HP-UX 11i v2 administration for experienced HP-UX 11.00 and 11i v1 system administrators

Course overview

This experienced HP-UX administrators course explores the major features of HP-UX 11i v2 and HP Integrity servers. Create a backup boot disk with HP’s new Dynamic Root Disk product. Learn how to monitor kernel resources and set kernel resource alarms using the new kernel configuration toolkit. Explore the new Integrity EFI boot manager and shell. Learn how to secure your system with Standard Mode Security Extensions. Get ready to move to HP-UX 11i v2!

Prerequisites

• HP-UX System and Network Administration I & II (H3064S & H3065S) or
• HP-UX System and Network Administration for Experienced UNIX System Administrators (H5875S) or
• Equivalent HP-UX 11i v1 administration experience

Audience

• Experienced HP-UX 11i v1 system administrators responsible for installing, updating, and configuring HP-UX 11i v2 on HP Integrity or PA-RISC platforms
• Experienced HP-UX administrators moving from PA-RISC servers to HP Integrity servers

Ways to save

Course Objectives

At the conclusion of this course you should be able to:

• Describe the major features and components of HP Integrity servers
• View, add, and replace interface cards using pdweb, ioscan, and olrad
• Manage the Integrity boot process via the EFI interface
• Mirror and recover Integrity LVM boot disks
• Cold install or update HP-UX 11i v2 via Ignite-UX or update-ux
• Configure and manage the System Management Homepage
• Configure and use Dynamic Root Disks
• Configure and manage the 11i v2 kernel
• Configure SMSE user security and auditing
• Configure Role-Base Access Control (RBAC)

Benefits to you

• Experienced HP-UX System Administrators learn how to manage HP-UX v2 servers
• Develop the knowledge and skills to implement HP-UX 11i v2 features you select for your data center to enhance server management, software security, and networking capabilities
• This course will help you prepare to take the HP-UX Certified System Administrator exam (HP0-095)

Next steps

• Become an HP-UX Certified System Administrator (CSA) by successfully completing the HP0-095 HP-UX CSA certification exam
• HP-UX Logical Volume Manager (H6285S) or HP-UX VERITAS Volume Manager (HB505S), HP-UX 11i v3 for Experienced HP-UX System Administrators (HE776S), HP Partition Management (U5075S)

Course outline

Hardware overview

• HP processor and system types
• Entry class server overview
• zx1, zx2 chipset architecture
• rx1620, rx2620, rx2660, rx3600, rx4640, and rx6600 servers
• Blade server overview
• BL60p and BL860c servers
• Mid-range and high-end servers
• nPar overview
• vPar, VM, and secure resource partition overview
• sx1000, sx2000 chipset overview
• rx7620, rx7640, rx8620, rx8640 Superdome servers
• Viewing your model string via model
• Viewing CPU, memory, cache, and firmware information via machinfo
• Viewing

Device addressing and management

• HP-UX and EFI hardware addressing
• Slot and device file addressing
• Correlating hardware addresses
• OL* concepts and compatibility
• OL* critical resource analysis concepts
• OL* impacts and interfaces
• Using the olrad command line interface
• Using the pdweb TUI and web interfaces
• Viewing, managing, and installing interface cards with pdweb
• Viewing the pdweb I/O tree
• Managing and installing devices with pdweb

Booting HP-UX 11i v2 via the EFI

• Integrity firmware architecture
• Processor and system abstraction layers
• EFI OS loader
• Integrity boot disk, system partition, OS partition, and HP service partition structures
• PA-RISC and EFI boot process comparison
• Initiating an Integrity system boot
• Choosing boot, arbitrary boot, or console devices
• Viewing system information and EFI devices via the EFI and HP-UX
• Managing the EFI boot menu and EFI file systems via the EFI and HP-UX
• Booting from an alternate disk, install DVD, Ignite-UX server, make_tape_recovery tape, HPSP, or diagnostics CD

Mirroring integrity LVM boot disks

• Integrity LVM boot disk structure
• Mirroring an Integrity LVM boot disk
• Configuring and rebuilding the partition table, system, OS, and HPSP partitions, and EFI boot manager menu
• Booting from the mirror
• Replacing a failed Integrity boot disk mirror

Installing and Updating HP-UX 11i v2

• Preparing for and initiating an install or update
• Checking hardware and file system requirements
• Choosing network parameters, an operating environment, and an install-time security bundle
• Backing up the system
• Initiating an Integrity or PA-RISC install or update
• Navigating the Ignite-UX menus
• Cleaning up after an install or update
• Performing post-install/update configuration
• Verifying and automating installs and updates
• Creating an SD-UX update or Ignite-UX install server

Minimizing Downtime with Dynamic Root Disk (DRD)

• DRD concepts
• DRD benefit: minimizing unplanned and planned downtime
• Installing DRD
• Using the drd command
• Creating and updating a clone
• Accessing inactive images via DRD-safe commands and other commands
• Activating an inactive image

Configuring and Using the System Management Homepage (SMH)

• SMH overview
• Accessing the SMH via autostart and start-on-boot
• Verifying the SMH certificate
• Logging into the SMH
• Viewing SMH system status and operating system information
• Launching SMH tools and tasks
• Configuring SMH settings and viewing SMH logs
• Configuring SMH group access control and authentication
• SMH and SIM integration possibilities

Configuring the HP-UX 11i v2 Kernel

• 11i v2 kernel configuration concepts
• Using the kc* CLI
• Using the kcweb TUI and SMH/GUI interfaces
• Managing kernel configurations and modules
• Special kernel configurations
• Kernel module states and changes
• Viewing and managing module states with kcmodule
• Kernel module tunable parameters
• Types of tunables
• Viewing and managing tunables with kctune
• Kernel resource monitoring concepts
• Monitoring resource usage via kcusage
• Kernel resource alarm concepts
• Viewing and setting resource alarms with kcalarm
• Troubleshooting kernel problems
• Viewing the kernel change log with kclog
• Booting from an alternate kernel
• Booting to tunable maintenance mode
• Kernel recovery roadmap

Configuring Standard Mode Security Extensions (SMSE)

• Standard mode security extensions
• SMSE attributes and repositories
• Configuring /etc/security.dsc and /etc/default/security
• Configuring /etc/passwd and /etc/shadow
• Configuring /var/adm/userdb/
• Managing attributes with secweb
• Enforcing security policies

Configuring SMSE auditing

• Comparing trusted system vs. SMSE auditing
• Installing, enabling, and disabling SMSE auditing
• Auditing events and system calls
• Auditing users
• Viewing and managing audit logs
• Managing the audit monitoring daemon
• Understanding audomon log messages

Configuring Role-Based Access Control (RBAC)

• RBAC features and benefits
• Installing RBAC
• Configuring and assigning RBAC roles and authorizations
• Configuring RBAC commands and file privileges
• Verifying the RBAC database
• Configuring RBAC auditing
• Running commands with privrun
• Editing files with privedit
• Fine grained privileges overview
• Security compartments overview