Professional Documents
Culture Documents
Configuration ........................................................................................................... 24
Introduction............................................................................................................ 24
Start HBAnyware ............................................................................................. 25
Start HBAnyware in Remote Manager Mode ............................................. 25
Start HBAnyware in Local Element Manager Mode................................... 26
HBAnyware Window Element Definitions ........................................................ 27
The Menu Bar ........................................................................................... 27
Toolbar ...................................................................................................... 27
Toolbar Icon Definitions............................................................................. 27
Sort and Display Icons .............................................................................. 28
Discovery Tree .......................................................................................... 28
Property Tabs ............................................................................................ 29
Status Bar ................................................................................................. 29
Use HBAnyware Command-Line Interface ...................................................... 30
Start Emulex Configuration Utility (elxcfg) ....................................................... 31
elxcfg Window Element Definitions.................................................................. 31
Menu Toolbar ............................................................................................ 32
SCSI Target List ........................................................................................ 32
LUN Setup and Trace Mask Setup ............................................................ 32
Adapter Controls ....................................................................................... 32
HBA Tasks ............................................................................................................. 33
Discover HBAs ................................................................................................ 33
Discover HBAs Using HBAnyware ............................................................ 33
Discover Local HBAs Using elxcfg ............................................................ 34
Reset the HBA Using HBAnyware ................................................................... 34
Change an HBA's World Wide Name Using elxcfg .......................................... 35
Remove HBA Information from the Registry Using elxcfg ............................... 36
Display HBAs Using HBAnyware..................................................................... 36
Sort By Host Name ................................................................................... 36
Sort by Fabric Address.............................................................................. 36
Sort Local HBAs Only Using HBAnyware.................................................. 37
Sort Local HBAs Using elxcfg ................................................................... 37
View HBA Information Using HBAnyware........................................................ 37
View Discovered Elements........................................................................ 37
View Host Attributes .................................................................................. 38
View Target Attributes ............................................................................... 39
View LUN Attributes .................................................................................. 40
View Fabric Attributes ............................................................................... 41
View General HBA Attributes .................................................................... 42
View Detailed HBA Attributes .................................................................... 43
View Port Attributes................................................................................... 44
Definitions
Driver. A host computer software component whose function is to control the operation of peripheral
controllers or HBAs attached to the host computer. Drivers manage communication and data transfer
between applications and I/O devices, using HBAs as agents.
The HBAnyware™Utility (HBAnyware) allows you to perform installation and configuration tasks on
remote and local HBAs.
Security Configurator. The HBAnyware security package allows you to control which HBAnyware
systems can remotely access and manage HBAs on other systems in a Fibre Channel (FC) network.
See “HBAnyware Security Configurator Installation” on page 10 for the installation procedure.
Emulex Configuration Utility (elxcfg). This driver-specific utility for the FC Port driver provides a user-
friendly interface that allows you to locally examine, manage and configure installed HBAs. This utility
allows you to update firmware and set parameters.
• If you currently use a driver type different from the one you will install with AutoPilot Installer™,
you will lose your customized driver parameters, persistent bindings, LUN masking and LUN
mapping when you change driver types. The AutoPilot Installer™ default parameters will usually
be the best options for the new driver type. You may want to note your current settings before
you install the new driver type. After you have installed the new driver type, you can then update
your customized driver parameters.
• If you are currently running an older version of the FC Port driver, use the Hardware-first
installation method to update your driver. Steps 1 and 2 involve installing a new HBA, therefore
begin at step 3 to update the driver.
• You can also update the FC Port driver following the manual installation method.
• On some Windows 2000 Server systems with large network configurations (for example, a
system that contains a large number of logical unit numbers [LUNs]), the message "HBAnyware
Service failed to start" may appear during the installation or upgrade procedure. This is caused
by high CPU usage that occurs while the operating system recognizes the LUNs. Ignore the
message and allow the installation to finish.
After the installation is finished, use the Service Manager in Control Panel/Administrative
Tools to verify that the Emulex HBAnyware service is started. If it has not started, start it manu-
ally from the Action menu.
• Windows Server 2003 Service Pack 1 (SP1), replaces the Emulex-provided HBA API
(hbaapi.dll) with the Microsoft HBA API in the Windows system directory (SYSTEM32 or
SYSWOW64). With the release of FC Port driver version 2.40a2 third-party applications that use
the Emulex HBA API should continue to work with the Microsoft HBA API. If necessary, copy the
Emulex HBA API from the Emulex utilities folder to the home directory of the application that
uses the Emulex HBA API.
Compatibility
If you are currently running an older version of the FC Port driver, use the hardware-first installation
method to update your driver. Begin at step 3 to update the driver. See “Hardware-First Installation” on
page 6 for the hardware-first installation procedure.
You may also update the FC Port driver following the manual installation method. See “Manually Install
the FC Port Driver” on page 19 for the manual installation procedure.
Known Issues
The following issues have been reported at the time of publication. These issues may not yet have been
verified or confirmed and may apply to another product, such as hardware.
• There are no known issues at this time.
1. Download the distribution executable file from the Emulex Web site to your system.
2. Double-click the distribution executable file. A window is displayed with driver version
information and Emulex contact information.
3. Click Next to access the Location window or click Cancel to close the window.
4. The default installation location is displayed. Browse to a different location, if desired. Click
Install to continue the installation.
5. The Progress window is displayed. As each task is completed, the corresponding checkbox is
automatically selected.
6. After all tasks are completed, a confirmation window is displayed. The Start AutoPilot Installer
checkbox is automatically selected. To start AutoPilot Installer later, clear this checkbox.
7. Click Finish to close the distribution executable file.
AutoPilot Installer
Introduction
The Emulex AutoPilot Installer is a Fibre Channel HBA installation wizard for Windows. The AutoPilot
Installer installs (or updates) Emulex drivers and utilities, and configures HBAs, drivers and utilities.
Prerequisites
• One of the following operating systems:
• Windows Server 2003 running on an x86 or 64-bit platform.
• Windows 2000 Server (Service Pack 4 is recommended).
Configuration Questions
Vendor-specific versions of the Emulex driver installation program may include one or more windows
with questions that you must answer before continuing the installation process.
Installation Planning
Table 2 describes the types of installations that can be performed under certain conditions. Use this
information to determine which method to use for your situation.
Hardware- Software-
Unattended Replicated
Condition First First
Installation Installation
Installation Installation
No HBA in a single system X X X
New HBA in a single system X X X
Existing HBAs and drivers installed, X X X
updated driver available
Multiple systems, no HBAs installed X X X
Multiple systems, new HBAs installed X X X
Hardware-First Installation
Prerequisites
• Distribution executable file downloaded from the Emulex Web site.
Note: To update the FC Port driver, begin the following procedure at Step 2.
2. If you have already extracted the driver and utility files, run the APInstaller.exe file.
If you have not extracted the driver and utility files, run the distribution executable file (see “Dis-
tribution Executable File Procedure” on page 5) and leave the Start AutoPilot Installer check box
selected. Click Finish.
3. Click Next. Installation automatically completes, except in the following situations:
• If you are changing driver types, the Available Drivers window is displayed. This window
allows you to select a new driver type. Select the driver type from the drop-down list and
click Next.
• If you are installing an older driver version, the Available Drivers window is displayed. Select
the existing driver version from the drop-down list and click Next.
• If you are installing a vendor-specific version of the Emulex driver installation program, this
program may include one or more windows with questions that you must answer before
continuing the installation process. If this is the case, answer each question and click Next
on each window to continue.
4. View the progress of the installation. Once the installation is successful, the Congratulations
window is displayed.
5. View or print a report, if desired.
• View Installation Report - your text editor (typically Notepad) displays a report with current
HBA inventory and configuration information and task results. The text file is named in the
following format: report_MM-DD-YY-#.txt
• MM = month
• DD = day
• YY = year
• # = report number
• Print Installation Report - your default print window is displayed.
6. Click Finish to close AutoPilot Installer. If your system requires a reboot for this change to take
effect, you are prompted to do so when you click Finish.
Software-First Installation
Prerequisites
• Distribution executable file downloaded from the Emulex Web site.
Procedure
To perform a software-first installation:
1. If you have already extracted the driver and utility files, run the APInstaller.exe file.
If you have not extracted the driver and utility files, run the distribution executable file (see “Dis-
tribution Executable File Procedure” on page 5), and leave the Start AutoPilot Installer check
box selected. Click Finish. The following message is displayed:
Prerequisites
• FC Port driver is installed.
• HBAnyware and elxcfg are installed.
Procedure
To install the HBAnyware Security Configurator:
1. Locate the SSCsetup.exe file. The default path for this file is:
C:\Program Files\HBAnyware
2. Double-click the SSCsetup.exe file. A welcome window is displayed. Click Next.
3. A Setup Status window is displayed. After setup is completed, the Emulex HBAnyware
Security Setup Completed window is displayed.
4. Click Finish.
Prerequisites
The APInstall.cfg file is organized into commented sections, grouped according to related commands.
• Lines that begin with a semicolon are comments. Enable sample comment lines by removing the
semicolon.
• There are four main sections. Two are required and two are optional. Driver parameters must be
set up in the [PORT.PARAMS] section. Each section begins with a heading.
• [AUTOPILOT.CONFIG] - this required section contains settings that control and configure
the AutoPilot Installer’s operation.
• [PORT.CONFIGURATION] - this optional section may contain questions that must be
answered before continuing the installation process. This section is applicable to attended
installations only.
• [PORT.PARAMS] - this required section can specify driver parameters. Parameters are read
exactly as they are entered and are written to the registry.
• [SYSTEM.PARAMS] - this optional section sets the system TimeOutValue parameter to the
hexadecimal value of 0x3C (in seconds). If this section is deleted, the TimeOutValue
remains unchanged during an unattended installation.
Locate the Mandatory Configuration File Changes heading in the [AUTOPILOT.CONFIG] section of the
APInstall.cfg file.
Locate the Optional Configuration File Changes heading in the [AUTOPILOT.CONFIG] section of the
APInstall.cfg file. This heading follows Mandatory Configuration File Changes.
Note: Both the report location and report name must be specified.
The FC Port driver parameter defaults may be changed by modifying this section of the APInstall.cfg file.
Locate the [PORT.PARAMS] section in the APInstall.cfg file. This mandatory section follows Optional
Configuration File Changes. Under the [PORT.PARAMS] heading, list the parameters and new values
for the driver to use.
For example: LinkDownTimer = 30
See Appendix B for a listing of driver parameters and their defaults and valid values.
Locate the [SYSTEM.PARAMS] section in the APInstall.cfg file. This optional section follows the
[PORT.CONFIGURATION] section.
The operating system’s TimeOutValue parameter is set to the hexadecimal value of 0x3C (in seconds).
You may specify a different value for this parameter.
If this section is deleted, the TimeOutValue remains unchanged during an unattended installation.
Error Codes
AutoPilot Installer sets an exit code to indicate whether an installation was successful or an error
occurred. These error codes allow AutoPilot Installer to be used in scripts with error handling. AutoPilot
Installer’s silent mode specifically returns the following values:
0 0x00000000 No errors.
2001 0x000007D1 Driver found is the same type as the existing driver and has the same, or
older, version number.
2399141889 0x8F000001 Unsupported operating system detected.
It the configuration file has been modified and saved with its original name (apinstall.cfg), at the
command line, type:
apinstall
If the configuration file has been modified and saved with a different name and/or the configuration file
location has changed, you must specify the entire path location (using the standard drive:\directory
path\filename format) and the entire name of the configuration file. In the following example, the
configuration file has been renamed and relocated:
Example:
ApInstall g:\autopilot\mysetup\cs_apinstall.cfg
Modifying the configuration file enables you to script the installation of a system's driver. The following
batch file assumes that you have made mandatory changes to the apinstall.cfg file (see “Mandatory
Configuration File Changes” on page 11 for more information), as well as any optional changes (see
“Optional Configuration File Changes” on page 12 for more information).
If your systems have been set up with a service supporting remote execution, then you can create a
batch file to remotely update drivers for all of the systems on the storage net. If Microsoft's RCMD
service was installed, a batch file similar to the following could also be used for remote execution:
If desired, the FC Port driver and utilities can be installed manually without using AutoPilot Installer. This
is accomplished by following the same steps used before AutoPilot Installer was available. This driver
was extracted when you ran the Distribution Executable File will includes a file for the driver and files for
the driver utilities files (elxcfg, HBAnyware and HBA API files).
1. Disable networking if updating the FC Port driver.
2. Manually install the FC Port driver.
3. Manually install the driver utilities.
Disable Networking
To disable networking:
1. If you are updating the FC Port driver, disable networking before updating the driver.
2. Start the elxcfg utility. The main window is displayed. In the Available Adapters area, click the
adapter row that represents the HBA for which you want to disable networking.
3. Select Networking from the Tools menu. The Networking Configuration window is displayed.
4. On the Network Configuration window, clear the Enable Networking check box to clear
networking capabilities from the selected HBA.
5. On the Network Configuration window, click OK.
6. On the File menu, click Apply.
Note: If a system reboot is required for this change to take effect, you will be prompted to do so when you exit
the utility.
Prerequisites
• Downloaded and extracted contents of the Distribution Executable.
• If you have previously installed the FC Port driver and enabled networking, disable networking
before performing this procedure.
• Uninstall the existing utility package (HBAnyware, elxcfg and the HBA API library).
Procedure
To manually install the FC Port driver, from the desktop:
1. Click Start, Settings, and Control Panel.
2. Double-click the System icon.
3. Select the Hardware tab.
4. Click Device Manager.
5. Open the SCSI and RAID controllers item in the list.
6. Double-click the Emulex HBA.
Note: The driver will affect only the selected HBA. If there are other HBAs in the system,
you will need to repeat this process for each HBA. All DC models will be displayed in
Device Manager as two HBAs, therefore each HBA must be updated.
12. Click Next. Several standard warnings may appear. Select Yes to continue the installation in
each case and finish the Update Driver wizard.
13. Click Close. Repeat the installation process from step 6 for each HBA.
14. Install the driver utilities.
15. If desired, enable networking. See “Enable Networking” on page 20 for this procedure.
The utility installation installs elxcfg, HBAnyware and the HBA API files.
Prerequisites
• FC Port driver is installed.
• Extracted setupapps.exe from the utilities zip file (to a temporary directory). If you have
downloaded the FC Port files to a default directory, the path will be C:\Program
Files\Emulex\AutoPilot Installer\Utilities.
• For Windows 2000 Server systems: if you have a previous version of the FC Port driver
installed, (version 5-2.13a4, or earlier) elxcfg is still present in the \WINNT\system32 directory.
Delete this file and any shortcut icon on your desktop or in Start\Programs.
Procedure
To manually install the driver utilities:
1. Run setupapps.exe.
2. Follow the instructions on the setup windows.
Note: If your system does not have Windows Installer, the setupapps.exe file will install it for you.
3. Click Finish in the last dialog box to exit Setup. The installation is complete. The HBAnyware
agent automatically starts running, and will automatically restart if the server is rebooted.
Enable Networking
Prerequisites
• FC Port driver and utilities are installed.
Procedure
To enable networking:
1. Start the elxcfg utility. The main window is displayed.
2. Select an HBA from the Available Adapters list.
3. From the Tools menu, select Networking. The following window is displayed.
Connection-oriented? No No
Bandwidth Reserved? No No
Guaranteed Latency? No No
6. Select Disable FCP Polling only if SCSI functionality is not required on the selected HBA.
Clearing this option keeps the selected HBA from looking for SCSI-3 (FCP) devices.
7. Click OK.
8. On the File menu, click Apply. The system finds new hardware and may issue the standard
Windows warnings.
9. Close elxcfg.
10. Scan for new devices. Right-click My Computer and select Manage. The Computer
Management window is displayed.
11. Select Device Manager.
12. Right-click Network Adapter.
13. Select "Scan for New Hardware Changes" from the Action menu. The Found New Hardware
wizard is displayed.
14. Click Have Disk and select the appropriate driver option.
15. Configure the driver for IP:
a On your desktop, select My Network Places and right-click Properties. The Net-
working and Dial-up Connections window is opened.
b Select Local Area Network and right-click Properties.
c Select Internet Protocol and click Properties.
d Enter IP address information and click OK.
Your HBA is now enabled for networking.
Note: If you change the IP class of service after the initial installation, a reboot is required for this change to
take effect.
2. Select Emulex Fibre Channel HBAnyware and double-click Add/Remove. Select the Emulex
Fibre Channel item and click Change/Remove. A window similar to Figure 6 will be displayed.
3. Click Next.
4. Click Finish. The utilities are removed from the system.
3. Click Device Manager. Device Manager is displayed. Double-click SCSI and RAID controllers.
4. Double-click the HBA from which you want to remove the driver. A device-specific dialog box is
displayed. Click the Driver tab.
5. Click Uninstall.
6. Click OK to continue. The driver is uninstalled.
7. When prompted, click Yes to reboot the computer. The driver is uninstalled.
• The Emulex Configuration utility (elxcfg) allows you to perform configuration tasks on local
adapters only. Use the elxcfg utility to do any of these tasks:
• Download PCI configuration data files
• Assign an AL_PA
• Perform global and target mapping and masking
• Globally automap all LUNs
• Globally unmask all LUNS
• Set up persistent binding
• Hot swap a device
• Set topology options
• Map device IDs
• Break SCSI reservations
• Set driver parameters
• Update firmware on the local HBA
• Update x86 BootBIOS
• Update EFIBoot (64-bit only)
Note: Illustrations in this document are examples; model and version numbers on your
screens will reflect your system’s configuration.
The HBAnyware utility window contains five basic elements: the menu bar, the toolbar, the discovery
tree, the property tabs and the status bar.
Note: The element you select in the discovery tree determines whether a menu item or
toolbar icon is active. For example, if you select the local host or other system
host, the Reset Adapter item on the Adapter menu is unavailable. The Reset
Adapter toolbar button is unavailable as well.
Examples of Modifications
• HBAnyware h=138.239.82.2
HBAnyware will show HBAs in the host with the IP address 138.239.82.2.
• HBAnyware h=Util01
HBAnyware will show HBAs in the host named Util01.
• HBAnyware h=138.239.82.2:4295
HBAnyware will show HBAs in the host with the IP address 138.239.82.2 using IP Port 4295.
• HBAnyware h=Util01:4295
HBAnyware will show HBAs in the host named Util01 using IP port 4295.
Run this modified command line to launch the HBAnyware utility for a single, remote host in local mode.
Toolbar
The toolbar contains buttons that enable you to refresh the discovery tree, reset the selected host bus
adapter and sort the discovery tree. The toolbar is visible by default. Use the Toolbar item in the View
menu to hide the toolbar. If the item is checked, the toolbar is visible.
Click the Reset icon to reset the selected host bus adapter.
Sort by Fabric ID
Online Help
Discovery Tree
The discovery tree displays icons representing discovered network (SAN) elements (local host name,
system host names and all host bus adapters that are active on each host). Targets and LUNs, when
present, are also displayed.
A green HBA icon with black descriptive text represents an HBA that is online.
A gray HBA icon with red descriptive text represents an HBA that is offline or otherwise
inaccessible. Several situations could cause the HBA on a local host to be offline or inaccessible:
• The HBA on a local host is not connected to the network but is still available for local access.
• The HBA on a local host is malfunctioning and is inaccessible to the local host as well as to
the network.
• The HBA on a local host is busy performing a local download and is temporarily inaccessible
to the local host as well as to the network.
Property Tabs
The property tabs display configuration, statistical and status information for network elements. The set
of available tabs is context-sensitive, depending on the type of network element or HBA currently
selected in the discovery tree.
Status Bar
As you navigate through the menu bar or the toolbar, help messages appear on the status bar near the
bottom of the HBAnyware window. The status bar is visible by default. Use the Status Bar item in the
View menu to hide the status bar. If the item is checked, the status bar is visible.
The CLI (command-line interface) Client component of HBAnyware provides access to the capabilities of
the Remote Management library from a console command prompt. This component is intended for use
in scripted operations from within shell scripts, batch files, or the specific platform equivalent.
HbaCmd can be run in out-of-band mode by making the first argument 'h=<host>'. For example:
c:\>hbacmd h=cp-hp5670 listhbas
c:\>hbacmd h=138.239.91.121 listhbas
List HBAs
Syntax: HBACMD LISTHBAS
Description: A list of the discovered manageable Emulex HBAs and their World Wide Node Names.
Parameters: N/A
Port Attributes
Syntax: HBACMD PortAttrib <wwpn>
Description: A list of attributes for the port with the specified World Wide Port Name.
Parameters: wwpn The World Wide Port Name of the port. This port can be either local or remote.
Port Statistics
Syntax: HBACMD PortStat <wwpn>
Description: A list of statistics for the port with the specified World Wide Port Name.
Parameters: wwpn The World Wide Port Name of the port. The port can be either local or remote.
Download
Syntax: HBACMD DOWNLOAD <wwpn> <filename>
Description: Loads the specified firmware image to the (HBA) with the specified WWPN.
Parameters: wwpn The World Wide Port Name of the HBA that is the target of the firmware download.
The HBA can be either local or remote.
Filename: The pathname of the firmware image that is to be loaded. This can be any file that
is accessible to the CLI client application, but we recommend that you keep image files is
the Emulex Repository folder or directory.
Reset Adapter
Syntax: HBACMD RESET <wwpn>
Description: Resets the HBA with the specified World Wide Port Name.
Parameters: wwpn The World Wide Port Name of the port. The port can be either local or remote.
Target Mapping
Syntax: HBACMD TargetMapping <wwpn>
Description: List of mapped targets for the port with the specified World Wide Port Name.
Parameters: wwpn The World Wide Port Name of the port. The port can be either local or remote.
To start elxcfg:
• Click Start, Programs and Emulex Configuration Tool.
or
• Browse to the elxcfg.exe file and run this command.
Adapter Controls
Many driver parameter settings involve checkboxes in the Adapter Controls area of the main window.
If an adapter was physically removed from the system, its definition in the registry is listed as
"Disconnected".
1. Start HBAnyware.
2. In the directory tree, click the HBA you want to reset.
3. Do one of the following:
• From the menu bar, click Adapter, then click Reset Adapter.
The World Wide Node Name (WWNN) is a unique name that is selected by the system.
To manually assign a WWNN:
1. In the main window of the elxcfg utility, click an HBA row in the Available Adapters list.
The HBA Information window displays Port and Node World Wide Names (WWN).
2. Click Change Node WWN. The Change World Wide Node Name window is displayed.
You can use HBAnyware to sort the way discovered HBAs are displayed. You can sort HBAs by host
name, fabric name, HBA name, target name and LUN name. You can view local HBAs or remote HBAs.
By default, both local and remote HBAs are displayed by host name/fabric name.
• Switch between host name or fabric ID in one of two ways:
• From the menu bar: click View, then Sort by Host Name, Sort by Fabric ID. The cur-
rent adapter display mode is checked.
Click .
Field Definitions
• Number of Fabrics - the total number of fabrics discovered (displays "Unavailable" if Sort by
Host is active).
• Number of Hosts - the total number of host computers discovered. This includes servers,
workstations, personal computers, multiprocessors and clustered computer complexes (displays
"Unavailable" if Sort by Fabric is active).
• Number of Adapters - the total number of host bus adapters (HBAs) discovered.
Status Area
This field reflects the current state of the HBA. There are several possible link states:
• The operational state indicates that the HBA is connected to the network and operating
normally.
• All other states indicate that the HBA is not connected to the network. Gray HBA icons with red
descriptive text indicate that the HBA is offline. These offline states are:
• User offline - the adapter is down or not connected to the network.
• Bypassed - the HBA is in Fibre Channel discovery mode.
• Diagnostic Mode - the HBA is controller by a diagnostic program.
• Link Down - there is no access to the network.
• Port Error - the HBA is in an unknown state; try resetting it.
• Loopback - an FC-1 mode in which information passed to the FC-1 transmitter is
shunted directly to the FC-1 receiver. When a Fibre Channel interface is in loopback
mode, the loopback signal overrides any external signal detected by the receiver.
• Unknown - the HBA is offline for an unknown reason.
• Resetting - the HBA is in the process of rebooting.
• Downloading - a firmware or other image is being downloaded to the HBA.
Note: Recessed fields indicate that the information in that field may exceed the text display area
of the field. Use the arrow keys on your keyboard to scroll and view additional information.
• Browse - click to browse through your files and locate the new firmware version to download.
• Download - click to update the HBA with the new firmware version.
Note: Use the Host Driver Parameters tab to set driver parameters on a host with more than one HBA.
Driver Parameter Tab and Host Driver Parameter Tab Field Definitions
• Installed Driver Type - current driver and version installed.
• Adapter Parameter table - a list of parameters and their current values.
• Parameter-specific information - details about the parameter appears on the right side of the tab.
If you are creating custom unattended installation scripts, any driver parameter can be modified and
included in the script.
HBAnyware allows you to modify driver parameters at the host level and at the HBA level.
• At the host level you can specify values for specific parameters. You can also set all parameters
back to the default value (out-of-box value).
• At the HBA level you can specify values for specific parameters. You can also set all parameters
back to the default value (out-of-box value). Additionally, you can set all parameters to the those
values last saved for the host.
To reset all host driver parameters back to their default (out-of-box) values:
1. Start HBAnyware.
2. In the discovery tree, select the host.
3. Click the Host Driver Parameters tab.
4. Click Use Defaults. Parameters to be reset are displayed in red text. The Use Defaults button
is inactive and the following window is displayed:
5. Click OK on the Host Driver Parameters tab. Parameters to be reset are still displayed in red
text. The value fields display the default values in red text as well.
Note: If you want to set all host driver parameters back to their value before you clicked
Use Defaults, click Restore. Restore will only work if you have not yet clicked Apply.
5. Click OK on the Driver Parameters tab. Parameters to be reset are still displayed in red text.
The value fields display the default values in red text as well.
Note: If you want to set all host driver parameters back to their value before you clicked
Use Defaults, click Restore. Restore will only work if you have not yet clicked Apply.
Figure 36: HBA Driver Parameters Response Window (for global values)
5. If you want the change to be temporary (causing the parameter to revert to its last permanent
setting when the system is rebooted), check the "Make change temporary" box. This option is
available only for dynamic parameters.
6. If you are making changes to multiple parameters, and you want all the changes to be
temporary, check the "Make all changes temporary" box. This setting overrides the setting of the
"Make change temporary" box. Only dynamic parameters can be made temporary.
7. To apply your changes, click Apply.
Table 4: Setting Topology, Auto Topology and Link Speed in Hexadecimal Value
Link
Topology Auto Topology Hexadecimal Value
Speed
*Arbitrated Loop *No *Auto 0x00000000
Arbitrated Loop Yes Auto4 Gb/s 0x00800000
Arbitrated Loop No 1 Gb/s 0x01000000
Arbitrated Loop Yes 1 Gb/s 0x01800000
Arbitrated Loop No 2 Gb/s 0x02000000
Arbitrated Loop Yes 2 Gb/s 0x02800000
Arbitrated Loop No 4 Gb/s 0x04000000
Arbitrated Loop Yes 4 Gb/s 0x04800000
Point-to-Point No Auto 0x00000002
Point-to-Point Yes Auto 0x00800002
Point-to-Point No 1 Gb/s 0x01000002
Point-to-Point Yes 1 Gb/s 0x01800002
Point-to-Point No 2 Gb/s 0x02000002
Point-to-Point Yes 2 Gb/s 0x02800002
Point-to-Point No 4 Gb/s 0x04000002
Point-to-Point Yes 4 Gb/s 0x04800002
Procedure
To select link speed:
1. Select Link Control from the Tuning Menu. The Link Control Parameters window is
displayed.
2. Change the link speed. Select 1 GB, 2 GB, 4 GB or AUTO. If the Link Speed is set to Auto,
automatic speed negotiation is in effect.
3. Click OK.
4. On the File Menu, click Apply.
Enabling Networking
Prerequisites
• Installed FC Port driver.
• Installed driver utilities.
To enable networking:
1. In the main window, locate and select an adapter from the Available Adapters list.
Figure 39: elxcfg, Networking Configuration Window for Windows 2000 Server and Windows Server 2003 Systems
5. Select Disable FCP Polling only if SCSI functionality is not required on the selected adapter.
Clearing this option keeps the selected adapter from looking for SCSI-3 (FCP) devices.
6. Click OK.
7. On the File Menu, click Apply. The system finds new hardware and may issue the standard
Windows warnings.
8. Close elxcfg.
9. Scan for new devices. Right-click My Computer and select Manage. The Computer
Management window is displayed.
10. Select Device Manager.
11. Right-click Network Adapter.
If automatic topology detection is selected, the adapter first attempts the topology type selected in this
window. If initialization fails, the adapter tries the other topology type.
Prerequisites
• An HBA that is supported by firmware version 3.20 or above and supports multiple link speeds.
Procedure
To set up auto topology detection:
1. In the main window, locate and select an adapter from the Available Adapters list.
3. Select the Automatic Topology Detection check box. To change the link speed, select a link
speed option. Click OK.
Note: To determine whether the topology selected in this window has automapping
functionality, look at the Adapter Controls section on the main window. If
Automatically Map SCSI Devices is selected, the topology has automapping
functionality.
Networking Network
Note: elxcfg allows you to set driver parameters on local adapters only.
Change Using HBAnyware™? Yes/No - provides a Yes if the parameter can be changed using
HBAnyware or a No if it cannot. A yes refers to the Driver Parameters tab in HBAnyware. A general
procedure for changing driver parameters using HBAnyware is available in the Configuration section.
Note: HBAnyware allows you to set driver parameters on remote and local adapters.
Activation Requirement - Lists whether a change requires a system reboot or is dynamic (does not
require a reboot). The activation requirement is the same, whether the change is made using
HBAnyware or elxcfg.
Default value: 0
Type: REG_DWORD
ALTOV = 0xn Sets the time, in milliseconds, to Timer Settings Yes Reboot
be used for the Arbitrated Loop window (from the
Timeout Value. Tuning menu,
select Timers)
Range: 0 - 65535
Default = 15
Type: REG_DWORD
ARBTOV = n Sets the time, in milliseconds, to Timer Settings Yes Reboot
be used for the Arbitration window (from the
Timeout Value. Tuning menu,
select Timers)
Range: 500 - 20000
Default = 1000
Type: REG_DWORD
Default = 0
Type: REG_DWORD
Default = 1
Type: REG_DWORD
BusResetForBreakRes = n If set to 0, the driver will issue a No Yes Reboot
target reset to a given target ID.
Default = 0
Type: REG_DWORD
Default = 0
Networking must be enabled for
this function to be active.
DiscoveryStartDelay = n Controls the delay time (in Not applicable Yes Reboot
milliseconds) before discovery
starts.
Range: 1- 7000
Default = 200
DriverTraceMask = n Represents a trace type and elxcfg main Yes Dynamic
corresponding mask value. window,
DriverTraceMask
Defaults to a global driver trace field
mask value of 0. If a driver trace
mask value is set up for an HBA or
port in the system, this value will
be reflected in this field. This bit
mask has a number of available
trace options. Trace data is written
into the system event log and, if
the debugger is connected, to the
debugger window.
Default = 0
Type: REG_DWORD
EDTOV = n Sets the time, in milliseconds, for Timer Settings Yes Reboot
the Error Detect Timeout Value. window (from the
Tuning menu,
Range: 0 - 65535 select Timers)
Default = 2000
Type: REG_DWORD
Note: If a switch is present, this
value is obtained from the
switch, thus overriding this
value.
Default value: 0
Type: REG_DWORD
FcTape = n Enables FCP-2 sequence level Adapter Yes Reboot
error recovery. If the target is Controls, Enable
capable and requests recovery, FCP-2 Recovery
the firmware can perform FCP-2 option
recovery.
Default = 1 or enabled
Type: REG_DWORD
Note: To maximize the value of
setting FcTape to 1, set
ForcePlogi to 0.
ForcePlogi= n If set to a value other than zero, Adapter Yes Reboot
the driver causes implicit logouts Controls, Use
with all devices on a link failure PLOGI instead of
and rediscovers using PLOGI. PDISC after LIP
option
If this value is set to 0, the driver
does not cause implicit logouts
and rediscovers using PDISC
where applicable.
Default = 1 or enabled
Type: REG_DWORD
Note: If FCP-2 recovery is
enabled, ForcePlogi should
be set to 0 to maximize the
value of setting FC Tape.
Range: 0 - 32767
Default = 0
Type: REG_DWORD
Range: 0 -255
Default = 30 seconds
Type: REG_DWORD
MapLuns = n If set to 0, each LUN is addressed Adapter Yes Reboot
without any address translation. Controls, LUN
Mapping option
If set to 1, LUN mapping is and Automatic
enabled, and each LUN number is LUN Mapping
translated to a 64-bit Fibre option
Channel LUN. For new LUN, this
mapping is performed Note: In an array
automatically by the driver. If the with volume
report LUNs command is addressing, the
supported by the target, the first LUN Mapping
256 LUNs reported may be used and Automatic
by the operating system. LUN Mapping
options must be
If the value is 2, LUN mapping is selected.
enabled, but the driver does not
automatically map LUNs.
Range: 0 -2
Default = 0
Type: REG_DWORD
MaximumLun = n Represents the maximum number elxcfg main Yes Reboot
of LUNs to probe for during device window,
discovery. Maximum
Number of LUNs
Range: 1 - 256 field
Default = 32
Type: REG_DWORD
Range: 1 - 255
Default = 8
Type: REG_DWORD
MultipleScsiClaims = n If set to 1, the driver reports each Adapter Yes Reboot
SCSI device for every port to Controls, Allow
which it is connected. Multiple SCSI
Path to SCSI
If set to 0, the driver reports the Targets option
SCSI device only on the first port
to which it is connected.
Default = 0 or disabled
Type: REG_DWORD
Network = n This option contains two single-bit Network Yes Dynamic
fields and one 16-bit integer. Configuration
window (from the
Bit 31 is the Network Enable bit for Tools menu,
the port. If the Network Enable bit select
is set, then the network driver can Networking),
bind to this port. If the Network Adapter
Enable bit is not set, then the Controls, Enable
network driver cannot bind to this Class 2 for SCSI
port. Devices option
Default = 0
Type: REG_DWORD
NsQueryAll = n If set to 1, the driver requests all Adapter Yes Reboot
N-Ports connected to the fabric Controls, Query
from the name server. name server for
all N-Ports option
If set to 0, the driver requests only
registered SCSI FCP devices.
Default = 1
Type: REG_DWORD
Default = 0
Type: REG_DWORD
RATOV = n Number of seconds for the Timer Settings Yes Reboot
Resource Allocation Timeout window (from the
Value. Tuning menu,
select Timers)
Range: 0 - 255
Default = 2
Type: REG_DWORD
Default = 1 or enabled
Type: REG_DWORD
Range: 0 - 256
Default = 64
Type: REG_DWORD
RetryPlogiOpenFailures = n This parameter is a workaround Adapter Yes Reboot
for some loops with targets that do Controls, Retry
not respond to OPN (x,y) soon PLOGI Open
after loop initialization is complete. Failures option
Default = 0 or disabled
Type: REG_DWORD
RetryTimer = n The time, in milliseconds, the Timer Settings Yes Reboot
driver waits before retrying a window (from the
command. Tuning menu,
select Timers)
Default = 2000
Type: REG_DWORD
RetryUnitAttention = n If set to 1, the driver retries Adapter Yes Reboot
commands that complete with Unit Controls, Retry
Attention status. Unit Attention
option
If set to 0, the driver completes the
command with appropriate status.
Default = 0 or disabled
Type: REG_DWORD
Default = 1 or enabled
Type: REG_DWORD
ShowUnknowns =n If set to 0, only LUNs with a Adapter Yes Reboot
Peripheral Qualifier of 0 are Controls, Report
reported in the Inquiry buffer. Unknown SCSI
Devices option
If set to 1, the LUNs with a
Peripheral Qualifier of 0 or 1 are
reported in the Inquiry buffer.
Default = 0 or disabled
Type: REG_DWORD
TranslateQueueFull = n If set to 1, the driver translates Adapter Yes Reboot
SCSI Queue Full status to SCSI Controls,
Busy status (to work around a Translate Queue
behavior of the disk class driver). Full to Busy
option
If set to 0, the driver does not
translate the status.
Default = 0 or disabled
Type: REG_DWORD
TapeResetMask = n If set to 1, the driver does not Adapter Yes Reboot
send the Target Reset command Controls, Disable
to tape drives and media changes Target Reset for
in response to the driver receiving Tape device
a SCSI Bus Reset command. option
Default = 0 or disabled
Type: REG_DWORD
Default = 1 or enabled
Type: REG_DWORD
UseResetForRetry = n If set to 0, the driver retries Adapter Yes Reboot
commands internally. Controls, Use
Bus Reset Status
If set to 1, the driver does not retry for Retries option
commands internally - commands
to be retried are returned to the
caller with
SRB_STATUS_BUS_RESET
status. This normally results in a
command retry.
Default = 0 or disabled
Type: REG_DWORD
UseTargetReset = n If set to 1, the driver uses the task Not Applicable No Reboot
management function target reset
to emulate a SCSI bus reset.
Default = 1
Type: REG_DWORD
UniqueNodeWwns = n If set to 1, the driver uses the Not Applicable Yes Reboot
Node World Wide name (WWN)
stored in the NVRAM of each
HBA.
Default = 1 or enabled
Type: REG_DWORD
Range: 0 - 4294967295
Default = 45
Type: REG_DWORD
The elxsli2 key represents keys for each adapter installed in the system. The keys are the electrical PCI
bus number and slot number of the adapter. The electrical slot number may not match the mechanical
slot number. Each of the global values may be overridden by using the same value name under the per
adapter key. The following values are available under the individual adapter key.
Table 8: Windows Individual Adapter Parameters
ffTraceMask = n This value sets the trace mask on the HBA. The option value is 0 - 0xffffffff. If the
PCI Print option is selected, the resulting messages are printed using KdPrint from
inside the driver.
Default = 0
Type: REG_DWORD
NameServerDelay = n This value represents the number of milliseconds the driver waits before sending a
name server request. This delay takes effect after a link failure/FLOGI or the receipt
of an RSCN. The option value is 0 - 0xffffffff.
Default = 0
Type: REG_DWORD
QuickFail = n The option value is 0 - 0xffffffff. If QuickFail is set to 1, the wait ready time has to
expire only once before I/Os are returned to the upper levels. Also, when QuickFail
is set to 1, any devices not present in the name server data obtained after an RSCN
are immediately marked as failed. This causes failover to occur more quickly. If
QuickFail is set to 1, and the adapter is connected to a multi-switch fabric, the
NameServerDelay value should be set to at least 800 milliseconds.
Default = 0
Type: REG_DWORD
ScsiMap = n A key that contains the map of World Wide Port names to SCSI IDs. Each value
under this key binds one World Wide Port name to a single SCSI ID. Each value
uses the 16-digit hexadecimal representation of the World Wide Port name as the
value name. The value is the SCSI ID to which the World Wide Port name is
mapped. Each value is of type REG_DWORD.
Also contained in ScsiMap is the LUN mapping if LUN mapping is enabled. The
value name for each LUN map is created from the World Wide Port name of the
device. The value name is LunMappingXXXXXXXXXXXXXXXX, where
XXXXXXXXXXXXXXXX is the 16-digit hexadecimal World Wide Port name of the
target. The LunMapping value is of type REG_BINARY and is an array of SCSI Lun
Mapping structures. The structure is defined as follows:
The driver defaults to automatically mapping SCSI devices. The procedures in this section apply if the
default has been changed.
The Automatically Map SCSI Devices option allows you to set up the driver to automatically map new
SCSI devices as they are discovered. If the devices have already been mapped, either by discovery or
manually, this checkbox has no effect.
Procedure
To manually map SCSI devices using elxcfg:
1. In the main window, locate and select an HBA from the Available Adapters list.
2. Click Add Mapping next to SCSI Targets.
3. The Select World Wide Name window is displayed. In the window, select a World Wide Name
and click OK.
4. The Select SCSI ID window is displayed. Select a SCSI ID and click OK.
Procedure
To delete mapped SCSI devices:
1. In the main window, locate and select an HBA from the Available Adapters list.
2. Select the SCSI Target that you wan unmapped.
3. Click Delete Mapping.
Automap LUNs
If automapping is selected, LUNs are automatically mapped by the driver as they are discovered.
Note: Automatic mapping may cause LUN numbers to "change." For example, the LUN
indicated by the SCSI applet on the Control Panel may be different from the LUN
number on the device. The mapping can be viewed by clicking on the LUN Mapping
button.
Prerequisites
• Installed FC Port driver.
• Installed elxcfg.
• A target device with LUNs that have been properly configured.
• The Windows registry parameter MapLuns = n must be set to 1. When set to 1, LUN mapping is
enabled, and each LUN number is translated to a 64-bit Fibre Channel LUN number. For new
LUNs, this mapping is performed automatically by the driver. If the report LUNs command is
supported by the target, the first 256 LUNs reported may be used by the operating system. The
MapLuns parameter defaults to 0.
• The LUN mapping option must be selected. This option is located in the Adapter Controls
section on the main window. If the LUN Mapping option is selected, the Automatic LUN Mapping
option is available.
Procedure
To automap LUNs:
1. In the main window, locate and select an adapter from the Available Adapters list.
2. Select a target in the SCSI Target area.
3. Locate the Adapter Controls section on the main window and select Automatic LUN Mapping.
4. On the File Menu, click Apply.
Note: If the system requires a reboot for this change to take effect, you are prompted to
do so when you exit the utility.
Note: In an array with volume addressing, the LUN Mapping and Automatic LUN Mapping
options must be selected.
Prerequisites
• The Windows registry parameter MapLuns = n must be set to 2. When set to 2, LUN mapping is
enabled, but the driver does not automatically map LUNs. The MapLuns parameter defaults to 0.
Procedure
To manually map LUNs:
1. In the main window, locate and select an HBA from the Available Adapters list.
2. In the Adapter Controls section, make sure the Automatically Map SCSI devices check box is
cleared and the LUN Mapping check box is selected.
3. On the File Menu, click Apply.
Note: If LUN Mapping was selected in step 2, reboot the system.
Global automapping assigns a binding type, target ID, SCSI bus and SCSI ID to the device. The binding
type, SCSI bus and SCSI ID may change when the system is rebooted. When persistent binding is
applied to one of these targets, the binding type, SCSI bus and SCSI ID remain the same, whether the
system is rebooted or whether Global Automap All Targets is subsequently disabled (enabled by default
in elxcfg). The binding information is permanent because it is stored in the Windows registry. The driver
refers to the binding information at bootup.
Persistent binding permanently maps a device to the following:
• Binding type - world wide port name (WWPN), world wide node name (WWNN), or a destination
identifier (D_ID)
• SCSI bus
• SCSI ID
You can set up persistent binding using either elxcfg or HBAnyware.
• elxcfg allows you to set up persistent binding on local HBAs only.
• HBAnyware allows you to set up persistent binding on remote and local HBAs.
3. Target mappings are displayed by world wide port name (WWPN), world wide node name
(WWNN), or device ID (D_ID). In the Display Mode section, choose the display mode you want
to use.
4. If you want to change the Active Bind Type (the mode used to persistently bind target mappings)
or Automapping setting, click Change Settings. Select the Active Bind Type (WWPN, WWNN or
D_ID), and set Automapping to Enabled or Disabled.
To add a persistent binding:
1. In the Targets Table, click the target that you want to bind.
2. Click Add Binding. The Add Persistent Binding window is displayed.
3. Select the Bind Type that you want to use (WWPN, WWNN or D_ID).
4. Select the Bus ID and Target ID that you want to bind, and click OK.
Note: Automapped targets will have entries only in the second column of the Targets Table.
Persistently bound targets will have entries in the second and third columns. In this
case, the third column contains the SCSI bus and target numbers you specified in the
Add Persistent Binding window. This binding will take effect only after the local
machine is rebooted.
It is possible to specify a SCSI bus and target that have already been used on behalf
of a different FC target. HBAnyware does not detect this until you click the OK button
in the Add window. Then a "duplicate binding" error message is displayed, and the
request is rejected.
To bind a target that does not appear in the Persistent Binding Table:
1. Click Bind New. The Bind New Target window is displayed.
2. Click the type of binding you want to use, and type the WWPN, WWNN or D_ID you want to bind
to the target.
3. Select the Bus ID and Target ID that you want to bind, and click OK.
Note: A target will not appear on the target list if automapping has been disabled and the
target is not already persistently bound.
6. Select a SCSI ID to assign to the Device World Wide Port Name and click OK.
7. Once all of the devices have been selected, apply the changes: from the File menu, select
Apply.
8. Exit the utility: from the File menu, select Exit.
9. Reboot the system for these changes to take effect.
10. Start the Emulex Configuration utility. Your new device and SCSI ID mapping information is
displayed in the SCSI Target List area.
Prerequisites
• The FC Port driver is installed properly.
• HBAnyware has been installed properly.
• The firmware file has been downloaded from the Emulex Web site and extracted to the Emulex
Repository folder (RMRepository). This folder is in the Program Files folder.
Procedure
To update firmware using HBAnyware:
1. In the discovery tree, click the HBA to which you want to load the firmware.
2. Select the Firmware tab.
3. On the Firmware tab, click the Browse button. In Figure 54 the Browse button is inactive (this
figure illustrates a download in progress). The Select Firmware File browse window is displayed.
• Boot Bios Message - the enabled/disabled status of the BootBIOS message on the HBA. This
message is updated automatically if the status of the BootBIOS message changes (caused by
downloading a different firmware image). Possible messages are Not Present, Disabled, or the
FCode firmware version.
• Disable/Enable button - If there is no Boot BIOS present, this button is not available. If there is a
Boot BIOS present and it is disabled, click Enable to enable BootBios. If there is a Boot BIOS
present and it is enabled, click Disable to disable the BootBios.
Loading firmware in batch mode differs from its non-batch counterpart in that it enables you to install
firmware on multiple HBAs in a single step. Batch firmware loading is restricted to a single firmware file
and to all accessible HBAs for which that file is compatible.
Note: No other HBAnyware functions can be performed while batch firmware loading is
in progress.
Prerequisites
• The FC Port driver has been installed properly.
• HBAnyware has been installed properly.
• The firmware file has been downloaded from the Emulex Web site and extracted to the Emulex
Repository folder (RMRepository). This folder is in the Program Files folder.
Procedure
To load firmware in batch mode using HBAnyware:
1. Start HBAnyware and from the menu bar, select Batch and click Download Firmware.
Note: You do not need to select a particular tree element for this operation.
Figure 55: HBAnyware Batch Firmware Download Window (Partial View), Selecting HBAs to Update
5. When you have selected the HBAs on which you want to update the firmware, click Start
Download.
6. Once downloading begins, the tree-view displays the progress. As firmware for a selected HBA
is being downloaded, it appears orange in the tree-view. After completion, the entry for the HBA
changes to green if the download succeeded or red if the download failed.
7. When downloading is complete, click Print Log to get a hard copy of the activity log.
8. Click Close to exit the batch procedure.
Prerequisites
• The FC Port driver is installed.
• elxcfg version 1.41a14 or later is installed.
• A compatible firmware file has been downloaded from the Emulex Web site and extracted to the
Emulex Repository folder (RMRepository). This folder is in the Program Files folder.
Procedure
Caution: Using the elxcfg to change the adapter firmware to an earlier (sometimes
incompatible) version may cause the system to lock or devices connected to
the adapter to become unavailable. If this happens, reboot the system.
3. Browse to the Emulex Repository folder and select the firmware file. In Figure 57 the .dwc and
.awc files have been saved in a firmware file created on the local directory.
4. Click Open. Firmware is verified and downloaded, and the following window is displayed:
Prerequisites
• The driver is installed properly.
• HBAnyware has been installed properly.
• The file has been downloaded from the Emulex Web site and extracted to the Emulex
Repository folder (RMRepository). This folder is in the Program Files folder.
Procedure
To update x86 BootBIOS using HBAnyware;
1. Start HBAnyware. If the x86 BootBIOS bootup message is enabled when you boot the system
(Firmware tab, button title is Disable - see Figure 59), skip to step 2
2. If the x86 BootBIOS bootup message is enabled when you boot the system (Firmware tab,
button title is Disable - see Figure 59), skip to step 3. Otherwise continue with step a.
a. Click the HBA in the discovery tree (left pane).
b. Select the Firmware tab.
c. Click Enable. The button title changes from Enable to Disable.
d. If the x86 BootBIOS version that is installed is the most recent (Details tab, BootBIOS
Version field), enable x86 BootBIOS on HBAs using the Boot utility (see page 9). Other-
wise, continue with step 3.
5. If the boot code message state on the board has changed, it is reflected
immediately on the Details tab.
Downloading x86 BootBIOS in batch mode allows you to install a file on multiple HBAs in a single step.
Batch loading is restricted to a single file.
Note: No other HBAnyware functions can be performed while batch firmware loading is in
progress.
7. When downloading is complete, click Print Log to get a hard copy of the activity log.
8. Click Close to exit the batch procedure.
Prerequisites
• FC Port driver installed.
• elxcfg version 1.41a13 or later is installed.
• The x86 BootBIOS file has been downloaded to a local drive.
Procedure
To update x86 BootBIOS using elxcfg:
1. In the main window, locate and select an HBA from the Available Adapters list.
2. Select Download Firmware from the Tools menu. A browse window is displayed.
3. Select the remote boot file.
4. Click Open.The remote boot file is verified and downloaded and a confirmation window is
displayed.
To use any of its features, x86 BootBIOS must be enabled on at least one installed HBA.
Prerequisites
• x86 BootBIOS is loaded on the HBA.
• x86 BootBIOS bootup message is enabled.
Procedure
To enable x86 BootBIOS on HBAs using the BIOS utility:
1. Boot the system.
2. Press <Alt E> immediately (within five seconds) when the x86 BootBIOS message is displayed
to start the BIOS utility. A menu displays a list of HBAs
3. Select the HBA by entering the appropriate number. In this example, entering 1 selects PCI
device 0A, 4 selects PCI device OA (Figure 62).
Prerequisites
• The FC Port driver is installed properly.
• HBAnyware has been installed properly.
• The EFIBoot files have been downloaded from the Emulex Web site and extracted to the Emulex
Repository folder (RMRepository). This folder is in the Program Files folder.
Caution: If you are downloading EFIBoot on an HBA attached to the remote system
disk, it is recommended to use the EFI utility to perform the download.
Procedure
To update EFIBoot using HBAnyware:
1. Start HBAnyware.
2. In the discovery tree, click the HBA to which you want to load the firmware.
3. Select the Firmware tab.
4. On the Firmware tab, click the Browse button. The Select Firmware File browse window is
displayed.
5. Browse to the Emulex Repository. Select the EFIBoot file to download and click OK. A status bar
displays the progress of the download. During this time the host bus adapter (or adapters) in the
discovery tree is displayed in red text, indicating that it is offline. It is displayed in black text when
the update is complete.
6. Reboot the system.
If you are updating EFIBoot on a dual-channel HBA, repeat steps 2 through 5 to update the EFIBoot on
the second port.
Note: If the state of the boot code message on the board has changed, this change will
be reflected immediately on the Details tab.
Prerequisites
• The FC Port driver is installed.
• elxcfg version 1.41a14 or later is installed.
• The EFIBoot file has been downloaded from the Emulex Web site and extracted to the Emulex
Repository folder (RMRepository). This folder is in the Program Files folder.
Procedure
To update EFIBoot using elxcfg:
1. In the main window, locate and select an HBA from the Available Adapters list.
2. Select Download Firmware from the Tools Menu. A browse window is displayed.
3. Browse to the Emulex Repository folder and select the EFIBoot file.
4. Click Open. The EFIBoot file is verified and downloaded, and the following window is displayed:
After HBAnyware, which includes the HBAnyware utility and remote server, is installed on a group of
systems, the HBAnyware utility on any of those systems can remotely access and manage the HBAs on
any of the other systems. This may not be a desirable situation, because any system can perform
actions such as resetting boards or downloading firmware.
The HBAnyware security package can be used to control which HBAnyware systems can remotely
access and manage HBAs on other systems in a Fibre Channel network. HBAnyware security is
systems-based, not user-based. Anyone with access to a system that has been granted HBAnyware
client access to remote HBAs can manage those HBAs. Any unsecured system is still remotely
accessible by the HBAnyware client software (HBAnyware utility).
The HBAnyware security software is designed to provide two main security features:
• Prevent remote HBA management from systems in the enterprise that the administrator does
not want to have this capability.
• Prevent an accidental operation (such as firmware download) on a remote HBA. In this case, the
administrator does not want to have access to HBAs in systems he or she is not responsible for
maintaining.
The first time the HBAnyware Security Configurator is run on a system in an environment where no
security as been configured, the initial Access Control Group (ACG) is created. At this point, only this
system has remote access to the HBAs in the systems in the ACG. They are no longer remotely
accessible from any other system.
Subsequently, additional Access Sub-Groups (ASGs) can be created. This grants systems in the ACG
the ability to remotely access the HBAs of other selected systems in the ACG.
Prerequisites
• Before you can start the HBAnyware Security Configurator, you must have it installed on your
system.
Note: Before you start the Configurator, you must make sure that all of the systems that
are part of, or will be part of, the security configuration are online on the Fibre
Channel network so that they receive updates or changes made to the security
configuration. Any system that is already part of the security installation might not
run with the proper security attributes, if updates to the security configuration are
made while it is offline. Any system that is part of the security installation and that
is offline when the HBAnyware Security Configurator starts will not be available
for security configuration changes even if it is brought online while the
Configurator is running.
Procedure
Start the HBAnyware Security Configurator:
1. On the Windows 2000 Server or Windows Server 2003 desktop, click Start, Programs and
HBAnyware Security Configurator. The Discovery window is displayed.
2. After discovery is completed, the main pane of the HBAnyware Security Configurator is
displayed.
When the HBAnyware Security software is installed on a system and the HBAnyware Security
Configurator is run for the first time, that system becomes the Master Security Client (MSC). All of the
available servers are discovered and available to become part of the system Access Control Group
(ACG). You select the systems to be added to the ACG, and the security configuration is updated on all
of the selected servers as well as on the initial system. This selection constitutes the participating
platforms in this security installation.
To create the ACG:
1. Start the HBAnyware Security Configurator for the first time in an unsecure environment. The
computer from which you run the Configurator will become the MSC. This message is displayed:
Figure 68: Access Control Group Tab, Example Before Security is Configured
4. Click the left arrow to add the servers to the Access Control Group Servers list.
5. Click OK or Apply.
The first time you run the HBAnyware Security Configurator on any system in a Fibre Channel network,
that system becomes the MSC.
On a non-MSC system, the Access Control Group tab shows the systems that are part of the client's
ACG. You cannot modify the ACG on a non-MSC. (You can modify the ACG only on the MSC or a client
higher in the security topology's hierarchy.) The ACG tab on a non-MSC system looks similar to
Figure 70:
On the MSC, you select or deselect the systems that are to be part of the security installation in the
Access Control Group tab. When you select unsecure systems and move them to the Access Control
Group Servers list, these systems are updated to secure them and bring them into the MSC's ACG.
Figure 71: Access Control Group, Example After Security from the MSC is Configured
ACG Icons
Depending on the configured security topology, a system can be a server in one or more ACGs. It can
also be a client to an ACG. The following icons indicate the state of each of the systems in the Access
Control Group Servers list.
The system is a secure server in the ACG. It does not belong to an Access Sub-Group (ASG). You
can remove this system from the ACG.
The system is a secure server in the ACG and belongs to one or more ASGs. You can remove this
system from the ACG.
The system is a secure server in the ACG and a client to an ASG. You cannot remove this system
from the ACG until you remove it as a client from the ASG.
The system is a secure server in the ACG, a secure server in one or more ASGs and a client to an
ASG. You cannot remove this system from the ACG until you remove it as a client from the ASGs.
The system is a Backup Master. You cannot remove this system from the ACG until you remove it as
a Backup Master.
The following tasks are performed on the Access Control Group tab.
Access a Switch
You can enable switch access only on a Master Security Client (MSC). Switch access grants the client
access rights to a switch to remotely access HBAs on servers in the Access Control Group (ACG).
To enable switch access:
• From the Access Control Group tab, select the Enable Switch Access check box located
above the Access Control Group Servers list.
Access Sub-Groups
The Access Sub-Group tab allows you to create multiple Access Sub-Groups (ASGs) and multiple
levels (tiers) in the security topology hierarchy. The hierarchy can be as many levels deep as desired.
However, it is recommended the hierarchy extend no more than three levels deep, as it becomes
ASG Icons
The following icons indicate the state of each of the servers in the Access Sub-Group Servers list.
The system is a server in the ASG but not in any child ASGs. You can remove it from the ASG.
The system is a server in the ASG and at least one child ASG. You cannot remove it from the ASG
until you remove it from the child ASGs.
The system is a server in the ASG and a client to a child ASG. You cannot remove it from the ASG
until you remove it as a client from the child ASG (by either deleting or editing the child ASG).
The system is a server in the ASG, a server in at least one other child ASG and a client to a child
ASG. You cannot remove it from the ASG until you remove it from the child ASGs and as a client from
the child ASG (by either deleting or editing the child ASG).
The system is a server in the ASG and a client to a non-child ASG. You can remove it from the ASG.
The following tasks are performed on the Access Sub-Group tab. This tab is illustrated in Figure 74 on
page 109. It may be useful to refer to this figure as you perform these tasks.
Create an ASG
You create a new Access Sub-Group (ASG) by selecting one system from the Access Control Group
(ACG) to be the client, and some or all of the other systems to be servers to this client, thus defining the
new client's ACG. When the HBAnyware Security Configurator is run on the new client, the displayed
ACG shows the servers that were configured in the ASG by its parent client.
To create an ASG:
1. Click the Access Sub-Groups tab.
Delete an ASG
Only a leaf node ASG may be deleted (i.e. not ASGs underneath it in the tree). If an ASG has at least
one child ASG, those child ASGs must be deleted first.
To delete an ASG:
1. From the Access Sub-Group tree, select the leaf node ASG you wish to delete.
Edit an ASG
You can change the name, client system or reserved indices of an Access Sub-Group (ASG).
To edit an ASG:
1. Click the Access Sub-Group tab.
2. Select the ASG you want to edit.
3. Click Edit. The Edit Access Sub-Group window is displayed.
The offline ASG entry serves as a placeholder for where the real ASG would be in the tree. You cannot
modify or delete the entry (although it is removed from the display if all of its child ASGs are deleted).
It is possible to delete the child ASGs of an offline ASG. However, it is recommended that you delete
them only if the client for the offline ASG will never be put online again. It is best to delete child ASGs
when the parent ASG is online.
If you choose to delete a child ASG, the operation is immediate. There is no need to press OK or Apply.
Backup Masters
A Backup Master mirrors the security data of the Master Security Client (MSC) in case it has to take over
as the MSC if the MSC becomes unable to operate or is removed from the security configuration. A
Backup master system receives all the updates to the security configuration on the MSC. However, you
cannot make modifications to the security configuration on a Backup Master.
When the Configurator runs on a Backup Master, the Access Control Group tab looks like the tab on a
non-MSC system (Figure 71 on page 106). The Access Sub-Group tab (Figure 74 on page 109)
displays the ASGs, but you cannot change the ASGs.
In order to be eligible to become a Backup Master, a system must not be a client or server in any ASG.
In other words, it must be either a server in the MSC's Access Control Group (ACG) or an unsecure
system. If it is an unsecure system, it will be secure when it becomes a Backup Master.
The first time the Backup Master tab is selected on the MSC, it looks similar to Figure 79:
Assign This System As The Reassign a Backup Master as the New MSC from the
Master Client Old MSC
Reassign a Backup Master as the New MSC from the Backup Master
WARNING: Use this method only if the MSC cannot relinquish control to a Backup Master. For
example, if the MSC is no longer bootable or able to connect to the Fibre Channel network.
Under any other circumstances, if the Backup Master takes over as the MSC, and the MSC
is still running or comes back online later, there will be two MSCs for the same security
configuration. This will eventually lead to corruption of the security configuration.
To reassign a Backup Master as the new MSC from the Backup Master:
1. On the Backup Master system that you want to reassign as the MSC, start the HBAnyware
Security Configurator.
2. Click the Backup Master tab. The following warning and button are displayed:
3. Click Assign This System As The Master Client. A prompt asks if you want to continue.
4. Click Yes. A prompt notifies you that this system is now the new MSC.
5. Click OK. The Configurator closes. Restart the HBAnyware Security Configurator to run the
former Backup Master as the MSC.
Introduction
There are several circumstances in which your system may operate in an unexpected manner.The
Troubleshooting section explains many of these circumstances and offers one or more workarounds for
each situation.
Event Log
There are two types of event logging mechanisms available in the FC Port driver. They are event ID
messages and trace messages.
• Serious errors are always logged as an event ID message. Some event ID messages are
informational notifications. See "Event ID Messages" for more information.
• Driver trace mask messages are mainly used for debugging. Each driver trace message is
generated with a brief description of the status, which may include multiple values. The
information is also displayed in the debugger window, if one is connected to the system. Trace
messages appear in the event log only if the appropriate "DriverTraceMask" is set. Driver trace
masks can be set globally or locally (see the Configuration section for procedures and more
information).
• A global driver trace mask value will apply to all HBAs or ports in the server, unless a driver
trace mask is set locally for an individual HBA or port. Any driver trace masks set locally
override the global value.
• A local driver trace mask value overrides the global driver trace mask value. For example, if
you have four host bus adapter boards in your system, and a local driver trace mask set up
for two of them, the other two will use the global driver trace mask value.
Event ID Messages
The Event ID table describes event IDs shown in the event log. Most Event ID messages do not require
a "DriverTraceMask" setting. Several event IDs are used primarily by Emulex technical support. These
are noted with asterisks.
• (*) Emulex Internal Status (asterisk is referenced in the More Information column)
• (**) Event ID 26,27 35 and 36 need SLI_TRACE_INIT mask set (asterisks are referenced in the
Description column)
• (***) Event ID 37 needs SLI_TRACE_ELS_ERRORS mask set (asterisks are referenced in the
Description column)
Table 12: Event ID Messages
Event Description More Information: Offset
Event ID
Type 0x10 - 0x13
01 Infor Informational message of driver status None
02 Warning Warning message of driver status None
03 Error Error message of driver status None
04 Error Could not map register space in I/O space None
The global DriverTraceMask parameter in the FC Port driver is set to 0 by default. This means that
certain event ID messages are always logged by the driver. These messages include memory problems,
creating device errors, login/logout warnings and failed tasks. Trace messages are additional messages
that are used for debugging purposes.
A global driver trace mask value will apply to all host bus adapters (HBAs) or ports in the server, unless
a driver trace mask is set locally for an individual HBA or port. Any driver trace masks set locally override
the global value.
Change the global driver trace mask value in the Registry Editor. You cannot change a global trace mask
value using the Emulex Configuration Utility, elxcfg. Use elxcfg to set up or change a driver trace mask
for a local (selected) HBA.
Note: Editing the registry can cause the operating system to fail, and you may have to re-
install the operating system. Always back up the registry before making any changes.
Microsoft says, "Use the Registry Editor at your own risk".
A local driver trace mask value overrides the global driver trace mask value. For example, if you have
four host bus adapter boards in your system, and a local driver trace mask set up for two of them, the
other two will use the global driver trace mask value. Setting a local driver trace mask value will apply to
the local (selected) host bus adapter if you use elxcfg, the Emulex Configuration Utility. Setting a local
driver trace mask value will apply to the host bus adapters that you specify if you use the Registry Editor.
The global DriverTraceMask parameter in the FC Port driver is set to 0 by default. This means that
certain event ID messages are always logged by the driver. These messages include memory problems,
creating device errors, login/logout warnings and failed tasks.
Setting up a driver trace mask using elxcfg will effect the selected host bus adapter only. You can set up
each host bus adapter or port with a different driver trace mask value.
To set up a driver trace mask using elxcfg:
1. Start the elxcfg utility. The main window is displayed. Select a host bus adapter from the
Available Adapters list.
3. Enter a driver trace mask value. See the Driver Trace Mask Message table for values and
descriptions.
4. On the File menu, click Apply.
The new driver trace mask value is set for the selected host bus adapter. A reboot is not necessary for
this change to take effect.
Note: You must manually define a DriverTraceMask field on the local host bus
adapter in order for a local value to display in the elxcfg's main window, otherwise
the global driver trace mask value will be displayed.
5. Make sure the Hex radio button is selected. In the Data field, enter the required driver trace
mask value (hexadecimal format). Click OK.
Table 13 is a list of trace types and the mask values. It is possible to bitwise OR two or more trace types.
Table 13: Driver Trace Mask Messages
Trace Type Mask Value Description
SLI_TRACE_MAILBOX 0x00000001 Internal Emulex trace messages for mailbox status to HBA
SLI_TRACE_SCSI_ERR 0x00000002 All SCSI informational status. Most of the string ends with
multiple values in the following order: TargetId, Lun,
SrbStatus and ScsiStatus
SLI_TRACE_IOTAGS 0x00000004 Internal Emulex trace messages for I/Os
SLI_TRACE_IOCB 0x00000008 Internal Emulex trace messages for Input/Output Control
Block (IOCB)
SLI_TRACE_FABRIC 0x00000010 Trace message between the fabric and the node. Messages
include login/out, Name server, etc.
SLI_TRACE_SCSI_MAPPING 0x00000020 SCSI mapping status includes SCSI LUN mapping
SLI_TRACE_INIT 0x00000040 Trace messages during startup and initialization
SLI_TRACE_IOCTL 0x00000080 Trace messages for the I/O control (IOCTL)
SLI_TRACE_SCSI_RESET 0x00000100 Trace messages when a SCSI reset occurs
SLI_TRACE_LOGIN 0x00000200 Trace messages during a logon process
SLI_TRACE_NET_XMIT 0x00000400 Trace messages for startup and transmitting of IP protocol
SLI_TRACE_NET_RECV 0x00000800 Trace messages for receiving IP protocol
SLI_TRACE_WAIT_READY 0x00001000 Status for wait queue including timeout and resetting
SLI_TRACE_RECV_ELS 0x00002000 Internal information on ELS receive status
SLI_TRACE_DOWNLOAD 0x00004000 Status and information on firmware download to HBA
SLI_TRACE_PRLI 0x00008000 Trace messages for port login
SLI_TRACE_REPORT_LUNS 0x00010000 Status on SCSI LUN reporting
SLI_TRACE_ENTRIES 0x00020000 Information on nodes entries includes create, close, cleanup,
etc.
SLI_TRACE_ELS_ERRORS 0x00040000 Internal information and status on ELS command
SLI_TRACE_PNP 0x00080000 Trace messages on PNP includes BusRelations,
QUERY_CAPABILITES, etc.
SLI_TRACE_POWER 0x00100000 Trace messages on system power status
SLI_TRACE_SCSI_EXC 0x00200000 Status on SRB exception with the following values in this
order: TargetId, Lun, SrbStatus and ScsiStatus
SLI_TRACE_UNSUPPORTED 0x00400000 Information on unsupported IRP and PNP requests
SLI_TRACE_LOGO 0x00800000 Information on Port logon
SLI_TRACE_FARP 0x01000000 Trace messages on FARP
SLI_TRACE_PASS_THROUGH 0x02000000 Information and status on SCSI pass through
SLI_TRACE_RNID 0x04000000 Information on sending RNID
SLI_TRACE_NSAPI 0x08000000 Information and status NSAPI
SLI_TRACE_HBA_RESET 0x10000000 Information on HBA reset
SLI_TRACE_WMI 0x20000000 Information on Windows Management Instrumentation
Utilities for the FC Port Driver Will Not Perform the installation tasks in the following order:
Install. You have a compatible Emulex host 1. Install version 2.20a12 or later of the FC Port driver (see
bus adapter installed. You do not have any the Installation section).
driver installed, and run setupapps.exe to 2. If you are updating driver version 2.13a4 or earlier, reboot
install the driver utilities, the installation wizard the computer.
attempts to install the utilities. Ultimately the
3. Install the utilities (see the Installation section).
following message appears:
"Port driver not installed. Setup will now exit."
The HBAnyware Security Configurator The system either has no HBAnyware software installed or has
(Security Configurator) software package an older version of the HBAnyware software installed. In either
will not install. An error message states that case, obtain the latest version of the HBAnyware software and
the latest version of HBAnyware must be follow the installation instructions. Remember to install the
installed first. HBAnyware software before installing the Security
Configurator package.
elxcfg Installs, but HBAnyware Does Not The FC Port driver version 2.20a12 or later must be installed
You have a compatible Emulex HBA installed before you install the utilities. HBAnyware is not compatible
and are running a previous version of the FC with versions of the FC Port driver older than 2.20a12.
Port driver for Windows 2000 Server (version Perform the installation tasks in the following order:
5-2.13a4 or older) or Windows NT (version 4- 1. Install version 2.20a12 or later of the FC Port driver (see
2.13a4 or older). You run setupapps.exe (from the Installation section).
the latest driver package) to install the driver 2. Install the utilities (see the online Installation section).
utilities, the installation wizard attempts to
install the utilities.
HBAnyware hangs on start up, Event viewer
message is displayed with event ID 7022 and
7032. The source of the Event Viewer message
is the Service Control Manager:
Event ID 7022 message is: '"The Emulex
HBAnyware service hung on starting."
Event ID 7031 message is: "The Emulex
HBAnyware service terminated unexpectedly. It
has done this 1 time(s). The following
corrective action will be taken in 0 milliseconds:
No action." elxcfg installs and HBAnyware
appears to have installed successfully, but the
service fails to run.
“HBAnyware Service failed to start” message is This is caused by high CPU usage that occurs while the
displayed during installation or update. operating system recognizes the LUNs. Ignore the message
On some Windows 2000 Server systems with and allow the installation to finish. After the installation is
large network configurations (for example, a finished, use the Service Manager in the Control Panel/
system that contains a large number of LUNs), Administrative Tools to verify that the Emulex HBAnyware
the message "HBAnyware Service failed to service is started. If it has not started, start it manually from the
start" may appear during the installation or Action menu.
upgrade procedure. This is caused by high
CPU usage that occurs while the operating
system recognizes the LUNs. Ignore the
message and allow the installation to finish.
After the installation is finished, use the Service
Manager in the Control Panel/Administrative
Tools to verify that the Emulex HBAnyware
service is started. If it has not started, start it
manually from the Action menu.
Cannot See Other HBAs or Host. Although HBAnyware uses in-band data communication, meaning that
HBAnyware is installed, only local HBAs are the management server running HBAnyware must have a
visible. The other HBAs and hosts in the SAN physical FC connection to the SAN. All the HBAs in the SAN
cannot be seen. will be visible if:
• The other servers have a FC connection to your zone of the
SAN.
• All other HBAs are running HBAnyware and the appropriate
driver.
• The other HBAs are Emulex HBAs.
Note: HBAnyware must be running on all remote hosts that
are to be discovered and managed. Remote capabilities
of HBAnyware are subject to fabric zoning configuration.
Remote hosts to be discovered and managed by
HBAnyware must be in the same zone.
Cannot see multiple zones on the same Provide a physical FC connection into each of the zones. For
screen of my management server running each zone you want to see, connect an Emulex HBAnyware
HBAnyware. enabled port into that zone.
The SAN management workstation does not From the SAN management workstation, run a terminal
have a physical FC connection into the SAN emulation session into one of the servers that has HBAnyware
because the other management tools are all loaded on it. For Windows servers, use the operating system's
out-of-band. Can HBAnyware be run on this terminal services option.
SAN management workstation?
Cannot see new LUNs. Although new LUNS Refresh the screen.
were created on the storage array, they do not
appear in HBAnyware.
Cannot access formerly accessible servers This is actually a symptom of two different problems.
via the Security Configurator or the • New Keys Were Generated While Servers Were Offline
HBAnyware Utility. • Security Removed While Servers Were Offline
See Table 19 on page 130 for details regarding these
problems.
Cannot run the Security Configurator on a You cannot run the Security Configurator on a system that is
system that is configured for only secure configured for only secure server access. Click OK to close the
access. The system has no client privileges. message and the Configurator stops.
The following message is displayed when the
Security Configurator starts: “This system is not
allowed client access to remote servers. This
program will exit.”
Changing the Driver Type. You are currently Uninstall HBAnyware before running AutoPilot Installer.
using a driver type different from the one you Uninstall HBAnyware from the Control Panel.
are installing with AutoPilot Installer. AutoPilot
Installer cannot change to a driver type that is
not included in the Distribution Executable File.
“HBAnyware Service failed to start” message is This is caused by high CPU usage that occurs while the
displayed during installation or update. operating system recognizes the LUNs. Ignore the message
On some Windows 2000 Server systems with and allow the installation to finish. After the installation is
large network configurations (for example, a finished, use the Service Manager in the Control Panel/
system that contains a large number of LUNs), Administrative Tools to verify that the Emulex HBAnyware
the message "HBAnyware Service failed to service is started. If it has not started, start it manually from the
start" may appear during the installation or Action menu.
upgrade procedure. This is caused by high
CPU usage that occurs while the operating
system recognizes the LUNs. Ignore the
message and allow the installation to finish.
After the installation is finished, use the Service
Manager in the Control Panel/Administrative
Tools to verify that the Emulex HBAnyware
service is started. If it has not started, start it
manually from the Action menu.
The HBAnyware Security Configurator The system either has no HBAnyware software installed or has
(Security Configurator) software package an older version of the HBAnyware software installed. In either
will not install. An error message states that case, obtain the latest version of the HBAnyware software and
the latest version of HBAnyware must be follow the installation instructions. Remember to install the
installed first. HBAnyware software before installing the Security
Configurator package.
HBAnyware appears on remote servers in To prevent HBAnyware from appearing on remote servers in
the SAN. the SAN, disable the HBAnyware service. Disabling this
service or process prevents the local servers from being seen
remotely.
All servers are not displayed. When I run the Make sure all of the systems are connected to the FC network
Security Configurator on the Master Security and are online when you start the Configurator. Discovery of
Client ( MSC), I do not see all of the systems in the systems is done only once, at startup. Unlike the
available servers or ACG Servers lists. When I HBAnyware utility, there is no Rediscover Devices button.
run the Security Configurator on a non-MSC, I Therefore, the Security Configurator must be restarted to
do not see all of the systems I should see in the rediscover new systems.
ACG Servers list.
Cannot add or remove a server. The Security This is normal. You can modify the ACG for your system only
Configurator shows only a list of the systems in on the MSC or on a parent client system.
this system's ACG. I cannot add or remove
systems from the ACG.
HBAnyware Utility shows non-ACG Servers. The HBAnyware Utility discovers unsecured servers as well as
The HBAnyware utility shows servers that are servers that are part of its ACG. The servers that you see that
part of the ACG and that are not part of the are not part of the ACG are unsecured. They will be
ACG. discovered by any system running the HBAnyware Utility on
the same FC fabric.
ASG Appears to Be Non-Hierarchical. It is See “Non-Hierarchical and Hierarchical ASG” on page 131
possible from a higher-level client (such as the for a discussion and a resolution to this situation.
MSC) to create an ASG 1 with system A as the
client and systems B, C, D, and E as servers.
Then create an ASG 2 with system E as the
client, but with systems F and G as servers
even though F and G are not part of ASG 1.
This makes the topology non-hierarchical.
Cannot add or remove a server. When all of the systems in an ACG are running on a single
fabric, they are all available to be added to any ASG.
However, if the client is connected to more than one fabric, it
is possible that not all of the servers in the client's ACG are
physically accessible by a chosen client for an ASG. In this
case, those servers are not available to be added to that
ASG. If you add a system to an ASG as a server, and then
make the system a client to a child ASG, you cannot remove
it from the ACG it belongs to as a server until you delete the
ASG that it is a client to. Before you delete a server from an
ASG, you must first remove the server from any lower level
ASGs to which it belongs.
In the ASG tree of the Access Sub-Groups The client system for the ASG was not discovered when the
tab, one or more of the names of the ASGs is Configurator was started. This is actually a symptom of two
displayed as "- ASG (Client Offline) -" different problems.
• All Servers Are Not Displayed
• New Keys Were Generated While Servers Were Offline
See Table 19 on page 130 for details regarding these
problems.
Not All Servers are available to an ASG. A client system can be connected to more than one fabric.
When you create a new ASG or modify an While the system the Security Configurator is running on may
existing ASG, not all of the servers in the ACG be able to access all of the servers in its ACG, it is not
are available to be added to the ASG. necessarily the case that the selected client for the ASG can
access all of the servers. Only those that can be accessed by
the selected server will be available.
Cannot create a backup master. Select a system (or group of systems) from the MSC to be
the Backup Master. The system must be either an unsecured
system (which will be secured by being made a Backup
Master), or a system that is not part of any ASG (client or
server). These systems will mirror the MSC's security
configuration. Because the Backup Master may some day
take over as the MSC, the Backup Master must be able to
physically access all of the systems that the MSC can
access. Therefore, if the MSC is connected to multiple
fabrics, the Backup Master also must be connected to those
same fabrics. When you select a Backup Master, the
HBAnyware Security Configurator displays a warning if it
detects that the system selected to be a Backup Master is
not able to physically access the same systems that the
MSC can access
Cannot modify the Security Configurator. Select a system (or group of systems) from the MSC to be
the Backup Master. The system must be either an unsecured
system (which will be secured by being made a Backup
Master), or a system that is not part of any ASG (client or
server). These systems will mirror the MSC's security
configuration. The Backup Master has client access from the
HBAnyware Utility to all of the servers in the MSC's ACG.
However, the Backup Master does not have client access to
the MSC and it cannot modify the security configuration
(create, modify or delete ASGs).
No Backup Master and the MSC Is no longer The servers are no longer part of a valid security
available. I do not have a Backup Master and the configuration because there is no MSC to provide master
MSC system is no longer available. The servers control of the configuration. In order to reset the security on
are still secure. I installed the Security the affected servers, you will need to contact Emulex
Configurator on another system, but I cannot Technical Support to receive a special application and
access those servers to remove the security from instructions on the reset procedure. After the servers have
them. been reset, they should be seen by the Security Configurator
and the HBAnyware Utility. At this point, you can set up
security again through another MSC. At this time, also create
a Backup Master.
The Backup Master tab is not available. The Backup Master tab is displayed only when the Security
Configurator is running on the MSC or a Backup Master. You
use this tab to set up a system or systems to be backups to
the MSC and to replace the MSC with a Backup Master.
Each time you start the Security Configurator on the MSC
and there is no Backup Master assigned, a warning
message urges you to assign at least one Backup Master to
prevent the loss of security information if the MSC were to
become disabled.
The following error message is displayed when You entered a duplicate ASG name in the Access Sub-
creating an ASG: “The Access Sub-Group name Group Name field. At each level of the security topology,
already exists. Please use a different name.” each ASG name must be unique. Click OK on the
message and enter a unique ASG name.
The following error message is displayed when The offline ASG entry serves as a placeholder for where
deleting an ASG: “The Access Sub-Group the real ASG would be in the tree. You can neither modify
parent’s ASG is offline. You should delete the nor delete it (although it is removed from the display if all of
ASG when the parent ASG is available. This ASG the child ASGs are deleted). It is possible to delete the
should only be deleted if the parent ASG will not child ASGs of the offline ASG. However, it is recommended
be available again. Are you sure you want to that you delete them only if the client for the offline ASG
delete this ASG?” will never be put online again. It is best to delete child
ASGs when the parent ASG is online. Click Yes on the
error message to delete the ASG or No to close the
message without deleting.
The following error message is displayed when The system you are running the Security Configurator on is
starting the HBAnyware Security Configurator: “This already under the security umbrella as a server to one or
system is not allowed client access to remote more clients. To make this server a client (so that it can
servers. This program will exit.” successfully run the Security Configurator), click OK to
close the message and exit the program, then:
1. Run the Security Configurator on the MSC or on any
client that has this server in its ASG.
2. Make this server a client to a group of servers.
The following error message is displayed when Use the Backup Master tab to assign a Backup Master for
starting the Security Configurator: "There are no the MSC.
Backup Master Client Systems assigned to this
security configuration. At least one should be
assigned to avoid loss of the security
configuration should the Master Client System
become disabled."
The first time the Security Configurator is started in Click OK on the message and complete the ACG setup.
an unsecure environment, the following message is The system on which the Security Configurator is running
displayed: “This utility is running on an unsecure will become the MSC.
system. Continuing will allow you to set up a
new security configuration making this system
the Master Client System.”
When I start the Security Configurator on a Backup Because each Backup Master system receives all the
Master system, the following message is displayed: updates that the MSC makes to the security configuration,
“Warning: This system is a backup master client the Backup Master systems must be online when the
system. Therefore you will only be able to view Security Configurator is running on the MSC. Otherwise,
the security configuration. To make changes, updates to the security configuration are not reflected to
you will need to run this utility on the master the Backup Master. If the Backup Master becomes the
client system.” MSC, corruption of the security configuration may occur.
Click OK to close the message.
The MSC is no longer bootable or able to connect You must reassign a Backup Master as the new MSC
to the FC network. from the Backup Master.
Warning: Use this procedure only if the MSC cannot
relinquish control to a Backup Master. For
example, if the MSC is no longer bootable or
able to connect to the FC network. Under any
other circumstances, if the Backup Master
takes over as the MSC and the MSC is still
running or comes back online later, there will
be two MSCs for the same security
configuration. This will eventually lead to
corruption of the security configuration.
New Keys Were Generated While Servers Were The servers are no longer part of the security
Offline. A "Generate New Keys" operation was configuration. In order to reset the security on the
performed while one or more of the servers were affected servers, you must contact Emulex Technical
offline. Now those servers can no longer access the Support to receive a special application and instructions
HBAnyware Security Configurator or the HBAnyware on the reset procedure. After the servers have been
utility. reset, they can be added back into the security topology
by the MSC.
Note: If the server was also a client to an ASG, then
when you run the Security Configurator on the
MSC or a parent client of this client, its label in the
ASG tree of the Access Sub-Group tab will be "-
ASG (Offline Client) -". You must delete the ASG
(after deleting the child ASGs) and recreate the
ASG configuration of this client and its child ASGs.
Security Removed While Servers Were Offline. The servers are no longer part of the security
Security was removed while one or more servers configuration. In order to reset the security on the
were offline. I can no longer access those servers affected servers, contact Emulex Technical Support to
from the Security Configurator or the HBAnyware receive a special application and instructions on the reset
utility. procedure. After the servers have been reset, they
should be seen by the Security Configurator or the
HBAnyware utility.
It is possible from a higher-level client (such as the MSC) to create an ASG 1 with system A as the client
and systems B, C, D, and E as servers. Then create an ASG 2 with system E as the client, but with
systems F and G as servers even though F and G are not part of ASG 1. This makes the topology non-
hierarchical (see Figure 84).
System E is part of ASG 1, but has been made a client of ASG 2, and both of the servers in ASG 2 are
not part of ASG 1. You could not create this ASG on system A, but you could on the MSC (or on a parent
client) because it can access systems F and G. Although not shown in the picture, it is also possible to
make system A a server in ASG 2, creating a case where system A and system E are both clients and
servers to/of each other.
While the Security Configurator will allow you to set up ASGs this way, it is best not to create a topology
like this as it can lead to confusion. The best way is to set up the ASG on the MSC (or a higher-level
parent) where the clients and servers do not cross over into other ASGs. Then set up ASGs on clients of
those ASGs in the same manner, keeping the topology hierarchical (see Figure 85).