Logging In to the DeviceManager

Prerequisite

Ensure that the temporary maintenance terminal used for initial configuration has been connected to the management network ports of the storage device, and the IP address of the maintenance terminal and the default IP addresses of the management network ports are on the same network segment.

Verify that the maintenance terminal meets the following requirements before you use the DeviceManager software:

• Operating system and browser versions of the maintenance terminal.

  DeviceManager supports multiple operating systems and browsers. For details, access OceanStor Interoperability Navigator to query.

• The maintenance terminal communicates with the storage system properly.
• The super administrator can log in to the storage system using the Local user authentication mode only.
• To use a Lightweight Directory Access Protocol (LDAP) domain user account to log in to the DeviceManager, you must configure the LDAP server first, then set the LDAP server parameters and create an LDAP user account on the DeviceManager.
• By default, DeviceManager allows 32 users to log in concurrently.

Context

• DeviceManager only supports TLS protocols (including TLS 1.0, TLS 1.1, and TLS 1.2).

The super administrator can run change devicemanager tls min_version=? to change the earliest version of TLS supported by DeviceManager. Then, the super administrator must run reboot storage service service_name=devicemanager to restart DeviceManager for the change to take effect.

• For a 2 U controller enclosure, the default IP addresses of the management network ports on controllers A and B are respectively 192.168.128.101 and 192.168.128.102, and the default subnet mask is 255.255.0.0.
• This document uses the Windows operating system as an example to explain how to log in to the DeviceManager. The login operations on other operating systems need to be adjusted accordingly.
• If a user does not perform any operations after logging in to the system for a period longer than the timeout limit (the limit is 30 minutes by default and modifiable), the system logs out automatically.
• If an account is not used to log in to the system for a certain period of time (the period is 60 days by default and modifiable), it will be locked and can only be unlocked by the super administrator.

Procedure

1. Run Internet Explorer on the maintenance terminal.
2. In the address box, type https://XXX.XXX.XXX.XXX:8088 and press Enter.
   • XXX.XXX.XXX.XXX represents the management network port IP address of the storage system.
   • In an environment with the firewall function, when the system externally provides web services, you need to enable port 8088.
   • Your web browser may display a message indicating that the website has a security certificate error. If the IP address is correct, you can neglect the prompt and continue to access the storage system. If you want to fix this error, you can have the certificate request file signed by a third-party CA center or by your own CA certificates. For details about the method using your own CA certificates, see How Can I Use Self-Signed Certificates to Fix the Privacy Error Displayed When I Attempt to Log In to DeviceManager?
   • If you have a usable security certificate, you are advised to use corresponding commands to import the certificate to improve system security. For details about the corresponding commands, see OceanStor 2800 V3 V300R006 Command Reference.

3. (Optional) Set the authentication mode and language.
   1. Click Advanced.
   2. From the Authentication mode list, select the authentication mode.
      • Local user: You will log in to the storage system in local authentication mode.

      The super administrator can log in to the storage system using the Local user authentication mode only.

      • LDAP user: You will log in to the storage system in LDAP domain authentication mode.

        You can log in to the storage system in LDAP domain authentication mode only after the LDAP server is properly configured.

   3. Choose a language from the Language list.

   DeviceManager supports two languages: simplified Chinese and English.

4. Type your user name and password in Username and Password respectively.
   • If you enter wrong passwords for consecutive two times, you need to enter the verification code. In Verification Code, enter the correct verification code.
   • If LDAP user is selected, the username and password must be a domain username and password. For V300R006C50 and later versions, Domain Name is also required.
     • For a domain user of domain authentication server 0, the user can log in to DeviceManager of a storage system typing domain or a combination of the dc field in the domain authentication server's base DN in Domain Name.
     • For a domain user of domain authentication server 1, 2, or 3, the user can log in to DeviceManager of a storage system only typing a combination of the dc field in the domain authentication server's base DN in Domain Name.
     1. If the base DN of the domain authentication server contains only one dc field, the dc field is used as the combination of the dc field in the domain authentication server's base DN.

        For example, if the base DN of the domain authentication server is ou=applications,dc=bigcorp, bigcorp is the combination of the dc field in the domain authentication server's base DN.

     2. If the base DN of the domain authentication server contains multiple dc fields, they are combined and then separated by a period (.) to serve as the combination of the dc field in the domain authentication server's base DN.

        For example, if the base DN of the domain authentication server is ou=applications,dc=bigcorp,dc=com, bigcorp.com is the combination of the dc field in the domain authentication server's base DN.

   • If you want to log in as the super administrator, the default user name and password are admin and Admin@storage respectively.
   • If you forget the password as an administrator or a read-only user, contact the super administrator to run change user to reset the password. If you forget the password as a super administrator (admin by default), contact root administrator _super_admin to log in to the CLI through a serial port and run initpasswd to reset the password. For details, see "Resetting the Password of an Administrator or a Read-Only User" or "Resetting the Password of a Super Administrator" in the OceanStor 2800 V3 V300R006 Administrator Guide.
   • If you enter incorrect passwords a specified number of times (equal to the value specified in Number of Incorrect Passwords on the Login Policy page), the account is automatically locked for the period of lock time.
     • For V300R006C30 and earlier versions, the super administrator and other accounts will be locked for 15 minutes by default.
     • For V300R006C50 and later versions, the super administrator and other accounts will be locked for 5 minutes by default.

     For details on setting the lock period, see "Configuring a Security Policy for System User" in the OceanStor 2800 V3 V300R006 Administrator Guide.

   • You are advised to change the default login password immediately after you log in to the storage system for the first time and periodically change your login password since then. This reduces password leakage risks. For details about how to change password, see "Changing Password" in the OceanStor 2800 V3 V300R006 Administrator Guide.

5. Click Log In.

   The DeviceManager main window is displayed.

   • To log out of the DeviceManager, click in the upper right corner.
   • To view online help, click in the upper right corner. The online help provides details about each step and operation.

   Figure 10-3 shows the main window of the DeviceManager.

   Figure 10-3 Main window of the DeviceManager
   

   Table 10-2 describes DeviceManager components.

   Table 10-2 DeviceManager components

   No.	Name	Function
   1	Function pane	Displays the graphical user interfaces (GUIs) for completing a specific activity on the DeviceManager. Basic Information: You can check the basic device information such as the device SN and version. Alarms: You can check all current alarms in the system. System Capacity Trend: You can check the current free capacity and used capacity. Performance: You can check the performance trend of controllers.
   2	Status bar	Shows the name and login time of the currently logged-in user.
   3	Navigation bar	Lists available logical functional modules of the storage device.
   4	Logout, help, and language area	The logout, help, and language area shows the logout, help, and language buttons. NOTE: DeviceManager supports two languages: simplified Chinese and English.
   5	Fault statistics pane	Displays different severities of device alarms, which can be checked by users to learn about the running status of the storage device.

Prerequisite

A Wi-Fi network that is connected to the storage system's management network is available onsite.

Context

• DeviceManager only supports TLS protocols (including TLS 1.0, TLS 1.1, and TLS 1.2).
• Customers can use a tablet to log in to the storage system through their wireless routers. You can use iPad Air (Safari) and HUAWEI MediaPad 10 FHD (Chrome) to log in to the storage system. This section uses iPad as an example to describe how to log in to the DeviceManager. The login operations on other operating systems are similar.
• For a 2 U controller enclosure, the default IP addresses of the management network ports on controllers A and B are respectively 192.168.128.101 and 192.168.128.102, and the default subnet mask is 255.255.0.0.
• The default user name and password of the super administrator are admin and Admin@storage.
• By default, DeviceManager allows 32 users to log in concurrently.
• If a user does not perform any operations after logging in to the system for a period longer than the timeout limit (the limit is 30 minutes by default and modifiable), the system logs out automatically.
• If an account is not used to log in to the system for a certain period of time (the period is 60 days by default and modifiable), it will be locked and can only be unlocked by the super administrator.

Procedure

1. Connect the iPad to the Wi-Fi network.
   1. On the iPad desktop, choose Settings > WLAN.

      The system goes to the WLAN page.

   2. In the CHOOSE A NETWORK area, choose the Wi-Fi network.

      The Enter Password page is displayed.

   3. In the Password text box, enter the password.
   4. Click Join.

      The iPad is connected the Wi-Fi network.

2. Log in to the DeviceManager.
   1. On the iPad desktop, click Safari.
   2. Set Address to https://xxx.xxx.xxx.xxx:8088/ismpad/login.html and click Go.xxx.xxx.xxx.xxx is the IP address of management port on the storage system.

      The DeviceManager login page is displayed.

   3. (Optional) Select a language from the Language check box.
      • XXX.XXX.XXX.XXX represents the management network port IP address of the storage system.
      • In an environment with the firewall function, when the system externally provides web services, you need to enable port 8088.
      • Your web browser may display a message indicating that the website has a security certificate error. If the IP address is correct, you can neglect the prompt and continue to access the storage system.
      • If you have a usable security certificate, you are advised to use corresponding commands to import the certificate to improve system security. For details about the corresponding commands, see OceanStor 2800 V3 V300R006 Command Reference.
   4. In User Name and Password, enter the user name and password.
      • The default user name and password are admin and Admin@storage.
      • If a verification code is required, enter the correct verification code.
      • If you forget the password as an administrator or a read-only user, contact the super administrator to run change user to reset the password. If you forget the password as a super administrator (admin by default), contact root administrator _super_admin to log in to the CLI through a serial port and run initpasswd to reset the password. For details, see "Resetting the Password of an Administrator or a Read-Only User" or "Resetting the Password of a Super Administrator" in the OceanStor 2800 V3 V300R006 Administrator Guide.
      • Change the default login password immediately after you log in to the storage system for the first time. Periodically change your login password. For details about how to change password, see "Changing Password" in the OceanStor 2800 V3 V300R006 Administrator Guide.
   5. Click Login.

      The system enters the management page, where you can check the alarms, performance statistics, and the basic information of the storage system.