larger format size when the sector size is increased
You are instructed to do so by Fusion-io Customer Support
ioSphere performs a low-level format that is different from a format performed by an operating system using standard
disk management utilities You do not need to perform a low-level format to create an operating system-specific
volume on the device You can select one or more ioMemory Storage Devices on the ioSphere page to format
simultaneously
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 15
When you click the button the dialog appears Here you can set the ratio of Format Low-Level Format Write
Basically you can increase Write Performance by decreasing the ioMemory StoragePerformance to Capacity
Devices capacity--the reverse is also true You can select from a drop-down list of preset ratios (Maximum Capacity
) or customize the ratio with the selectionFactory Capacity Improved Performance High Performance Custom
(also in the drop-down menu) or by dragging the line between in the graphicWrite Performance and Capacity
You can also modify the sector size here Click the link and enter a new sector size in bytesModify
Warning Changing sector size to something other than 512 (factory default) may cause unexpected application
behavior
The selected ioMemory Storage Device(s) appear as a group below the Write PerformanceCapacity graphic Click the
arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Low-Level Format dialogRemove Group
If an ioMemory Storage Device is unable to format (eg it is busy or the formatting is not valid for that particular
device) it will display in a separate section titled at the bottom Unavailable for Formatting
When you are ready to format the selected ioMemory Storage Device click the buttonFormat Devices
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 16
To exit the Low-Level Format dialog without formatting any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Update Firmware
Updating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device Refer to Appendix B - Software Updates
for more information
The operation lets you upgrade the ioMemory Storage Devices firmware You should upgrade theUpdate Firmware
firmware if
IoSphere presents a warning icon stating that the firmware is out of date
The Windows System Event Log or Linux system log (typically in ) reports a problemvarlogmessagesdue to out-of-date firmware
The ioMemory device stops working
You are instructed to do so by Fusion-io Customer Support
In most cases if you upgrade the ioMemory Storage Device firmware you must also upgrade the ioMemory
Storage Device driver Most support issues arise from mismatched firmware and drivers Only driver versions
124 and higher with their corresponding firmware versions can be upgraded to version 202 If your driver
version is older than 124 it must be upgraded to 124 before advancing to a later driverfirmware version
Upgrading the firmware may take some time Monitor the progress using ioSphere Management Solution
Back up the data on your ioMemory Storage Device(s) prior to performing the upgrade
It is extremely important that the power not be turned off during a firmware upgrade as this could cause device
failure If a UPS is not already in place consider adding one to the system prior to performing a firmware
upgrade
Interrupting an update while it is in progress can result in permanent damage to the device Never use the
Windows Task Manager to stop the update or kill the process in Linux (For this same reason the Agent process
ignores all termination requests) If the operation fails it is critical that you restart this operation and complete it
successfully before restarting the computer to prevent damage to the device
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 17
You can select one or more ioMemory Storage Devices on the ioMemory grid to upgrade their firmware
simultaneously
When you click the button the Update Firmware dialog appears Here you can select from theUpdate Firmware
drop-down menu the version of the firmware you would like to install
The selected ioMemory Storage Device(s) appear as a group below the drop-down menu ClickUpdate firmware to
the arrow to the left of the group to reveal more details and the option to remove devices from the group or click
to remove the device(s) from the Update Firmware dialogRemove Group
If an ioMemory Storage Device is unable to update (eg it is busy or updates are not available for that particular
device) it will display in a separate section titled at the bottomUnable to Update
When you are ready to upgrade the selected ioMemory Storage Devices firmware click the buttonUpdate Firmware
Or to exit the Update Firmware dialog without updating any devices click the linkCancel
When the firmware update process begins the bar appears at the bottom of the screen For moreConfig History
information refer to the Config History sections of Appendix B - Software Updates
Assign Label
Assign Label lets you organize your ioMemory Storage Devices into categories or groups Once a new label is created
it will appear in the sidebar Clicking on the label will quickly display all ioMemory Storage Devices belonging to that
group
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 18
When you create a new label you can mark it as a by selecting the star icon which will include it underFavorite
your sidebar favorites For more information about see that sectionLabels
You can also create new labels on the tabSettings
To create a new label select one or more ioMemory Storage Devices on the ioSphere page and click the Assign Label
button then click the green button The drop-down appearsplus New Label
Type in the labels name and click Save Label
You can click the star next to the field to add the label to your list of favorites (describedEnter New Label
below)
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 19
Close the dialog with the link or the in the upper right cornerNew Label Cancel x
Favorites
The feature lets you tag a label as a All ioMemory Storage Devices with that label will appear inFavorites Favorite
every pages sidebar (except the page) under the heading You can mark any label as a favoriteSettings Favorites
including your own labels and those created by other users
More Actions
Here you can attach or detach the selected ioMemory Storage Devices
The operation creates a link so the ioMemory Storage Device interacts with the operating system InAttach Device
most cases the operating system driver automatically attaches the installed device at boot time so you only need to use
when you manually detach an ioMemory Storage Device (eg to perform a low-level format)Attach Device
Detach Device disconnects your ioMemory Storage Device from the operating system Once detached the device is
not accessible to users or applications (You need to use to make it accessible) You will not need toAttach Device
use this action because ioSphere automatically detaches when performing an update or format from the UI
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 20
All Cache
This is a table that has the name of the cache its status ( or ) the ioMemory in use the Enabled Disabled Hostname
the and the (the backing store device is the name of the device beingCluster Name Backing Store Device Name
cached) All these links take you to the page except the which takes you to a table showing allDevice Cluster Name
the hosts that are part of the cluster
Remove
Removes the caching relationship of a caching device to a backing store and restores the ioMemory device and backing
store to their previous unbound state
Enable
Re-enables caching of a bound backing store and creates a cache block device
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 21
Disable
Halts caching and prepares a cache and backing store for system power-down or for maintenance You may re-enable
the caching by clicking the button Enable
All Hosts
When you select from the sidebar you will all host-relevant information such as (theAll Hosts Hostname HostIP
hosts IP address) (whether the selected host is online or offline) and the (Linux orHosts Online Host OS
Windows) The serial number or the alias of the drive displays under the heading and then the Drives Cluster Name
is the last displayed
The and buttons apply to all devices attached to the selected hostsFormat Update Firmware Attach
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 22
All Clusters
In this example there are two clusters shown but it is on the screen that you can see the the Cluster Name Cluster
and the The link lets you add or remove the and the IP Address Master Host Columns Cluster IP Address
nameMaster Host
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 23
Alerts Tab
This page lists current and historical alerts for ioMemory devices and cache instances Alerts are for recording or
notification purposes There are three types of alerts that are recorded and displayed in the alerts section
Error An error or problem has occurred
Warning A condition has occurred that might cause a problem in the future
Info Useful information
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 24
Active Alerts
Active alerts are conditions which are persistent and need to be corrected or which occurred recently and need to be
acknowledged and archived The number of active alerts corresponds with the number displayed on the tabAlerts
(eg in this example 3)
Sidebar - Alerts History
All Alerts (active or archived) that occurred within the last year can be viewed in any of the groups listed under Alerts
in the sidebar You can filter the results by clicking on one of the factory or custom searches in the sidebarHistory
Alerts List
Click on the devices name or name to go to view You can filter the displayed Alerts using severalHost Item Device
methods All | Warnings | Errors | Info
Click one of these links to filter the alerts by type (or )All
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 25
For the Last ___ Days
Show alerts for the selected time span (the last 365 128 or 10 days)
Columns (Alerts Tab)
Click this link to select what information is displayed in the list for each device
Archive
Alerts are automatically cleared from the grid when the condition that caused them no longer existsActive Alerts
You may manually archive Alerts that are present due to a user-created and those that are a result of aAlert Rule
failed configuration operation Click the link to the right of the alert in the alert list Archived alerts are stillArchive
viewable in the Alert History
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 26
Reports Tab
Operations - Data Drop-Down
Click to display information about or The selected informationsOperations (IOPS) Data Volume (Data)
corresponding button (at the bottom of the graph) will be highlighted You can also click on the or Operations Data
boxes to display their information in the graph
Date Range
Select the start and end dates for the time range you wish to display
Read and Write Buttons
Click or under the graph to show or hide their dataRead Write
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 27
Reports Sidebar
Click these factory or custom links to filter the ioMemory Storage Device(s) whose information appears in the graph
Settings Tab
Use the page to manage remote access options local accounts and identity providers alert rules SMTP serverSettings
options subscribers ioMemory Storage Device labels and saved searches
Some features on the page are only available to a Server AdminSettings
Saved Searches
Saved searches let you easily return to a previous search multiple times Once a saved search is created on the
or tab you can come here to rename it mark it as a favorite or delete itioMemory Alerts Reports
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 28
Rename
To rename a saved search click on the name and type your changes
Favorite
To change to the Favorite settings of a saved search click the star icon next to the name A yellow star means it is a
favorite an empty start means it is not
Delete
To delete a saved search click on the Delete link next to the name
Other Users Saved Searches While only an admin can edit saved searches created by other users anyone can add
another users saved search to their favorites
Remote Access
Configure users and hosts remote access settings here
ioMemory Push Frequency
Optionally enter the Default is 15 seconds Increasing this number will make updatesioMemory Push Frequency
less frequent (and historyreport information less detailed) Decreasing this number makes updates more frequent but
could affect performance if you are using many clients (more than 20 or 30 for example)
Increasing this number above 600 displays this message A high push frequency will potentially result in data
being out of date in ioSphere
Enable Remote Access
Allows remote access to the Management Server from Agent processes not located on the same machine as the
Management Server
Advertise Using Zeroconf
Causes the Management Server to advertise its service using the Zeroconf service discovery protocol This allows
remote Agent services to automatically discover and communicate with the Management Server
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 29
The Zeroconf protocol requires that Avahi be installed on Linux operating systems and Bonjour be installed on
Windows operating systems
Host Name
Enter an IP address that will not change in an uncontrolled way (such as a DHCP lease that expires) This address is
used by Agent services to communicate to the Management Server
Port
By default the port is set to 9051 which is reserved for ioSphere worldwide and should not conflict with any other
applications You may opt to change the port (to 443 for example) depending on your requirements
Use pre-configured SSL Certificate
A pre-configured certificate is provided but will result in untrusted certificate messages It is less secure than using a
certificate made specifically for your server that is signed by a trusted CA
Use my own custom SSL Certificate
Select this option to update your own Key Certificate and CA Chain
Remote Access Key
To manually configure an Agent to communicate with the Management Server you can download a remote access key
and install it on Agent machines This may be required in cases where Advertisement has been disabled (either by
configuration or due to lack of Zeroconf support) or the network has multiple Management Servers
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 30
Agents
There are two ways to grant access to Agents click on the box next the Agent name and then click the Grant Access
button or click the link to the right of each Agents name Once an Agent is authorized it gets its own username and
password in the database and has a full access key
Database
Here you can adjust the size of your history database by specifying how many days to include in the historical data
Click when you are doneSave Changes
By default ioSphere keeps the last 30 days of data This can be modified to store up to two years
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 31
Local Accounts
Here you can create and manage user accounts and user roles
Add User
To add a new user click the link Enter a unique username password and assign the users role which willAdd User
affect that users permissions
Edit User
To edit a user click on the username link
Delete User
To delete a user click on the link given in the Delete columnDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 32
Bulk Actions
Using the checkboxes next to each user you can select an action to apply to all the selected users ( orEnable Disable
)Delete
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 33
Change Role to
Using the checkboxes next to each user you can assign a role and grant that roles rights to all selected users
Changing Passwords
To change a users password click a username in the screen (located under the tab) ToLocal Accounts Settings
change your password while you are logged in click your user name in the upper right corner of the screen Either
action results in the dialog appearingEdit User
Click to change the users passwordChange Password
Resetting the Admin Password
If you change another users password you do not need to enter the old password and you must be an ioSphere
Admin However when you change the admins account password you must enter the old password
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 34
If you forget your admin password you can reset it by running at the command linefio-msrv -w
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 35
Identity Providers
Currently the ioSphere only supports LDAP identity providers
Add LDAP
Click this link to open the Add LDAP wizard where you can configure the connection LDAP User Mapping Role
test LDAP settings and add additional LDAP configurationsMapping
Edit LDAP
To edit an LDAP entry click on the linkProvider
Delete LDAP
To delete an LDAP entry click on the link next to the providerDelete
For more information about LDAP settings refer to Appendix A - Adding and Editing LDAP Providers
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 36
Rules
Here you can create edit and review rules that generate alerts
Add Rule
Click the link to open the dialog where you can create a custom filter that will fire an alertAdd Rule Add Alert
In the dialog click the button or (if you have one or more saved searches) the Add Alert Add search parameter Add
button When you add a saved search its parameters are automatically added to the new Alert Click theSaved Search
button to continue Click the plus sign next to the button to add additionalNext Step Add Search Parameter
parameters to the alert Click the button to continueNext Step
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 37
Add additional information about the alert here including and Alert Type Alert Name Alert Description Alert
You can also click the link to go back and add remove or change parameters Click the Status Edit Parameters Add
button to add the alert or the link to discard the alertAlert Cancel
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 38
Edit Rule
To edit custom rule entry click on the linkRule
Delete Rule
To delete a custom rule entry click on the link next to the Delete Rule
Only custom rules can be modified and deleted
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 39
SMTP Server
In order for the ioSphere to send alert emails you must first configure the SMTP server settings here Once you enter
in the correct parameters clicking the button will save and test the SMTP settingsSave Changes
Subscribers
The ioSphere Management Solution can send email alerts to standard or SMS email addresses After configuring the
SMTP server settings you can create subscribers and assign them to receive specific alerts
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 40
Add Subscriber
Click the link to open the dialog where you can enter a standard or SMS emailAdd Subscriber Add Subscriber
address and assign the subscriber to be notified when an alert is Set or Cleared
Edit Subscriber
To edit a subscriber click on the subscriber email address link
Delete Subscriber
To delete a subscriber click on the link next to the subscriberDelete
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 41
Email To SMS Most mobile carriers offer free Email To SMS gateways which can be used to forward simple
text emails to a mobile phones Check with your provider to determine your Email to SMS email address
Labels
Labels are used to organize your ioMemory Storage Devices into categories or groups Once a label is created on the
tab you can come here to rename it mark it as a favorite or delete itioMemory
Rename
To rename a label click on the name and type your changes
Favorite
To change the settings of a label click the star icon next to the label name A yellow star means it is aFavorite
favorite an empty start means it is not
Delete
To delete a label click on the link next to the nameDelete
Other Users Labels - While only an Admin can edit labels created by other users anyone can add another users
label to their favorites
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 42
Device Page
The page provides a way to monitor and configure devices controlled by a single Agent service There areDevice
several ways to navigate to the pageDevice
Click a hostname link from any table in ioSphere
Click an ioMemory link or Cache Instance name link from any table in ioSphere
When the displays information pertaining to the server running the Agent service appears in the upperDevice Page
left-hand corner A left sidebar lists each ioMemory device installed in that server and a tab panel on the right
monitors and lets you perform configuration tasks
The and tabs include the link in the lower right corner Click this link toConfigure Info FIO BUG REPORT
compile and download a bug report for the selected device when instructed to do so by Fusion-io Customer Support
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 43
Configure Tab
Here you can edit the following settings
Alias (Name by default the serial number is used)
LabelsChange Labels link
Status (AttachDetach)
The operation creates a link so the ioMemory Storage Device interacts with the operatingAttach Device
system In most cases the operating system driver automatically attaches the installed ioMemory Storage
Device(s) at boot time so you only need to use Attach Device when you manually detach an ioMemory Storage
Device (such as to perform a low-level format)
disconnects your ioMemory Storage Device from the operating system Once detached theDetach Device
device is not accessible to users or applications (You need to use Attach Device to make it accessible) You
should only need to detach an ioMemory Storage Device to perform a low-level format or a firmware upgrade
Swap Support (EnableDisable)
ioMemory Storage Devices can be used as swap space By enabling swap here you are enabling the device for
use as swap space This allows the driver to preallocate the memory needed for the device to be used as swap
When you select here the device is ready to be used as swap space but your operating system still needsEnable
to be configured to use the device as swap You will need to configure the system to use the device in that
manner Refer to in your Appendix F- Using Windows Page Files with the ioDrive ioDrive User Guide -
or in your for more informationWindows Using the ioDrive as Swap ioDrive User Guide - Linux
You must have 400MB of free RAM per 80GB of ioMemory Storage Device capacity (formatted to 4KB block
size) to enable an ioMemory Storage Device for use as swap Enabling swap without sufficient RAM will result in
the loss of user processes and system instability
Beacon (OnDisable)
The feature causes the selected ioMemory Storage Devices LEDs to blink making it easier to findBeacon
among several devices
You can also update firmware (see for more information) and perform a low-levelAppendix B - Software Updates
reformat
directCache
directCache is software that lets you use an ioMemory module as a cache in front of a different (slower) storage
volume called a backing store
The backing store can be any block storage device ranging from a single local hard drive within the server to a
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 44
redundant array of independent disks (RAID) an internet small computer system interface (iSCSI) client or even a
fibre channel (FC) attached logical unit number (LUN) on a storage area network (SAN)
directCache is good for you if you
need a large capacity of block-storage devices like hard disk drives (HDDs) at the speed of NAND-based flash
ndash in a cost-effective model
are looking for the highest-performance-per-dollar storage systems
have applications that can use solid state storage today to increase performance and reduce latency
have high-cost SAN implementations and are looking for ways to boost performance but reduce total cost of
ownership
have implemented high-cost storage SATA- or SAS-based drives but have not met latency or performance
needs
How ioSphere Uses directCache
There is much information regarding directCache on the tab There are also a few directCache features youConfigure
can activate from this screen The most obvious task you can perform is to add another cache by clicking on the Add
or link (if there are no existing cache instances the link says ) to the right of theCache Add Another Add Cache
directCache header A dialog opens over the tabConfigure
If your cache is controlled by cluster management software click the first checkbox
Backing Store list - This list shows all the storage devices that are able to be cached
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 45
Alias - This can be a short name that helps you remember this cache device
Handle - The handle is useful for identifying a cache instance when the paths (eg ) may be less easilydevfdc0arecognizable You can specify a memorable label for this cache instance resource though it is not required The handle
can include all alphanumeric characters except for or and must not begin or end with a space~` |character
Add Another - Click this if you want to add another cache device
When you are done adding cache devices click the buttonConfigure
The footer displays the progress of the creation of the new cache instance(s) you have addedConfig History
directCache Information
From the tab you can see the following directCache-related informationConfigure
Driver Version - the version number of the directCache software you have installed
Cache Alias - the alias you gave the cache when you created it Click the link to change the aliasChange
Handle - If you gave your cache a handle you can see it listed here
Status - This shows if your cache is enabled or disabled You can use the link to disable or enable your cache
Backing Store - displays the path of the storage device being cached To remove the cache (and restore the
backing store to its original non-cached state) click the link next to the pathRemove Backing Store
Backing Store Size - displays the size of the backing store device
Click on and you will see a list of other important directCache information such as More Information Read Sector
how many and of each and how many reads were rejected due to infrequent useand Requests Hits Misses
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 46
Live Tab
The tab lets you monitor important information for one or several ioMemory Storage Devices in real time The Live
tab displays when is selected when is selected and Live KIOPS ReadWrite Operations MBSecond Data
and Select or using the large button above the graphTemperature Reserve Space Data Operations
The tab also now displays information for Live PBW Endurance
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 47
Reports Tab (Device Page)
The tab shows from three or five history graphs for a single ioMemory Storage Device Reports Operations Data amp
and (the later two graphs are available only whenEndurance Temperature Cache Hit Requests Cache Latency
the device is being used as a cache) Enter start and end dates in the drop down menus above the graph to show data
for different dates
Operations Button
Click to display information about The selected button will be highlighted displaysOperations (IOPS) Operations
the average and hits as the amount of IOPS Read Write
Data amp Endurance Button
Data amp Endurance shows you the and hits in Bytes per secondAverage Read Write
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 48
Each ioMemory Storage Device has a PBW Rating (Petabytes Written Rating) The devices warranty is based on this
PBW Rating
When is selected the following message appears above the graph Future performance based onData amp Endurance
this date range suggests X PBW Usage Warranty will last for more than X years
If the date range selected is not an accurate representation of the anticipated future performance of the ioMemory
Storage Device you can modify the date range to include data that better represents future behavior and thereby
include a better prediction of the warranty expiration
Temperature
The data shows you how temperature changes over time (over days or throughout a day)
Cache Hit Requests
This charts the percent of read requests which were serviced from the cache
Cache Latency
The graph shows for and Cache Latency Read Hits Read Misses Read Average
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 49
Info Tab
The tab provides details about a single ioMemory Storage Device including recent alertsInfo
As shown in this closeup of the tab screen the tab also shows such as kind of boardInfo Info Adapter Information
(single or duo) the serial number and PCIe Bus voltage current power and bandwidth
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 50
The part of the page (not shown) is the same page you arrive at when you click the linkdirectCache More Details
in the tabConfigure
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 51
Appendix A - Adding and Editing LDAP ProvidersSome users create multiple LDAP configurations to coordinate with multiple directories deployed within their
organization This section describes how to add and edit LDAP providers
To begin go to Settings gt Identity Providers and click Add LDAP the Add LDAP dialog appears
Adding a new LDAP provider
Add LDAP dialog contains four sections Connection User Mapping Role Mapping and Test LDAP Settings Start
with the sectionConnection
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 52
Connection
Enter a name for the LDAP configuration in the field For example Corporate DirectoryName
Enter the hostname (DNS or IP address) and port for the primary LDAP server in the fields IfPrimary Server
multiple LDAP servers are used to access the directory you may enter a secondary hostname and port in the Backup
Mirror field
For security purposes it is recommended that you mark the Use SSL checkbox for your configured LDAP servers
Note The ioSphere Management Solution does not have a facility for importing the LDAP servers public key
Instead it automatically trusts the servers certificate when performing the SSL handshake
The default field is optional If your users andor groups are located below a common branch in yourBase DN
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 53
LDAP tree enter the DN for that branch here This field is only used in order to make it easier to configure the user
mapping and role mappings later
The timeout used for making server connections and for searching is specified in the fieldTimeout
The ioSphere Management Solution will always use the smaller of the timeout you specify and 20 seconds This
prevents the web application from encountering connection timeout problems
Oftentimes LDAP directories are configured to dis-allow anonymous searching In other words one may need to be
authenticated in order to search the LDAP directory If this is the case mark the checkboxAuthentication Required
and enter the DN and Password for the identity which will be used to perform searches in the LDAP directory
Best security practices call for a least privileged user to be created in the LDAP directory and used for this
purpose This user is granted just enough rights to perform LDAP search operations in the portion(s) of the tree
where users and groups reside
The Auth DN and Password are securely stored in the ioSphere Management Solution but if the Use SSL
checkbox is not marked then these credentials may be seen by others with the use of a network traffic sniffer
Click the button to ensure that your configuration steps thus far are correct The test willTest Connection
Connect to the LDAP Server(s) specified
Perform a StartTLS operation (if the server(s) have the Use SSL checkbox marked)
Perform an LDAP Bind with the Auth DN and Password if one is specified
Any errors encountered are displayed at the top of the dialog
When finished click to enter the sectionNext Step User Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 54
User Mapping
A primary function of the LDAP Provider is to take a username (like jdoe) and password and verify that the username
maps to an entry in the LDAP server and that the users LDAP entry along with their password can be used to
authenticate to the LDAP directory
The IoSphere Management Solution gives you two ways to map usernames to LDAP entries an easy DN Builder
(essentially a DN template) and a traditional search-based mapping configuration
DN Builder
In some LDAP deployments all users reside in a single flat container (like ) andOU=peopleDC=exampleDC=comall users are named with a common naming attribute (like UID) In this case it is much easier to use the DN Builder to
configure the User Mapping In order to map a username like jdoe to an LDAP entry like
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 55
type into the templates left field and UID=jdoeOU=peopleDC=exampleDC=com UID into the rightOU=peopleDC=exampleDC=com
You will notice that an example DN is shown below the Template fields in the form of
This shows you what the resulting username map will beUID=$usernameOU=peopleDC=exampleDC=com(where the string will be replaced with the username entered when a user attempts to login$username
Search
The traditional method of mapping a username to an LDAP entry is to search for the username as a unique value of
the entry which represents that user For example ActiveDirectory deployments often populate an attribute called
with the username Other directory deployments may populate the attribute with thesAMAccountName UIDusername
Enter the DN of the tree branch that is hierarchically above your user entries (for example
) If you previously entered a Default Base DN you may simply pick that fromOU=peopleDC=exampleDC=comthe drop-down list if you wish
For the search filter you can add one or more attributes to the field and a search filter will beSearch Attribute(s)
automatically created for you For example if your user entries have a attribute which holds their uniqueUIDusername typing into the field will produce a standard LDAP search filter of UID Search Attribute(s)
(UID=$username)
If you need a specialized search filter you may hand-edit it in the Search Filter field (use the radio buttons to toggle
between entering attributes and editing the search filter)
The special token is replaced with the name the user is attempting to log in with when the$usernameioSphere Management Solution performs the authentication
The should normally be set to Subtree It may be set to One Level if the users are all in a single containerScope
Click to proceed to the sectionNext Step Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 56
Role Mapping
The and sections configured the way a username is mapped to an LDAP entry The Connection User Mapping Role
section configures the ways in which users are granted rolesMapping
Role Mapping Rules are used to place a user into one or more roles in the ioSphere Management Solution User
Device Admin or Server Admin (Refer to the Roles section for an explanation of these roles)
Each role mapping is essentially an LDAP search specification along with a Role When the search specification is true
(returns one or more entries) for a user then that user is granted the Role
Click to create a new role mappingAdd Role Mapping
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 57
Enter a name for this mapping in the field This lets you identify the role mapping later if you decide to edit itName
For example Administrators
Enter a DN in the field This could be the DN of some container or a specific DN (like that of aSearch Base DN
group - ie The special value may be used hereCN=administratorsOU=groupsDC=exampleDC=com $dnto set the search base DN to the users LDAP entry This is useful when creating a role mapping based of the users
attributes (such as memberOf)
Enter an LDAP search filter in the field The search filter may contain the special values Search Filter $username(which is replaced by the name the user logged in with) or (which is replaced by the DN of the logged-in users$dnLDAP entry) For example a search filter of will match true for entries where there is a (member=$dn) memberattribute which is has the logged-in users DN as a value (common in group entries)
Set the appropriately If the Search Base DN names a specific entry in the LDAP tree the scope should be BaseScope
level otherwise it should be either Subtree or One level
Choose the to be granted to users meeting the search criteria (for example if the search criteria matches true forRole
users who are listed in and LDAP group entry full of administrators set the role to Server Admin)
Click to finish the Role Mapping sectionAdd Role Mapping
Continue to the sectionTest LDAP Settings
Example Role Mappings
Here are some examples of role mappings that might be configured for different LDAP directory deployments
Members of the Administrator group are in role Server Admin
Set the Search Base DN field to the Administrators group entry For example
CN=administratorsOU=groupsDC=exampleDC=com
Set the Search Filter (typical for AD) or (typical for(member=$dn) (uniqueMember=$dn)non-AD) If youre unsure which attribute holds the members of the group you can use the search filter
(|(member=$dn)(uniqueMember=$dn))
Set the Scope to Base level
Set the Role to Server Admin
Members of the Administrator group are in role Server Admin (alternate AD config)
Sometimes in Active Directory and some other LDAP deployments a user is given group membership by placing an
attribute on the users entry (like memberOf) This role mapping will grant the same role as above for these cases
Set the Search Base DN field to the users entry $dn
Set the Search Filter (memberOf=CN=administratorsOU=groupsDC=exampleDC=com)
Set the Scope to Base level
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 58
Set the Role to Server Admin
Users who have the title of manager are in the Device Admin role
In this scenario we use an attribute called on the users object to determine whether they are in the DevicetitleAdmin role
Set the Search Base DN field to the users entry $dn
Set the Search Filter (title=manager)
Set the Scope to Base level
Set the Role to Device Admin
Click to test your settingsNext Step
Grant a specific user the Server Admin role
You may find situations where a specific user is not in a group but needs to be in a role This can be done by creating
search criteria which matches true only for that user
Set the Search Base DN field to the users entry $dn
Set the Search Filter (sAMAccountName=jdoe)
Set the Scope to Base level
Set the Role to Server Admin
Grant the User role to everyone who is able to authenticate
If you want everyone who is able to log in to have at least the User role you can do this
Set the Search Base DN field to the users entry $dn
Set the Search Filter (objectclass=)
Set the Scope to Base level
Set the Role to User
Test LDAP Settings
This section lets you test your connection user mapping and role mappings configuration
Type the name of a user into the User field (like jdoe) and click Test
The results of the test will print out in a step-by-step manner Each step will also contain timing information This may
be helpful in fine-tuning your user mapping and role mappings
Ideally you will see results that look like this
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 59
setup 0 seconds
Connection succeeded Endpoint ldapsldapexamplecom389bind 0 secondsUsing search to resolve user Base ou=peopledc=exampledc=com Scopesubtree Filter (samaccountname=jdoe)resolve 0 secondsResolved jdoe to CN=John DoeOU=PeopleDC=exampleDC=comtotal resolve time 0 secondsAttempting role map base $dn filter (objectclass=) scope 0 totest user jdoe for role(s) (Server Admin Device Admin User) $username= jdoe $dn = CN=John DoeOU=PeopleDC=exampleDC=comresolve roles 0 secondsFound match with role map base $dn filter (objectclass=) scope 0In role(s) (User)total resolve and role calculation time 0 seconds
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 60
1
2
1
2
3
4
Appendix B - Software UpdatesUpdating ioMemory Storage Devices involves two procedures updating the ioMemory VSL (driver) on the host
machine and updating the firmware on the ioMemory Storage Device
To update the ioMemory VSL on the host machine
Get the latest ioMemory VSL files and documentation from httpsupporttsfujitsucom
Follow the instructions in the ioDrive User Guide to install the ioMemory VSL on the host machine
When you install the ioMemory VSL the firmware is copied to the host machine (but not installed)
To install the firmware to the ioMemory Storage Devices
Open the ioSphere Management Solution
If you are using ioSphere click the Overview tab and click the devices have updates available link x
Click the button The dialog appears Update Firmware Update Firmware
Click the button to begin updating The Config History bar appears at the bottom of theUpdate Firmware
screen Refer to the section below for more informationConfig History - ioSphere
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide | _____________________________________ ___ ___ 61
Config History - ioSphere
Click the link to see a list of devices being updated Click the link to see a list of devices thatPROCESSING Skipped
were selected but are not being updated Each devices progress is shown in the sidebar
When the firmware update process is complete the Config History bar shows how many ioMemory Storage Devices
were updated how many failed and how many devices were skipped or require reboot Click on the SKIPPED
FAILED or REQUIRES REBOOT link to see a list of those devices
Click the arrow at the left end of the Config History bar to expand the bar and see previous updates
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml
ioSphere Software User Guide| ____________ ___ ___ 93
Fusion Powered SupportWe offer ioDrive Customer Support by phone e-mail and on the Web
Please use the contact form athttpsupporttsfujitsucomcontact For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupport Telephone Support
For customer support phone numbers please refer to the Fujitsu TechnologySolutions service desk at httptsfujitsucomsupportservicedeskhtml For the Japanese market please use the following URL httpprimeserverfujitsucomprimergysupportsupportdeskhtml
Web
It is recommended to use the latest firmware driver BIOS versions on servers and components Software packages are available for download at httpsupporttsfujitsucom gt Server gt Drivers amp Downloads For the Japanese market please use the following URL httpprimeserverfujitsucomprimergydownloads Corresponding user documentation for servers and optional components can be found online athttpmanualstsfujitsucom gt Industry Standard Servers gt Expansion Cards gt PCIe SSD Cardsor on the ServerView Suite Documentation DVD For the Japanese market please use the following URL httpprimeserverfujitsucomprimergymanualhtml