Applies To:

Show Versions Show Versions

Release Note: Enterprise Manager version 1.2.0
Release Note

Original Publication Date: 03/01/2007

Summary:

This release note documents the 1.2 version feature release of the Enterprise Manager. To review the features introduced in this release, see New features and fixes in this release.

For information about installing the software, please refer to Installing the software.

Contents:

- User documentation for this release
- Supported browsers
- Supported platforms
- Managed device compatibility
- Installing the software
     - Setting up a new system
     - Upgrading an existing system
- New features and fixes in this release
     - New features
     - Fixes in this release
- Known issues
- Workarounds for known issues


User documentation for this release

In addition to these release notes, the following user documentation is available for this release.

You can find the user guides and the solutions database on the AskF5 Technical Support web site, http://login.f5.com.


Supported browsers

The supported browsers for the Enterprise Manager web interface are:

  • Microsoft® Internet Explorer®, version 6.x.
  • Netscape Navigator®, version 7.1 and later, and other browsers built on the same engine, such as Mozilla™, Firefox™, and Camino™.
[ Top ]

Supported platforms

The 1.2 release applies only to the supported platforms listed below; each one provides all minimum system requirements. This release supports the following platforms:

  • Enterprise Manager 500
  • Enterprise Manager 3000
[ Top ]

Managed device compatibility

Enterprise Manager version 1.2 can manage devices running the BIG-IP 9.1.1 or later software version. Additionally, Enterprise Manager can manage all Enterprise Manager devices.

Although Enterprise Manager works with several versions of BIG-IP software, certain features require that managed devices are running software later than the 9.1.1 minimum. The tables on the following pages outline the features supported by the managed device. Many new features introduced in Enterprise Manager version 1.2 are not supported by existing BIG-IP software. The upcoming BIG-IP version 9.4 software will support many Enterprise Manager features such as copying user access settings, and saving and deploying device configurations.

The tables in this section indicate which managed devices are compatible with certain Enterprise Manager features. Devices that support the corresponding feature are denoted with an X in each table.

User Management Feature Enterprise Manager v1.0 Enterprise Manager v1.2 BIG-IP v9.1.1 BIG-IP v9.2.3 BIG-IP v9.4
View all user account names in the network
X
X
X
X
X
View all user web roles in the network
X
X
X
X
X
View all user shell roles in the network
X
X
X
X
X


Device User Properties Feature Enterprise Manager v1.0 Enterprise Manager v1.2 BIG-IP v9.1.1 BIG-IP v9.2.3 BIG-IP v9.4
Open user and user access configuration settings for a device using the Launch Pad screen
X
X
X
X
X
Single sign-on to managed devices from Launch Pad screen
-
X
-
-
X
View Authentication properties for user accounts on a device
-
X
-
-
X
View Shell Access properties for user accounts on a device
-
X
-
-
X


Changeset Feature Enterprise Manager v1.0 Enterprise Manager v1.2 BIG-IP v9.1.1 BIG-IP v9.2.3 BIG-IP v9.4
Create changeset source
-
X
-
-
X
Verify changeset data
-
X
-
-
X
Deploy changeset data
-
X
-
-
X


Task-based Feature Enterprise Manager v1.0 Enterprise Manager v1.2 BIG-IP v9.1.1 BIG-IP v9.2.3 BIG-IP v9.4
Install Software Image
X
X
X
X
X
Install Software Hotfix
X
X
X
X
X
Copy User Access Configuration
-
X
-
-
X
Deploy Device Configuration
-
X
-
-
X
Change User Password
X
X
X
X
X

See the Enterprise Manager Administrator Guide available at http://tech.f5.com for more information about each of these features.

[ Top ]

Installing the software

If you are using a new Enterprise Manager system, the current software is loaded and configured. See Setting up a new system to get started using Enterprise Manager. If you are upgrading an existing Enterprise Manager system, see Upgrading an existing system for instructions on how to download and install Enterprise Manager version 1.2.

Setting up a new system

The Enterprise Manager version 1.2 was shipped to you installed on the Enterprise Manager 500 or Enterprise Manager 3000 platform. You only need to set up the system in your network, license the system, and connect it to one or more devices that you want to manage.

The Enterprise Manager Quick Start Instructions, which is included with the hardware platform, provides basic instructions for a quick set up and initial configuration of the Enterprise Manager system.

For a more detailed explanation of networking options and setup instructions, see chapter 2, Installation and Setup, and chapter 3, Licensing and Configuring the System in the Enterprise Manager Administrator Guide available at http://tech.f5.com.

Important: After you complete the licensing process, you must reboot the Enterprise Manager system in order for the user interface to function properly.

Upgrading an existing system

If you have an existing Enterprise Manager system, you can use the F5 Electronic Software Distribution site to download a new software image. Then, you can use the Enterprise Manager software upgrade wizard to upgrade your Enterprise Manager system. You can upgrade Enterprise Manager version 1.0 to version 1.2.

To download the upgrade

To download the software upgrade, you must create an account at http://downloads.f5.com. This site uses an F5 single sign-on account for technical support and downloads. After you create an account, you can log on and download the Enterprise Manager 1.2 software.

  1. Using a web browser connected to the internet, visit http://downloads.f5.com.
    The F5 Sign-on screen opens.

  2. In the User Email box, type the email address associated with your F5 technical support account.

  3. In the Password box, type the password.

  4. Click the Login button.
    The Overview screen opens and provides notes about using the Downloads site.

  5. Click the Find a Download button.
    The Product Lines screen opens listing all F5 product families.

  6. Locate the Enterprise Manager product family and click the adjacent Enterprise Manager v1.x link.
    The Product Version screen opens, listing the available download containers for the current product version.

  7. Click the release link for version 1.2.
    The End User License Agreement screen opens.

  8. Read the license agreement, and click I Accept to agree to the terms of the agreement.
    The Select a Download screen opens.

  9. Click the EM-1.2.0.228.3.md5 link to begin downloading the md5 checksum to your local system.
    The Select Download Method screen opens.

  10. Click an option depending on the method you want to use to download the file.

  11. Click the back button on the browser to return to the Select a Download screen.

  12. Click the EM-1.2.0.228.3.iso link to begin downloading the software image to your local system.
    The Select Download Method screen opens.

  13. Click an option depending on the method you want to use to download the file.

To install the upgrade

  1. Using a web browser connected to the same network as the Enterprise Manager system, visit https://<em_address>, where <em_address> is the IP address that you use to log onto the Enterprise Manager web interface.

  2. Sign on to Enterprise Manager as an administrator-level user.

  3. On the navigation pane, expand Enterprise Manager and click Software Images.
    The Software Images screen opens.

  4. Click the Import button.
    The New Image screen opens.

  5. For the File Name setting, click Browse.
    A dialog box opens.

  6. Using the dialog box, browse to the location where you downloaded the EM-1.2.0.228.3.iso file in step 12 of the previous section.

  7. Using the dialog box, click the EM-1.2.0.228.3.iso file name to select it, then click Open.
    The dialog box closes, and a path name appears in the File Name box.

  8. Click Import.
    The Import Progress box indicates the progress toward completing the software import.

  9. When the software import task finishes, click Finished.
    The Software Images screen opens.

  10. In the software image list, click EM v1.2.
    The general properties screen opens, displaying details about the software image.

  11. Click Install to start the Software Installation Wizard.

For further instructions on using the Software Installation Wizard, see Chapter 7, Managing Software Images in the Enterprise Manager Administrator Guide available at http://tech.f5.com.

[ Top ]

New features and fixes in this release

This release includes the following new features and fixes.

New features

Device Configuration Management
With the version 1.2 release, you can use Enterprise Manager to manage a comprehensive set of device configuration data. Using Enterprise Manager, you can deploy device configurations (including network objects and system settings) from one device to one or more other managed devices in the network.

User Account Management
You can view a user's access to devices across the network, and you can globally change a user's password on multiple devices. Additionally, you can copy user accounts, shell access settings, or authentication settings from one managed device to other managed devices.

Enhanced rotating archive options
We updated and improved the rotating archive feature so that you can now create more than one schedule per UCS archive, increasing the flexibility of rotating archives.

Fixes in this release

This release includes the following fixes.

EM Maintenance Task message in the task list when a managed device reboots (CR55042)
When a software upgrade task completes, a managed device reboots. On the task details screen for the upgrade task, Enterprise Manager correctly indicates that a device is rebooting. Previously, a device reboot resulted in an EM Maintenance Task message appearing in the task list. This message no longer appears in the task list when a device reboots.

Certificate expiration dates affected by time zone discrepancies (CR55157)
Previously, the certificate expiration dates reported on certificate list screens might have been inaccurate, due to complexities in time related calculations involving daylight saving time. Daylight saving time no longer affects time zone calculations when checking certificate expiration dates.

BIOS warning message no longer appears during startup (CR57741)
Previously, a benign BIOS warning message Award Preboot Agent Installation Failed appeared when you initially powered up the system. We corrected the BIOS so that this message no longer appears.

Command line upgrade of Enterprise Manager causes errors (CR69416)
We updated the Enterprise Manager release image to EM-1.2.0.228.3.iso. The new release fixes an issue where the upgraded version 1.2 system could not use the UCS file from the version 1.0 system. This error caused the upgrade to fail. If you want to upgrade an Enterprise Manager system to version 1.2, ensure that you download the latest version from http://downloads.f5.com. If you have already upgraded to version 1.2, you do not need to download the new image. The latest build (Build 228.3) fixes only this specific upgrade issue.

[ Top ]

Known issues

The following items are known issues in the current release.

Hourglass cursor does not always appear when system is busy (CR55043, CR64461)
Usually, the cursor on the web interface changes to an hourglass to indicate that the system is busy. This may not always occur on certain screens. See the status banner at the top of the screen to determine the state of system activity.

Progress indicator for software image imports may be inaccurate (CR59085)
When the system is importing a software image, the progress bar may continue to indicate 0% progress. If this occurs, you must cancel the process and re-import the software image.

Downgrading managed device may prevent browser access to the device through Enterprise Manager (CR60512)
If you use Enterprise Manager to install an earlier software version on a managed device, and then attempt to open that device's Configuration utility using the Launch link on the device properties screen, the web browser cannot connect to the device.

Managing externally authenticated devices requires additional steps (CR62513)
If managed devices in your network use an external authentication protocol (RADIUS, LDAP, or Active Directory), you must follow certain rules when discovering and managing these devices. If you use an external user name for device discovery, this user must exist on the managed device. Once you discover this device, you can manage this device by logging on as admin to Enterprise Manager. If you log on to Enterprise Manager with any other user name, you must ensure that this user name exists on the managed device (in the external authentication user list) in order to avoid authentication errors. This is currently an issue with BIG-IP versions 9.1.1, 9.2.0, 9.2.2, and v9.2.3.

Non-descriptive error message appears when an unauthorized user attempts an upgrade (CR64224)
If you log on to Enterprise Manager as a user who does not have administrator rights on a particular managed device, and then attempt to upgrade that device's software, you receive an error message. However, the message does not explain that the error resulted from the user having insufficient rights to upgrade the managed device. To avoid this error, ensure that you have administrator-level privileges on any managed devices that you want to upgrade using Enterprise Manager.

Internet Explorer Security window bypassed when downloading device export data (CR64842)
If you attempt to download device export data in CSV format, you must manually permit the browser to download the CSV file to your local system. When using Internet Explorer version 6.x, if you opt not to download the file when you receive the Security Alert window, the Enterprise Manager system sends the file to your local system anyway.

System can exceed the maximum pinned archives setting in a deploy changeset task (CR65109)
When you deploy a changeset, you can choose to create a rollback UCS archive for target systems. Enterprise Manager saves UCS archives created during a changeset deploy task as pinned archives, which can exceed the limits you set on pinned archives on the Rotating Archives Options screen.

Enterprise Manager 3000 system rebuilds the RAID configuration after an unclean shutdown (CR65451)
If an Enterprise Manager 3000 system completely loses power or is otherwise abruptly restarted (as opposed to a normal, clean system restart), the RAID controller rebuilds the RAID array when the system is booted up next. The RAID configuration rebuild process takes place in the background and does not affect the system functionality. If you log onto the command console, you can view progress messages for the rebuild process.

Back button quits working after UCS restore (CR65464)
If you use Enterprise Manager to restore a UCS archive to a single device, the Back button on the device properties screen no longer opens the device list screen. To return to the archives list screen, in the navigation pane, in the Enterprise Manager section, click Devices.

Changeset modification options are limited (CR66262)
If you open the changeset properties screen, and then make changes to the changeset, you must save the changeset before verifying your changes. If the verification subsequently fails, you cannot revert to the previously valid changeset. Because of this limitation, we recommend that you create a duplicate of a valid changeset before you modify it. Additionally, because no Cancel button exists on the changeset properties screen, if you want to cancel changes from the changeset properties screen, you must open the changeset list by clicking Changesets in the navigation pane.

The Deploy Device Configuration wizard causes an error if you return to Step 1 of the wizard (CR66887)
If you use the Deploy Device Configuration wizard to configure a deploy task using a device configuration that you specify in the wizard, then return to the Step 1 wizard screen to view or change the source, the Changeset Text screen appears instead of the Device Configuration Source screen. Because you cannot edit the changeset text, you must re-configure the task. To avoid this error, do not use the Back button to return to the Step 1 wizard screen after you have configured object class and object instance data for the deploy task.

Communications interval with managed devices changed after upgrade (CR67510)
When you upgrade Enterprise Manager from version 1.0 to 1.2, the default refresh interval that controls how often Enterprise Manager communicates with each managed device resets to the 60 minute default. After you upgrade, you may want to check or change the default refresh interval on the Device Options screen.

Upgrading Enterprise Manager resets remote authentication settings (CR67521)
If you upgrade Enterprise Manager from version 1.0 to version 1.2, the user authentication settings are reset. If you upgrade Enterprise Manager, ensure that you re-configure user authentication settings.

Two or more unique sets of managed device pairs cannot share the same IP address (CR67607)
Although Enterprise Manager can manage redundant systems, it cannot properly manage two unique redundant systems if these pairs use the same IP address for peer communication. To manage redundant systems with Enterprise Manager, you must ensure that each redundant system uses a unique IP address for peer communication.

Audit logs are turned off by default (CR67610)
The Enterprise Manager Audit logs are disabled by default. To activate the audit logs, see the workaround for instructions on how to enable audit logging for the Enterprise Manager system.

Single sign-on for Launch Pad feature is only compatible with BIG-IP 9.4 or later or Enterprise Manager 1.2 or later (CR67769)
If you use the Launch link on the Launch Pad screen to open a managed device's Configuration utility, Enterprise Manager can use a single sign-on to automatically authenticate your user ID to managed devices running BIG-IP version 9.4 or later, or Enterprise Manager version 1.2. or later. If you use the Launch link to open managed devices running earlier software versions, you must re-enter your user name and password to open a managed device's Configuration utility.

Changeset with network route requires self IP addresses on target devices (CR67773)
Using the changeset feature, you can deploy device configuration data from one managed device to another. Although this configuration data can include network routing information, routes typically require that you configure self IP address in order to work properly. Enterprise Manager can successfully deploy a changeset with network routes to a target device only if the self IP addresses required by the network route already exist on the target device. Because self IP addresses are unique to each device, they are not usually deployed using a changeset. If you need to deploy a changeset with network route information, we recommend that you deploy VLANs to the target device, then manually configure the appropriate self IP addresses on the target device. Once you configure the self IP addresses, you can then deploy routes to the target device using changesets.

Reboot and Install locations can appear incorrectly on the Task Details screen (CR67833)
On the Task Review screen of the Software Upgrade Wizard you can select a different Boot Location or Install Location for devices in the upgrade task. However, if you select a new location for either setting, then click the View link to see the details for a device, the new settings do not appear on the Task Details screen. If you return to the Task Review screen, the settings you selected appear correctly.

External user authentication requires additional steps during configuration (CR67846)
If you use RADIUS authentication for external users, you must perform additional steps to correctly specify a user's roles. See the workaround for instructions on how to configure external users with RADIUS authentication.

Column sorting does not work properly on boot locations screen (CR68313)
On the Devices: Boot Locations screen, a table details the software version installed, the number of hotfixes installed, and the state of the boot location. However, if you click a column heading to sort the information, the system may not re-sort the information.

Install Log does not appear for a self upgrade task (CR68642)
When you use Enterprise Manager to perform an upgrade on itself, the Install Log (which normally displays entries logged on the managed device during the install task) appears empty on the Task Details screen for the Enterprise Manager upgrade task.

Rebooting a device displays a Pending in the Task List (CR68689)
If you use Enterprise Manager to reboot a device, the Device Reboot task appears in the Task List. However, in the Task List, the state of the task is Pending, even while the reboot is proceeding normally. Additionally, if you open the Task Details screen for this task, the Start Time, End Time, and Total Time fields display In Progress instead of the actual times.

Confirmation dialog box for rotating archive tasks is incorrect (CR68690)
If you attempt to remove a device group from a rotating archive schedule, a dialog box appears to confirm the action. Instead of referring to the device group, this dialog box refers to a device. If you click OK, the device group is removed from the rotating archive schedule.

Removing device groups from rotating archive schedule not permitted from the Devices: Archives screen (CR68691)
On the Devices: Archives screen, the Rotating Archive Schedule table lists the rotating archives that are directly assigned to this device, and the rotating archives that are assigned to the device through a device group. Using the Select boxes, you can remove the current device from a rotating archive schedule. Although it appears that you can remove a device group from the rotating archive by checking a Select box, this action does not work. If you want to remove a device group from a rotating archive schedule, you must do this on either the Rotating Archive properties screen or the Device Groups: Archives screen.

Confirmation dialog box for deleting a hotfix is incorrect (CR68704)
If you attempt to remove a hotfix image from the hotfix repository, a dialog box appears to confirm the action. Instead of referring to the hotfix, this dialog box refers to a generic image. If you click OK, the hotfix you selected for deletion is removed from the hotfix repository.

Change User Password feature does not support mixed case user names (CR68749)
You can use the Change User Password feature to change a user's password on multiple managed devices. However, if the user name features mixed case (UserName) instead of a single case (username), the Change User Password task for that user fails. To avoid this error when you attempt to change a user's password using Enterprise Manager, ensure that the user name uses only a single case.

Administrative partitions not supported by Enterprise Manager system (CR69024)
With this release, Enterprise Manager introduces the concept of administrative partitions. Administrative partitions are logical containers containing a defined set of BIG-IP system objects and are used for access control purposes. We plan to introduce this feature in an upcoming BIG-IP system release. The access control features are compatible only with BIG-IP network object classes, and not Enterprise Manager object classes. Although you can create an administrative partition in Enterprise Manager, the access control properties are not available for Enteprise Manager object classes.

Errors in scheduled and custom configuration archives when upgrading Enterprise Manager (CR69409, CR69546)
When you upgrade Enterprise Manager from version 1.0 to version 1.2, configuration archive schedules that you previously configured quit working upon upgrade. Additionally, if you have configured any custom configuration archive schedules on a version 1.0 system, you cannot successfully copy the UCS file to the upgraded version 1.2 system. These errors occur because we enhanced the management options for configuration archive schedules in Enterprise Manager 1.2. Once you upgrade, you must delete any old rotating archive schedules and create new configuration archive schedules. If you plan to import a version 1.0 UCS file to the upgraded 1.2 device, ensure that you remove all custom archive schedules before saving the UCS file.

In an Enterprise Manager 3000 system power supply failure, the software does not correctly indicate which power supply failed (CR69241)
The Enterprise Manager 3000 platform features redundant power supplies. If one power supply fails, an audible alarm sounds. If you run the system_check -d or bp platform command from the command line, the failed power supply is not correctly identified. In a power supply failure scenario, the software always reports that power supply 2 is failing. To determine which power supply has failed, look at the power supply LED indicator on the rear of the Enterprise Manager device. If the green LED on a power supply is lit, this indicates that the power supply is working properly.

Enterprise Manager Administrator Guide incorrectly states managed device compatibility (CR69842)
In chapter 1 of the Enterprise Manager Administrator Guide, we incorrectly indicate that Enterprise Manager can manage BIG-IP version 9.1.2 and later. In fact, Enterprise Manager can manage BIG-IP version 9.1.1 and later. The release notes were updated to indicate the correct managed device compatibility.

Cannot upgrade compact flash-only devices managed through self IP address (CR69845)
If you use Enterprise Manager to manage any compact flash-only devices (1000, 2400, and 5100 platforms), and you manage these devices through a self IP address configured on a TMM switch interface instead of through the management interface, you cannot upgrade these managed devices. This occurs because the managed devices do not recognize self IP addresses during the upgrade process, and therefore cannot connect to Enterprise Manager to complete the upgrade. To use Enterprise Manager to upgrade compact flash-only devices, you must manage the devices through the management interface on each managed device.

Incorrect peer IP configuration and discovery or refresh errors for redundant systems (CR75066)
When managing BIG-IP redundant systems, Enterprise Manager may not correctly discover or refresh a device in the redundant system if the managed device is incorrectly configured so that the peer IP address (primary or secondary) is actually a self IP address. If this occurs, a DaemonException error indicating a duplicate entry appears in the log file. If you encounter this error or cannot discover a device (or refresh information for a device) in a redundant system, ensure that the peer IP addresses on the managed devices are correctly configured.

Version 1.0 Known Issues

The following items are known issues in the version 1.0 release, and they still apply to the 1.2. release.

Setting the Alert History default record display to over 500 records may cause errors (CR53731)
When you set the alert defaults, if you set the alert history list to display over a maximum of 500 records, JavaScript errors may result (due to memory errors on the system where the browser is running) when you attempt to view the Alert History list. To avoid this error, on the Alert Options screen, set the Maximum History Entries value to 500 or less.

Device Address box on the Device Detail screen changes colors (CR55060)
On the Device Detail screen, the Device Address box that indicates the IP address may appear yellow or white if you view it using some Mozilla-based browsers. The color of the box does not affect the functionality, nor indicate any specific state.

Modifying devices that are currently involved in a running task may cause incorrect banner displays (CR55464)
When a device is involved in a task, Enterprise Manager locks the device to prevent a user from making changes to a device while it is being updated. If you attempt to make changes to this device, a status banner may appear and hide the device locked warning at the top of the screen. To restore the device locked warning, refresh the screen.

Back button may not work properly on the Device Boot Location screen (CR55860)
If you perform a device reboot from the Device Boot Location screen and then encounter an error, the Back button on the screen may quit working on Internet Explorer browsers. If you encounter this error, use the navigation pane to navigate back to the Device List screen.

Deleting a large list of devices takes a long time and provides no deletion status (CR56478)
When you delete several devices from the device list screen, the screen does not immediately refresh if one or more of the devices is unreachable. The system does not display any status messages while Enterprise Manager attempts to communicate with these devices. Although the system may appear unresponsive for a long time, you can navigate to other screens to perform management tasks.

Changing an Enterprise Manager system from a redundant pair to a single device forces a standby state (CR56543)
If you use the System Platform screen to configure the Enterprise Manager system as a redundant pair, then change the system back to a single device, the device changes to standby mode which prevents further configuration tasks. To correct this issue, reboot the device.

ConfigSync operations fail if there is a clock skew of over 600 seconds between peer systems (CR56619)
If the clock skew between the peer devices in a managed device pair is greater than 600 seconds, any ConfigSync operations initiated though Enterprise Manager fail. To prevent this ensure that the system clocks of the redundant pair are within 600 seconds of each other. See the workaround for instructions on how to check the system time on managed devices.

ConfigSync indicator in the top left corner of the screen may be inaccurate for Enterprise Manager redundant pairs (CR56666)
If you run a configuration synchronization on a pair of Enterprise Manager devices from the Device Properties screen, the ConfigSync status indicated in the top left of the screen does not update properly until you click an option on the navigation pane.

Task List screen may feature incorrect status reports for tasks running during an Enterprise Manager system reboot (CR56814)
If the Enterprise Manager system reboots during a software installation task, the task is cancelled, but the progress bar on the Task List screen may not properly reflect the cancelled status. Although the task is marked Finished, the status bar displays the percentage complete at the time of the Enterprise Manager reboot.

[ Top ]


Workarounds for known issues

The following section describes the workaround for the corresponding known issue listed in the previous section.

Checking the system clock of a managed device pair (CR56619)

This workaround describes how to check the system clock of a device in a redundant pair.

  1. Log on to the command console of the BIG-IP system.

  2. At the command prompt, type date and press Enter.
    The system clock information appears.

  3. Note the system clock information and repeat these steps on the device's peer.

Enabling audit logging for the Enterprise Manager system (CR67610)

This workaround describes how to enable audit logging on the Enterprise Manager system.

  1. Log on to the web interface of the Enterprise Manager system.

  2. In the navigation pane, expand System, and click Logs.
    The System Logs screen opens.

  3. On the menu bar, click Options.
    The Options screen opens.

  4. In the Audit Logging table, for the Audit setting, select Enable.

  5. Click Update.
    Audit logging is now enabled for the Enterprise Manager system. You can check the audit log by clicking Audit on the menu bar.

Configuring external users with RADIUS authentication (CR67846)

This workaround describes how to configure external users using RADIUS authentication.

  1. Log on to the web interface of the Enterprise Manager system.

  2. In the navigation pane, expand System, and click Users.
    The User List screen opens.

  3. On the menu bar, click Authentication.
    The Authentication screen opens.

  4. Click the Change button.
    The User Directory control changes to a list where you can choose an authentication source.

  5. In the User Directory list, select Remote - RADIUS.
    The Server Configuration and Primary fields appear so that you can configure the RADIUS server information.

  6. For Server Configuration, select whether you want to configure a primary only, or a primary and secondary server.
    The screen changes depending on your selection.

  7. For the Primary (or Secondary) settings, specify an IP address, and password for the RADIUS server.

  8. Click Finished.

  9. On the menu bar, click User List.
    The User List screen opens, and an Other External Users entry appears in the user list.

  10. In the list, click Other External Users.
    The user properties screen opens where you can add external users and specify roles.

  11. In the Account Properties table, type the user's password, and select the user's roles and access settings as needed.

  12. After you specify the user settings, click the Update button twice to save the information.

Important: When you change a password or role for an external user authenticated with RADIUS, you must click the Update button twice after you change the settings for Enterprise Manager to save the changes.

[ Top ]


Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)