Cisco Intelligent Automation for Cloud Installation Guide Release 4.0 Published: April 4, 2014 Cisco Systems, Inc. www.cisco.com Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at www.cisco.com/go/offices. Text Part Number: OL-29973-01 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. Cisco Intelligent Automation for Cloud 4.0 User Guide © 2014 Cisco Systems, Inc. All rights reserved. Preface This guide describes how to install Cisco Intelligent Automation for Cloud 4.0, and how to configure the software for first time use. Audience This guide is for administrators who are responsible for setting up, maintaining, and configuring Intelligent Automation for Cloud 4.0. The tasks in this guide are typically performed exclusively by Cisco Administrators. Related Documentation See the Cisco Intelligent Automation for Cloud 4.0 Documentation Overview for a list of all available guides for Cisco Intelligent Automation for Cloud 4.0. Note We sometimes update the documentation after original publication. Therefore, you should occasionally review the documentation on Cisco.com for possible updates. Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html. Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 vii Cisco Intelligent Automation for Cloud Installation Guide viii OL-29971-01 CONTENTS CHAPTER 1 Ensuring Required Prerequisites Are Ready-to-Go Cisco IAC Components 1-1 1-1 Checking Required Prerequisites 1-2 Setting Up Your Networks 1-3 Preparing Storage Management 1-3 Preparing Cisco UCS and Bare Metal Operating System Provisioning 1-4 Setting Up Cisco UCS Manager 1-4 Setting Up Cisco UCS Manager Pools 1-4 Setting Up Cisco UCS Manager Service Profile Templates and Policies Preparing VMware Software 1-5 Setting Up Organizations and Users Preparation 1-6 CHAPTER 2 Installing and Configuring Optional Software Understanding Cisco Server Provisioner 1-4 2-1 2-1 Understanding Cisco Prime Network Services Controller 2-2 Understanding Cisco UCS Director 2-2 Understanding Cisco UCS Manager 2-2 Creating Cisco UCS Manager Pools 2-2 Understanding Cisco UCS Manager Service Profile Templates and Policies Storage Management 2-3 Preparing the Directory and Mail Server via LDAP and SMTP 2-4 VMware 2-4 OpenStack 2-5 Amazon EC2 2-5 CHAPTER 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Understanding the Cisco IAC Virtual Appliance 2-2 3-1 3-1 Installing Prime Service Catalog via the Virtual Appliance .OVA 3-2 Completing the Three Sections of the Properties Window 3-4 CHAPTER 4 Installing Cisco Process Orchestrator 4-1 Download and Install Any Available Patches 4-1 Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 -ii CHAPTER 5 Installing Cisco IAC 4.0 Automation Packs Launching the Setup Wizard 5-1 5-1 Installing the Cisco IAC, Core, and Common Automation Packs 5-3 Installing the Cisco IAC-Specific Automation Packs 5-6 Installing the Intelligent Automation for Compute Pack 5-6 Installing the Intelligent Automation for Cloud Starter Pack 5-8 Installing the Intelligent Automation for Cloud Extension Samples (Optional) Installing the Intelligent Automation for Cloud Pack 5-10 Completing the Process 5-10 Importing and Deploying Portal Packages 5-11 Copying the Cisco IAC Portlets Package and Extracting Files Configuring Cisco Prime Service Catalog Stylesheets 5-12 Importing and Deploying Portal Pages 5-13 CHAPTER 6 Completing Optional Tasks Configuring an LDAP Server Configure Events 6-1 6-2 6-3 6-3 6-4 Creating a Security Group for Each User Role on the LDAP Server Adding the nsAPI User to the Cloud Administration Group Configuring User Role Mappings 6-6 Enabling Directory Integration 7 6-5 6-6 6-6 Administrative On-boarding of User Accounts CHAPTER 5-11 6-1 Setting Up Active Directory Integration (If Applicable) Prerequisites 6-1 Configuring Authentication Configuring Mappings 5-9 6-7 Installing & Importing Additional Components Installing and Configuring the REX Adapter Installing the REX Adapter 7-2 7-1 7-1 Importing and Deploying Intelligent Automation for Cloud Service Catalogs Importing and Deploying Prime Service Catalog Catalogs 7-3 Installing the Catalogs 7-3 Deploying the Catalogs 7-4 Deploying Patches 7-5 7-3 Cisco Intelligent Automation for Cloud Installation Guide ii OL-29971-01 CHAPTER 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Defining the Properties 8-2 CHAPTER 9 Configuring Cisco IAC With the Wizard 8-1 8-1 9-1 Accessing the Configuration Wizard 9-1 The Wizard Welcome Screen 9-2 Disabling Prime Service Catalog 9-2 Verifying the Custom Style 9-3 Configuring Agent Properties 9-4 Creating Service Accounts for Both REX Agent and nsAPI Users 9-4 Setting Username and Password for REX Set REX Agent Properties 9-8 Starting the REX Set Agent Properties Agent 9-8 Setting REX Agent Configuration 9-9 Starting All REX Agents 9-11 Configuring a DB Agent 9-12 Starting a DB Agent 9-13 Configuring the nsAPI Agent 9-14 Starting the nsAPI Agent 9-14 Setting Up Cloud Administration 9-15 Adding a Cloud Administrator Organization 9-15 Adding Cloud Administrators 9-16 Adding Cloud Administrators: Directory Service Users Only Making nsAPI a Cloud Provider Technical Administrator 9-18 Adding Site Administrator Role to nsAPI User 9-18 Connecting Cisco Process Orchestrator 9-19 Starting All Other Agents 9-19 Initializing Cisco IAC Licensing 9-20 Connecting to the Cloud Infrastructure 9-21 Connecting Cisco IAC Management Appliance (Optional) Connecting Cloud Infrastructure 9-24 Discovering Cloud Infrastructure (Optional) 9-25 Discovering Network Devices (Optional) 9-25 Registering Nexus 1000v Devices (Optional) Managing PODs 9-27 Creating Network PODs (Optional) Creating Compute PODs 9-29 9-17 9-22 9-26 9-27 Setting System-Wide Services and Provisioning 9-30 Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 iii Setting System-Wide Service Options 9-30 Specifying Provisioning Settings 9-31 Configuring the E-Mail Notification Templates 9-33 Assigning From Address for E-Mail Templates 9-33 Creating Resources for Network Services 9-34 Required Steps 9-34 Registering a Datastore 9-34 Creating a Service Network 9-35 Creating Infrastructure Networks 9-37 Creating an Internet Network (Optional) 9-38 Configuring Resources for Network Services (Optional) 9-38 Adding a Public Subnet to Network POD (Optional) 9-38 Completing the Setup 9-39 APPENDIX A Glossary of Terms APPENDIX B Solution Prerequisites Checklists A-1 Default Ports and Protocols Limitations and Scalability B-1 B-1 B-2 Storage Management Requirements B-2 Cisco UCS Manager and Bare Metal Operating System Provisioning Requirements VMware Software Requirements B-3 Directory and Mail Server Requirements Organizations and Users Preparation Create a Virtual Datacenter Create Shared Zone B-3 B-4 B-4 B-4 Order VM From Templat B-4 Order a VM and Install an Operating System Order a Physical Server Provision ESXi APPENDIX C B-2 B-5 B-5 B-5 Solution Deployment Checklists C-1 Cloud Infrastructure Setup Checklist C-1 Cisco Process Orchestrator Setup Checklist REX Adapter Installation Checklist C-1 C-2 Directory Integration Setup Checklist (If Applicable) Service Catalog Deployment Checklist C-2 C-3 Cisco Intelligent Automation for Cloud Installation Guide iv OL-29971-01 Portal and Portlet Deployment Checklist Cloud Administration Setup Checklist C-3 C-3 Directory Integration Setup Checklist (If Applicable) C-4 Cisco Intelligent Automation for Cloud Prerequisites C-4 Email Notification Template Modification Checklist Organizations and Users Setup Checklist APPENDIX D C-4 C-5 Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Hardware Specifications Software Requirements D-1 D-2 Database Connection Settings D-2 Process Orchestrator Web Service Target Settings Cisco Prime Service Catalog Credentials SMTP Information D-1 D-3 D-4 D-4 Process Orchestrator-Prime Service Catalog Integration API Connection User Account Credentials Cisco Prime Service Catalog Request Center and Service Link User Account Credentials REX Adapter Installation Settings D-4 D-5 D-5 Directory Integration Settings (If Applicable) LDAP Server Configurations D-6 Configure Authentication D-6 Configure Mapping D-6 Configure Events D-7 Mappings Settings D-7 Events Settings D-7 Cloud Administrator and Organization Settings D-6 D-8 Cloud Platform Connection Settings D-8 VMware vCenter Server Connection Settings D-8 Cisco UCS Manager Connection Settings D-9 Cisco Server Provisioner Connection Settings D-9 Provisioning Settings D-9 System-wide Service Options Network Settings POD Settings D-10 D-10 D-11 Shared Zone Settings D-11 Standards Settings (Optional) D-11 Lease Term Standards D-11 Operating Systems Standards D-12 Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 v Server Size Standards D-13 VDC Size Standards D-14 APPENDIX E Processes List E-1 Process Orchestrator Processes E-1 Processes E-1 Server Provisioning Processes E-1 Cloud Administration Action Handling Processes E-1 Cloud User Action Handling Processes E-2 Utility Processes E-3 Atomic Processes E-3 Portal Request Processes E-4 Data Synchronization Processes E-4 Validation Processes E-5 Process Extension Points E-5 CloudSync Discover Infrastructure E-5 Commission ESXi Host E-6 Commission Virtual Server E-6 Commission Physical Server E-6 Snapshots E-7 Connection Status/Platform Elements E-7 Virtual Data Centers (Process Extension Points) E-7 Network Management E-7 IPAM E-8 Cisco Server Provisioner E-8 Manage Servers E-8 Utilities E-8 Prime Service Catalog Services E-8 Services E-8 Commission Server Services E-8 Shared Provider Zone Services E-9 Virtual Data Center Services (PSC) E-9 Server Operations Services E-9 System Setup Services E-9 Tenant Management Services E-11 Service Extension Points E-11 Commission Server Services E-11 Shared Provider Zone Services E-12 Virtual Data Center Services E-12 Cisco Intelligent Automation for Cloud Installation Guide vi OL-29971-01 Server Operations Services E-12 System Setup Services E-13 Tenant Management Services (Post-Servicing) APPENDIX F Privileges for vCenter Service Account Privilege List E-16 F-1 F-1 INDEX Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 vii Cisco Intelligent Automation for Cloud Installation Guide viii OL-29971-01 CH A P T E R 1 Ensuring Required Prerequisites Are Ready-to-Go Successful installation of Cisco IAC 4.0 requires that certain hardware and software prerequisites be in place before you start the install process. Cisco IAC Components The figure that follows shows the deployment picture showing the Cisco IAC 4.0 and its major functional components, which include (for the 4.0 release): • Cisco Prime Network Services Controller • Cisco Process Orchestrator • Cisco Prime Service Catalog • Cisco Server Provisioner • Cisco UCS Director • Cisco UCS Manager • External components: – vCenter – Amazon EC2 – Openstack Tip For the complete list of interoperable components and version/release information, please see the Cisco Intelligent Automation for Cloud 4.0 Compatibility & Requirements Matrix. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 1-1 Chapter 1 Ensuring Required Prerequisites Are Ready-to-Go Checking Required Prerequisites Figure 1-1 Major Components of Cisco IAC 4.0 Cisco Prime Network Services Controller Cisco Process Orchestrator Cisco Cisco Advanced Services Cisco UCS Director IAC Cisco Server Provisioner 370872 Cisco Prime Service Catalog Checking Required Prerequisites Required prerequisite components include but are not limited to: Note • Microsoft IIS • Microsoft .NET framework Be sure to enable Microsoft IIS before installing .NET framework. This will automatically register ASP.NET with Microsoft IIS. • Oracle and/or Microsoft SQL Server database • Java and JBoss • A web browser: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, or Apple Safari Please check that these components are installed, configured, and running in the supported versions (see the Cisco Intelligent Automation for Cloud 4.0 Compatibility Matrix for details) before you begin the Cisco Intelligent Automation for Cloud installation process. Tip Please see Appendix B, “Solution Prerequisites Checklists,”for more details. Note Please refer to the installation guides for each component product for complete information on how to install and configure the associated software; for example, see the Cisco Process Orchestrator guides for complete information on Cisco Process Orchestrator. Cisco Intelligent Automation for Cloud Installation Guide 1-2 OL-29971-01 Chapter 1 Ensuring Required Prerequisites Are Ready-to-Go Checking Required Prerequisites Note DBAs commonly have a convention or security policy requiring a user-naming scheme. Note that you will most likely not be able to set the username of the service account according to your practices with Cisco IAC 4.0. Setting Up Your Networks Prepare your networks to include the following requirements: • At least one VLAN to use as a destination network for provisioning servers. You can define a destination network as a community, user, or management network when you create the network in Prime Service Catalog. – Community networks are used by the shared zone and any server owner can provision servers to the shared zone. – User networks are assigned to specific Virtual Data Centers owned by an organization. – Management infrastructure within the cloud system may be used to manage cloud servers, for example, for remote access and monitoring. • Optional: – An unrouted VLAN for use by Cisco Server Provisioner for server deployment. This is only needed if any of the following features are enabled: Virtual Machine and Install OS Ordering, Physical Server Ordering, ESXi Provisioning. – A VLAN to use as a destination network for ESXi hosts. This infrastructure network represents the management network the host will use to communicate with your vCenter Platform Element. This is only needed if the ESXi Provisioning feature is enabled. Preparing Storage Management Prepare your storage management system using the following information: • Install and configure Storage Area Network (SAN) storage or iSCSI storage required for Distributed Resource Scheduler (DRS) clusters. For iSCSI or Network File System (NFS) storage solutions, VMware supports Dynamic Host Configuration Protocol (DHCP.) It is important that any of these solutions use DHCP, otherwise static IP information, wherever it is applicable, will have to be configured manually after the automated process is complete. • Create the storage volumes that will be used for datastores and datastore clusters. • Configure Logical Unit Number (LUN) access in your storage management system and assign World Wide Node Name (WWN) pools (see Setting Up Cisco UCS Manager Pools, page 1-4) vCenter datastores map to or reference specific LUNs. These mappings will replicate to a new host if the host blade has been given the same LUN access as all the other hosts in the cluster. This is accomplished through WWN pools. LUN configuration can be assigned to any WWN that is within a specific range. For a new host to be assigned WWNs that are within that range, ensure that it is coming from the pre-defined pool. Whenever a service profile is created from a service profile template for a blade, specify that the template generate WWN assignments from a specific pre-defined pool in Cisco UCS Manager. Datastore access should automatically be in sync with all the other hosts in that cluster when the service profile template is used to provision the blade. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 1-3 Chapter 1 Ensuring Required Prerequisites Are Ready-to-Go Checking Required Prerequisites Preparing Cisco UCS and Bare Metal Operating System Provisioning Setting Up Cisco UCS Manager While Cisco UCS Manager is an optional component, should your cloud deployment include this technology, Cisco UCS Manager should be installed and configured before installing Cisco IAC. For instructions on installing and configuring the application, see Cisco UCS Manager documentation on Cisco.com. Setting Up Cisco UCS Manager Pools Cisco UCS Manager utilizes different types of pools to control assignment of unique identifiers (such as UUIDs, MACs and WWNs) to blade servers. These pools must be created and assigned to Service Profiles. You need to create the following pools: • Universal Unique Identifier (UUID) Suffix Pool—Used to uniquely identify each blade server. • Media Access Control (MAC) Address Pool—Used to assign a unique MAC address to each vNIC assigned to a blade. • WWNN (World Wide Node Name) Pool—Assigned to a node in a Fibre Channel fabric, and used to assign unique WWNNs to each blade in a range that will allow appropriate LUN access • WWPN (World Wide Port Names) Pool—Assigned to specific ports in a Fibre Channel fabric, and used to assign unique WWPNs to each blade in a range that will allow appropriate LUN access For instructions on creating the pools, see Cisco UCS Manager documentation on Cisco.com. Setting Up Cisco UCS Manager Service Profile Templates and Policies These are only needed when the Physical Server Ordering or ESXi Provisioning options are enabled in Setting System-Wide Service Options, page 9-30. Cisco UCS service profile templates are used for duplicating or deploying multiple UCS service profiles with the same configuration. By associating pools with a template, you ensure that a WWN or MAC Address, for example, will always be within a pre-specified range. We recommend that a separate service profile template be created for each vCenter cluster. For Cisco IAC, vCenter object names cannot contain forward slashes. For more information, please see Preparing VMware Software, page 1-5. Note When you register a service profile template through the Templates portal via the “Manage Cloud Infrastructure” portlet, you will be prompted to associate it with a vCenter cluster if you have selected it to be a Hypervisor template. The templates must meet the following requirements: • At least one hypervisor service profile template for each vCenter cluster with the same quantity and configuration of vNICs as on other hosts in the same cluster. The native VLAN for the first vNIC should be set to the Management VLAN for that vCenter. This is only required for ESXi. • At least one service profile template for physical server provisioning • A local boot policy assigned to the physical server service profile template which is set to boot to local disk Cisco Intelligent Automation for Cloud Installation Guide 1-4 OL-29971-01 Chapter 1 Ensuring Required Prerequisites Are Ready-to-Go Checking Required Prerequisites • A boot policy named PXEBoot which is configured to boot from the network. This name is mandatory. • Provisioning templates are prepared according to Cisco Server Provisioner product documentation. (See the LinMin Bare Metal Provisioning User's Guide on LinMin.com.) • UCS blades for provisioning VMware ESXi hypervisor hosts have at least one local drive. Preparing VMware Software This is only needed when the ESXi Provisioning option is enabled in Setting System-Wide Service Options, page 9-30. For Cisco IAC, vCenter object names cannot contain forward slashes. Cisco IAC uses forward slashes as delimiters in object paths and parses vCenter paths by display name. Note Forward slashes in vCenter object names break the parsing process. If any of your vCenter object names contain forward slashes, please rename the files before you specify a vCenter path. Supported Installation Media for ESXi Provisioning of the ESXi Hypervisor OS always uses the first local drive installed in the blade. Cisco IAC supports installation of ESXi to local disks only (not over a SAN). VMware Installation Requirements The following VMware software should be installed: • Tip vSphere PowerCLI on the Process Orchestrator server to support the activities for adding a new ESXi host to a cluster. For supported software versions, see the Cisco Intelligent Automation for Cloud Product Compatibility Matrix. Prepare your VMware environment for virtual provisioning using the following checklist: • Install VMware vCenter. • Configure VMware vCenter: – Apply enterprise licensing and enable VMware vSphere Distributed Resource Scheduler (DRS). – Determine and create the datacenter, clusters, hosts, datastores, networks, and resource pools to which all commissioned hosts and VMs will be deployed. • Define at least one VM template with VMware tools using a boot disk. Provisioned hosts will have evaluation licensing only. You will need to add licensing manually in the vSphere Client. Tip For information about installing and configuring your VMware environment, see the ESX and vCenter Server Installation Guide. Note Users must have the ability to create resource pools. In addition, resource pools must be enabled on VMware VCenter. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 1-5 Chapter 1 Ensuring Required Prerequisites Are Ready-to-Go Checking Required Prerequisites Setting Up Organizations and Users Preparation Prepare a list of organizations, organization users, and Organization Technical Administrators to configure in Prime Service Catalog. Note For more information about the predefined user roles, their respective capabilities, and how this information can help you plan for your administrator’s responsibilities, see the “User Roles and Capabilities” section in the Cisco Intelligent Automation for Cloud User Guide. Cisco Intelligent Automation for Cloud Installation Guide 1-6 OL-29971-01 CH A P T E R 2 Installing and Configuring Optional Software This chapter covers optional software that can be used with Cisco IAC 4.0. Note that this chapter provides only product names. For version numbers, see the Cisco Intelligent Automation for Cloud Product Compatibility Matrix. Optional software includes but is not limited to: • Cisco Software, including: – Cisco Server Provisioner – Cisco Prime Network Services Controller – Cisco UCS Director – Cisco UCS Manager – IAC Virtual Appliance • VMware, including: – vCenter – ESXi – vSphere – vSphere PowerCLI • Microsoft Active Directory and other LDAP servers • OpenStack • Amazon EC2 Understanding Cisco Server Provisioner Cisco Server Provisioner is software that automatically installs operating environments for physical and virtual servers and blades, a process known as “bare metal provisioning.” The provisioner also supports Cisco Unified Computing System (UCS) installations and is integrated with the Cisco Intelligent Automation for Cloud and Cisco Intelligent Automation for Compute software stacks. Therefore, it can be operated through the Cisco Process Orchestrator within the stack and take advantage of the capabilities of the orchestrator, or it can be operated directly through its own web-based user interface independently of other solutions to quickly build out data farms of UCS blades and servers. See Cisco Server Provisioner documentation on Cisco.com. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 2-1 Chapter 2 Installing and Configuring Optional Software Understanding Cisco Prime Network Services Controller Timesaver Cisco Server Provisioner is needed only if you plan to create a virtual machine (VM) and install an OS, or to provision a physical server. Without it, you can still commission VMs from template. Understanding Cisco Prime Network Services Controller Cisco Prime Network Services Controller (formerly known as Cisco Virtual Network Management Center, or VNMC) provides centralized multi-device and policy management for Cisco network virtual services. For instructions on installing and configuring Cisco Prime Network Services Controller, see Cisco Prime Network Services Controller documentation on Cisco.com. Understanding Cisco UCS Director Cisco UCS Director (formerly Cisco Cloupia) delivers unified management for industry-leading converged infrastructure solutions based on Cisco Unified Computing System (UCS) and Cisco Nexus technologies. UCS Director is a higher-level manager over multiple UCS Managers. For instructions on installing and configuring Cisco UCS Director, see Cisco UCS Director documentation on Cisco.com. Understanding Cisco UCS Manager Cisco Unified Computing System (UCS) Manager provides unified, embedded management of all software and hardware components in the Cisco UCS. It controls multiple chassis and manages resources for thousands of virtual machines. For instructions on installing and configuring Cisco UCS Manager, see Cisco UCS Manager documentation on Cisco.com. Creating Cisco UCS Manager Pools Cisco UCS Manager utilizes different types of pools to control assignment of unique identifiers (such as UUIDs, MACs and WWNs) to blade servers. You create and assign these pools to Service Profiles. Pools include: • UUID Suffix Pool—Used to uniquely identify each blade server. • MAC Address Pool—Used to assign a unique MAC address to each vNIC assigned to a blade. • WWNN (World Wide Node Name) Pool—Assigned to a node in a Fibre Channel fabric, and used to assign unique WWNNs to each blade in a range that will allow appropriate LUN access • WWPN (World Wide Port Names) Pool—Assigned to specific ports in a Fibre Channel fabric, and used to assign unique WWPNs to each blade in a range that will allow appropriate LUN access For instructions on creating the pools, see Cisco UCS Manager documentation on Cisco.com. Understanding Cisco UCS Manager Service Profile Templates and Policies Cisco UCS Service Profile Templates are used for duplicating or deploying multiple UCS service profiles with the same configuration. By associating pools with a template, you ensure that a WWN or MAC Address, for example, will always be within a pre-specified range. This is only needed when the Physical Server Ordering or ESXi Provisioning options are enabled. For more information, see the Cisco Intelligent Automation for Cloud Administrator Guide. We recommend that a separate service profile Cisco Intelligent Automation for Cloud Installation Guide 2-2 OL-29971-01 Chapter 2 Installing and Configuring Optional Software Understanding Cisco Prime Network Services Controller template be created for each vCenter cluster. For Cisco IAC, vCenter object names cannot contain forward slashes. When you register a service profile template through the Templates portal, you will be prompted to associate it with a vCenter cluster if you have selected it to be a Hypervisor template. The templates should meet the following requirements: • At least one hypervisor service profile template for each vCenter cluster with the same quantity and configuration of vNICs as on other hosts in the same cluster. The native VLAN for the first vNIC should be set to the Management VLAN for that vCenter.This is only required for ESXi. • At least one service profile template for physical server provisioning • A local boot policy assigned to the physical server service profile template which is set to boot to local disk • A boot policy named PXEBoot which is configured to boot from the network. Mandatory. • Provisioning templates are prepared according to Cisco Server Provisioner product documentation. (See the LinMin Bare Metal Provisioning User's Guide on LinMin.com.) • UCS blades for provisioning VMware ESXi hypervisor hosts have at least one local drive. Storage Management Install and configure SAN storage or iSCSI storage required for DRS clusters. For iSCSI or NFS storage solutions, VMware supports DHCP. It is important that any of these solutions use DHCP, otherwise static IP information, wherever it is applicable, will have to be configured manually after the automated process is complete. You create the storage volumes that will be used for the datastore clusters, and configure LUN access in your storage management system and assign WWN pools (see Creating Cisco UCS Manager Pools, page 2-2) vCenter datastores map to or reference specific LUNs. These mappings will replicate to a new host if the host blade has been given the same LUN access as all the other hosts in the cluster. This is accomplished through WWN pools. LUN configuration can be assigned to any WWN that is within a specific range. For a new host to be assigned WWNs that are within that range, ensure that it is coming from the pre-defined pool. Whenever a service profile is created from a service profile template for a blade, specify that the template generate WWN assignments from a specific pre-defined pool in Cisco UCS Manager. Datastore access should be automatically be in sync with all the other hosts in that cluster when the service profile template is used to provision the blade. A Note on VLANs You need at least one VLAN to use as a destination network for provisioning servers. You can define a destination network as a community, user, or management network when you create the network in Prime Service Catalog. • Community networks are used by the shared zone and any server owner can provision servers to the shared zone. • User networks are assigned to specific Virtual Data Centers owned by an organization. • Management networks within the cloud system may be used to manage cloud servers, for example, for remote access and monitoring. You can optionally have unrouted VLAN for use by Cisco Server Provisioner for server deployment. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 2-3 Chapter 2 Installing and Configuring Optional Software Understanding Cisco Prime Network Services Controller This is only needed if any of the following features are enabled: Virtual Machine and Install OS Ordering, Physical Server Ordering, ESXi Provisioning. In addition, you can optionally have a VLAN to use as a destination network for ESXi hosts. This infrastructure network represents the management network the host will use to communicate with your vCenter Platform Element. This is only needed if the ESXi Provisioning feature is enabled. Preparing the Directory and Mail Server via LDAP and SMTP To prepare your directory and e-mail environment, ensure that the following conditions are met: Note • LDAP server software, such as Microsoft Active Directory, is installed and configured. • SMTP server is installed and configured with an account to send and receive e-mails. For information on configuring the STMP server, see the Cisco Process Orchestrator Installation and Administration Guide or the Cisco Cisco Prime Service Catalog Installation Guide. VMware In Cisco IAC, commissioning a new ESXi host is performed when moving a blade in the Maintenance pool to the Virtual pool. The orchestration process involves provisioning (installing) ESXi on to a blade, adding it to the vSphere infrastructure, copying the configuration from one of the existing hosts in a cluster and applying it to the new host using VMware host profiles and exiting Host Maintenance mode. For Cisco IAC, vCenter object names cannot contain forward slashes. Cisco IAC uses forward slashes as delimiters in object paths and parses vCenter paths by display name. Forward slashes in vCenter object names break the parsing process. If any of your vCenter object names contains forward slashes, please rename the files before you specify a vCenter path. VMware software prep is needed only when the ESXi Provisioning option is enabled. For more information, see the Cisco Intelligent Automation for Cloud Administrator Guide. Note Provisioning of the ESXi Hypervisor OS always uses the first local drive installed in the blade. Also, for Cisco IAC, only local installs of the ESXi Hypervisor OS are supported. • Install VMware vSphere PowerCLI on the Process Orchestrator server to support the activities for adding a new ESXi host to a cluster. • Next, install and configure VMware vCenter by applying enterprise licensing and enable VMware vSphere Distributed Resource Scheduler (DRS). • Then, determine and create the datacenter, clusters, hosts, datastores, networks, and resource pools to which all commissioned hosts and VMs will be deployed. • Finally, define at least one VM template with VMware tools. Provisioned hosts will have evaluation licensing only. (You will need to add licensing manually in the vSphere Client.) For information about installing and configuring your VMware environment, see the ESX and vCenter Server Installation Guide. Cisco Intelligent Automation for Cloud Installation Guide 2-4 OL-29971-01 Chapter 2 Installing and Configuring Optional Software Understanding Cisco Prime Network Services Controller Note Users must have the ability to create resource pools. In addition, resource pools must be enabled on VMware VCenter OpenStack OpenStack is an initiative developed jointly by Rackspace Hosting and NASA. It is a series of interrelated projects that control pools of processing, storage, and networking resources throughout a datacenter, all managed through a dashboard that gives administrators control while empowering its users to provision resources through a web interface. Note For more information on OpenStack, see the OpenStack website at http://www.openstack.org/. Amazon EC2 Amazon EC2 is a Web-based service that allows business subscribers to run application programs in the Amazon.com computing environment. The EC2 can serve as a practically unlimited set of virtual machines. For more about Amazon EC2, see the Amazon EC2 website at http://aws.amazon.com/ec2/. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 2-5 Chapter 2 Installing and Configuring Optional Software Understanding Cisco Prime Network Services Controller Cisco Intelligent Automation for Cloud Installation Guide 2-6 OL-29971-01 CH A P T E R 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Cisco Prime Service Catalog and any associated patches must be installed in support of Cisco Intelligent Automation for Cloud. This chapter guides you through installing Prime Service Catalog using the Cisco IAC Virtual Appliance. Note Please refer to the Cisco Prime Service Catalog Installation Guide for complete step by step instructions for installing Prime Service Catalog manually; that is, without using the Virtual Appliance. The illustration below shows where in the Cisco IAC 4.0 installation workflow the Virtual Appliance can be utilized. Figure 3-1 Installing Cisco IAC Using the Virtual Appliance SC Instantiate Appliance in Service Catalog (SC) Mode Manually Install Cisco Process Orchestrator Instantiate Appliance in Management Mode Run the Config Wizard 370876 MA Understanding the Cisco IAC Virtual Appliance Cisco IAC 4.0 ships with the new Virtual Appliance. This is a VMware-based virtual appliance running CentOS that can be configured in one of two modes. First, it can be configured to install Prime Service Catalog. This is called the Prime Service Catalog Appliance.The second application of the Virtual Appliance is for installing required and supporting software and is called the Management Appliance. Note The Cisco IAC 4.0 Virtual Appliance is configured prior to deployment using the vSphere client’s vApp property configuration screen. Once configured, the Virtual Appliance will start up in the selected Virtual Appliance mode. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 3-1 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Installing Prime Service Catalog via the Virtual Appliance .OVA Install the Cisco IAC 4.0 Virtual Appliance via a configuration and install wizard accessed via the vSphere Client window. To install the Cisco IAC 4.0 Virtual Appliance, follow these steps: Step 1 Download the OVA file for the Virtual Appliance onto the machine where you installed VMware vSphere Client. Step 2 Launch your VMware vSphere client and connect to the vCenter Server. Step 3 Start the VMware vSphere Client and log in. Step 4 From the File menu in the vSphere Client window, select Deploy OVF Template... Figure 3-2 vSphere Client File Menu The Deploy OVF Template wizard launches. Step 5 On the Deploy OVF Template dialog, browse to find and select the template named IAC-virtual_appliance-4.0.0.x_v4.0.[rev].[build].ova. Step 6 When the Deploy OVF Template window displays, click Next to display OVA Template details. Cisco Intelligent Automation for Cloud Installation Guide 3-2 OL-29971-01 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Figure 3-3 Deploy OVF Template, Details Window Step 7 The template details are displayed in the OVF Template Details window. Verify the details, then click Next to view information about the contents of the selected OVA file. Step 8 The End User License Agreement window appears. Read the license agreement, scroll down to the bottom of the agreement, and then click Accept to accept the agreement. • Step 9 Click Next. In the Name and Location window, specify a unique name for the virtual machine, and select the appropriate datacenter and/or folder for the virtual machine. The virtual machine name must be unique within the datacenter and can contain up to 80 characters. • Click Next. Step 10 The Host / Cluster window may appear depending on your VMware environment. If the Host / Cluster window appears, select the Cluster or the ESX host where you want the virtual machine to be created. Click Next. Step 11 If the Resource Pool window appears, select a resource pool for the virtual machine and click Next. Step 12 In the Storage window, choose a datastore name that has enough available disk space and click Next. Note The virtual machine requires at least 40 GB depending on the disk format you will select in the next step. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 3-3 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Step 13 In the Disk Format window, specify the format for storing the virtual hard disk by clicking the appropriate radio button: – Thick provision Lazy Zeroed – Thick provision Eager Zeroed – Thin provision • Step 14 Tip Click Next. If the Network Mapping window appears, select a destination network from the list. We recommend you to select the network name that is connected to a DHCP server that can assign a dynamic IP address for the VM as soon as it is deployed and powered up. • Click Next. Completing the Three Sections of the Properties Window Figure 3-4 IAC Virtual Appliance Configuration - Properties Screen, Section 1 Cisco Intelligent Automation for Cloud Installation Guide 3-4 OL-29971-01 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Step 1 On the Properties screen, as the Operating mode under 1. IAC Virtual Appliance Configuration select: Prime Service Catalog Step 2 Enter the Virtual Appliance host name. Step 3 In the Operating System Root Password area, enter the Linux password two times. Step 4 Scroll down. Figure 3-5 IAC Virtual Appliance Configuration - Properties Window, Section 2 Step 5 Enter the Administrative Password using the recommended settings and then confirm your password. Step 6 Re-enter the Administrative Password using the recommended settings and then confirm your password. Step 7 Enter a valid Administrator Email. Step 8 Enter a valid SMTP Server Hostname. Step 9 Enter the Application Server Password using the recommended settings and then confirm your password. Step 10 Re-enter the Application Server Password using the recommended settings and then confirm your password. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 3-5 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Cisco Prime Service Catalog Configuration Figure 3-6 IAC Virtual Appliance Configuration - Properties Window, Section 3 Step 1 Click the check box for Enable SSL support as required. (Optional.) Step 2 Enter the Oracle System DBA Password two times. Note These password fields set the passwords for the Oracle database thats comes packaged with the Virtual Appliance. However, we do not recommended using this database for production use, but only for proof of concept, testing, lab, and so on. Step 3 Enter the Service Catalog Database User Password two times. Step 4 Scroll down to complete the Properties form. Cisco Intelligent Automation for Cloud Installation Guide 3-6 OL-29971-01 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA Management Appliance Configuration Figure 3-7 IAC Virtual Appliance Configuration - Properties Window, Section 4 Step 1 Enter the Process Orchestrator Fully Qualified Domain Name. Step 2 Select the Process Orchestrator Authentication Type. Note The settings entered here for the Process Orchestrator Authentication Type must match what is set in the Cisco Process Orchestrator web service settings. Step 3 Enter the Process Orchestrator Port. Step 4 Enter the Process Orchestrator Username. Step 5 Enter the Process Orchestrator Password two times. Step 6 Enter the Process Orchestrator Domain. Step 7 Click Next. Step 8 Review the Ready to Complete screen. • Step 9 Select the Power on after deployment check box. Click Finish. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 3-7 Chapter 3 Installing Cisco Prime Service Catalog Using the Virtual Appliance Installing Prime Service Catalog via the Virtual Appliance .OVA You will see a dialog box showing you the overall progress. Figure 3-8 Deploying When complete, you will see a notice similar to, “Completed Successfully”. Note Your virtual machine is listed in the left pane of the vSphere Client under the appropriate host or cluster after the OVF Template deployment is complete. If your network has a DHCP server, find out the dynamic IP address that was assigned to your new virtual machine. You will use this IP address to access the Prime Service Catalog application running on the virtual machine. If you spot in error in your configuration choices, use the Back button to return to the appropriate screen and make your changes. Cisco Intelligent Automation for Cloud Installation Guide 3-8 OL-29971-01 CH A P T E R 4 Installing Cisco Process Orchestrator To install Process Orchestrator, please refer to the Cisco Process Orchestrator Installation and Administration Guide for step by step instructions. When the install is complete, you will see a screen similar to the one below. Figure 4-1 Cisco Process Orchestrator Setup Complete Screen • Uncheck Launch automation pack import wizard if checked. • Click Finish. • Close the Cisco Process Orchestrator Autorun Utility if it is still open. Download and Install Any Available Patches You should now install any and all available Cisco Process Orchestrator service packs. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 4-1 Chapter 4 Installing Cisco Process Orchestrator Cisco Intelligent Automation for Cloud Installation Guide 4-2 OL-29971-01 CH A P T E R 5 Installing Cisco IAC 4.0 Automation Packs You will be installing the following automation packs: • Intelligent Automation for Cloud Extension Samples.tap (optional but recommended) • Intelligent Automation for Cloud Starter.tap • Intelligent Automation for Cloud.tap • Intelligent Automation for Compute.tap You need to download the Cloud Automation Packs file before continuing, if you haven’t done so already. See Step 1 below. Launching the Setup Wizard Step 1 Download the Cisco IAC 4.0 installer. The packs are available in a file labeled, “Cisco Intelligent Automation for Cloud 4.0 with patch <patch#>” (the zip file is named IAC_<##>_WithPatch<#>.zip; it is approximately 50 Mb in size. Note To find the latest file, navigate to http://software.cisco.com. Find the downloads link and look for Cisco Intelligent Automation for Cloud as the software. Step 2 Un-zip IAC_<##>_WithPatch<#>.zip. Step 3 Locate the Cisco IAC 4.0 setup.exe file and run it to start the Setup Wizard (Figure 5-1). Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-1 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Launching the Setup Wizard Figure 5-1 • Cisco Intelligent Automation for Cloud 4.0 Setup Wizard Click Next to proceed to the next step. Step 4 On the Information page, click Next again to continue. Step 5 On the Confirm Installation page, click Next to continue. Step 6 On the Installation Complete page, check the Launch automation pack import wizard now checkbox. Figure 5-2 Installation Complete Screen Cisco Intelligent Automation for Cloud Installation Guide 5-2 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC, Core, and Common Automation Packs Step 7 Click Close to launch the Automation Pack Import Wizard. The Import Wizard will first configure itself, as shown in Figure 5-3. Figure 5-3 Note Import Wizard Configuring You will next see the Select Automation Pack screen (Figure 5-4), the use of which is explained in “Installing the Cisco IAC, Core, and Common Automation Packs”. Installing the Cisco IAC, Core, and Common Automation Packs The Select Automation Packs dialog box displays, as shown in Figure 5-4. This dialog box shows you a list all available automation packs and other services required for Cisco IAC 4.0. These include the TAPs you just installed, as well as Core and Common Activities. These are presented in a checklist format, and are pre-checked for your convenience. Tip You must install both the Core and the Common Activities TAPs. The Cisco IAC TAPs are dependent on functionality within these TAPs in order to function properly. In fact, without the Core and Common Activities TAPs, the Cisco IAC TAPs will not import. Figure 5-4 Select Automation Packs Screen Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-3 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC, Core, and Common Automation Packs Step 1 Click OK to continue with selected options. Step 2 On the Welcome to the Automation Pack Import Wizard panel, click Next. Step 3 You do not need to enter information on the General Information panel because we are importing the Core and Common Activities. So click Next again. Step 4 On the Email Configuration panel, provide the default SMTP server and sender’s e-mail address to be used for e-mail activities, • Step 5 Click Next. The Automation Summary Configuration panel indicates where the automation summary reports that are generated by activities are to be saved and how long the reports are to be retained. The specified file paths will be used to access and view the automation summary reports. Figure 5-5 Automation Summary Configuration Panel On the Automation Summary Configuration panel, specify the following information. • Accept the default directory, or enter a different file path for the automation summary directory in the Share Path field. You can also browse to navigate to the file path for the automation summary. • Enter credentials as needed. (These are not required.) • In the Virtual directory mapping area you create the share folder that corresponds to a virtual directory in IIS. Note that you may only create the virtual directory in the local IIS. – Check the Enable virtual directory mapping check box. – Click Create. The Create Virtual Directory dialog box displays, pre-populated with default settings. – Click OK to accept. Cisco Intelligent Automation for Cloud Installation Guide 5-4 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC, Core, and Common Automation Packs Note Step 6 Scroll down and you will see the Automation summary reports grooming settings area. The default deletion period is thirty days, but you can set this to whatever you want, from 1 to 9999. Or, select the Delete automation summary reports older than check box to remove the check and all reports will be saved indefinitely. • Step 7 Back in the Virtual directory path field, you can edit the string (http://host:(port)/ sharefolder) if needed. When you are done working with the Automation Summary Configuration panel, click Next. On the Data Extraction panel, deselect all of the data options. Specifically, uncheck: – Business Objects Reports – Microsoft SCOM Management Packs – SQL Server Reporting Services Reports Note • Take a note of the folder name where the extracted data will be placed and uncheck the SQL Server Reporting Services Reports if you are not using the MS SQL Reporting solution. Click Next. Step 8 The Review Prerequisites panel displays the prerequisites for the automation pack being imported, and will indicate either pass or fail for each prerequisite. Step 9 After the prerequisite check has completed (and passed), the Importing Objects panel displays: Step 10 After the objects have been imported, the General Information panel displays: Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-5 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC-Specific Automation Packs Figure 5-6 General Information Panel Installing the Cisco IAC-Specific Automation Packs The four Cisco Automation packs are installed next. These include, in sequence: • Intelligent Automation for Compute.tap • Intelligent Automation for Cloud Starter.tap • Intelligent Automation for Cloud.tap • Intelligent Automation for Cloud Extension Samples.tap (optional but recommended) The install process for each Automation Pack is explained next. Installing the Intelligent Automation for Compute Pack Step 1 On the General Information panel (Figure 5-6), review the information there. Note that the Name field now displays “Intelligent Automation for Compute.” This is the first Cisco IAC automation pack that we will be installing. • Step 2 Click Next. On the Default Incidents Assignee Setup panel, browse to specify the default user to assign cloud-related incidents to. This is a CPTA (Cloud Provider Technical Administrator) account, or would be within an Active Directory group that was created for all of CPTAs. Cisco Intelligent Automation for Cloud Installation Guide 5-6 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC-Specific Automation Packs Tip • Step 3 See the Cisco Intelligent Automation for Cloud 4.0 User Guide for more information about CPTAs and other Cisco IAC roles. Click Next. On the Cisco Process Orchestrator Web Service panel, specify the following data.Check the Enable non-secure Web Service (HTTP) check box in the Web Service Settings area. This setting unencrypts the HTTP endpoints. Tip If or when presented with a security warning message, click OK. Figure 5-7 Cisco Process Orchestrator Web Service Panel • Enter or verify the HTTP Port for the Process Orchestrator web target. • Choose the appropriate authentication method for the web service: – Basic—Standard method that provides a username and password to the authentication mechanism – Digest—Method that requires parties who are seeking to authenticate to provide their knowledge of secret keys – NTLM—Default. Authentication protocol that is used on networks that include systems running the Windows operating system and on stand-alone systems Note The NTLM setting supports both NTLM and NTLMv2. In IIS, NTLM is not enabled by default; you must enable NTLM in IIS if you choose this authentication mechanism. The agents in Prime Service Catalog must also be set to use the same authentication that you specify here. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-7 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC-Specific Automation Packs • Step 4 Step 5 When you are done, click Next to continue. Enter your credentials: • On the Default Web Service Credentials panel, specify the credentials for connecting to the Process Orchestrator web service target. • When done, click Next to continue. Enter a password for VMware keystore access. The VMware keystore password protects the Java keystore file used to keep SSL certificates for all configured VMware targets. – For new installations, this password can be set to any valid six-character keytool password. Note • If the VMware vSphere PowerCLI has not already been installed in the Process Orchestrator server, the wizard displays an information panel informing you of the situation. You can choose Select this check box to continue with the import to proceed. However, if you are using VMware vCenter and you have not yet installed VMware vSphere PowerCLI, the contents of the automation pack may not work correctly, if at all, until PowerCLI has been installed. Click Next. Step 6 You will see a process screen display (similar to the one shown in Figure 5-8) whereby the prerequisites are verified, and then objects are imported. Step 7 You will then be returned to the General Information panel to install the next Automation Pack. Installing the Intelligent Automation for Cloud Starter Pack Step 1 On the General Information panel, review the information about the automation pack. Note that the Name field now displays “Intelligent Automation for Cloud Starter.” • Step 2 Click Next. On Configure Process Database Grooming panel, specify the number of days to keep process instances in the database. After the specified number of days, the process instances will be deleted from the database. The default value should be satisfactory. • Click Next to continue. Step 3 The Data Extraction panel is used to specify the destination where the data is extracted on the Process Orchestrator server. You can simply accept the default location, or browse to specify a different location to extract the files. Step 4 The Review Prerequisites panel displays briefly and you will see the prerequisites being processed. Step 5 Next, the Importing Objects panel displays (Figure 5-8) its various progress bars as the data is imported and extracted. This may take some time to complete. Cisco Intelligent Automation for Cloud Installation Guide 5-8 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC-Specific Automation Packs Figure 5-8 Importing Objects Panel Step 6 When the import is complete, you are automatically returned to the General Information panel. Step 7 Click Next Installing the Intelligent Automation for Cloud Extension Samples (Optional) Step 1 On the General Information panel, review the information about the automation pack. Note that the Name field now displays “Intelligent Automation for Cloud Extension Samples.” Step 2 Click Next. • The Review Prerequisites panel displays briefly and you will see the prerequisites being processed. • Next, the Importing Objects panel displays progress bars as the data is imported and extracted. This may take some time to complete. When the import is complete, you are automatically returned to the General Information panel. Step 3 On the General Information panel, click Next to import the Common Activities Automation Pack. • The Review Prerequisites panel displays briefly and you will see the prerequisites being processed. • Next, the Importing Objects panel (similar to the one shown in Figure 5-8) displays progress bars as the data is imported and extracted. This may take some time to complete. • When the import of the common activities is complete, you are automatically returned to the General Information panel once again. Step 4 On the General Information panel. Step 5 Click Next. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-9 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Installing the Cisco IAC-Specific Automation Packs Step 6 Enter the destination for the extracted data, and select the data to extract (or un-select, really, as all of the data has been preselected for you). Step 7 Click Next to continue. Step 8 Once again, the Review Prerequisites panel displays briefly and you will see the prerequisites being processed. • As before, the Importing Objects panel displays its various progress bars as the data is imported and extracted. This make take some time to complete. • When the import process is complete, the Automation Pack Import Wizard panel displays. Installing the Intelligent Automation for Cloud Pack Step 1 On the General Information panel, review the information about the automation pack. Note that the Name field now displays “Intelligent Automation for Cloud.” • Click Next. Step 2 On Configure Process Database Grooming panel, specify the number of days to keep process instances in the database. After the specified number of days, the process instances will be deleted from the database. The default value should be satisfactory. Click Next to continue. Step 3 The Data Extraction panel is used to specify the destination where the data is extracted on the Process Orchestrator server. You can simply accept the default location, or browse to specify a different location to extract the files, then click Next. Step 4 The Review Prerequisites panel displays briefly and you will see the prerequisites being processed. Step 5 Next, the Importing Objects panel displays its various progress bars as the data is imported and extracted. This may take some time to complete. Step 6 When the import is complete, you are automatically returned to the General Information panel. Completing the Process After the objects have been imported, the Final Automation Pack Import Wizard Screen displays (see Figure 5-9). • Review the information below the “Completing the Automation Pack Import Wizard” heading to verify that all is correct. – For Cisco IAC, leave the Refresh Web Server check box checked. – When you are done reviewing the information here, click Close to close the wizard. Cisco Intelligent Automation for Cloud Installation Guide 5-10 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Importing and Deploying Portal Packages Figure 5-9 Final Automation Pack Import Wizard Screen You have now successfully installed all supporting software for Cisco Process Orchestrator. Importing and Deploying Portal Packages Cisco IAC ships with packaged image files, portal pages, and portlets to provide an easy-to-use portal for ordering services. Timesaver You can skip this section if you are installing Cisco Intelligent Automation for Cloud using the Virtual Appliance. Copying the Cisco IAC Portlets Package and Extracting Files The Cisco Intelligent Automation for Cloud automation pack includes the Cisco IAC Portlets package (IACPortlets_<release_number>), which were extracted to the Cisco Process Orchestrator server when you imported the automation pack. (See Importing and Deploying Intelligent Automation for Cloud Service Catalogs, page 7-3.) This package contains the files you need to deploy portlets, JavaScripts, images, and stylesheets to Prime Service Catalog. Step 1 On the Cisco Process Orchestrator server, navigate to the following folder where IACPortlets_<release_number> was extracted. The package is extracted by default to the following directory: Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-11 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Importing and Deploying Portal Packages C:\Users\<username>\Documents\Cisco\Cisco Process Orchestrator\Extracted Data\Cloud Portal Service Catalog 10.0 You will see names along the lines of “CP_Services_4-0.xml.” Note The file is in a compressed (ZIP) file and will need to be extracted. Step 2 Extract IACPortlets_<release_number> from the compressed (ZIP) file to a temporary location. It will create an IACPortlets_<release_number> folder. Step 3 Stop the JBoss application server by stoppping Cisco RequestLink and Cisco ServiceLink Services. Note For instructions, see “How to Stop/Start the JBoss Server” in the Cisco Prime Service Catalog 10.x Installation Guide. Step 4 Copy the file from Process Orchestrator to Prime Service Catalog. Step 5 In the IACPortlets_<release_number> folder, locate RequestCenter_war.zip. Step 6 Extract RequestCenter_war.zip to the following directory: <JBOSS_DIR>\standalone\deployments\RequestCenter.war Note Step 7 Overwrite any existing files, if prompted. Restart the JBoss application server by starting Cisco RequestLink and Cisco ServiceLink Services again. Note For instructions, see “How to Stop/Start the JBoss Server” in the Cisco Prime Service Catalog 10.x Installation Guide. Configuring Cisco Prime Service Catalog Stylesheets You must now configureCisco Prime Service Catalog to use the stylesheets that are packaged with Cisco IAC. Complete the following steps to configure the stylesheets in Cisco Prime Service Catalog. Timesaver You do not need to configure stylesheets if you are using the Appliance. With the Appliance, this is done for you. Step 1 Open Cisco Prime Service Catalog in your browser and log in to the application. Step 2 On the Prime Service Catalog Home page, choose Administration from the module drop-down list. Step 3 On the Administration Home page, click Personalize Your Site. Step 4 Click Custom Styles in the right menu. Step 5 Click Add to open the Custom Style Properties window. Cisco Intelligent Automation for Cloud Installation Guide 5-12 OL-29971-01 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Importing and Deploying Portal Packages Step 6 In the Name field, enter Cisco Intelligent Automation for Cloud 4.0. Then, check the Make this Style the default for the entire site check box. Step 7 In the Style Directory field, click Browse. Step 8 Click the IAC radio button, then click OK. Step 9 Back on the Custom Style Properties window, click Create to add the custom style, then navigate to the Associated Organizational Units area. Step 10 • Click Add to open the Search for Organizational Units dialog box. • Click Search to browse for the organizational units to which to associate the custom style properties. Check the Site Administration check box, then click Add. Importing and Deploying Portal Pages Deploy the Cisco IAC portal page content by importing it from the PortalPages.xml portal page file, located in the IACPortlets folder. Step 1 Choose Portal Designer from the module drop-down list to open Portal Designer. Step 2 In Portal Designer, click the Portal Pages tab. Step 3 In the left navigation pane, click Actions and choose Import from the drop-down list. Step 4 On the Import Portal Pages dialog box, click the Overwrite radio button in the Conflict Resolution field. Step 5 In the Import from File field, click Choose File to navigate to the IACPortlets folder that you extracted in Importing and Deploying Portal Packages, page 5-11. Step 6 • On the Choose File to Upload dialog box, select the PortalPages.xml file and click Open. • On the Import Portal Pages dialog box, click Import. • Close the Import Complete dialog box. Refresh your browser to view the imported portal. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 5-13 Chapter 5 Installing Cisco IAC 4.0 Automation Packs Importing and Deploying Portal Packages Cisco Intelligent Automation for Cloud Installation Guide 5-14 OL-29971-01 CH A P T E R 6 Completing Optional Tasks Included in this chapter are instructions for completing various optional tasks, including: • Setting Up Active Directory Integration (If Applicable) • Configuring an LDAP Server • Configuring Authentication • Configure Events • Creating a Security Group for Each User Role on the LDAP Server. • Adding the nsAPI User to the Cloud Administration Group • Enabling Directory Integration • Completing User Intervention with OTA Intervention Setting Up Active Directory Integration (If Applicable) This section provides examples of setting up optional directory integration in Microsoft Active Directory. Because there are many scenarios for directory integration configuration based on the directory product and settings, it is likely that your environment will vary from what is presented here. However, the required sequence of configuring directory integration would be the same. Cisco Prime Service Catalog can integrate with directory servers to synchronize user information. This synchronization can be initiated whenever a user logs on or is selected or during Person Lookup in Prime Service Catalog. Prior to configuring integration in Prime Service Catalog, you must have a directory server installed and populated with corporate data. Note For instructions on configuring directory integration if your setup varies, see the Cisco Prime Service Catalog 10.x Integration Guide. Prerequisites Before configuring directory integration for use with Cisco IAC, you must complete the following tasks: • Set up organizational unit structure on the LDAP server. If you do not have privileges to perform this task on the LDAP server, seek help from your LDAP server administrator. • Create the following user accounts in the Users folder on the LDAP server: Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 6-1 Chapter 6 Completing Optional Tasks Configuring an LDAP Server – nsAPI user – A user account (any username) with “Read MemberOf” permissions that will be used for performing authentication, directory searches, and user imports into the Prime Service Catalog. Note Cisco Intelligent Automation for Cloud 4.0 supports an individual’s membership to just a single organizational unit or membership, not multiple organizations. Configuring an LDAP Server The first step is to add a datasource and test the connection in Cisco Prime Service Catalog. The instructions in this section are how one would connect to the LDAP server in the example scenario. Step 1 Choose Service Portal from the module drop-down list, then click the System Settings from the Setup tab. Step 2 On the System Setup portal, click the Connections tab to open the portlet, then click Manage Directory Server Connection. Step 3 Click Add to display the Datasources Configuration pane. Step 4 In the Add or Edit a Datasource pane, enter the following: Step 5 Step 6 • Enter a name for the datasource. Do not use spaces or special characters. • Enter a description of the datasource. (Optional.) Expand Select protocol and server product, then select the following: • The protocol is always LDAP. • Choose MS Active Directory. (Other server options are Sun One or IBM Tivoli Directory Server.) Expand Connection Information, then specify the following required datasource information in the definition area. This information includes lookup user that you set up as a prerequisite. • Choose Simple (text username and password) from the Authentication Method drop-down list. • Choose Non SSL from the Mechanism drop-down list. • Enter the bind-distinguished name (BindDN) value for the lookup user. The BindDN looks like the following example: CN=Mehalic Michael,OU=Users,OU=Austin,OU=Texas,OU=USA, DC=notexist,DC=local • To query the BindDN value, open a command prompt on the Windows server and execute the following command: dsquery user -name “[name]*” • Enter the fully qualified hostname or IP address of the LDAP directory server. For example: dc.notexist.local • Enter the parent folder under which all users will gain access. For example, if the User BaseDN is OU=Austin,OU=Texas,OU=USA,DC=notexist,DC=local, then all users in the Austin organization will have access. • Enter the port number for the LDAP according to either of the following conditions: – For a non-SSL connection, the default port number for LDAP is 389. Cisco Intelligent Automation for Cloud Installation Guide 6-2 OL-29971-01 Chapter 6 Completing Optional Tasks Configuring Authentication – For an SSL connection, the default port number for LDAP is 636. • You can verify the port number for your LDAP server using either by running the command netstat -an on the domain controller, or by using the SysInternals tool TCPView.exe. • Enter the password for the user specified as the BindDN. Step 7 Click Update. Step 8 Check the check box next to the newly added datasource and click Test Connection. The Test Status column displays OK if the connection is successful. Configuring Authentication Configuring authentication requires completing two tasks: configuring mappings and configuring events. The instructions in this section are how one would complete each task in the example scenario. Configuring Mappings The first task in configuring authentication is to assign mapping attributes to user data, including first and last name, login ID, and home organization unit. Active Directory has pre-defined mapping attributes, which are used in this example. However, there are data fields that have no specific Active Directory mapping attributes. In such cases (indicated below), you can assign any mapping attribute that you want to the data field. Step 1 In the Administration module, click the Directories tab. Step 2 On the Directory Integration page, click Mappings in the menu on the right. Step 3 In the Mappings pane, click Add to display the Mapping Configuration pane. Step 4 In the “Add or edit a mapping name” pane, specify the following information: Step 5 • Enter a name for the mapping. Do not use spaces or special characters. • Optional. Enter a description of the mapping. In the “Configure mapping attributes” area, enter the required information in the text fields. The following table provides examples of datasource mappings for person data. Active Directory mapping attributes are pre-defined and case-sensitive. For information on how to form expressions, see the documentation that shipped with your directory software. Table 6-1 Person Data and Mapped Attributes . Person Data Mapped Attribute First Name givenName Last Name sn Login ID sAMAccountName Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 6-3 Chapter 6 Completing Optional Tasks Configure Events Person Data Mapped Attribute Personal Identification sAMAccountName For this data field, there is no corresponding mapping attribute in Active Directory. In this case, you can assign any mapping attribute you want. e-mail Address expr:#email#=(.+)?(#email#):NotExist Home Organization Unit expr:#department#=(.+)?(#department#):NotExist Password sAMAccountName There is no mapping attribute for passwords in Active Directory. Instead, you can map it to another attribute (in this example, sAMAAccountName). You can also map your own expression. For information, see the documentation that shipped with the Active Directory software. Optional Person Data Mappings TimeZone ID Example: expr:#sAMAccountName#=(nsapiuser)?(Etc/Greenwich):America/ Tijuana Role List Example: expr:#memberOf#=(CN=(.*),OU=IAC,OU=Delegation,OU=Groups ,OU=Austin,OU=Texas,OU=USA,DC=companyA,DC=local)?($1): Step 6 Click Update. Step 7 Test the mappings using the Data Test Mapping feature. For instructions on enabling then using the Data Test Mapping feature, see “Testing Mappings” in Chapter 1, “Directory Integration and API,” in the Cisco Service Portal 10.0 Integration Guide. Configure Events Step 1 Click Events in the menu on the right. Step 2 In the Events pane, click Edit next to the Login event to display the Event Configuration pane. Step 3 Choose Enabled from the Event Status drop-down list. Step 4 In the Event Configuration pane, click Add step, then specify the following: • Choose External Authentication. • Click Options, then enter the EUABindDN using the following convention: <netbios domain>\#LoginId# Note You must provide the EUABindDN value, which is critical for login events. This value is case-sensitive. This attribute is a pre-defined Active Directory value. The attribute is different for other directories. Cisco Intelligent Automation for Cloud Installation Guide 6-4 OL-29971-01 Chapter 6 Completing Optional Tasks Creating a Security Group for Each User Role on the LDAP Server Step 5 Click Update to add the information as the first step in the event. Step 6 Click Add step. Step 7 In the Step 2 row, choose Import Person from the Operation drop-down list. Step 8 From the Mapping drop-down list, choose the mapping name you specified when you defined mappings in the previous process. Step 9 From the Datasource drop-down list, choose the datasource name that you specified in Step 4 of Configuring an LDAP Server, page 6-2. Step 10 Click Options, then specify the following information in the Event Step area: • Ensure that the Refresh Person Profile check box is checked. • Leave the Refresh Period (Hours) field blank. If a value populates the field, delete the value. • Do not create Group/OU: – Organizational Unit—Check the check box. Checking this option prevents a user from logging in to the Prime Service Catalog Server unless the user’s home organization has been onboarded. – Group—Uncheck the check box. Step 11 Click Update to add the information as Step 2 then click Update again. Step 12 In the Events pane, click Edit next to the Person Lookup for Service Form event to display the Event Configuration pane. Step 13 Choose Enabled from the Event Status drop-down list. Step 14 In the Event Configuration pane, click Add step, then specify the following information in the Options for Event Step1 area: • Choose Import Person as the Operation. • Click Options. – Enter 24 in the Refresh Period (Hours) field. – Leave all check boxes unchecked. Step 15 Click Update to add the same information as did in Step 1, then click Update again. Creating a Security Group for Each User Role on the LDAP Server In your directory, create one security group for each user role. The name of each group must exactly match the name of the user role: • Cloud Provider Technical Administrator • Organization Technical Administrator • Virtual and Physical Server Owner • Virtual Server Owner • Solutions Team • Form Extender For instructions on creating security groups on your directory server, see the documentation that came with your directory server software. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 6-5 Chapter 6 Completing Optional Tasks Adding the nsAPI User to the Cloud Administration Group Note Cisco Intelligent Automation for Cloud 4.0 supports an individual’s membership to just a single organizational unit or membership, not multiple organizations. Adding the nsAPI User to the Cloud Administration Group The nsAPI user account that you created on the LDAP server is used to connect Prime Service Catalog to Process Orchestrator. For the nsAPI user account to function properly, you must add it to the Cloud Provider Technical Administrator user group that you created in the directory. For instructions on adding a user to a user role group on your directory server, see the documentation that came with your directory server software. Configuring User Role Mappings To map the user roles, you specify the location in the directory that contains the six security groups you created for each role. Step 1 In Service Catalog, choose Administration from the module drop-down list, then click Directories. Step 2 On the Directory Integration page, click Mappings in the menu on the right. Step 3 In the Mappings pane, click Edit beside the mapping name you created when you configured mappings (see Configuring Mappings, page 6-3). Step 4 Expand Optional Person Data Mappings at the bottom of the page. Step 5 In the Role List field at the bottom of the optional mappings list, enter mapping attributes for role list that assigns the user to one of the six Prime Service Catalog user groups that you created in the directory. using the convention used for the example scenario (variables for the example appear in boldface): expr:#memberOf#=(CN=(.*),OU=Groups,OU=Austin,OU=Texas,OU=USA,DC=notexist, DC=local)?($1): Step 6 Test the mappings using the Data Test Mapping feature. For instructions on enabling and using the Data Test Mapping feature, see “Testing Mappings” in Chapter 1, “Directory Integration and API,” in the Cisco Service Portal 10.0 Integration Guide. Enabling Directory Integration Before you enable directory integration, be sure you have all user groups configured for use with Cisco IAC. If you do not have all user groups configured before you enable directory integration, you will not be able to log back in to Prime Service Catalog. Step 1 Choose Administration from the module drop-down list, then click Personalize Your Site. Step 2 On the Customizations page, scroll down to the Common Settings area and turn the Enable Directory Integration setting On. Cisco Intelligent Automation for Cloud Installation Guide 6-6 OL-29971-01 Chapter 6 Completing Optional Tasks Administrative On-boarding of User Accounts Step 3 Click the Update button at the bottom of the page. Administrative On-boarding of User Accounts Step 1 The Organization Technical Administrator (OTA) navigates to the User Management page which allows him to add users to the organization. Tip See the Cisco Intelligent Automation for Cloud 4.0 User Guide for more information about OTAs and the other Cisco IAC roles. Step 2 The OTA searches the directory (directory integration for the person search event has previously been configured and tested) for people to assign to his provisioning organization. Once the person is found, he is assigned an appropriate Server Owner role. Step 3 In Administration> Directories >Events, configure a login event. The login event should have one operation: to perform Single Sign-on or External Authentication, as desired. Step 4 Start a new browser session (if using external authentication) or try a single sign-on entry to the Service Catalog, and try to login as a new user, testing the just configured Login event. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 6-7 Chapter 6 Completing Optional Tasks Administrative On-boarding of User Accounts Cisco Intelligent Automation for Cloud Installation Guide 6-8 OL-29971-01 CH A P T E R 7 Installing & Importing Additional Components This chapter provides instruction on how to install the REX adapter, import and deploy Cisco IAC portal pages and catalogs. Installing and Configuring the REX Adapter This section explains how to install and configure the REX adapter. Before you install the REX adapter, you might have to first apply any available mandatory Prime Service Catalog patch, if one exists. (See Cisco Prime Service Catalog Software Downloads, Release and General Information for the latest information about available patches.) Warning Tip You first need to install Cisco Process Orchestrator. For full instructions, please see the Cisco Process Orchestrator documentation. You can view the prerequisites and determine whether they have passed or failed via the Cisco Process Orchestrator Prerequisites Checker form. To find the patch for this release, see the Cisco Intelligent Automation for Cloud Compatibility Matrix. The package name is the same for both Windows and Linux. Follow the instructions for applying the hotfix in the Readme. The instructions provide important steps for copying extracted files to different deployed directories. After the Intelligent Automation for Cloud Starter Automation Pack is imported in Process Orchestrator, the REX adapter installation package (rexAdapter_<release_number>.zip) is placed by default in the following location on the Process Orchestrator server: C:\My Documents\Cisco\Cisco Process Orchestrator\Extracted Data\Cloud Portal Adapters\IACAdapters. Warning The REX Adapter is for internal use only. This adapter is not intended for use with custom service development by the customer or by Cisco Services. The capabilities of this adapter will change with each product release and may not provide backwards compatibility with prior product releases. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 7-1 Chapter 7 Installing & Importing Additional Components Installing and Configuring the REX Adapter Installing the REX Adapter Step 1 Extract rexAdapter_<release_number>.zip from its default location on the Process Orchestrator server to a temporary location (hereafter referred to as <rex>). Step 2 Copy <rex>/adapters/adapter_rex.jar to the deployed directory. For example, the deployed directory for Windows is: C:\CiscoPrimeServiceCatalog\jboss-as-7.1.1.Final\ServiceLinkServer\deployments\ServiceL ink.war\WEB-INF\lib Step 3 Copy C:\Users\<username>\Documents\Cisco\Cisco Process Orchestrator\Extracted Data\Cloud Portal Adapters\IACAdapters\deploy\REXAdapter.xml to C:\rex\deploy. Step 4 From the ..\adk folder, extract adk.zip. (The “adk” folder is part of the Cisco Prime Service Catalog installation files). Step 5 Open a command window, and cd to the <adk> folder. Step 6 Run the following command: • For the Windows operating system: adapter_dbinstaller.cmd • For the Linux operating system: adapter_dbinstaller.sh The following is a sample run for each database. Table 7-1 Step 7 Sample Runs Database Sample Run SQL Server c:\adk>adapter_dbinstaller.cmd found bin\java.exe Please enter the database connection information. Database Type [SQLSERVER]: Database Hostname [localhost]: Database Port [1433]: Database Name [RequestCenter]: Username [RCUSER]: RCUser Password: Testing database connection: Success! Adapter Deployment Descriptor File: c:\rex\deploy\rexadapter.xml Oracle c:\adk>adapter_dbinstaller.cmd found bin\java.exe Please enter the database connection information. Database Type [SQLSERVER]: ORACLE Database Hostname [localhost]: Database Port [1521]: Oracle SID [ORCL]: Username [RCUSER]: RCUser Password: Testing database connection: Success! Adapter Deployment Descriptor File: c:\rex\deploy\rexadapter.xml Restart Cisco Prime Service Catalog. Cisco Intelligent Automation for Cloud Installation Guide 7-2 OL-29971-01 Chapter 7 Installing & Importing Additional Components Importing and Deploying Intelligent Automation for Cloud Service Catalogs Importing and Deploying Intelligent Automation for Cloud Service Catalogs The REX adapter must be installed on the Prime Service Catalog server before you import and deploy the service catalogs. If you have not installed the REX adapter, see Installing the REX Adapter, page 7-2 Timesaver The REX adapter will have been installed for you automatically if you are installing Cisco IAC 4.0 using the Virtual Appliance. The Prime Service Catalog files for Cisco IAC are extracted when you imported the Cisco Intelligent Automation for Cloud automation packs to the Cisco Process Orchestrator server. For more information, see Chapter 5, “Installing Cisco IAC 4.0 Automation Packs.” These files must be imported and deployed in Prime Service Catalog, as described below. Importing and Deploying Prime Service Catalog Catalogs Complete the following procedure to import and deploy catalogs in Prime Service Catalog. Note that you must be logged into Prime Service Catalog with administrator privileges to perform the procedures. Warning For new installations, DO NOT import or deploy CP_Common_4-0.xml. Installing the Catalogs Step 1 First, open a browser and launch Cisco Prime Service Catalog. Step 2 Choose Catalog Deployer from the module drop-down list. Step 3 In the Deployment Packages pane, and choose Action > Import from the drop-down list. Step 4 On the Import Package from File dialog box, click Browse to navigate to the folder where you saved the Prime Service Catalog files. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 7-3 Chapter 7 Installing & Importing Additional Components Importing and Deploying Intelligent Automation for Cloud Service Catalogs Figure 7-1 Browse for the Cisco Prime Service Catalog Files Step 5 Select the CP_Common_4-0_NEW_INSTALL_ONLY.xml file and click Import. Step 6 When the message Package Imported Successfully displays, click OK. The Deployment Packages window refreshes to display the imported package in the Received for Deployment view. Step 7 Repeat Step 3 through Step 6 again to import CP_Services_4-0.xml. Deploying the Catalogs Tip If you are installing Cisco Intelligent Automation for Cloud 4.0 using the Cisco IAC 4.0 Virtual Appliance, these packages will have been deployed for you already. Step 1 In the Deployment Packages pane, choose Action > Deploy Multiple Packages from the drop-down list. Step 2 On the Select Packages dialog box, select the check boxes for CP_Common_4-0_NEW_INSTALL _ONLY.xml and CP_Services_4-0.xml. Step 3 Click Add. Step 4 Check the Selected Items check box and ensure that check boxes for CP_Common_4-0_NEW_ INSTALL_ONLY.xml and CP_Services_4-0.xml are checked. Step 5 On the Deploy Multiple Package tab, select Add Packages to Deploy. Step 6 Click Deploy. Step 7 When each package displays Succeeded next to it, you will redeploy CP_Common_4-0_ NEW_INSTALL_ONLY.xml • On the Select Packages dialog box, select the check box one more time for CP_Common_4-0_NEW_INSTALL_ONLY.xml. Step 8 Click Add. Step 9 Check the Selected Items check box and ensure that check box for CP_Common_4-0_ NEW_INSTALL_ONLY.xml is checked. Cisco Intelligent Automation for Cloud Installation Guide 7-4 OL-29971-01 Chapter 7 Installing & Importing Additional Components Importing and Deploying Intelligent Automation for Cloud Service Catalogs Warning It is important that you deploy CP_Common_4-0_NEW_INSTALL_ONLY.xml a second time. This is an easily overlooked step which will result in the installation failing down the road. Step 10 On the Deploy Multiple Package tab, select Add Packages to Deploy. Step 11 Click Deploy. Step 12 Click Done. Deploying Patches Patch files are in the same location as the 4.0 package files. They are named: Note • CP_Services_Patch_4-[release number].xml • CP_Common_Patch_4-[release number].xml Note that all patches are cumulative. That is, when you deploy the latest patch, it contains all previous patches within it. Therefore, all new and prior patches will all be applied at one time to bring your system fully up to date. The patch files are deployed like the other package files, and they should be imported/deployed after the main packages. The order is: • CP_Common_Patch_4-0-0-3.xml • CP_Services_Patch_4-0-0-3.xml Step 1 If necessary, choose Catalog Deployer from the module drop-down list within Prime Service Catalog. Step 2 In the Deployment Packages pane, and choose Action > Import from the drop-down list. Step 3 On the Import Package from File dialog box, click Browse to navigate to the folder where you saved the Prime Service Catalog files. Step 4 Select CP_Common_Patch_4-0-0-3.xml Step 5 Click Import. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 7-5 Chapter 7 Installing & Importing Additional Components Importing and Deploying Intelligent Automation for Cloud Service Catalogs Figure 7-2 Step 6 Importing a Patch File When the message Package Imported Successfully displays, click OK. The Deployment Packages window refreshes to display the imported package in the Received for Deployment view. Step 7 Repeat Step 3 through Step 5 to import CP_Services_Patch_4-0-0-3.xml. Step 8 In the Deployment Packages pane, choose Action > Deploy Multiple Packages from the drop-down list. Step 9 On the Select Packages dialog box, select the check boxes of packages to deploy, then click Add. Step 10 Check the Selected Items check box and ensure the check boxes for CP_Common_Patch_4-0-0-3.xml and CP_Services_Patch_4-0-0-3.xml are checked. Step 11 On the Deploy Multiple Package tab, select Add Packages to Deploy. Step 12 Click Deploy. Step 13 When each package displays Succeeded next to it, click Done. Cisco Intelligent Automation for Cloud Installation Guide 7-6 OL-29971-01 CH A P T E R 8 Using the Cisco IAC Virtual Appliance in Management Mode This chapter guides you through using the Cisco IAC 4.0 Virtual Appliance in Management mode. The illustration below FIG shows where the Management Appliance fits in as part of the workflow for installing Cisco IAC 4.0. Installing the Virtual Appliance in Management Mode Install the Cisco IAC 4.0 Virtual Appliance via a configuration and install wizard accessed via the vSphere Client window. To install the Cisco IAC 4.0 Virtual Appliance, follow these steps: Step 1 Download the OVA file for the Virtual Appliance onto the machine where you installed VMware vSphere Client. Step 2 Launch your VMware vSphere client and connect to the vCenter Server. Step 3 Start the VMware vSphere Client and log in. Step 4 From the File menu in the vSphere Client window, select Deploy OVF Template... Figure 8-1 vSphere Client File Menu The Deploy OVA Template wizard launches. Step 5 On the Deploy OVF Template dialog, browse to find the template named IAC-virtual_appliance-4.0_v4.0.[revision].[build id]. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 8-1 Chapter 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Step 6 The template details are displayed in the OVF Template Details window. Verify the details, then click Next to view information about the contents of the selected OVA file. Step 7 The End User License Agreement window displays. Read the license agreement, scroll down to the bottom of the agreement, and then click Accept to accept the agreement. Step 8 Then click Next. Step 9 In the Name and Location window, specify a unique name for the virtual machine, and select the appropriate datacenter and/or folder for the virtual machine. The VM name must be unique within the datacenter and can contain up to 80 characters. Note • Click Next. Step 10 The Host / Cluster window may appear depending on your VMware environment. If the Host / Cluster window appears, select the Cluster or the ESX host where you want the VM to be created. Click Next. Step 11 If the Resource Pool window appears, select a resource pool for the VM and click Next. Step 12 In the Storage window, choose a datastore name that has enough available disk space and click Next. The VM requires at least 40 GB depending on the disk format you will select in the next step. Note Step 13 In the Disk Format window, specify the format for storing the virtual hard disk by clicking the appropriate radio button: – Thick provision Lazy Zeroed – Thick provision Eager Zeroed – Thin provision • Step 14 Tip Click Next. If the Network Mapping window appears, select a destination network from the list. We recommend you to select the network name that is connected to a DHCP server that can assign a dynamic IP address for the VM as soon as it is deployed and powered up. • Click Next. Defining the Properties Cisco IAC Virtual Appliance Configuration Step 1 On the Properties screen, as the Operating mode under 1. IAC Virtual ApplianceConfiguration (see Figure 8-2), select: Management Appliance Step 2 Enter the Virtual Appliance host name. Step 3 In the Operating System Root Password area, enter the Linux password two times. Cisco Intelligent Automation for Cloud Installation Guide 8-2 OL-29971-01 Chapter 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Figure 8-2 Note Management Appliance Setup - Properties Window, Part 1 You will need to scroll down as you continue with the rest of the properties. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 8-3 Chapter 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Figure 8-3 Management Appliance Setup - Properties Window, Part 2 Step 4 In the Administrator Password area, enter the admin password two times. Step 5 Enter the Administrator Email. Step 6 Enter the SMTP Server Hostname. Step 7 Enter the Application Server Password two times. Step 8 Scroll down to continue. Cisco Intelligent Automation for Cloud Installation Guide 8-4 OL-29971-01 Chapter 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Management Appliance Configuration Figure 8-4 Management Appliance Setup - Properties Window, Part 3 Step 1 Un-check the check box for Enable SSL support. Step 2 Enter the Oracle System DBA Password two times. Note These password fields set the passwords for the Oracle database thats comes packaged with the Virtual Appliance. However, we do not recommended using this database for production use, but only for proof of concept, testing, lab, and so on. Step 3 Enter the Process Orchestrator Fully Qualified Domain Name. Step 4 Select the Process Orchestrator Authentication Type. Step 5 Enter the Process Orchestrator Port. Step 6 Enter the Process Orchestrator Username. Step 7 Enter the Process Orchestrator Password two times. Step 8 Enter the Process Orchestrator Domain. Step 9 Click Next. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 8-5 Chapter 8 Using the Cisco IAC Virtual Appliance in Management Mode Installing the Virtual Appliance in Management Mode Figure 8-5 Step 10 Review the Ready to Complete screen. • Step 11 Management Appliance Setup - Ready to Complete Select the Power on after deployment check box. Click Finish. You will see a dialog box showing you the overall progress. Figure 8-6 Deploying When complete, you will see a notice similar to, “Completed Successfully”. Cisco Intelligent Automation for Cloud Installation Guide 8-6 OL-29971-01 CH A P T E R 9 Configuring Cisco IAC With the Wizard The Cisco IAC 4.0 Configuration Wizard guides you through the steps for setting up and configuring the cloud administration and infrastructure. Accessing the Configuration Wizard You start the Configuration Wizard to begin the configuration process. Step 1 First, open a browser and launch Cisco Prime Service Catalog. Be sure to log in as a Site Administrator. Step 2 Step 3 Then, to access the Cisco Intelligent Automation for Cloud Configuration Wizard: • Choose Service Portal from the menu at the top right of the screen: • Select Setup from the Cisco IAC 4.0 menu • Choose Configuration Wizard from the Setup sub-menu: The Configuration Wizard for Cisco IAC 4.0 displays, as shown in Figure 9-1. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-1 Chapter 9 Configuring Cisco IAC With the Wizard Accessing the Configuration Wizard The Wizard Welcome Screen Figure 9-1 Timesaver The Welcome Screen of the Configuration Wizard To ensure 100% success and for the best user experience, we recommend that you use Internet Explorer 9 for the tasks on the Welcome screen. We do not officially support IE 10 or 11. This is a limitation of PSC. Other browsers may not give the results you expect; for example, scrolling might not work. You can switch back to your preferred browser after completing this tasks on the Welcome screen. Disabling Prime Service Catalog To disable Cisco Prime Service Catalog, follow the steps below. Note Step 1 If you utilized Cisco IAC Virtual Appliance, Prime Service Catalog will have been disabled for you. Click the following link on the Welcome tab for the Cisco IAC 4.0 Configuration Wizard: – Disable Service Catalog Step 2 Timesaver On the Settings tab, scroll down until you see Enable Service Catalog. To save time scrolling, call up the Search box for IE using Ctrl-F. In the search box at the top left of the screen, type Service Catalog and press Enter. Scan for the highlighted term (which is usually shown in yellow). Step 3 Click the “off” radio button next to Enable Service Catalog. Step 4 Close this form. Cisco Intelligent Automation for Cloud Installation Guide 9-2 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Accessing the Configuration Wizard Verifying the Custom Style Timesaver If you are using the Cisco IAC Appliance, you can completely skip the custom styles section here. You do not need click Set Custom Styles Directory, in other words. Verify that Cisco IAC is selected and that Site Administration is associated with this style. To do so, complete these steps. Step 1 Click the following link on the Welcome tab for the Cisco IAC 4.0 Configuration Wizard: – Set Custom Styles Directory Timesaver These settings has been pre-configured for Virtual Appliance deployments. Figure 9-2 Set Custom Styles Step 2 Click Custom Styles in the right menu. Step 3 Click Add to open the Custom Style Properties window. Step 4 In the Name field, enter Cisco Intelligent Automation for Cloud 4.0. Step 5 Check the Make this Style the default for the entire site check box. Step 6 In the Style Directory field, click Browse. Step 7 Click the IAC radio button, then click OK. Step 8 Click Create to add the custom style. Step 9 Back on the Custom Style Properties page, click Add to open the Search for Organizational Units dialog. Step 10 Click Search to browse for the organizational units to which to associate the custom style properties. Step 11 Check the Site Administration check box, then click Add. Step 12 Click Close to return to the Configuration Wizard. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-3 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Step 13 On the Wizard, click Next. Configuring Agent Properties On the Step 1 panel of the Cisco Intelligent Automation for Cloud Configuration Wizard, you configure agent properties for all REX agents and HTTP agents. Timesaver We talked about creating the REX Agent and NSAPI accounts previously, so if you have already done that, you can skip the associated step (the first in the list in Figure 9-3). Figure 9-3 The Step 1 panel of the Cisco Intelligent Automation for Cloud Configuration Wizard Creating Service Accounts for Both REX Agent and nsAPI Users Service accounts for the REX adapter and nsAPI are required to connect Cisco Prime Service Catalog to the REX adapter and Process Orchestrator, respectively. Tip You need to be logged in as a site administrator to complete the steps in this section. Creating the Service Account the REXuser Step 1 From the Wizard select: – Create account for both Rex Agent and nsAPI user Step 2 On the Organization Designer page, click Create Person from the Common Tasks panel (on the left of the screen). Cisco Intelligent Automation for Cloud Installation Guide 9-4 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Figure 9-4 Step 3 On the Create Person form, set up the REX user: Tip You may only set up REX user account as a local account; if you are using directory integration, the REX user account will still be from a local source. • Enter “REX” as the First Name and “User” as the Last Name. • Enter a valid, actively monitored e-mail address. This will be the address where notifications relating to the REX adapter user account will be sent. Tip Consider using the email address of a CPTA or a distribution list for all CPTAs. • Choose (GMT) Greenwich Mean Time from the drop-down list. • In the current release, only US English is supported; any language selection you make will be ignored • Browse to select an Organizational Unit. Click Search, click the Site Administration radio button, then click Add. • Optional. Enter a description or any information pertinent to the user account in the Notes field. • Enter REXuser as the Login. • Enter, then enter re-enter a password for the REX user account. Note Step 4 Organization Designer Page If you are using the Cisco IAC Virtual Appliance, some or all of this information may have been entered for you. Click Create to create the new user and close the form. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-5 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Creating the Service Account for the nsAPIuser Note Step 1 This step is optional if you intend to enable Directory Integration. Back on Organization Designer page, select the People tab at the top of the page, if necessary. Tip Step 2 When the form closed, the People tab contents should automatically display, showing the user information you just entered. If you need to make corrections, make them before proceeding to the next step. Click Copy (upper right of the screen) to create a copy of the REX user that will be named “nsAPI User”. On the Create Person form: • Enter “nsAPI” as the First Name and “User” as the Last Name. • Enter a valid, actively monitored e-mail address. This will be the address where notifications relating to the nsAPI user account will be sent. Tip Consider using the email address of a CPTA or a DL for all CPTAs. • Choose (GMT) Greenwich Mean Time from the drop-down list if it is not already filled in. • As before, only US English is supported; any language selection you make will be ignored. • Browse to open the Select an Organizational Unit dialog box. Figure 9-5 Create Person Form Updated – Click Search. – Click the Site Administration radio button – Click the People tab. – Click Add. • Enter nsAPI as the Login. • Enter, then confirm password for the nsAPI user account you created earlier. Cisco Intelligent Automation for Cloud Installation Guide 9-6 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Step 3 Click Create to submit and close the form. Note Step 4 If you are using the Virtual Appliance, this information may have been entered for you. Click Create to close the form and return to Organization Designer. Setting the Calendar for the nsAPI User Step 1 In Organization Designer, click to access, or ensure that you are on, the People tab. Step 2 In the People pane on the left side of the window, locate the line and click the name nsAPI user record. Step 3 From the menu on the right side of the page, choose Calendar: Step 4 In the Calendar pane, change all time values in the To column to 11:59 PM. Figure 9-6 Step 5 Change all times in the From column to 12:00 AM if it is not already done so (as it is for Sunday and Saturday). Note Step 6 The Calendar Pane By default, Monday through Friday start at 9:00 AM, making for a 24-hour calendar. When your are done, click Close in the pop up window to return to your location on the wizard. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-7 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Setting Username and Password for REX Set REX Agent Properties Step 1 From the Wizard, select: – Set username and password for the 'REX Set REX Agent Properties' agent Figure 9-7 Manage Integrations Tab Step 2 In the Agents pane on the left, expand REX Set REX Agent Properties. Step 3 Click Outbound Properties. Step 4 In the REXOutboundAdapter.Username field, enter the REX login name you created on the Create Person form. Step 5 In the REXOutboundAdapter.Password field, enter the REX password in the Create Person form. Step 6 When your are done, click Close in the pop up on the page to return to your location on the wizard. Starting the REX Set Agent Properties Agent Step 1 From the Wizard, select: – Start 'REX Set REX Agent Properties' agent Cisco Intelligent Automation for Cloud Installation Guide 9-8 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Figure 9-8 Control Agents Portal Step 2 Click the red icons next to REX Set REX Agent Properties. Step 3 Click Start Selected. Tip If you do not see “REX Set REX Agent Properties” in the list, scroll down, or sort by agent name by clicking the Name column heading. • Note The red icons turn to green, indicating that they are now sending and receiving. In some cases, you may need to refresh the page before you see the colors change. To do so, click the Refresh List button at the bottom of the page. Step 4 Click Submit Order to submit the form and display the Order Confirmation page for the service that you ordered. Step 5 Click on the number in the Requisition Number field to display the details. Step 6 Click Close to return to the Configuration Wizard. Setting REX Agent Configuration Configure all of the REX agent properties, then verify that the agents are configured correctly. Step 1 From the Wizard, select: – Set REX Agent Configuration Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-9 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Figure 9-9 Set REX Agent Configuration Screen Step 2 On the Set REX Agent Configuration form, enter the REX account login name, then enter and re-enter the REX account password. Step 3 Enter the URL to the Prime Service Catalog Request Center server in the Prime Service Catalog Request Center URL field. Tip The URL should include http or https, the hostname and port number, and the pathname to RequestCenter. For example, http://localhost:8080/RequestCenter. Step 4 Click Submit Order to submit the form and display the Order Confirmation page for the service that you ordered. Step 5 Click on the number in the Requisition Number field to display the details. Figure 9-10 Requisition Details Form Cisco Intelligent Automation for Cloud Installation Guide 9-10 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Step 6 In the Requisition Details pane, click the requisition number in the Requisition Number field to refresh the status. Tip Step 7 Repeat this refresh process as many times as needed until the status is Completed. Click Close to return to the Configuration Wizard. Starting All REX Agents You will next start all REX agents; that is, all agents with REX in the name. The current list includes the following eleven REX agents: 1. REX Add Organization Unit 2. REX Add Organization Unit (Tenant) 3. REX Add Person 4. REX Create Queue 5. REX Deactivate OU 6. REX Delete Queue 7. REX Modify Organization Unit 8. REX Set DB Agent Properties 9. REX Set HTTP Agent Properties 10. REX Set NSAPI Agent Properties 11. REX Set REX Agent Properties (already started in a previous step) Step 1 From the Wizard, select: – Start All REX Agents Step 2 On the Control Agents Tab of the Service Links portal, press and hold the Shift key. Step 3 Click the first REX agent in the list; scroll to click the last REX agent visible in the list on the page. Figure 9-11 Selecting the REX Adapters Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-11 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Step 4 Click Start Selected. Figure 9-12 Tip The Start and Stop Buttons If a vertical scroll bar appears in the list, scroll down to select the last agent on the page. You will see the following message; click Yes: Figure 9-13 The Confirm Start The red icons will turn to green after a bit, indicating that they are now sending and receiving. In some cases, you may need to refresh the page before you see the colors change. To do so, click the Refresh List button at the bottom of the page. Note Step 5 There may have been additional REX agents in the list that you were not able to see (and therefore, activate). To find them, use the scroll arrow at the bottom of the list. You may need to use the “next page” button at the bottom of the screen, as well, to find all remaining REX agents. Then repeat Step 2 through Step 4, as needed. Click Close to close this form to return to the Configuration Wizard. Configuring a DB Agent These credentials are to connect to the database. Step 1 From the Wizard, select: – Configure DB Agent Cisco Intelligent Automation for Cloud Installation Guide 9-12 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Figure 9-14 Step 2 From the Set Agent Configuration form, complete the following: • Set Agent Type to DB (should already be set, but be sure to check). • Enter a username and password. • Reenter the password to confirm. Note Step 3 Set Agent Configuration Screen The username would match the Cisco Prime Service Catalog database information. Normally, this would be “RCUSER.” Note that this applies only if you are using the built-in Oracle server. (Remember, the built-in Oracle server is not meant for production environments.) For the JDBC URL, highlight the appropriate URL to the right of the field (either MS SQL or Oracle, depending on your setup). Note This is the connection to the Cisco Prime Service Catalog database. You will need to change the example provided to replace localhost with the address to your actual database server. Only use localhost if you are using the built-in Oracle server. (But use the built-in Oracle server only as a test or proof of concept server. Step 4 Copy the URL and then paste it into the JDBC URL field. Step 5 Click Submit Order. Starting a DB Agent Follow these steps to enter credentials for connecting to the database. Step 1 From the Wizard, select: – Start DB Agent Step 2 On the Control Agents Tab of the Service Links portal, select Insert Default Parameters. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-13 Chapter 9 Configuring Cisco IAC With the Wizard Configuring Agent Properties Step 3 Click Start Selected, and then click Yes to confirm. Step 4 Click Yes to confirm. Step 5 The red light icon next to Insert Default Parameters will turn green. Step 6 On the Control Agents Tab of the Service Links portal, select Portal Page Assignment to OU. Step 7 Click Start Selected, and then click Yes to confirm. Step 8 The red light icon next to Portal Page Assignment to OU will turn green. Step 9 Click Close. Configuring the nsAPI Agent To configure the nsAPI agent: Step 1 From the Wizard, select: – Configure NSAPI Agent Step 2 On the Set Agent Configuration form (see Figure 9-14 for an example), complete the following: • Set Agent Type to NSAPI (may already be set; be sure to check). • Select Basic as the Authentication Scheme. Note Step 3 This value must be set to “Basic,” otherwise nsAPI will not function correctly and you will not be able to properly continue Day 0 setup. • Enter the nsAPI username and password (as created earlier). • Reenter the password to confirm. Click Submit Order. Starting the nsAPI Agent Step 1 From the Wizard, select: – Start NSAPI Agent Step 2 On the Control Agents Tab of the Service Links portal, select Retrieve OU ID on Name. Step 3 Click Start Selected, and then click Yes to confirm. Step 4 Click Yes to confirm. Step 5 Click Close. Step 6 Click Next to proceed to Step 2 of the Configuration Wizard: Cloud Administration. Cisco Intelligent Automation for Cloud Installation Guide 9-14 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Setting Up Cloud Administration On the Step 2 panel of the Cisco IAC Configuration Wizard, you create the home organization for Cloud Provider Technical Administrators (CPTA). CPTAs manage cloud resources and services via the service catalog. They have access to internal network and systems (underlying cloud infrastructure) and onboard/offboard tenants. Figure 9-15 shows Step 2 after the Cloud Organization has already been set up. Once you have set up the Cloud Organization, you are returned to Step 2. At that time (after the Wizard redisplays), the link for “Add Cloud Administration Organization” has been removed. This is to ensure that you do not inadvertently run that task more than once. Figure 9-15 Configuration Wizard—Step 2: Cloud Administration Adding a Cloud Administrator Organization Step 1 From the Wizard, select: – Add Cloud Administrator Organization Figure 9-16 Step 2 Add Cloud Administration Organization Screen On the Add Cloud Administration Organization form, enter the following: Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-15 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Step 3 • Cloud Admin Organization Name (required) • Company Abbreviation (required; maximum 4 characters) • Organization Description (optional) Click Submit Order. Figure 9-17 Add Cloud Administration Organization Screen Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Adding Cloud Administrators Note If you are using a directory service to import the Cloud Provider Technical Administrator, see the information in the following section, Adding Cloud Administrators: Directory Service Users Only. Step 1 From the Wizard, select: Step 2 On the Add Cloud Administrator form, choose Create New User from the drop-down to display the fields for creating a new user as a Cloud Administrator. – Add Cloud Administrator(s) Cisco Intelligent Automation for Cloud Installation Guide 9-16 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Figure 9-18 Step 3 Add Cloud Administrator Form Provide the following information: • Enter the first and last name of the new Cloud Provider Technical Administrator. • Enter a unique login identifier for the Cloud Provider Technical Administrator. • Enter the new Cloud Administrator’s e-mail address. • From the drop-down list, choose the time zone associated with the new CA’s primary address. • Enter then re-enter the password for the new Cloud Administrator. Step 4 Make nsAPI a Cloud Provider Technical Administrator. Step 5 Click Submit Order. Step 6 Click on the number in the Requisition Number field to display the details. Step 7 Click Close when the status says Completed. Adding Cloud Administrators: Directory Service Users Only This section applies only if you are using a directory service to import user and organization data. Before you proceed, directory integration must be set up. For instructions on setting up directory integration, see Chapter 6, “Completing Optional Tasks.” After you set up directory integration, users are automatically imported when they log in, and their Prime Service Catalog roles are automatically assigned based on the user groups to which they were added in the directory. • User roles are assigned when you define group role mappings during directory integration setup (as shown in “Adding the nsAPI User to the Cloud Administration Group” section on page 6-6 in Chapter 6, “Completing Optional Tasks”). • You assign the Cloud Administrator role to a user from the directory, rather than from Cisco Prime Service Catalog, by adding the user to the Cloud Administrator user group in the directory. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-17 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Making nsAPI a Cloud Provider Technical Administrator Step 1 From the Wizard, select: – Make nsAPI a Cloud Provider Technical Administrator Step 2 On the Add Cloud Administrator page, click Select an Existing User. Step 3 Select the nsAPI user and then click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Adding Site Administrator Role to nsAPI User If you are using a directory service, see the information in the following section, Adding Cloud Administrators, page 9-16. Step 1 From the Wizard, Step 2, click: – Add Site Administrator role to nsAPI user Figure 9-19 Add Roles Form Step 2 Select the nsAPI user. Step 3 Choose Roles on the right of the screen (as shown in Figure 9-19). Step 4 Click Add under the list of Roles first to open the search bar. Step 5 Search for “Site Administrator”. Step 6 Check the Site Administrator check box. Step 7 Click Add. Step 8 Click Close. Cisco Intelligent Automation for Cloud Installation Guide 9-18 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Connecting Cisco Process Orchestrator Here, you register and connect the various platform elements to be used for the cloud. This setup must be completed before any further setup or usage of the cloud environment can take place. Step 1 From the Wizard, select: – Connect Cisco Process Orchestrator Step 2 On the Connect Cloud Infrastructure Screen, choose the platform element to which you would like to connect. • Verify the Cloud Portal Host Name and Port Numbers. • Ensure Cloud Portal Connection Encryptedoption is set to False. Tip The Connection Encrypted is set to “False” by default. Setting to “True” would require SSL being set up and enabled on Cisco Process Orchestrator, which is not required for Cisco IAC 4.0. • Enter the NSAPI User Name. • Enter the NSAPI Password. • Enter the Process Orchestrator Host Name. • Verify the Process Orchestrator Port Number. • Enter the Process Orchestrator Administrator User Name. • Enter the Process Orchestrator Administrator Domain (if applicable). • Ensure Process Orchestrator Connection Encrypted option is set to False. • Choose the Process Orchestrator Authentication Scheme. • Enter the Process Orchestrator Administrator Password. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Tip Step 5 This task of setting the Process Orchestrator values cannot complete until all agents are started, which includes Process Orchestrator. Without the agents running the process can not complete. Click Close. Starting All Other Agents Finally, you need to start all of the other agents in order to successfully finish this procedure. Step 1 From the Wizard, select: – Start all other agents Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-19 Chapter 9 Configuring Cisco IAC With the Wizard Setting Up Cloud Administration Figure 9-20 Starting All Other Agents Step 2 On the Control Agents Tab of the Service Links portal, select every single agent on every page with a red light icon. Step 3 Click Start Selected, and then click Yes to confirm. The red light icon next to all the remaining agents will turn green. Note There may have been additional agents in the list that you were not able to see (and therefore, activate). To find them, use the scroll arrow at the bottom of the list or the “next page” button at the bottom of the screen. Repeat Step 2 through Step 4 as needed. Step 4 Click Submit Order. Step 5 Click on the number in the Requisition Number field to display the details. Step 6 Click Close when the status says Completed. Initializing Cisco IAC Licensing Step 1 From the Wizard, select: – Initialize licensing Figure 9-21 Refresh and Update Cloud License Screen Cisco Intelligent Automation for Cloud Installation Guide 9-20 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Connecting to the Cloud Infrastructure Step 2 Click Submit Order. Step 3 Click on the number in the Requisition Number field to display the details. Step 4 Click Close when the status says Completed. Connecting to the Cloud Infrastructure On the Step 3 panel of the Configuration Wizard, you define the connection information for the platform elements that will be used in Cisco IAC. This information will be used by Cisco Process Orchestrator to integrate with the various components involved in the cloud provisioning processes. Figure 9-22 Configuration Wizard—Step 3: Logout Notice Step 1Log out of Cisco IAC, close your browser, and then restart it. Step 2Log back in to Cisco Intelligent Automation for Cloud as the Cloud Provider Technical Administrator (CPTA) you created previously. (See Adding Cloud Administrators, page 9-16.) Step 3 Once back in, start the Wizard again. To do so: • Choose Service Portal from the menu at the top right of the screen: • Select Setup from the Cisco IAC 4.0 menu and then choose Configuration Wizard from the Setup sub-menu: Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-21 Chapter 9 Configuring Cisco IAC With the Wizard Connecting to the Cloud Infrastructure Step 4 Click Next. You will be returned to Step 3 of the Wizard, with new two tasks to complete, as shown in Figure 9-23: Figure 9-23 Configuration Wizard—Step 3: Connect Cloud Infrastructure Connecting Cisco IAC Management Appliance (Optional) Timesaver Step 1 If you do not intend to use Advanced Network Services (VSA 1.0), then connecting a Cisco IAC Management Appliance is not required. From the Wizard, select: – Connect Cisco IAC Management Appliance Cisco Intelligent Automation for Cloud Installation Guide 9-22 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Connecting to the Cloud Infrastructure Figure 9-24 Step 2 Connect Cloud Infrastructure Form On the Connect Cloud Infrastructure form, do the following: Note If you are using the Cisco IAC Virtual Appliance, some of this information has been already entered for you. • Verify the Platform Element Type. • Enter a Host Name, Description, and Port number. • Set Secure Connection and Ignore Certificate Error to either True or False, as needed. Tip • Note Leaving the default settings is probably the best option. Enter User Name and Password and then reenter the password to confirm. If you are using the Cisco IAC Virtual Appliance, the user is “admin,” and the password is the one you specified earlier. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-23 Chapter 9 Configuring Cisco IAC With the Wizard Connecting to the Cloud Infrastructure Connecting Cloud Infrastructure Step 1 From the Wizard, select: – Connect Cloud Infrastructure. Step 2 On the Connect Cloud Infrastructure form, under Connect VMware vCenter Server, do the following: • Select VMware vCenter as the Platform Element Type. • Enter a Host Name. • Enter a Port number. • Enter a Description. • Set the following to either True or False, as needed: – Secure Connection – Ignore Certificate Error – Managed by UCS Director Tip • Tip Leaving the default settings is probably the best option. Enter User Name and Password, the reenter the password to confirm. You may need to enter the domain name before the username, followed by a backslash. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Note Click Next to start discovery, explained next in “Discovering Cloud Infrastructure (Optional)”. You will see a message informing you that Step 4 is being prepared. Next, you’ll see Step 4 as shown in Figure 9-25. Cisco Intelligent Automation for Cloud Installation Guide 9-24 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Discovering Cloud Infrastructure (Optional) Discovering Cloud Infrastructure (Optional) Discovering Network Devices (Optional) Timesaver The purpose of Step 4 is to discover your physical and virtual network appliances. Save for your first Prime NSC, you do not need to pre-provision the virtual devices. Cisco IAC will provision all these devices for you when the first Tenant Organization is onboarded that has elected for Advanced Network Services. If you are not planning on using Advanced Network Services (VSA 1.0), you may skip Step (Tab) 4 and move on to Step (Tab) 5 directly. Figure 9-25 Step 1 Wizard Step 4 Screen To discover network devices, from the Wizard choose: – Discover Network Devices Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-25 Chapter 9 Configuring Cisco IAC With the Wizard Discovering Cloud Infrastructure (Optional) Figure 9-26 Note Step 2 This process can take anywhere from 10 minutes up to an hour. You are returned to the wizard Step 4 screen. Figure 9-27 Step 3 Discovery In Progress Screen Final Virtual Management Screen Click Next to proceed to Step 5 in the Wizard. Registering Nexus 1000v Devices (Optional) Step 1 To register Nexus 1000v devices, from the Wizard choose: – Register Nexus 1000v Step 2 Complete the online process to register Nexus 1000v devices. When you are done, click Next. Cisco Intelligent Automation for Cloud Installation Guide 9-26 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Managing PODs Managing PODs On the Step 5 panel of the Wizard, you create PODs and select the instances that manage its resources. A POD (Point-of-Delivery) contains the platform elements and a data center. Figure 9-28 Configuration Wizard—Step 5: POD Management Creating Network PODs (Optional) Use the Create POD service to register an installed POD (Point Of Delivery) and select the instances that manage its resources, so that you can start using it in the cloud. You must be logged in as a Cloud Provider Technical Administrator to create a network POD in Cisco IAC 4.0. Step 1 From the Wizard, select – Create Network POD Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-27 Chapter 9 Configuring Cisco IAC With the Wizard Managing PODs Figure 9-29 Step 2 Create Network Pod Form On the Create Network Pod form, define the platform elements: • Note Assign a name and description and then select the datacenter that is to serve this POD. There is a 1-to-1 mapping between datacenters and PODs. If the drop-down list is empty, all available datacenters have been associated with a POD. For information about defining a new VMware datacenter, see VMware, page 2-4 • Optional. Select the UCS Manager that is to serve this POD. There is a 1-to-1 mapping between UCS Managers and PODs. Again, if the drop-down list is empty, all available UCS Managers have been associated with a POD. For information about defining a new UCS Manager, see Understanding Cisco UCS Manager Service Profile Templates and Policies, page 2-2. • Optional. Select the Server Provisioner instance that is to serve this POD. A CSP can be associated with multiple PODs. This option requires: – vCenter Port Group for OS Provisioning - The port group inside the vCenter that will be used for the provisioning VLAN for bare metal installations. – UCS VLAN for OS Provisioning - The VLAN associated with UCS that is used by the Server Provisioner for bare metal installations. Note For information about defining a new Cisco Server Provisioner, see Understanding Cisco UCS Manager Service Profile Templates and Policies, page 2-2. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Cisco Intelligent Automation for Cloud Installation Guide 9-28 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Managing PODs Creating Compute PODs Use the Create POD service to register an installed compute POD (Point Of Delivery) and select the cloud infrastructure platform elements that manage its resources. Note Step 1 Multiple data centers are supported through multiple Compute PODs. From the Wizard, select – Create Compute POD Figure 9-30 Step 2 Create Compute POD On the Create Compute POD form: • Enter a new short name for the Compute POD. • Enter a full description of the Compute POD. • Select the Network POD instance that serves in this POD. • Select your Cloud Infrastructure Type, such as VMware vCenter Server. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-29 Chapter 9 Configuring Cisco IAC With the Wizard Setting System-Wide Services and Provisioning Setting System-Wide Services and Provisioning On the Step 6 panel of the Wizard, you select the system-wide services to offer and enter critical information for provisioning the cloud servers, such as network domain name and default time zone. When you have completed Step 6, click Next. Figure 9-31 Configuration Wizard—Step 6: Set Provisioning Settings Setting System-Wide Service Options When a service is disabled, ALL users, including the CTPA, are disallowed from ordering the given service. Although users can see the link to a disabled service, a “disabled” message displays, and “Submit” buttons are hidden on the service forms. Tip Step 1 You can re-enable a disabled service at any time. Disabling an option only affects what users can order from the catalog from the time the Set System Wide Service Options service order is fulfilled. It does not affect current services already ordered. From the Wizard, select: – Set System-wide Service Options Cisco Intelligent Automation for Cloud Installation Guide 9-30 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Setting System-Wide Services and Provisioning Figure 9-32 Set System-wide Service Options Form Step 2 Select the proper options based on your hardware inventory. Step 3 Disable a service by clicking the No radio button, or re-enable a disabled service by clicking the Yes radio button. Step 4 Click Submit Order. Step 5 Click on the number in the Requisition Number field to display the details. Step 6 Click Close when the status says Completed. Specifying Provisioning Settings Specify the settings for bare metal and virtual machine provisioning, then verify that the bare metal and virtual machine provisioning settings are configured correctly. Step 1 From the Wizard, select: – Set Provisioning Settings Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-31 Chapter 9 Configuring Cisco IAC With the Wizard Setting System-Wide Services and Provisioning Figure 9-33 Step 2 Server Provisioning Settings On the Server Provisioning Settings form, specify the following: • Set the default the time zone for Cisco Server Provisioner. • Enter the period of time allowed, specified in minutes, before a virtual machine deployment operation is determined as failed. • Enter the amount of time, in whole hours, to suppress duplicate alerts related to cloud automation. • The amount of time, in whole hours, between consecutive periodical executions of the CloudSync infrastructure discovery service. • The period of time allowed, specified in minutes, before a CloudSync Discovery operation is determined as failed. • The amount of time, in minutes, between consecutive periodical executions of platform element connection validation services. • Enter the name of the Windows domain for commissioned Windows servers to join. • Enter the username and password for the Windows domain user to join the Windows VM to the Windows domain. • Linux only. Choose the default time zone for the Linux server from the drop-down list. For valid time zone values, see the VMware documentation on VMware.com. • Windows only. Choose the default time zone for the Windows server from the drop-down list. For valid time zone values, see the VMware documentation on VMware.com. Step 3 Click Submit Order to submit the form and display the Order Confirmation page for the service that you ordered. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Cisco Intelligent Automation for Cloud Installation Guide 9-32 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Setting System-Wide Services and Provisioning Configuring the E-Mail Notification Templates Cisco IAC includes a set of default (delivered as part of Prime Service Catalog) e-mail notification templates that you customize for an organization. The cloud system sends the e-mail notifications in response to events such as orders and system errors. Before users can start ordering cloud services, you must configure the e-mail notification templates with the relevant sender and recipient addresses. Step 1 From the Wizard, select: – Set System Email Account Figure 9-34 Step 2 Manage Email Templates For the editing window, click one of the following radio buttons to choose an editor. • HTML Part • Text Part Step 3 In the editing panel, modify the default content and add optional content as needed. Step 4 Click Update. Step 5 Repeat Step 2 through Step 4, above, for the e-mail templates on the Request Center tab. Assigning From Address for E-Mail Templates You must assign the From address for the default templates to use for outgoing notification e-mail messages. E-mail cannot be sent without a fully-qualified e-mail address. Follow these steps to assign an e-mail address for the default e-mail templates. Step 1 Click Set System Email Account. Step 2 Enter the e-mail address you would like to use as the default from address for outgoing notification e-mail messages in the Sender e-mail Address field. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-33 Chapter 9 Configuring Cisco IAC With the Wizard Creating Resources for Network Services Creating Resources for Network Services On the Step 7 panel, you register a datastore, add community and user networks to which users can deploy servers, management networks, and infrastructure networks to be used for bare metal provisioning and create a shared zone. When you have completed all of the tasks in Step 7, click Next. If you do not wish to add networks or create a shared zone, click Skip. Figure 9-35 Configuration Wizard—Step 7: Create Resources for Network Services Required Steps Registering a Datastore Datastores that are discovered automatically during Connect Cloud Infrastructure must be registered before they can be used in the shared zone community and organization virtual data centers. A single datastore can be used by one or more Virtual Data Centers. Step 1 From the Wizard, select: – Register Datastore Cisco Intelligent Automation for Cloud Installation Guide 9-34 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Creating Resources for Network Services Figure 9-36 Step 2 Register a Datastore On the Register Datastore form, select a datastore with a status of Discovered that should be registered for use. The form will populate with information specific to the datastore you selected. Step 3 Enter a friendly name and description (for example, the type of storage) for the datastore. (Optional) Step 4 Click Submit Order. Step 5 Click on the number in the Requisition Number field to display the details. Step 6 Click Close when the status says Completed. Creating a Service Network Use the Add Network form to define a VLAN and subnet to use in the cloud system use, for user servers, server management, or for use by the cloud infrastructure. Tip Step 1 If you have many hosts, when adding networks, be sure to select the same port group for each host. From the Wizard, select: – Create Service Network Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-35 Chapter 9 Configuring Cisco IAC With the Wizard Creating Resources for Network Services Figure 9-37 Step 2 Step 3 On the Add Network form, from the drop down select a Cloud Infrastructure Type. Types include: • Amazon EC2 • Cisco UCS Director • Openstack Cloud Manager • VMWare vCenter Server • VMWare vCloud Director Select a Compute POD Name. Note Step 4 Add a Network Depending on the cloud infrastructure type you choose, you will then see a selection of different fields populate the screen. Complete the cloud infrastructure fields as required for each type. For example, you may be asked to provide any of the following (as well as other information): • Network Name: Enter a short name for the network that will be shown to users in drop-down selection lists. • Subnet Address Specification: Enter the network for this subnet in CIDR notation. For example, 192.168.20.0/24. Enter only an IPv4 type of IP address. Note: Only networks from /23 through /29 are supported. Tip If after entering the Subnet Address Specification value you get a “process is taking too long to complete” information message (such as the one shown in Figure 9-38), select continue option until processing is complete and you can select another field on the form. Cisco Intelligent Automation for Cloud Installation Guide 9-36 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Creating Resources for Network Services Figure 9-38 Potential “Unresponsive Script” Message • Community Network: Choose the network access scope for user networks. A community network is available to users in shared zones. Non-community networks require explicit VDC level access to be set before users can deploy servers to it, which is useful for traffic isolation and better security. • Public Network: Specify the duplication policy for this network. Public networks are globally unique, while private networks must only be unique within associated network device contexts. • Network Type: Choose a network type to determine how this network can be used. User networks are used for deploying virtual machines or physical servers. Management networks are used for management access to cloud servers. Infrastructure networks are used for management interfaces of hypervisor hosts and other infrastructure devices. • Network Source: Select how IP addresses management is done in this network: Internally by Cisco IAC, or via an external IP management tool. • In addition, you may need to enter any of the following: – Subnet Mask – Gateway Address – FHRP1 (First Hop Redundancy Protocol) and FHRP2 Address – Broadcast Address – Primary DNS and Secondary DNS Tip Depending on the cloud infrastructure type you selected, the form may populate with infrastructure-specific fields which also may be required. Be sure to complete these fields as well. In all cases, the red asterisk will indicate the required field or fields. Step 5 Click Submit Order. Step 6 Click on the number in the Requisition Number field to display the details. Step 7 Click Close when the status says Completed. Creating Infrastructure Networks Step 1 From the Wizard, select: – Create Infrastructure Network Note The steps for this procedure are the same as outlined in the Creating a Service Network, page 9-35. Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-37 Chapter 9 Configuring Cisco IAC With the Wizard Creating Resources for Network Services Creating an Internet Network (Optional) Step 1 From the Wizard, select: – Create Internet Network Note The steps for this procedure are the same as outlined in the Creating a Service Network, page 9-35. Configuring Resources for Network Services (Optional) Step 1 From the Wizard, select: – Configure Resource for Network Services Note The steps for this procedure are the same as outlined in the Creating a Service Network, page 9-35. Adding a Public Subnet to Network POD (Optional) Step 1 From the Wizard, select: – Add Public Subnet to Network POD Figure 9-39 Step 2 Add Public Subnet to Network POD On the Add Public Subnet to Network POD form, enter the following: • Subnet Address. The network address of the subnet. • Subnet Bitmask. The bitmask (numeric) of the subnet you are adding. Do not include the slash. • Network POD Name. • Assigned Subnets. The public subnets that have already been assigned. Cisco Intelligent Automation for Cloud Installation Guide 9-38 OL-29971-01 Chapter 9 Configuring Cisco IAC With the Wizard Completing the Setup • Unassigned Subnets. The free public subnets remaining in the pool. Step 3 Click Submit Order. Step 4 Click on the number in the Requisition Number field to display the details. Step 5 Click Close when the status says Completed. Completing the Setup Figure 9-40 Configuration Wizard—Setup Complete Now that you have completed all of the required steps in the Configuration Wizard, your cloud environment is ready for ordering. The final phase, is to set or check certain permissions as follows. Note Most of these permissions will already be set, but problems may arise with the Cisco Intelligent Automation for Cloud 4.0 installation if these permissions are not set properly. Step 1 Access the Organization Designer. Step 2 Update all CPTA and TTA Roles. Execute all services: • Service Order Service > All Access all service items: • Step 3 Service Item Instance data: Select Read all Update all OTA, TTA, and Server Owner Roles. • Service Item Instance data: Select Read all service items from my BU WebServices • Add: – nsAPI access – Requisition Access Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 9-39 Chapter 9 Configuring Cisco IAC With the Wizard Completing the Setup – Requisition System Account Tip For more information on Organizations, see the Cisco Intelligent Automation for Cloud 4.0 Administrator Guide. Cisco Intelligent Automation for Cloud Installation Guide 9-40 OL-29971-01 A P P E N D I X A Glossary of Terms The following contains a list of acronyms important for understanding the installation, configuration, and day-to-day use of Cisco Intelligent Automation for Cloud 4.0. A AD Active Directory (AD) is a directory service implemented by Microsoft for Windows domain networks Amazon EC2 See EC2 AS Advanced Services – Team of professional services engineers with Cisco, same as Cisco Services Autonomous System– In a routing context ASA Adaptive Security Appliance AWS Amazon Web Services B BaseDN Base-distinguished name; used in LDAP authentication. See DN BindDN Bind-distinguished name; used in LDAP authentication. See DN C CaaS Compute as a Service. See also IaaS and SaaS CDP Cisco Device Protocol CP Cloud Portal. This name is no longer in use (but you may still find it in older documents.) The new name for this product is Cisco Prime Service Catalog. CPBA Cloud Provider Business Administrator CPTA Cloud Provider Technical Administrator CSR Cloud Services Router CUIC Cisco Unified Infrastructure Controller Cisco Intelligent Automation for Cloud 4.0 Glossary A-1 Appendix A Glossary of Terms D DBA Database Administrator DHCP Dynamic Host Configuration Protocol DN Name that uniquely identifies an entry in an LDAP directory. A DN is made up of “attribute=value” pairs separated by commas DNS Domain Name System DRS Distributed Resource Scheduler. Part of VMware vSphere E EC2 Amazon Elastic Compute Cloud EFT Early Field Testing [release of beta software to select internal and external stakeholders for a trial period] ELMI Enhanced Local Management Interface ESXi ESXi is a bare-metal hypervisor from VMware F-H FCS Field Customer Ship FHRP First Hop Redundancy Protocol HSRP Hot Standby Router Protocol HTML HyperText Markup Language. A language for displaying information in a web browser I IaaS Infrastructure as a Service. See also Saas and CaaS IAC Cisco Intelligent Automation for Cloud IIS Internet Information Services, an extensible web server created by Microsoft ILMI Interim Local Management Interface IPAM IP Address Management JKL JBoss Open Source Java Application Server from JBoss, a division of Red Hat Inc. JQuery Cross-browser JavaScript library KDE “K Desktop Environment;” A network-transparent desktop environment used on UNIX workstations LAN Local Area Network LDAP Lightweight Directory Access Protocol. A protocol for accessing and maintaining distributed directory information services over an Internet LLDP Link Layer Discovery Protocol LUN Logical Unit Number Cisco Intelligent Automation for Cloud 4.0 A-2 Glossary Appendix A Glossary of Terms M-N MAC Media Access Control Mapping Refers to mapping within Active Directory NFS Network File System NSC Network Service Controller NMTG Network Management Technology Group nsAPI Cisco offers a set of standard REST (Representational State Transfer) APIs and Java stubs for accessing entities defined in Prime Service Catalog. They are collectively known as nsAPI. O OpenStack Initiative developed jointly by Rackspace Hosting and NASA. See: http://www.openstack.org/ OTA Organization Technical Administrator OU Organizational Unit P PNC PowerVu Network Center PNSC Cisco Prime Network Services Controller (formerly known as VNMC) POC Proof Of Concept – Hands-on engagement of select customers with beta product install in their environment at customer site POD Point of Delivery or Point of Distribution PSC Cisco Prime Service Catalog Q Queue A first-in/first-out (FIFO) list of elements, where the first element added to the queue will be the first one to be removed. Query A request for information from a database. See JQuery R RDP Remote Desktop Protocol S SAN Storage Area Network SaaS Software as a Service; See also CaaS and IaaS SDP Service Delivery Platform SDU Systems Development Unit SSL A cryptographic protocol used to provide secure communication over the Internet SNMP Simple Network Management Protocol SP Cisco Server Provisioner Cisco Intelligent Automation for Cloud 4.0 Glossary A-3 Appendix A SSH Glossary of Terms Secure Shell T TAC Technical Assistance Center TBA Tenant Business Administrator Tenant Member of a multi-tenancy server/zone; another word for “customer” TTA Tenant Technical Administrator U UCS Cisco Unified Computing System UCSD Cisco Unified Computing System Director (UCSD) UUID Universal Unique Identifier. A 128-bit number used to uniquely identify an object or entity V vASA Virtual Adaptive Security Appliance VDC VMware Virtual Cloud Director VDC Virtual Data Center VIP Virtual IP VNMC Virtual Network Management Center (same as NSC). This name is no longer used. This product is now known as Cisco Prime Network Services Controller. VLAN Virtual LAN VMDC Virtualized MultiService Data Center VRRP Virtual Router Redundancy Protocol VSG Virtual Security Gateway VSO Virtual Server Owner V/PSO Virtual and Physical Server Owner WXYZ Week 0 Marker to denote AS’s successful, autonomous deployment of IAC and successful testing of flagship services. WWNN World Wide Node Name WWPN World Wide Port Names Cisco Intelligent Automation for Cloud 4.0 A-4 Glossary A P P E N D I X B Solution Prerequisites Checklists Default Ports and Protocols Table B-1 Requirements—Default Ports and Protocols Application Default Port Protocol Description Cisco Prime Service Catalog 8080 TCP Client web browser connections to the Cisco Prime Service Catalog RequestCenter; Process Orchestrator communications to the Cisco Prime Service Catalog request center inbound web service 6080 TCP Process Orchestrator communications to the Cisco Prime Service Catalog service link inbound web service. 2081 TCP User Web browser connections to the Process Orchestrator web console 61525 TCP Process Orchestrator Console access to the Process Orchestrator Server 61526 TCP Web Service (API) communication using HTTPS protocol from the Cisco Prime Service Catalog to the Process Orchestrator web service 61527 TCP Web Service (API) communication using HTTP protocol from the Cisco Prime Service Catalog to the Process Orchestrator web service 80 TCP HTTP web service communication between Process Orchestrator and Cisco Server Provisioner 21 TCP FTP protocol used for Cisco Server Provisioner client provisioning 67 UDP BOOTP protocol used for Cisco Server Provisioner client provisioning 111 UDP TFTP protocol used for Cisco Server Provisioner client provisioning 139 TCP/UDP NetBios protocol used for Cisco Server Provisioner client provisioning 445 TCP/UDP SMB protocol used for Cisco Server Provisioner client provisioning 4011 TCP BINL protocol used for Cisco Server Provisioner client provisioning Process Orchestrator Cisco Server Provisioner Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 B-1 Appendix B Solution Prerequisites Checklists Limitations and Scalability Limitations and Scalability Table B-2 Requirements—Limitations and Scalability Entity Limitations Cisco UCS Manager 1 instance per delivery (POD). Each POD can contain up to 160 blades/host. Cisco Process Orchestrator server 1 Process Orchestrator environment supported by Cisco IAC. Note that multiple servers may be installed in that Process Orchestrator environment Cisco Server Provisioner server 0 or more. Each CSP can be associated to one or more PODs. Registered users Up to 1,000; up to 200 concurrent users Service items (concurrent) Up to 10,000 VMware vCenter 1 instance Storage Management Requirements Table B-3 Requirements—Storage Management Requirement Create storage and configure as datastores Cisco UCS Manager and Bare Metal Operating System Provisioning Requirements Table B-4 Requirement—Installing and Configuring UCS Manager Requirement UCS Manager is installed and configured before installing Cisco IAC Table B-5 Requirements—Creating UCS Manager Pools Requirement UUID suffix pool MAC address pool WWNN pool WWPN pool Cisco Intelligent Automation for Cloud Installation Guide B-2 OL-29971-01 Appendix B Solution Prerequisites Checklists VMware Software Requirements Table B-6 Requirements—Creating Cisco UCS Manager Service Profile Templates and Policies Requirement A hypervisor service profile template, per cluster, with the same quantity and configuration of vNICs as on other hosts in the same cluster. The native VLAN for the first vNIC should be set to the Management VLAN for that vCenter. Note Required only if ESXi Provisioning is enabled. At least one service profile template for physical server provisioning. Note Required only if Physical Server Ordering is enabled. A local boot policy assigned to the physical server service profile template which is set to boot from local disk A boot policy named "PXEBoot" which is configured to boot from the network Note This name is mandatory Provisioning templates are prepared according to Cisco Server Provisioner product documentation (see the Cisco Server Provisioner User's Guide on LinMin.com) UCS blades for provisioning VMware ESXi hypervisor hosts have at least one local drive VMware Software Requirements Table B-7 Requirements—VMware Software Installation Requirement vCenter object names do not contain forward slashes vSphere PowersCLI 5 or later is installed on the Process Orchestrator server VMware Enterprise licensing is applied VMware vSphere Distributed Resource Scheduler (DRS) is enabled VM templates have been created with VMware tools installed to support operating system customizations Directory and Mail Server Requirements Table B-8 Requirements—Directory and Mail Server Requirement LDAP server is installed, configured, and deployed SMTP server is installed and configured with an account to send and receive e-mails Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 B-3 Appendix B Solution Prerequisites Checklists Organizations and Users Preparation Organizations and Users Preparation Table B-9 Requirements—Organizations and Users Requirement Prepare a list of organizations Prepare a list of organization users Prepare a list of Organization Technical Administrators Create a Virtual Datacenter Table B-10 Requirements—Virtual Datacenter Creation Requirement vCenter platform element is registered POD is created Register Datastores Create networks Create Shared Zone Table B-11 Requirements—Shared Zone Creation Requirement vCenter platform element is registered POD is created Register Datastores Create networks Order VM From Templat Table B-12 Requirements—Order VM from Template Requirement VM templates created and discovered Virtual Data Center or Shared Zone is created Register Virtual Machine templates Cisco Intelligent Automation for Cloud Installation Guide B-4 OL-29971-01 Appendix B Solution Prerequisites Checklists Order a VM and Install an Operating System Order a VM and Install an Operating System Table B-13 Requirements—Order a VM and Install an Operating System Requirement VLAN for Cisco Server Provisioner to use as its private PXE VLAN defined in vCenter Cisco Server Provisioner Operating System Template is created Virtual Data Center or Shared Zone is created Register Cisco Server Provisioner Platform Element Create/Modify POD to contain the Cisco Server Provisioner Platform Element Discover and Register Cisco Server Provisioner operating system templates Order a Physical Server Table B-14 Requirements—Order a Physical Server Requirement VLAN for Cisco Server Provisioner to use as its private PXE VLAN defined in UCS Manager At least one UCS service profile template for physical server provisioning is created Cisco Server Provisioner Operating System Template is created Virtual Data Center or Shared Zone is created Place blades in the Physical Blade Pool Discover and register Cisco Server Provisioner operating system templates Discover and register Cisco UCS service profile templates Provision ESXi Table B-15 Requirements—Provision ESXi Requirement VLAN for Cisco Server Provisioner to use as its private PXE VLAN defined in UCS Manager At least one hypervisor UCS service profile template for each vCenter cluster is created Cisco Server Provisioner Operating System Template for ESXi is created Infrastructure Network is created Place blades in the Virtual Blade Pool Discover and register Cisco UCS service profile templates Discover and register Cisco Server Provisioner operating system templates Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 B-5 Appendix B Solution Prerequisites Checklists Provision ESXi Cisco Intelligent Automation for Cloud Installation Guide B-6 OL-29971-01 A P P E N D I X C Solution Deployment Checklists Cloud Infrastructure Setup Checklist Table C-1 Cloud Infrastructure Setup Checklist Task Define the VMware vCenter Server platform element Define the Cisco UCS Manager platform element Define the Cisco Server Provisioner platform element Set provisioning settings Add infrastructure network Add community network Create one or more PODs Set up the shared zone Cisco Process Orchestrator Setup Checklist Table C-2 Process Orchestrator Setup Checklist Task Import the Core Automation Pack Import the Common Activities Automation Pack Import the Intelligent Automation for Compute Automation Pack Import the Intelligent Automation for Cloud Starter Automation Pack Import the Intelligent Automation for Cloud Automation Pack Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 C-1 Appendix C Solution Deployment Checklists REX Adapter Installation Checklist REX Adapter Installation Checklist Table C-3 REX Adapter Installation Checklist Task Install the REX Adapter Directory Integration Setup Checklist (If Applicable) Note These tasks are required only if external authentication is enabled for your environment. Otherwise, skip to the next checklist. Table C-4 Directory Integration Setup Checklist Task Verify that the prerequisites for directory integration are met Configure the LDAP server Configure authentication: • Configure mappings • Configure events Configure authorization (Optional): • Create a security group for each user role on the LDAP server: – Cloud Provider Technical Administrator – Organization Technical Administrator – Virtual and Physical Server Owner – Virtual Server Owner – Field Extender – Service Group • Add the nsAPI user to the Cloud Administration Group • Configure user role mappings Enable directory integration Cisco Intelligent Automation for Cloud Installation Guide C-2 OL-29971-01 Appendix C Solution Deployment Checklists Service Catalog Deployment Checklist Service Catalog Deployment Checklist Table C-5 Service Catalog Deployment Checklist Task Copy service catalog files to Cisco Prime Service Catalog server Import and deploy service catalogs Portal and Portlet Deployment Checklist Table C-6 Portal Deployment and Configuration Checklist Task Copy portlets folder and extract files Configure Cisco Prime Service Catalog stylesheets Import and deploy portal pages Add portlet access to My Workspace Cloud Administration Setup Checklist Table C-7 Cloud Administration Setup Checklist Task Configure and enable approvals Set up REX and nsAPI user account Set username and password for REX Set REX agent properties Start REX Set REX Agent Property agent Set REX Agent Configuration and verify that the agent properties are set correctly Start REX Set HTTP Agent Property agent Set HTTP Agent Configuration and verify that the agent properties are set correctly Start all other agents Assign e-mail addresses for queue notifications Modify the default e-mail notification templates (see Table C-10 on page C-4 for a checklist of all of the templates) Create the Cloud Provider Technical Administrator home organization Add the new user as a Cloud Administrator (no directory service) Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 C-3 Appendix C Solution Deployment Checklists Directory Integration Setup Checklist (If Applicable) Directory Integration Setup Checklist (If Applicable) Note These tasks are required only if external authentication is enabled for your environment. Otherwise, skip to the next checklist. Table C-8 Directory Integration Setup Checklist Task Set up directory structure on the LDAP server, with Groups and Users folders. Create the nsAPI user account on the LDAP server. Create the lookup user account with “Read MemberOf” lookup permissions. Configure the LDAP server in Cisco Prime Service Catalog. Configure authentication: • Configure mappings. • Configure events. Configure authorization (Optional): • Create security groups for all six Cisco Prime Service Catalog user roles in each “Groups” folder on the LDAP server. • Add the nsAPI user to the CPTA security group. • Configure user role mappings. Enable directory integration. Cisco Intelligent Automation for Cloud Prerequisites Table C-9 Cisco Intelligent Automation for Cloud Prerequisites Checklist Task You have completed the checklists in Appendix B, “Solution Prerequisites Checklists,” and have confirmed that all of the Cisco IAC prerequisites are met. Email Notification Template Modification Checklist Table C-10 e-mail Notification Templates Checklist e-mail Template Add Role Completion Notification Ad-Hoc Task Started Connection Cloud Platform Elements Completed e-mail CPO Error Notification Physical Server Cisco Intelligent Automation for Cloud Installation Guide C-4 OL-29971-01 Appendix C Solution Deployment Checklists Organizations and Users Setup Checklist Table C-10 e-mail Notification Templates Checklist (continued) e-mail Template CPO Error Notification VM Default Late Activity Failure to Create Network Failure to Create Target Notification Lease Expiration - First Warning Lease Expiration - Second Warning My Services Departmental Reviews My Services Financial and Departmental Authorizations My Services Service Group Reviews Notification System Error in Service Request Order VM from Template Completion Notification Process Escalation Remove Role Completion Notification Service Canceled Notification Service Complete Notification Service Confirmation Customer Acknowledgement Service Link Error on External Task Service Rejected Notification Service Started e-mail Task Fulfillment Escalation Notification Task Fulfillment Pending Notification Tenant Management Complete Notification Organizations and Users Setup Checklist Table C-11 Organizations and Users Setup Checklist Task Create an organization Create a new user to add as an Organization Technical Administrator Assign Additional Permissions for the Organization Technical Administrator Role Assign Additional Permissions for the Server Owner Roles Add a Server Owner Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 C-5 Appendix C Solution Deployment Checklists Organizations and Users Setup Checklist Cisco Intelligent Automation for Cloud Installation Guide C-6 OL-29971-01 A P P E N D I X D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Hardware Specifications Table D-1 Hardware Specifications for Platform Elements Platform Element Component Process Orchestrator Server CPU Client Server Memory Disk space Cisco Prime Service Catalog Prime Service CatalogDatabase Cisco Server Provisioner UCS CPU — Memory — Disk space — CPU — Memory — Disk space — CPU — Memory — Disk space — CPU — Memory — Blades — Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 D-1 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Software Requirements Software Requirements Table D-2 Minimum Software Requirements Component Server Notes Application Server Operating System Process Orchestrator Prime Service Catalog Cisco Server Provisioner Application Software Process Orchestrator Prime Service Catalog LDAP Server Process Orchestrator Prime Service Catalog Note Web browser LDAP server requirements apply only if your environment has been enabled for external authentication. Process Orchestrator Prime Service Catalog Virtualization Hypervisor Manager Physical Server Provisioning Cisco UCS Manager Database Connection Settings Table D-3 Database Connection Settings Component Server Database Specifications Type (Oracle or Microsoft SQL) Notes Version Host Port Process Orchestrator credentials (Process Database) Database or Windows authentication? Username/Password Default Port (shown on screen) Domain Process Orchestrator credentials (Reporting Database) Database or Windows authentication? Username/Password Default Port (shown on screen) Domain Cisco Intelligent Automation for Cloud Installation Guide D-2 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Process Orchestrator Web Service Target Settings Table D-3 Database Connection Settings Component Server Notes RequestCenter credentials Database or Windows authentication? Username Password Domain Datamart credentials Database or Windows authentication? Username Password Domain Cisco Prime Service Catalog credentials Database or Windows authentication? Username Password Domain Process Orchestrator Web Service Target Settings Process Orchestrator web service settings are configured when the Cisco Intelligent Automation for Cloud Compute Automation Pack is imported into Process Orchestrator. Table D-4 Process Orchestrator Default Web Service Target Settings Requirement Notes HTTP Port of the Process Orchestrator web service target HTTPS or HTTP authentication mechanism (NTLM, Digest, or Basic) Environment Name (Default is, “PRODUCTION”) Web service target credentials: • Domain of user account that is used to connect to the Process Orchestrator Web service target • User account username • User account password Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-3 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Cisco Prime Service Catalog Credentials Cisco Prime Service Catalog Credentials Table D-5 Prime Service Catalog Credentials Requirement Notes Prime Service Catalog Appliance Database or Windows authentication? Username Password Domain Prime Service Catalog Administrator Database or Windows authentication? Username Password Domain Prime Service CatalogApplication Server Database or Windows authentication? Username Password Domain SMTP Information Table D-6 SMTP Server Name and Port Requirement Notes SMTP server name SMTP port Default Sender for Process Orchestrator Default Sender for Prime Service Catalog Process Orchestrator-Prime Service Catalog Integration API Connection User Account Credentials The user credentials for the Prime Service Catalog Integration API Connection to Process Orchestrator are created when the Intelligent Automation for Cloud Starter Automation Pack is imported into Process Orchestrator.This user account is referred to as the nsAPI user account. Cisco Intelligent Automation for Cloud Installation Guide D-4 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Cisco Prime Service Catalog Request Center and Service Link User Account Credentials Table D-7 Process Orchestrator-Prime Service Catalog Integration API Connection User Account Credentials Requirement Setting Username Password Cisco Prime Service Catalog Request Center and Service Link User Account Credentials Table D-8 Cisco Prime Service Catalog Request Center and Service Link User Account Credentials Requirement Setting Username Password REX Adapter Installation Settings Record the settings using the worksheet provided for your database server. Table D-9 Variable REX Adapter Installation Settings—SQL Server Definition DBSERVER DBPORT DBNAME DBUSER DBPW Table D-10 Variable REX Adapter Installation Settings—Oracle® Database (Windows or Linux) Definition DBSERVER DBPORT SID Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-5 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Directory Integration Settings (If Applicable) Table D-10 REX Adapter Installation Settings—Oracle® Database (Windows or Linux) Variable Definition DBUSER DBPWD Directory Integration Settings (If Applicable) LDAP Server Configurations Table D-11 Directory Integration—LDAP Server Settings Requirement Setting Datasource name Datasource description (optional) Protocol Server product and version BindDN Host User BaseDN Port number Password Configure Authentication Configure Mapping Table D-12 Directory Integration—Mapping Configurations Requirement Setting/Mapping Attribute Mapping name Mapping description (optional) Person data: • First Name • Last Name • Login ID • Personal Identification • E-mail Address Cisco Intelligent Automation for Cloud Installation Guide D-6 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Directory Integration Settings (If Applicable) Table D-12 Directory Integration—Mapping Configurations (continued) Requirement Setting/Mapping Attribute • Home Organization Unit • Password Configure Events Table D-13 Directory Integration—Event Configurations Requirement Setting EUABindDN Mappings Settings Table D-14 Directory Integration—Mappings Settings Requirement Setting First name Last name Login ID Person identification E-mail address Home organization unit Password Role list Events Settings Table D-15 Requirement Directory Integration—Events Settings Setting EUABindDN Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-7 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Cloud Administrator and Organization Settings Cloud Administrator and Organization Settings Table D-16 Cloud Administrator and Organization Settings Requirement Setting nsAPI user credentials: Username Password Current role assigned Current organization assigned REX adapter user credentials Username Password Current role assigned Current organization assigned Cloud Administrator—Organization Organization name Cloud Administrator—User credentials Username Password Current role assigned Current organization assigned Cloud Platform Connection Settings VMware vCenter Server Connection Settings Table D-17 VMware vCenter Server Connection Settings Platform Element Requirement VMware vCenter Server Host name Setting Port Secure connection protocol? (T/F) Username Password Cisco Intelligent Automation for Cloud Installation Guide D-8 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Provisioning Settings Cisco UCS Manager Connection Settings Table D-18 Cisco UCS Manager Connection Settings Platform Element Requirement Cisco UCS Manager Host name Setting Port Secure connection protocol? (T/F) Ignore certificate error? (T/F) Time zone Username Password Cisco Server Provisioner Connection Settings Table D-19 Cisco Server Provisioner Connection Settings Platform Element Requirement Cisco Server Provisioner Host name Setting Port Username Password Device user ID Provisioning Settings Table D-20 Provisioning Settings Requirement Setting Cisco SP time zone Default virtual server clone timeout Cloud duplicate alert suppression time period Cloud Domain Cloud Domain User Cloud Domain Password Cloud Default Time Zone Linux Cloud Default Time Zone Windows Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-9 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 System-wide Service Options System-wide Service Options Table D-21 System-wide Service Options Name Setting Virtual Machine From Template Ordering Virtual Machine and Install OS Ordering Physical Server Ordering ESXi Provisioning Community VDC Ordering Virtual Data Center Ordering Advanced Network Services Multiple Security Zones Enhanced VM Security High Availability Load balancing Services Network Settings Table D-22 <network_type> Network Settings Requirement Setting Network name Subnet address specification (IP address/ routing prefix) Community network Public network Network type NetworksSource vCenter portgroup UCS VLAN Subnet mask Gateway address (if other than default) FHRP1 address FHRP2 address Broadcast address (if other than default) Primary DNS address Secondary DNS address Cisco Intelligent Automation for Cloud Installation Guide D-10 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 POD Settings POD Settings Table D-23 Shared Zone Settings Requirement Setting Name Description VMware vCenter Instance VMware Datacenter Cisco UCS Manager Instance Cisco Server Provisioner Instance VMware Keystore Password Shared Zone Settings Table D-24 Shared Zone Settings Requirement Setting POD VMware vCenter Datacenter Standards Settings (Optional) If you have opted not to modify any standards settings for these service options, check the following check box: No standard settings have been modified from the default values. Lease Term Standards If you added new lease terms, record the information in Table D-25. If you have not added new lease terms, check the check box below. Lease term standards have not been modified from the default values. Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-11 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Standards Settings (Optional) Table D-25 Lease Term Settings Template Requirement New lease duration Lease term (for example, 6 months) Settings Runtime (seconds) Storage (seconds) Warning 1 (seconds) New lease duration Lease term (for example, 6 months) Runtime (seconds) Storage (seconds) Warning 1 (seconds) New lease duration Lease term (for example, 6 months) Runtime (seconds) Storage (seconds) Warning 1 (seconds) New lease duration Lease term (for example, 6 months) Runtime (seconds) Storage (seconds) Warning 1 (seconds) Operating Systems Standards No operating systems standards have been added or modified. Table D-26 Operating System Standards Settings OS Type (Windows, Linux, ESXi) OS System Linux Windows ESXi New operating system standard—OS Type New operating system standard—OS Type New operating system standard—OS Type Cisco Intelligent Automation for Cloud Installation Guide D-12 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Standards Settings (Optional) Server Size Standards No server size standards have been added or modified. Table D-27 Server Size Standards Settings Size Label Component Small CPUs Setting Memory (GB) Storage (GB) Medium CPUs Memory (GB) Storage (GB) Large CPUs Memory (GB) Storage (GB) New server size standard (optional) Size label CPUs Memory (GB) Storage (GB) New server size standard (optional) Size label CPUs Memory (GB) Storage (GB) New server size standard (optional) Size label CPUs Memory (GB) Storage (GB) Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-13 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Standards Settings (Optional) VDC Size Standards No VDC size standards have been added or modified. Table D-28 VDC Size Standards Settings Size Label Component Small Maximum virtual servers Setting Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC Medium Maximum virtual servers Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC Cisco Intelligent Automation for Cloud Installation Guide D-14 OL-29971-01 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Standards Settings (Optional) Table D-28 VDC Size Standards Settings (continued) Size Label Component Setting Large Maximum virtual servers Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC New VDC size standard (optional) Maximum virtual servers Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC New VDC size standard (optional) Maximum virtual servers Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC Cisco Intelligent Automation for Cloud Installation Guide 4.0 D-15 Appendix D Solution Deployment Worksheets for Cisco Intelligent Automation for Cloud 4.0 Standards Settings (Optional) Table D-28 VDC Size Standards Settings (continued) Size Label Component New VDC size standard (optional) Maximum virtual servers Setting Maximum vCPU Maximum memory (GB) Maximum total storage (GB) Maximum physical servers CPU limit (MHz) Resource pool CPU reservation (MHz) Resource pool memory reservation (GB) Number of snapshots VDC Cisco Intelligent Automation for Cloud Installation Guide D-16 OL-29971-01 A P P E N D I X E Processes List This appendix provides a listing of all of the Cisco Process Orchestrator processes and Prime Service Catalog services delivered in Cisco Intelligent Automation for Cloud. Process Orchestrator Processes Processes Server Provisioning Processes • Assign UCS Service Profile • Assign UCS Service Profile from Template • Convert Virtual Server To Template • Convert Virtual Server to Template Handler • Create Virtual Server • Create Virtual Server From Template • Customize Virtual Server • Delete Physical Server • Delete Virtual Server Cloud Administration Action Handling Processes • Commission ESXi Host • Commission ESXi Host Handler • Decommission ESXi Host • Decommission ESXi Host Handler • Manage License Data • Manage License Data Handler • Manage Platform Elements Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 E-1 Appendix E Processes List Process Orchestrator Processes • Manage Platform Elements Handler • Set Cisco Process Orchestrator Global Variables • Set Cisco Process Orchestrator Global Variables Handler • vSphere Create Resource Pool • vSphere Create Resource Pool Handler • vSphere Delete Resource Pool • vSphere Delete Resource Pool Handler • vSphere Update Resource Pool • vSphere Update Resource Pool Handler Cloud User Action Handling Processes • Add Network • Add Network Handler • Check NSAPI Home OU • Commission Physical Server • Commission Physical Server Handler • Commission Virtual Server from Template • Commission Virtual Server from Template Handler • Commission Virtual Server and Install OS • Commission Virtual Server and Install OS Handler • Decommission Physical Server • Decommission Physical Server Handler • Decommission Virtual Server • Decommission Virtual Server Handler • Delete Snapshot SI • Delete Snapshot Virtual Server • Delete Snapshot Virtual Server Handler • Install OS with Cisco Server Provisioner • Manage Power State • Manage Power State Handler • Manage Virtual Server Configuration • Manage Virtual Server Configuration Handler • Modify Network Properties Handler • Remove Network • Remove Network Handler • Retrieve nsAPI Login and OU • Revert Snapshot Virtual Server Cisco Intelligent Automation for Cloud Installation Guide E-2 4.0 Appendix E Processes List Process Orchestrator Processes • Revert Snapshot Virtual Server Handler • Snapshot Virtual Server • Snapshot Virtual Server Handler • Prime Service Catalog Update Service Request • Cloud Service Error Remediation • Create Service Item XML • Create Service Item Definition XML • Enumerate Clusters • Enumerate Datacenters • Enumerate VM Hosts • FSM State Transition • FSM State Transition Handler • Get IP Address • Get Tenant Configurations • NS Lookup • Query vSphere PowerCLI Install • Return IP Address • Revalidate Process Runtime Queue • Revalidate Process Runtime Queue Rules • Set Cloud Service Item Update Channel ID • Web Services Result Handler • Add Process to Runtime Queue • Add Service Request Note • Apply VM Host Profile • Associate VM Host Profile • Cancel Service Request • Cancel Service Requisition • Complete Service Request • Create GUID Hash from String • Create Lease Requisition • Create Service Target • Create VM Host Profile • Delete Process from Runtime Queue Utility Processes Atomic Processes Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-3 Appendix E Processes List Process Orchestrator Processes • Delete Runtime User • Delete Service Item by Properties • Delete Service Target • Delete Target • Disassociate VM Host Profile • Execute vSphere PowerCLI Command • Find Orchestrator Processes • Find Runtime Users • Format UCS Organization • Generate Authorization APID • Initiate Prime Service Catalog e-mail Notification • Query Service Version • Remove VM Host Profile • Retrieve Service Item Data • Update Multiple Service Request Parameters • Update Runtime User • Update Service Request Parameter • Update Target • Update Service Item by Discovery Table XML Portal Request Processes • Prime Service Catalog Service Request Handler • Prime Service Catalog Update Service Request History • Lease Management Processes • Initialize Lease Management • Lease Extend • Lease Extend Handler • Start Lease Management Data Synchronization Processes • Get Stale Sync Data • Reset Stale Sync Data • Set Saved Sync Data • Collect Metrics Processes • Collect Metrics • Collect Metrics (Scheduled) • UCS Blade Metrics Data Sync Cisco Intelligent Automation for Cloud Installation Guide E-4 4.0 Appendix E Processes List Process Orchestrator Processes • vSphere Metrics Data Sync • CloudSync Discovery Processes • CloudSync Discover Infrastructure • CloudSync Discover Infrastructure (Scheduled) • CloudSync Discover Infrastructure > Cisco SP Templates • CloudSync Discover Infrastructure > Cisco UCS Service Profile Templates • CloudSync Discover Infrastructure > Cisco UCS Blades • CloudSync Discover Infrastructure > Cisco UCS VLANs • CloudSync Discover Infrastructure > vCenter Clusters • CloudSync Discover Infrastructure > vCenter Datacenters • CloudSync Discover Infrastructure > vCenter Datastores • CloudSync Discover Infrastructure > vCenter Hosts • CloudSync Discover Infrastructure > vCenter Portgroups • CloudSync Discover Infrastructure > vCenter ResourcePools • CloudSync Discover Infrastructure > vCenter VM Templates • CloudSync Discover Infrastructure Handler Validation Processes • Validate Platform Elements • Validate Platform Elements (Scheduled) • Validate Platform Elements Handler • Validate Platform Elements > Cisco Server Provisioner • Validate Platform Elements > Cisco UCS Manager • Validate Platform Elements > VMware Virtual Center Server • Validate Process Orchestrator • Validate Process Orchestrator Handler Process Extension Points CloudSync Discover Infrastructure • CloudSync Discover Infrastructure > Cisco SP Templates > Post-Discovery • CloudSync Discover Infrastructure > Cisco UCS Service Profile Templates > Post-Discovery • CloudSync Discover Infrastructure > Cisco UCS Blades > Post-Discovery • CloudSync Discover Infrastructure > Cisco UCS VLANs > Post-Discovery • CloudSync Discover Infrastructure > vCenter Clusters > Post-Discovery • CloudSync Discover Infrastructure > vCenter Datacenters > Post-Discovery • CloudSync Discover Infrastructure > vCenter Datastores > Post-Discovery Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-5 Appendix E Processes List Process Orchestrator Processes • CloudSync Discover Infrastructure > vCenter Hosts > Post-Discovery • CloudSync Discover Infrastructure > vCenter Portgroups > Post-Discovery • CloudSync Discover Infrastructure > vCenter ResourcePools > Post-Discovery • CloudSync Discover Infrastructure > vCenter VM Templates > Post-Discovery • CloudSync Discover Infrastructure > User Defined • FSM State Transition > User Defined Commission ESXi Host • Commission ESXi Host > Post-provisioning • Commission ESXi Host > Pre-provisioning • Commission ESXi Host > Service Profile Pre-association • Commission ESXi Host > User Defined Rollback • Commission ESXi Host (Cisco UCS) > User Defined Rollback • Decommission ESXi Host > Pre-Provisioning Commission Virtual Server • Commission Virtual Server > Post-provisioning • Commission Virtual Server > Pre-provisioning • Commission Virtual Server and Install OS > User Defined Rollback • Commission Virtual Server from Template > User Defined Rollback • Create Virtual Server > User Defined • Create Virtual Server (vCenter) > User Defined • Create Virtual Server from Template > User Defined • Customize Virtual Server > User Defined • Customize Virtual Server Hardware (vCenter) > User Defined • Customize Virtual Server Operating System (vCenter) > User Defined • Decommission Virtual Server > Post-decommission • Decommission Virtual Server > Pre-decommission • Delete Virtual Server > User Defined • Manage Virtual Server Configuration > User Defined Commission Physical Server • Commission Physical Server (Cisco UCS) > User Defined Rollback • Commission Physical Server > Post-provisioning • Commission Physical Server > Pre-provisioning • Commission Physical Server > Service Profile Pre-association • Commission Physical Server > User Defined Rollback Cisco Intelligent Automation for Cloud Installation Guide E-6 4.0 Appendix E Processes List Process Orchestrator Processes • Decommission Physical Server > Post-decommission • Decommission Physical Server > Pre-decommission • Create Snapshot > User Defined • Delete Snapshot > User Defined • Delete Snapshot Virtual Server > Post-Provisioning • Revert Snapshot > User Defined • Revert Snapshot Virtual Server > Post-Provisioning • Snapshot Virtual Server > Post-Provisioning • Snapshot Virtual Server > Pre-Provisioning Snapshots Connection Status/Platform Elements • Validate Platform Elements > User Defined • Validate Process Orchestrator > Post-Provisioning • Manage Platform Elements > User Defined • Manage Platform Elements > User Defined Rollback Virtual Data Centers (Process Extension Points) • Create Resource Pool > User defined • Delete Resource Pool > User Defined • Query vSphere Managed Objects • Update Resource Pool > User Defined • vSphere Create Resource Pool > Post-Provisioning • vSphere Create Resource Pool > Pre-Provisioning • vSphere Delete Resource Pool > Post-Provisioning • vSphere Delete Resource Pool > Pre-Provisioning • vSphere Update Resource Pool > Post-Provisioning • vSphere Update Resource Pool > Pre-Provisioning Network Management • Add Network > Post-export • Add Network > Pre-export • Add Network > User Defined Exclusions • Modify Network Properties > User Defined • Modify Network Properties > User Defined Rollback • Remove Network > Extension Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-7 Appendix E Processes List Prime Service Catalog Services • Remove Network > User Defined Rollback • Get IP Address > Post-allocation • Get IP Address > User Defined • Return IP Address > Post-return • Return IP Address > User Defined IPAM Cisco Server Provisioner • Install OS with Cisco Server Provisioner > Network Boot • Install OS with Cisco Server Provisioner > Post-provisioning • Install OS with Cisco Server Provisioner > Pre-provisioning • Manage Power State > Post-Provisioning • Manage Power State > Pre-Provisioning • Manage Power State > User Defined • Manage Virtual Server Configuration > Post-Provisioning • Manage Virtual Server Configuration > Pre-Provisioning • Lease Extend > Post-Provisioning • Find Targets > User Defined Manage Servers Utilities Prime Service Catalog Services Services Commission Server Services • Decommission Physical Server • Decommission Virtual Machine • Order a Physical Server • Order a Virtual Machine and Install an OS • Order a Virtual Machine From Template Cisco Intelligent Automation for Cloud Installation Guide E-8 4.0 Appendix E Processes List Prime Service Catalog Services Shared Provider Zone Services • Create a Shared Zone • Modify a Shared Zone Virtual Data Center Services (PSC) • Add Network to VDC • Create Virtual Data Center • Decommission Virtual Data Center • Modify VDC Size • Remove Network from VDC Server Operations Services • Delete Snapshot • Extend Managed Lease Instance • Managed Lease Instance • Modify Configuration • Power Cycle Physical Server • Power Cycle Virtual Machine • Power Down Physical Server • Power Down Virtual Machine • Power Up Physical Server • Power Up Virtual Machine • Revert to Snapshot • Take Snapshot • View Snapshots System Setup Services • Activate Cloud Resource • Add Network • Assign Cluster Metric SI Data • Assign Datacenter Metric SI Data • Assign Datastore Metric SI Data • Assign IPAddress SI Data • Assign Network Metric SI Data • Assign Resource Pool Metric SI Data • Assign UCS Metric SI Data Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-9 Appendix E Processes List Prime Service Catalog Services • Clone VM to Template • Cloud Resource Maintenance • Cloud SIL Update Channel ID • Cloud Service Error Remediation • CloudSync Edit Infrastructure • Configure Approvals • Connect Cloud Infrastructure • Convert VM to Template • Create POD • Discover Infrastructure • Ignore Cloud Resource • Manage Blade Pools • Manage e-mail Templates • Modify Cloud Administration Organization • Modify Network Properties • Process Orchestrator Send Status e-mail • Refresh Metrics • Register Cisco UCS Blade • Register Cisco UCS VLAN • Register Cluster • Register Datacenter • Register Datastore • Register Hypervisor Host • Register Operating System Template • Register Resource Pool • Register Service Profile Template • Register VM Template • Remove Cisco UCS Blade • Remove Network • Remove Operating System Template • Remove POD • Remove Service Profile Template • Remove VM Template • Set HTTP Agent Configuration • Set Provisioning Settings • Set REX Agent Configuration • Set System-wide Service Options • Update Service Profile Template Cisco Intelligent Automation for Cloud Installation Guide E-10 4.0 Appendix E Processes List Prime Service Catalog Services • Validate e-mail Server • Validate Cisco Process Orchestrator • Validate Platform Element • View Cisco Process Orchestrator • Update Cloud Infrastructure • Update POD Tenant Management Services • Add Cloud Administration Organization • Add Cloud Administrator • Add Organization Technical Administrator • Add User • Create Organization • Modify Organization • Modify User Properties • Refresh and Update Cloud License • Remove Cloud Administrator • Remove Organization • Remove Organization Technical Administrator • Remove User • View Cloud Connections • View Organization Details Service Extension Points Commission Server Services • Decommission Physical Server Post-servicing • Decommission Physical Server Pre-servicing • Decommission Virtual Machine Post-servicing • Decommission Virtual Machine Pre-servicing • Order a Physical Server Post-servicing • Order a Physical Server Pre-servicing • Order a VM and Install an OS Post-servicing • Order a VM and Install an OS Pre-servicing • Order a Virtual Machine From Template Post-servicing • Order a Virtual Machine From Template Pre-servicing Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-11 Appendix E Processes List Prime Service Catalog Services Shared Provider Zone Services • Create Shared Zone Post-servicing • Create Shared Zone Pre-servicing • Modify Shared Zone Post-servicing • Modify Shared Zone Pre-servicing Virtual Data Center Services • Add Network to VDC Post-servicing • Add Network to VDC Pre-servicing • Create Virtual Data Center Post-servicing • Create Virtual Data Center Pre-servicing • Decommission Virtual Data Center Post-servicing • Decommission Virtual Data Center Pre-servicing • Manage Blade Pools Post-servicing • Manage Blade Pools Pre-servicing • Remove Network from VDC Post-servicing • Remove Network from VDC Pre-servicing Server Operations Services • Delete Snapshot Post-servicing • Delete Snapshot Pre-servicing • Extend Managed Lease Instance Post-servicing • Extend Managed Lease Instance Pre-servicing • Managed Lease Instance Post-servicing • Managed Lease Instance Pre-servicing • Modify Configuration Post-servicing • Modify Configuration Pre-servicing • Modify VDC Package Post-servicing • Modify VDC Package Pre-servicing • Power Cycle Physical Server Post-servicing • Power Cycle Physical Server Pre-servicing • Power Cycle Virtual Machine Post-servicing • Power Cycle Virtual Machine Pre-servicing • Power Down Physical Server Post-servicing • Power Down Physical Server Pre-servicing • Power Down Virtual Machine Post-servicing • Power Down Virtual Machine Pre-servicing Cisco Intelligent Automation for Cloud Installation Guide E-12 4.0 Appendix E Processes List Prime Service Catalog Services • Power Up Physical Server Post-servicing • Power Up Physical Server Pre-servicing • Power Up Virtual Machine Post-servicing • Power Up Virtual Machine Pre-servicing • Revert to Snapshot Post-servicing • Revert to Snapshot Pre-servicing • Take Snapshot Post-servicing • Take Snapshot Pre-servicing System Setup Services • Activate Cloud Resource Post-servicing • Activate Cloud Resource Pre-servicing • Add Network Post-servicing • Add Network Pre-servicing • Assign Cluster Metric SI Data Post-servicing • Assign Cluster Metric SI Data Pre-servicing • Assign Datacenter Metric SI Data Post-servicing • Assign Datacenter Metric SI Data Pre-servicing • Assign Datastore Metric SI Data Post-servicing • Assign Datastore Metric SI Data Pre-servicing • Assign IPAddress SI Data Post-servicing • Assign IPAddress SI Data Pre-servicing • Assign Network Metric SI Data Post-servicing • Assign Network Metric SI Data Pre-servicing • Assign Resource Pool Metric SI Data Post-servicing • Assign Resource Pool Metric SI Data Pre-servicing • Assign UCS Metric SI Data Post-servicing • Assign UCS Metric SI Data Pre-servicing • Clone VM to Template Post-servicing • Clone VM to Template Pre-servicing • CloudSync Edit Infrastructure Post-servicing • CloudSync Edit Infrastructure Pre-servicing • Configure Approvals Post-servicing • Configure Approvals Pre-servicing • Connect Cloud Infrastructure Post-servicing • Connect Cloud Infrastructure Pre-servicing • Convert VM to Template Post-servicing Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-13 Appendix E Processes List Prime Service Catalog Services • Convert VM to Template Pre-servicing • Create POD Post-servicing • Create POD Pre-servicing • Discover Infrastructure Post-servicing • Discover Infrastructure Pre-servicing • e-mail Template Management Post-servicing • e-mail Template Management Pre-servicing • Ignore Cloud Resource Post-servicing • Ignore Cloud Resource Pre-servicing • Maintenance Post-servicing • Maintenance Pre-servicing • Manage Blade Pools Post-servicing • Manage Blade Pools Pre-servicing • Modify Cloud Admin Organization Post-servicing • Modify Cloud Admin Organization Pre-servicing • Modify Network Properties Post-servicing • Modify Network Properties Pre-servicing • Refresh Metrics Post-servicing • Refresh Metrics Pre-servicing • Register Cisco UCS Blade Post-servicing • Register Cisco UCS Blade Pre-servicing • Register Cisco UCS VLAN Post-servicing • Register Cisco UCS VLAN Pre-servicing • Register Cluster Post-servicing • Register Cluster Pre-servicing • Register Datacenter Post-servicing • Register Datacenter Pre-servicing • Register Datastore Post-servicing • Register Datastore Pre-servicing • Register Hosts Post-servicing • Register Hosts Pre-servicing • Register Operating System Template Post-servicing • Register Operating System Template Pre-servicing • Register Resource Pool Post-servicing • Register Resource Pool Pre-servicing • Register Service Profile Template Post-servicing • Register Service Profile Template Pre-servicing • Register VM Template Post-servicing Cisco Intelligent Automation for Cloud Installation Guide E-14 4.0 Appendix E Processes List Prime Service Catalog Services • Register VM Template Pre-servicing • Remove Cisco UCS Blade Post-servicing • Remove Cisco UCS Blade Pre-servicing • Remove Network Post-servicing • Remove Network Pre-servicing • Remove Operating System Template Post-servicing • Remove Operating System Template Pre-servicing • Remove POD Post-servicing • Remove POD Pre-servicing • Remove Service Profile Template Post-servicing • Remove Service Profile Template Pre-servicing • Remove VM Template Post-servicing • Remove VM Template Pre-servicing • Set HTTP Agent Configuration Post-servicing • Set HTTP Agent Configuration Pre-servicing • Set Provisioning Settings Post-servicing • Set Provisioning Settings Pre-servicing • Set REX Agent Configuration Post-servicing • Set REX Agent Configuration Pre-servicing • Set System-wide Service Options Post-servicing • Set System-wide Service Options Pre-servicing • Update Cloud Infrastructure Post-servicing • Update Cloud Infrastructure Pre-servicing • Update POD Post-servicing • Update POD Pre-servicing • Update Service Profile Template Post-servicing • Update Service Profile Template Pre-servicing • Validate e-mail Server Status Post-servicing • Validate e-mail Server Status Pre-servicing • Validate Orchestration Status Post-servicing • Validate Orchestration Status Pre-servicing • Validate Platform Element Status Post-servicing • Validate Platform Element Status Pre-servicing • View Orchestration Status Post-servicing • View Orchestration Status Pre-servicing • View Platform Element Status Post-servicing • View Platform Element Status Pre-servicing Cisco Intelligent Automation for Cloud Installation Guide 4.0 E-15 Appendix E Processes List Prime Service Catalog Services Tenant Management Services (Post-Servicing) • Add Cloud Administration Organization Post-servicing • Add Cloud Administration Organization Pre-servicing • Add Cloud Administrator Post-servicing • Add Cloud Administrator Pre-servicing • Add Organization Technical Admin Post-servicing • Add Organization Technical Admin Pre-servicing • Add User Post-servicing • Add User Pre-servicing • Create Organization Post-servicing • Create Organization Pre-servicing • Modify Organization Post-servicing • Modify Organization Pre-servicing • Modify User Properties Post-servicing • Modify User Properties Pre-servicing • Remove Cloud Administrator Post-servicing • Remove Cloud Administrator Pre-servicing • Remove Organization Post-servicing • Remove Organization Pre-servicing • Remove Organization Technical Admin Post-servicing • Remove Organization Technical Admin Pre-servicing • Remove User Post-servicing • Remove User Pre-servicing • View Organization Details Post-servicing • View Organization Details Pre-servicing Cisco Intelligent Automation for Cloud Installation Guide E-16 4.0 A P P E N D I X F Privileges for vCenter Service Account This appendix serves as reference for ensuring the service account used for Cisco IAC to connect and manage vCenter Server objects has the required, specific security privileges. To enable these permissions: Step 1 Connect vSphere Client to vCenter Server. Step 2 Click Home, then click Roles. Step 3 To create a new user role, right-click on a blank area and choose Add. Step 4 Enter a name (for example, “IAC Service Account”). Step 5 Expand each category identified in the list below. Step 6 Check each privilege identified in the list below. Step 7 Repeat Steps 5 and 6 for each privilege. Step 8 Click OK. Note Be sure to add permission for this role to each datacenter to be managed by IAC. Privilege List The following privileges are used by Cisco IAC to manage vCenter Servers and must be assigned to the IAC Service Account to ensure proper operation. Privilege Alarms/Disable alarm action Alarms/Modify alarm Alarms/Remove alarm Alarms/Set alarm status AutoDeploy/Host AutoDeploy/Image Profile Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 F-1 Appendix F Privileges for vCenter Service Account Privilege List Privilege AutoDeploy/Rule AutoDeploy/RuleSet Datacenter/Create datacenter Datacenter/IP pool configuration Datacenter/Move datacenter Datacenter/Remove datacenter Datacenter/Rename datacenter Datastore/Allocate space Datastore/Browse datastore Datastore/Configure datastore Datastore/Low level file operations Enumerate Datastores vSphere Role Privileges Alarms/Acknowledge alarm Alarms/Create alarm Get?Datacenter Get?Datastore Datastore/Remove datastore Datastore/Remove file Datastore/Rename datastore Datastore/Update virtual machine files Datastore cluster/Configure a datastore cluster dvPort group/Create dvPort group/Delete dvPort group/Modify dvPort group/Policy operation dvPort group/Scope operation ESX Agent Manager/Config ESX Agent Manager/Modify ESX Agent Manager/View Extension/Register extention Extension/Unregister extension Extension/Update extension Folder/Create folder Folder/Delete folder Clone to Datastore Cluster Add Host Port Group Cisco Intelligent Automation for Cloud Installation Guide F-2 OL-29971-01 Appendix F Privileges for vCenter Service Account Privilege List Privilege Update Host Port Group Create Folder vSphere Role Privileges Folder/Move folder Folder/Rename folder Global/Act as vCenter Server Global/Cancel task Global/Capacity planning Global/Diagnostics Global/Disable methods Global/Enable methods Global/Global tag Global/Health Global/Licenses Global/Log event Global/Manage custom attributes Global/Proxy Global/Script action Global/Service managers Global/Set custom attribute Global/Settings Global/System tag Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 F-3 Appendix F Privileges for vCenter Service Account Privilege List Cisco Intelligent Automation for Cloud Installation Guide F-4 OL-29971-01 INDEX A C About SSL Centers 5-6 Accessing the Configuration Wizard Virtual Data (Process Extension Points) 9-1 Accounts for Both REX Agent and nsAPI Users Creating Checking Required Prerequisites Cisco Process Orchestrator Setup Active Directory integration configuration examples Cloud Administration Setup 6-1 to 6-6 Adding Cloud Infrastructure Setup Cloud Administrator Organization Cloud Administrators C-1 C-3 C-1 Directory Integration Setup 9-15 C-2, C-4 E-mail Notification Template Modification 9-16 Cloud Administrators in the Directory Service (if Applicable) 9-17 Site Administrator Role to nsAPI user Manually (Without Directory Service) 9-18 Adding nsAPI User to Cloud Administration Group Organizations and Users Setup C-5 Portal and Portlet Deployment C-3 REX Adapter Installation 6-6 C-4 C-2 Service Catalog Deployment C-3 Cisco Agent Properties Configuring UCS Manager and Bare Metal Operating System Provisioning Requirements B-2 9-4 2-5 Cisco IAC Components Assign From Address for e-Mail Templates Atomic Processes 9-33 E-3 Cisco IAC Licensing 1-1 9-20 Cisco IAC-Specific Automation Packs Authentication Configure 1-2 Checklist 9-4 Amazon EC2 E-7 Installing D-6 5-6 Cisco Intelligent Automation for Cloud authorization (Directory Integration), configuring ?? to 6-6 Automation Packs (TAPS) Selection Dialog Prerequisites 5-3 C-1 Cisco Process Orchestrator Setup Checklist Cisco Server Provisioner C-1 E-8 Cisco Server Provisioner Connection Settings B D-9 Cisco Service Portal Request Center and Service Link User Account Credentials D-5 Bare Metal 1-4 Cisco UCS Manager Connection Settings Both REX Agent and nsAPI Users creating accounts for 9-4 D-9 Client File Menu vSphere 3-2, 8-1 Cloud Administration Configuration Wizard—Step 2 9-15 Cisco Intelligent Automation for Cloud Installation Guide OL-29971-01 IN-1 Index Cloud Administration Action Handling Processes E-1 Cloud Administration Group Adding nsAPI User to Configure 6-6 Cloud Administration Setup Checklist Authentication C-3 Cloud Administrator and Organization Settings D-8 D-7 D-6 9-33 Configuring Agent Properties 9-16 Cloud Administrators in the Directory Service (if Applicable) Adding D-6 Configure e-Mail Notification Templates 9-15 Cloud Administrators Adding Events Mapping Cloud Administrator Organization Adding Create Resources for Network Services (optional) 9-34 Authentication Events 6-3 6-4 Mappings 9-17 9-4 6-3 Cloud Infrastructure Setup Checklist C-1 Resources for Network Services Cloud Platform Connection Settings D-8 the LDAP Server Cloud Provider Technical Administrator creating home organization for CloudSync Discover Infrastructure 6-2 User Role Mappings 6-6 configuring templates 9-15 E-mail notifications E-5 Cloud User Action Handling Processes 9-38 E-2 Commission 9-33 Configuring Your Initial Cisco IAC 4.0 Setup 9-1 Connect Cloud Infrastructure ESXi Host Configuration Wizard—Step 3 E-6 9-21, 9-22 Physical Server E-6 Connecting to the Cloud Infrastructure Server Services E-8, E-11 Connection Status/Platform Elements Virtual Server Installing 9-39 Compute PODs Creating 5-3 Create a Virtual Datacenter 9-29 Configurations LDAP Server E-7 Core and Common Automation Packs E-6 Completing the Setup 9-21 Shared Zones B-4 Create Resources for Network Services (optional) D-6 Configuration Wizard—Setup Complete 9-40 Configuration Wizard—Step 2 Cloud Administration 9-34 Accounts for Both REX Agent and nsAPI Users 9-15 Compute PODs Connect Cloud Infrastructure 9-21, 9-22 Configuration Wizard—Step 5 9-37 9-27 Resources for Network Services (Optional) Configuration Wizard—Step 6 9-30 Configuration Wizard—Step 7 9-4 9-29 Infrastructure Networks Network PODs 9-27 Set Provisioning Settings Configuration Wizard—Step 7 Creating Configuration Wizard—Step 3 POD Management B-4 9-34 Security Group for Each User Role on the LDAP Server 6-5 Service Network 9-35 Creating Cisco UCS Manager Pools 2-2 Cisco Intelligent Automation for Cloud Installation Guide IN-2 4.0 Index Extension Points D Process Data Synchronization Processes Default Ports and Protocols E-4 B-1 Deploy OVA Template dialog G 3-3 Directory and Mail Server Requirements B-3 Group Directory Integration Cloud Administration Adding nsAPI user to Cloud Administrator security group 6-6 Configuring Security 6-6 6-5 6-6 Configuring authorization Configuring events H ?? to 6-6 6-4 Configuring mappings Hardware Specifications 6-3 Configuring user role mappings D-1 6-6 Creating security groups for roles Enabling E-5 I 6-5 6-6 Optional Person Data Mappings Importing and Deploying 6-6 Intelligent Automation for Cloud Service Catalogs 7-3 directory integration examples in Active Directory Directory Integration Settings 6-1 to 6-6 Portal Packages D-6 Portal Pages Directory Integration Setup Checklist C-2, C-4 Discovering to the Cloud Infrastructure 5-13 Service Catalogs 9-25 7-3 Infrastructure Networks Discovery Creating successfully completed screen. 5-11 9-25 9-37 Initializing Cisco IAC Licensing 9-20 Installing Cisco IAC-Specific Automation Packs E Core and Common Automation Packs EC2 2-5 templates Intelligent Automation for Cloud Starter TAP 9-33 Intelligent Automation for Cloud TAP 9-33 E-mail Notification Template Modification Checklist Enabling Directory Integration 5-10 Intelligent Automation for Compute TAP REX Adapter E-6 5-6 7-2 D-7 7-1 Intelligent Automation for Cloud Extension Samples (optional) D-7 events, configuring (directory integration) Events Settings 5-8 Installing and Configuring Events Configure C-4 REX Adapter 6-6 ESXi Host Commission 5-3 Intelligent Automation for Cloud Extension Samples (optional) 5-9 E-mail notifications configuring templates 5-6 6-4 Installing 5-9 Intelligent Automation for Cloud Service Catalogs Cisco Intelligent Automation for Cloud Installation Guide 4.0 IN-3 Index Importing and Deploying Operating Systems Standards 7-3 Intelligent Automation for Cloud Starter TAP Installing Operations Services Server 5-8 Intelligent Automation for Cloud TAP Installing Physical Server Intelligent Automation for Compute TAP IPAM E-9, E-12 Order 5-10 Installing D-12 B-5 VM and Install an Operating System VM From Template 5-6 B-5 B-4 organizations E-8 Cloud Administrator home organization, creating 9-15 L Organizations and Users Preparation LDAP Server Configurations Lease Term Standards B-4 Organizations and Users Setup Checklist D-6 C-5 D-11 Licensing P Initializing Cisco IAC 9-20 Limitations and Scalability B-2 person data, configuring (Directory Integration) 6-3 Physical Server Commission M Order Making nsAPI a Cloud Administrator Manually (Without Directory Service) 9-18 Manage Servers E-8 Managing PODs 9-27 POD Management Configuration Wizard—Step 5 9-27 managing 9-27 POD Settings D-11 Portal and Portlet Deployment Checklist D-6 mappings, configuring (Directory Integration) Mappings Settings B-5 PODs Mapping Configure E-6 6-3 Portal Packages Importing and Deploying D-7 C-3 5-11 portal packages, importing and deploying 5-11 Portal Pages N Importing and Deploying Network Management E-7 E-4 Preparing Network PODs Creating Portal Request Processes 5-13 9-27 Network Requirements Network Settings B-2 D-10 Cisco UCS and Bare Metal Operating System Provisioning 1-4 Directory and Mail Servers Storage Management 1-6 1-3 the Directory and Mail Server via LDAP and SMTP 2-4 O VMware Software OpenStack 1-5 2-5 Cisco Intelligent Automation for Cloud Installation Guide IN-4 4.0 Index Prerequisites REX Adapter Installation Checklist 6-1 Cisco Intelligent Automation for Cloud REX Adapter Installation Settings C-1 C-2 D-5 Prime Network Services Controller, Understanding Cisco, See also Understanding Cisco 2-2 Prime Service Catalog Services S E-8 Process Security Group for Each User Role on the LDAP Server Extension Points Processes E-5 Creating E-1 Atomic security groups E-3 adding nsAPI user (Directory Integration) Data Synchronization Portal Request E-4 creating (Directory Integration) E-4 E-1 Operations Services E-3 E-5 E-1 Server Services Process Orchestrator-Prime Service Catalog Integration API Connection User Account Credentials D-4 Process Orchestrator Web Service Target Settings Provider Zone E-9 Provision ESXi D-3 Commission E-8, E-11 Server Size Standards D-13 Service Catalog Deployment Checklist Importing and Deploying Service Extension Points E-1 D-9 Creating provisioning settings, configuring 9-31 E-11 9-35 Service Options System-wide Services R D-10 E-8 Virtual Data Center Registering a Datastore 9-34 E-12 Virtual Data Center (PSC) Requirements E-9 Set Provisioning Settings Storage Management VMware Software B-2 Configuration Wizard—Step 6 B-3 Setting REX Agent Configuration Resources for Network Services Configuring 9-30 9-9 Settings 9-38 D-3 Resources for Network Services (Optional) 9-34 Cisco Server Provisioner Connection Cisco UCS Manager Connection REX Adapter Installing 7-3 Service Network Provisioning Settings Creating C-3 Service Catalogs B-5 Provisioning Processes Server E-1 Server Provisioner, Understanding Cisco, See also Understanding Cisco 2-1 Process Orchestrator Processes 6-5 E-9, E-12 Provisioning Processes Validation 6-6 Server Process Orchestrator Utility 6-5 D-9 D-9 Cloud Administrator and Organization 7-2 Installing and Configuring Cloud Platform Connection 7-1 Directory Integration D-8 D-8 D-6 Cisco Intelligent Automation for Cloud Installation Guide 4.0 IN-5 Index Events Mappings Storage Management D-7 Network POD Starting the REX Set Agent Properties Agent D-7 Discovery D-9 REX Adapter Installation Shared Zone Standards 9-25 System Setup Services D-5 E-9, E-13 System-wide Service Options D-11 D-10 D-11 VMware vCenter Server Connection Setting System-wide Service Options D-8 T 9-30 Setting System-Wide Services and Provisioning 9-30 Setting Up TAPS selection dialog 5-3 templates Cisco UCS Manager 1-4 Cisco UCS Manager Pools for e-mail notifications 1-4 Tenant Management Services Cisco UCS Manager Service Profile Templates and Policies 1-4 Organizations and Users Preparation Your Networks 1-6 1-3 Setting Up Cloud Administration 9-15 Setting Username and Password for REX Set REX Agent Properties 9-8 Shared Provider Zone Services Shared Zones 9-33 E-11 Tenant Management Services (Post-Servicing) E-16 the Directory and Mail Server via LDAP and SMTP, Preparing, See also Preparing 2-4 The Step 1 panel of the Cisco Intelligent Automation for Cloud Configuration Wizard 9-4 The Welcome tab for the Cisco IAC 4.0 Configuration Wizard 9-2 E-9, E-12 D-11 U B-4 Shared Zone Settings D-11 Site Administrator Role to nsAPI user Manually (Without Directory Service) Adding Snapshots B-2 successfully completed screen. D-11 Provisioning Create 2-3 Storage Management Requirements D-10 9-8 9-18 UCS Manager, Understanding Cisco, See also Understanding Cisco 2-2 UCS Manager and Bare Metal Operating System Provisioning Requirements E-7 Specifications Hardware UCS Director, Understanding Cisco, See also Understanding Cisco 2-2 Cisco D-1 Specifying Provisioning Settings 9-31 B-2 UCS Manager Service Profile Templates and Policies, Understanding Cisco, See also Understanding Cisco 2-2 Understanding SSL about the Cisco IAC Installation Process 5-6 Where the Cisco IAC 4.0 Virtual Appliance Fits In 3-1 Standards Lease Term D-11 Operating Systems Server Size D-12 Server Provisioner D-11 Starting All REX Agents Understanding Cisco Prime Network Services Controller D-13 Standards Settings 1-2 9-11 UCS Director 2-2 2-1 2-2 Cisco Intelligent Automation for Cloud Installation Guide IN-6 4.0 Index UCS Manager Your Networks 2-2 Setting Up UCS Manager Service Profile Templates and Policies 2-2 1-3 User Account Credentials Cisco Service Portal Request Center and Service Link D-5 Utilities Z Zones E-8 Utility Processes Provider E-3 shared E-9 D-11 V Validation Processes E-5 VDC Size Standards D-14 Virtual Datacenter Create B-4 Virtual Data Centers (Process Extension Points) Virtual Data Center Services E-7 E-12 Virtual Data Center Services(PSC) E-9 Virtual Server Commission E-6 VM and Install an Operating System Order B-5 VM From Template Order VMware B-4 2-4 VMware Software Requirements B-3 VMware vCenter Server Connection Settings vSphere Client File Menu D-8 3-2, 8-1 W Workflow for installing Cisco IAC using the IAC 4.0 Virtual Appliance in both modes 3-1 Y Your Initial Cisco IAC 4.0 Setup configuring 9-1 Cisco Intelligent Automation for Cloud Installation Guide 4.0 IN-7 Index Cisco Intelligent Automation for Cloud Installation Guide IN-8 4.0
© Copyright 2026 Paperzz