PowerEdge MX7000 and OpenManage Enterprise–Modular Edition Advanced License
Download PDFWed, 22 Feb 2023 18:09:49 -0000
|Read Time: 0 minutes
Summary
Dell OpenManage Enterprise–Modular runs on the Dell PowerEdge MX7000 management module. OpenManage Enterprise–Modular facilitates configuration and management of PowerEdge MX chassis using a single web-based GUI or CLI and API. Script examples and code in Python or PowerShell using RACADM CLI and REST API are at Dell Technologies GitHub. OpenManage Enterprise–Modular is used to monitor and manage the chassis and chassis components such as compute sleds, network devices, I/O modules, and local storage devices.
The following additional OpenManage Enterprise–Modular features are available when the Advanced license is installed:
- OpenID Connect
- Telemetry
- RSA multifactor authentication
- Automatic certificate renewal
OpenID Connect
OpenID Connect (OIDC) is a solution that supports single sign-on (SSO). The following table lists the predefined roles that must be configured in the OIDC provider for OIDC users to log in to OpenManage Enterprise–Modular:
Table 1. OIDC predefined roles
Role in OpenManage Enterprise–Modular | Role in OIDC provider | Description |
CHASSIS_ADMINISTRATOR | CA | Can perform all tasks on the chassis |
COMPUTE_MANAGER
| CM | Can deploy services from a template for compute sleds and perform tasks on the service |
STORAGE_MANAGER | SM | Can perform tasks on storage sleds in the chassis |
FABRIC_MANAGER | FM | Can perform tasks that are related to fabrics |
VIEWER | VE | Has read-only access |
Telemetry
Chassis telemetry, including power consumption, thermal data, and fans speeds, is available to be passed into third-party analytics solutions such as Splunk. This telemetry data of more than 30 metrics is provided as granular, time-series data that can be streamed rather than polled.
RSA multifactor authentication
RSA SecurID can be used as another means of authenticating a user on a system. The OpenManage Enterprise–Modular Edition with the Advanced license supports RSA SecurID as a two-factor authentication (2FA) method.
Figure 1. OpenManage Enterprise–Modular RSA configuration
Figure 2. OpenManage Enterprise–Modular login using RSA two-factor authentication
Automatic certificate renewal
The automatic certificate enrollment feature of OpenManage Enterprise–Modular enables fully automated installation and renewal of certificates used by the web server. When this feature is enabled, the existing web server certificate is replaced by a new certificate through a client for Simple Certificate Enrollment Protocol (SCEP) support. SCEP is a protocol standard used for managing certificates for large numbers of network devices using an automatic enrollment process. OpenManage Enterprise–Modular interacts with SCEP-compatible servers such as the Microsoft Network Device Enrollment Service (NDES) to automatically maintain SSL and TLS certificates.
Figure 3. Automatic certificate configuration
Reviewing entitlement
The license is stored on the management controller and can be imported or viewed as shown in the following figure. This license can be factory-installed or supplied by Dell's digital locker offering.
Figure 4. Advanced license installed
References
- OpenManage Enterprise–Modular documentation: Dell OpenManage Enterprise Modular User's Guide
- Interactive API explorer: Dell API Catalogue Guide
- API documentation: OpenManage Enterprise Modular RESTful API Guide
- Script examples using OpenManage Enterprise–Modular REST APIs: GitHub - Dell
- White paper detailing using PingFederate provider for OpenManage Enterprise login: Configuring OpenID Connect