Configure DCE agent installation defaults

During the management server installation the default settings for DCE agents (for example the name of the management server) are automatically stored in the DCE agent package. The management server to applies these defaults when it remotely installs the DCE agent on a node.

You can use the SetMgmtServer command to configure the following default settings in the DCE agent package:

• Management server. To change the name of the management server in the DCE agent package, use the following command:

  SetMgmtServer /servername <name>

• Agent account. In previous releases, two local user accounts (HP ITO Account and opc_op account) were created on the node during agent installation and random passwords were generated. Since the OVO for Windows 7.20 release, the DCE agent installation does not create accounts on the node. The default settings now configure the agent to run under the Local System account.

  You can change the default setting in the DCE agent package, so that agents run under a specific user account. To do this, use the following command:

  SetMgmtServer /user <user> /password <encrypted password>

  You create the encrypted password with the tool opcpwcrpt. For more details, see Change the default user of DCE agents on Windows nodes.

  Alternatively, you can change the default setting in the DCE agent package to use the HP ITO Account instead. This may be useful if you are upgrading a DCE agent that already runs under the HP ITO Account. To change this default settings to use the HP ITO Account, use the following command:

  SetMgmtServer /system /off

  If you then install the DCE agent on Windows nodes, the agent installation creates the HP ITO account on the node and adds it to the Administrators group. The installation also assign additional user rights directly to the HP ITO account.

  HPOM also provides tools for managing the default DCE agent account. The tools are available in the console under Tools HP Operations Manager Tools Agent Account.

  Tool Name	Purpose
  Disable default system agent account	Disables the system account within the agent package. If you distribute an agent after running this tool, the agent will be installed to run under the HP ITO account.
  Enable default system agent account	Enables the system account within the agent package. If you distribute an agent after running this tool, the agent will be installed to run under the Local System account.
  Show agent account	This tool shows you the user that the DCE agent is running under on a node. You can execute this tool on many nodes at the same time.
  Show default agent account settings	Shows the state of the agent package. After you start this tool, you could use the disable or enable tool to change the settings of the agent package.

• Force agent account change. By default, when the management server reinstalls or upgrades the DCE agent on a node, the existing user account settings remain unchanged for that node. To force the agent installation to use account settings from the agent package, use the following command:

  SetMgmtServer /force /on

• Authentication: By default, the DCE agent does not require a password when running actions and tools under a different user account. To require passwords for actions and tools run under a different user account, use the following command:

  SetMgmtServer /auth /on

  For more details, see Security authentication module.

• Rename Perl. The Perl interpreter that is included with the agent package is installed with the name perl.exe by default. You can change this default to ovperl.exe to avoid collisions with existing Perl installations. To change this default setting in the DCE agent package, use the following command:

  SetMgmtServer /renperl /on

The full usage of SetMgmtServer is shown below:

Usage: SetMgmtServer.exe [] 
   [/servername <name>]
   [-d]
   [-s|/system [/on|/off|/default]]
   [/forced [/on|/off|/default]]
   [/auth [/on|/off|/default]]
   [/renperl [/on|/off|/default]]
   [/current]
   [/user <user>]
   [/password <encrypted password>]

   Updates the name of the management server in the agent installation <pkg>.
   
	 /servername <name>  Sets management server name. By default current management server name is set.

	 -d					 Removes the NetBIOS domain name from the
							fully qualified hostname (if included).

	 -s					 Installs agents under the Local System account.							 

	 /system /on			Turns on Local System account installation.
	 /system /off			 Turns off Local System account installation.
	 /system /default		 Sets the System account installation to default (on).

	 /forced /on			Turns on forced switch of the user account.
	 /forced /off			 Turns off forced switch of the user account.
	 /forced /default		 Sets forced switch of the user account back to default
							(off).

	 /auth /on				Turns on authentication.
	 /auth /off			 Turns off authentication.
	 /auth /default		 Sets the authentication to default (off).

	 /renperl /on			 Enforces the agent installation to rename to ovperl.exe.
	 /renperl /off			Sets the agent installation to use perl.exe.
	 /renperl /default		Sets the name of the Perl interpreter to default (off).

	 /current				 Shows the settings in the given package or on the system.

	 /user <user> 		 Sets the user name the agent should be installed under.
	 /password <pwd> 	Sets an encrypted password that should be used for the user.
							NOTE: Encrypt the password with the command
									opcpwcrpt.exe (in %OvInstallDir%\bin\OpC\install)
							The specified password is ignored when installing the 
							agent under the Local System account.

You can combine several options at the same time. For example:

• To set the user to the Local System account for all DCE agent installations and upgrades, use:

  SetMgmtServer /system /on /forced /on

• To set the user to the HP ITO Account for all DCE agent installations, use:

  SetMgmtServer /system /off /forced /on

• To set the user to the Local System account for new DCE agent installations, but keep the existing user for upgrades, use:

  SetMgmtServer /system /on /forced /off

NOTE:
When you start SetMgmtServer the command writes the settings of the /system , /auth, /forced, and /renperl switches into the registry. These registry settings are used the next time you start SetMgmtServer, unless you specify other settings. For example, if you use the following command:

SetMgmtServer /system ON

then the existing settings for in the registry and could result in the following:

SetMgmtServer /system ON /auth OFF /forced OFF

The -s option is only valid for the current call of SetMgmtServer and is not written to the registry. The next time you call SetMgmtServer without the -s option, the registry settings are used.

NOTE:
The SetMgmtServer tool changes only the installation defaults in the DCE agent package on the management server. To apply changes to nodes where the DCE agent is already installed, you must redeploy the agent.

Related Topics:

• Reinstall all