Hitachi VSP | Scan Requirements (StorageGuard 10.0 and below)

StorageGuard collects configuration data from Hitachi VSP storage systems through read-only REST API calls, either through the Ops Center server or directly on each array's SVP when Ops Center is not used. We also recommend enabling OS-level access to the management host for complementary configuration collection.

This article explains how to choose a connection option, prepare the account and network access it needs, and verify access before you scan.

In this article

• Choose a connection option
• Option 1: Scan through Ops Center
• Option 2: Scan directly on the SVP
• Verify access before you scan
• Troubleshooting

Choose a connection option

Option 1: Scan through Ops Center

The following table lists the requirements for scanning Hitachi VSP storage systems through Ops Center.

Create the user account for Option 1

Use the following suggested method to create an account with the required privileges. Create the account in Ops Center, and then define the same account on each storage system.

In the Ops Center portal:

1. Log in to the Ops Center portal with an administrative account.
2. In the navigation bar, click Manage users, and then select Users from the Asset type list.
3. In the Users window, click +.
4. Enter the account information, and then click Submit.
5. Enter and confirm a password, and then click Submit.
6. Assign the user the built-in opscenter-security-administrator role.

On each storage system:

1. Log in to the SVP user interface with an administrative account.
2. On the Administration tab, click Users and Permissions, and then click New User.
3. Enter the same user name and password as the Ops Center account.
4. Assign the user the Security Administrator (View Only) group.

Option 2: Scan directly on the SVP

The following table lists the requirements for scanning Hitachi VSP storage systems directly.

Create the user account for Option 2

Use the following suggested method on each storage system:

1. Log in to the SVP user interface with an administrative account.
2. On the Administration tab, click Users and Permissions, and then click New User.
3. Enter the account details.
4. Assign the user the built-in Security Administrator (View Only) group. This group includes the Security Administrator (View Only), Audit Log Administrator (View Only), and Storage Administrator (View Only) roles.

Verify access before you scan

Run these checks from the StorageGuard server, or from a host with the same network path, using curl. Replace the values in square brackets.

Verify Ops Center access (Option 1)

Request a token from the Ops Center portal:

curl -k -u "[user]:[password]" -X POST \
  https://[Server]:443/portal/auth/v1/providers/builtin/token

A JSON response containing a token confirms that the account and role are valid.

Verify Configuration Manager access (Options 1 and 2)

Use [Server]:23451 for Option 1, or [SVP IP]:443 for Option 2.

1. List the storage systems that Configuration Manager can reach, and note the storageDeviceId of each:

   curl -k -H "Accept: application/json" \
     https://[host]:[port]/ConfigurationManager/v1/objects/storages

   For Option 1, confirm that every array you expect appears in the list.

2. Confirm that the account can open a session on an array:

   curl -k -u "[user]:[password]" -X POST \
     -H "Accept: application/json" -H "Content-Type: application/json" \
     https://[host]:[port]/ConfigurationManager/v1/objects/storages/[storageDeviceId]/sessions

   A JSON response containing a token and a sessionId confirms that the account is defined on the storage system with the correct group. Repeat for each array.

3. Close the test session:

   curl -k -X DELETE -H "Authorization: Session [token]" \
     https://[host]:[port]/ConfigurationManager/v1/objects/storages/[storageDeviceId]/sessions/[sessionId]

Troubleshooting

Related articles

• Hitachi VSP and Ops Center | Scan Requirements (StorageGuard 10.1 and later)
• Preparation for scanning storage management hosts

Hitachi references

• Registering a local storage system to an Ops Center API Configuration Manager connection
• Registering storage systems to an Ops Center API Configuration Manager REST API connection
• How to access Hitachi Configuration Manager to register storage devices