Unit 02 - AIX - Management & Security

IBM Power Systems Sales School:
AIX & Linux

Unit 2 – Management & Security
Follow us @IBMpowersystems
Learn more at www.ibm.com/power
© 2013 IBM Corporation

IBM Power Systems
Unit Objectives
After completing this unit you should be able to...

 Discuss systems management interfaces
available for AIX
 Describe Workload Partitions (WPARs) and
Live Application Mobility
 Differentiate Live Partition Mobility from
 Discuss security features and capabilities that
are provided with AIX
2 © 2013 IBM Corporation

IBM Power Systems
UNIX System Administration Challenges
 Lots of commands to remember

 Complex syntax – Prone to error!
 Flat file configuration
– Most UNIX flat files have different layouts, syntax and options
– Again, prone to error, sometimes causing bad things to happen

IBM Power Systems
AIX System Management Objectives
 Minimize time and resources spent managing systems

 Maximize reliability, performance and productivity
 Provide remote system management solutions

IBM Power Systems
SMIT (System Management Interface Tool)

Simplifies AIX system administration
 An interactive, menu-oriented application

 Part of AIX, available by default
 Issues standard AIX commands and
Korn shell functions:
– You can display the commands it performs
(before or after execution)
– It creates a log of commands that you can
use to build your own scripts
 Text / ASCII based by default
– ‘smitty’ command forces text version, even in a graphical environment
 Graphical SMIT available (Motif application)

IBM Power Systems
IBM Systems Director Console for AIX (pConsole)

Reducing the cost and effort of managing AIX
 A Web based management tool

providing easy access to common
system administration tasks
 Graphical user interface is fast and
fully integrated with Systems Director
 Administrators can access Systems
Management Interface Tool (SMIT)
menus from a browser
 All necessary components for
the Console are included in AIX
 The Distributed Command Execution
Manager (DCEM) feature allows an
administrative task to run on
multiple systems at once

IBM Power Systems
AIX 7 Profile Manager (Formerly AIX Runtime Expert)

A Systems Director plug-in for managing configuration profiles across systems
 Know the
configuration Env var XYZ=“Yes”
of systems AIX security profile
.
tuneable N
 Compare
configurations
between systems
System Administrator XML Profiles
 Set multiple systems
to the same
configuration Extract Set Compare
Env var XYZ=“Yes” Env var XYZ=“Yes” Env var XYZ=“Yes”
AIX security profile AIX security profile AIX security profile
tuneable N tuneable N tuneable N
System A Systems... System C

IBM Power Systems
IBM Workload Partition Manager

Enterprise control of AIX Workload Partitions (WPARs)
 Manage AIX WPARs

across multiple systems
– Create, clone and remove
WPAR definitions
– Start/stop WPARs
 Delivered as a plug-in to
IBM Systems Director
 Enable Live Application
Mobility

IBM Power Systems
AIX Workload Partitions (WPARs)
 Create and manage SAN

multiple individual Virtual I/O Server
Ethernet
AIX operating system H
environments within a Y
single instance of AIX P Accounting WPAR
WPAR
E
 Reduce the number AIX
R
of managed LPARs 6.1 or 7.1 Database WPAR
WPAR
V LPAR
while still providing
I
workload isolation
S E-mail WPAR
WPAR
O
R
Linux
LPAR
Web
Web

IBM Power Systems
AIX Live Application Mobility

Relocate a WPAR without restarting the application
AIX # 1 AIX # 2
Workload
Workload
Partition Workload
Partition
e-mail Partition
App Server
QA
Workload
Partition Workload
Workload
Workload Dev Partition Partition
Partition Billing
Data Mining
Web
PowerVM™
Workload Policy
Partitions
Manager
for AIX
Shared Storage (SAN or NFS)

IBM Power Systems
AIX Live Application Mobility
What it is How it can help

 The capability to relocate a running  Make it easier to consolidate workloads
Workload Partition from one system to from underutilized servers
another without restarting the application
 Provide increased flexibility to balance
 The application running inside the WPAR system resources by easily moving a
resumes running after the relocation is workload to another system
complete
 Increase application availability by
 WPAR relocation can be manual or relocating workloads to facilitate planned
automated via policy outages
 Supported on POWER4 processor-based  Reduce administrative workload through
systems and later automated, policy based relocation
 Requires IBM Workload Partition Manager  Manage IT infrastructure and availability
for AIX without significantly impacting end users

IBM Power Systems
PowerVM Live Partition Mobility

Relocate a Logical Partition (LPAR) while it’s running
Move
MovemaeLogical
nt to a
diffe re nt(LPAR)
Partition se rve r
from one
with server
no loss of
to another
se rvicewith Live Partition Mobility
no loss of service requires PowerVM
Enterprise Edition.
Virtualize
VirtualizeddSAN
SAN and
andNNeetwork
tworkInfrastructure
Infrastructure

IBM Power Systems
PowerVM Live Partition Mobility

 A PowerVM Enterprise Edition feature that  Make it easier to consolidate workloads
allows an entire Logical Partition (LPAR) to from underutilized servers by facilitating
be relocated from one system to another the transfer of logical partitions with
with almost no impact to the end user minimal impact on users
 The end user sees a momentary delay (two  Provide increased flexibility to manage and
seconds) when the relocation is completed balance resources by easily moving a
logical partition to another system
 Supported by AIX V5.3, AIX 6, AIX 7
and Linux  Facilitate increased availability by allowing
workloads to be moved in advance of
 Requires that all I/O be virtualized through
planned outages
the Virtual I/O Server (VIOS)
 Provide for a much more flexible and
responsive IT infrastructure while reducing
cost and risk

IBM Power Systems
Live Mobility on Power Systems

Improving availability, resource management and energy savings
PowerVM Live Partition Mobility AIX Live Application Mobility

 Move an entire Logical Partition (LPAR)  Move a Workload Partition (WPAR) from
from one system to another while it is one AIX system to another AIX system
running with almost no impact to end users while running with almost no impact to end
users
 Moves the entire LPAR including the  Moves only the WPAR, the AIX operating
operating system system is not moved
 Requires systems based on the POWER6  Requires systems based on POWER4
or POWER7 processors, PowerVM processors and later, the IBM Workload
Enterprise Edition, and all I/O must be Partitions Manager, and all WPAR file
through the Virtual I/O Server systems must be on shared storage
 Works with partitions running AIX 7, AIX 6,  A software feature that is dependent on
AIX V5.3, IBM i 7.1 and Linux AIX 6 or AIX 7 for execution

IBM Power Systems
AIX 7 WPAR Enhancements
 Export of Fibre channel adapters to WPARs

– NPIV-like, but can work on any Fibre Channel adapter
– Adds support for Fibre Channel tape
 Support for VIOS disks in WPARs
– VSCSI disks can be exported to a WPAR
– This feature also available in AIX 6 Technology Level 6
 Kernel Extensions for WPARs
– Trusted kernel extensions may be loaded by the WPAR administrator
– Extensions can be for one WPAR or for an entire system
 Run AIX 5.2 or 5.3 in a WPAR
– Consolidate older environments on POWER7 processor-based systems
– Licensed separately from AIX 7
• AIX 5.2 WPARs for AIX 7
• AIX 5.3 WPARs for AIX 7

IBM Power Systems
AIX 5.2 or 5.3 Workload Partitions for AIX 7
 Allows customers to simplify the migration of

AIX 5.2 or 5.3 workloads to POWER7
– Licensed program products (priced separately)
– Run in AIX 7 on POWER7 processor-based servers
 Customer value
– Minimize the effort to consolidate old environments on new, more efficient hardware
– Reclaim floor space and eliminate hardware support for obsolete servers
– Protects customer investment in applications
 Enables advanced capabilities such as SMT4, Live Application Mobility
and Live Partition Mobility
 Includes limited fix support for the underlying AIX 5.2 or 5.3 operating system

IBM Power Systems
AIX 5.2 or 5.3 Workload Partitions for AIX 7
AIX 7 Na tive Environme nt

 Simply back up existing AIX 5.2 Ve rs io ne d
AIX 5.2 or 5.3 environments and Enviro nme nt
/usr
restore to an AIX 7 WPAR /opt /usr /usr
/opt /opt
 Client applications continue WPAR WPAR WPAR WPAR mks ys b

A B C D bac kup
to run in AIX 5.2/5.3 environment /
/var
/
/var
/
/var
/
/var
fro m
with AIX 5.2/5.3 libraries /tmp
/ho me
/tmp
/ho me
/tmp
/ho me
/tmp
/ho me
AIX 5.2
le g acy
s ys te m
 IBM Workload Partitions Manager AIX 7 native syscalls 5.2 syscall compatibility layer
provides a single focal point AIX 7 Ke rne l

for managing WPARs across POWER7
the enterprise

IBM Power Systems
When to Use Workload Partitions
Requirement Micro-Partitions Workload Partitions
Hardware enforced Isolation

Minimal number of AIX images
Server consolidation
Greatest flexibility
Cross-system workload management
Move workload between systems
Most efficient use of hardware resources
Run AIX V5.2 on POWER7

IBM Power Systems
AIX Provides Leadership Security
AIX fell off the list due to low vulnerabilities!

Source: X-Force report – Mid-year 2010 http://www-935.ibm.com/services/us/iss/xforce/trendreports/

IBM Power Systems
AIX Role Based Access Control (RBAC) with Domains

AIX
Users Roles Resources
DBA Company A
Company A Data
DBA Company Z
Company Z Data
PRINT
Domain support
provides more granularity
BACKUP for multi-tenant IT shops
Company A
Supported by
AIX 7 and AIX 6 TL6
BACKUP
Company Z

IBM Power Systems
AIX Role Based Access Control (RBAC) with Domains

 Allows the creation of roles for system  System administration can be performed
administration and the delegation of by multiple users without sharing account
administrative tasks across a set of trusted access
system users
 Allows for implementing and enforcing
 Administrative functions typically reserved company-wide policies for systems
for the ‘root’ user can be assigned to management and access control
regular system users
 Enables a more secure IT infrastructure
 Many roles are predefined, reducing the because no administrator is granted more
effort of implementing RBAC power than is required
 Roles can also be associated with  Reduces the cost and complexity of
programs security administration
 Domain access can further limit the  Domain support properly restricts
administrative rights of an authorized user administrative rights in multi-tenant
to specific resources associated with the environments
domain (AIX 7, AIX 6 TL6)

IBM Power Systems
AIX Encrypted File System
 Ability to encrypt files in the J2 file system on a per file basis

– Each file encrypted with a unique key
– Advantage over volume-level encryption
– Data can be protected from unauthorized access, even by privileged users
– Requires the use of Role Based Access Control (RBAC)
 Transparent to the users and system administrators
– Automated key management - integrated into AIX security authentication
– No keys stored in the clear in kernel memory
 Encrypted backups reduce the exposure to compromised data if media is removed
from secure facilities
 A variety of AES and RSA cryptography keys supported
 Automatically exploits POWER7+ encryption accelerator

IBM Power Systems
AIX Security Expert

Reduce the cost and complexity of security administration
 Control over 300 security settings

from a single console
 Start from a “Low,” “Medium,” “High”
or “Sarbanes-Oxley” security template
and customize to meet requirements
 Security settings (profiles) can be
stored in an LDAP directory for
ease of distribution
 Profiles can be exported or imported
to multiple systems
 AIX Security Expert was first included
in AIX V5.3 TL5

IBM Power Systems
AIX and Power Systems Security Certifications

Addressing compliance with common industry security standards
 AIX 6 with WPARs and VIOS

– Common Access Protection Profile (CAPP/EAL4+)
– Labeled Security Protection Profile (LSPP/EAL4+)
– Role Based Access Control Protection Profile (RBACPP/EAL4+)
 POWER6 hardware and virtualization – CAPP/EAL4+
 AIX V5.3
– With VIOS: CAPP/EAL4+
– With PitBull Foundation and VIOS: LSPP/EAL4+
AIX 7 was designed to meet the requirements of

Common Criteria EAL4+ certification for the
Operating Systems Protection Profile (OSPP) –
Security evaluation results have yet to be issued
AIX certification history: ibm.com/systems/power/software/aix/certifications/index.html

IBM Power Systems
Unit Summary
You should now be able to...

 Discuss systems management interfaces
available for AIX
 Describe Workload Partitions (WPARs) and
 Differentiate Live Partition Mobility from
 Discuss security features and capabilities that
are provided with AIX

IBM Power Systems
Any Questions?
rump@us.ibm.com

IBM Power Systems
Special Notices
This document was developed for IBM offerings in the United States as of the date of publication. IBM may not make these
offerings available in other countries, and the information is subject to change without notice. Consult your local IBM business
contact for information on the IBM offerings available in your area.
Information in this document concerning non-IBM products was obtained from the suppliers of these products or other public
sources. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.
IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document
does not give you any license to these patents. Send license inquires, in writing, to IBM Director of Licensing, IBM Corporation,
New Castle Drive, Armonk, NY 10504-1785 USA.
All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals
and objectives only.
The information contained in this document has not been submitted to any formal IBM test and is provided "AS IS" with no
warranties or guarantees either expressed or implied.
All examples cited or described in this document are presented as illustrations of the manner in which some IBM products can
be used and the results that may be achieved. Actual environmental costs and performance characteristics will vary depending
on individual client configurations and conditions.
IBM Global Financing offerings are provided through IBM Credit Corporation in the United States and other IBM subsidiaries and
divisions worldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms,
offering type, equipment type and options, and may vary by country. Other restrictions may apply. Rates and offerings are
subject to change, extension or withdrawal without notice.
IBM is not responsible for printing errors in this document that result in pricing or information inaccuracies.
All prices shown are IBM's United States suggested list prices and are subject to change without notice; reseller prices may
vary.
IBM hardware products are manufactured from new parts, or new and serviceable used parts. Regardless, our warranty terms
apply.
Any performance data contained in this document was determined in a controlled environment. Actual results may vary
significantly and are dependent on many factors including system hardware configuration and software design and
configuration. Some measurements quoted in this document may have been made on development-level systems. There is no
guarantee these measurements will be the same on generally-available systems. Some measurements quoted in this
document may have been estimated through extrapolation. Users of this document should verify the applicable data for their
specific environment.
IBM Power Systems
Special Notices (cont.)
IBM, the IBM logo, ibm.com, AIX, AIX (logo), AIX 5L, AIX 6 (logo), AS/400, Active Memory, BladeCenter, Blue Gene, Chiphopper, DB2, DB2
Universal Database, DS4000, DS6000, DS8000, EnergyScale, Enterprise Workload Manager, ESCON, GPFS, HACMP, HACMP/6000, i5/OS, i5/OS
(logo), IBM Business Partner (logo), IBM Systems Director Active Energy Manager, IntelliStation, iSeries, LoadLeveler, Lotus, Lotus Notes, Micro-
Partitioning, Notes, Operating System/400, OS/400, PartnerLink, PartnerWorld, POWER, Power Architecture, Power Everywhere, Power Family,
POWER Hypervisor, Power Systems, Power Systems (logo), Power Systems Software, Power Systems Software (logo), POWER2, POWER3,
POWER4, POWER4+, POWER5, POWER5+, POWER6, POWER7, PowerExecutive, PowerHA, PowerPC, PowerVM, PowerVM (logo), pSeries,
pureScale, Rational, RISC System/6000, RS/6000, System i, System p, System p5, System Storage, System z, THINK, Tivoli, Tivoli (logo), Tivoli
Enterprise Console, WebSphere, Workload Partitions Manager, X-Architecture, xSeries, z/OS and zSeries are trademarks or registered trademarks
of International Business Machines Corporation in the United States, other countries, or both. If these and other IBM trademarked terms are marked
on their first occurrence in this information with a trademark symbol (® or ™), these symbols indicate U.S. registered or common law trademarks
owned by IBM at the time this information was published. Such trademarks may also be registered or common law trademarks in other countries. A
current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml
Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the
United States, and/or other countries.
AltiVec is a trademark of Freescale Semiconductor, Inc.
AMD Opteron is a trademark of Advanced Micro Devices, Inc.
InfiniBand, InfiniBand Trade Association and the InfiniBand design marks are trademarks and/or service marks of the InfiniBand Trade Association.
Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are
trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.
IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of
Government Commerce.
Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.
Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.
Linux is a registered trademark of Linus Torvalds in the United States, other countries or both.
Microsoft, Windows and the Windows logo are registered trademarks of Microsoft Corporation in the United States, other countries or both.
NetBench is a registered trademark of Ziff Davis Media in the United States, other countries or both.
SPECint, SPECfp, SPECjbb, SPECweb, SPECjAppServer, SPEC OMP, SPECviewperf, SPECapc, SPEChpc, SPECjvm, SPECmail, SPECimap and
SPECsfs are trademarks of the Standard Performance Evaluation Corp (SPEC).
The Power Architecture and Power.org wordmarks and the Power and Power.org logos and related marks are trademarks and service marks
licensed by Power.org.
TPC-C and TPC-H are trademarks of the Transaction Performance Processing Council (TPPC).
UNIX is a registered trademark of The Open Group in the United States, other countries or both.
Other company, product and service names may be trademarks or service marks of others.

IBM Power Systems
Notes on Performance Estimates
rPerf for AIX

rPerf (Relative Performance) is an estimate of commercial processing performance relative to other IBM UNIX systems. It is derived from an
IBM analytical model which uses characteristics from IBM internal workloads, TPC and SPEC benchmarks. The rPerf model is not intended
to represent any specific public benchmark results and should not be reasonably used in that way. The model simulates some of the system
operations such as CPU, cache and memory. However, the model does not simulate disk or network I/O operations.
rPerf estimates are calculated based on systems with the latest levels of AIX and other pertinent software at the time of system
announcement. Actual performance will vary based on application and configuration specifics. The IBM eServer pSeries 640 is the baseline
reference system and has a value of 1.0. Although rPerf may be used to approximate relative IBM UNIX commercial processing
performance, actual system performance may vary and is dependent upon many factors including system hardware configuration and
software design and configuration. Note that the rPerf methodology used for the POWER6 systems is identical to that used for the POWER5
systems. Variations in incremental system performance may be observed in commercial workloads due to changes in the underlying system
architecture.
All performance estimates are provided "AS IS" and no warranties or guarantees are expressed or implied by IBM. Buyers should consult
other sources of information, including system benchmarks, and application sizing guides to evaluate the performance of a system they are
considering buying. For additional information about rPerf, contact your local IBM office or IBM authorized reseller.
========================================================================
CPW for IBM i
Commercial Processing Workload (CPW) is a relative measure of performance of processors running the IBM i operating system.
Performance in customer environments may vary. The value is based on maximum configurations. More performance information is available
in the Performance Capabilities Reference at: www.ibm.com/systems/i/solutions/perfmgmt/resource.html

IBM Power Systems
Notes on Benchmarks and Values
The IBM benchmarks results shown herein were derived using particular, well configured, development-level and generally-available computer
systems. Buyers should consult other sources of information to evaluate the performance of systems they are considering buying and should
consider conducting application oriented testing. For additional information about the benchmarks, values and systems tested, contact your local
IBM office or IBM authorized reseller or access the Web site of the benchmark consortium or benchmark vendor.
IBM benchmark results can be found in the IBM Power Systems Performance Report at http://www.ibm.com/systems/p/hardware/system_perf.html .
All performance measurements were made with systems running the AIX operating system unless otherwise indicated to have used Linux. For new
and upgraded systems, AIX Version 4.3, AIX 5 or AIX 6 were used. All other systems used previous versions of AIX. The SPEC CPU2006 and
SPEC CPU2000 benchmarks were compiled using IBM's high performance C, C++, and FORTRAN compilers for AIX and Linux. For new and
upgraded systems, the latest versions of these compilers were used: XL C for AIX v11.1, XL C/C++ for AIX v11.1, XL FORTRAN for AIX v13.1, XL
C/C++ for Linux v11.1, and XL FORTRAN for Linux v13.1.
For a definition/explanation of each benchmark and the full list of detailed results, visit the Web site of the benchmark consortium or benchmark
vendor.
TPC http://www.tpc.org
SPEC http://www.spec.org
LINPACK http://www.netlib.org/benchmark/performance.pdf
PTC Creo (formerly Pro/E) http://www.ptc.com/products/creo/
GPC http://www.spec.org/gwpg/
VolanoMark http://www.volano.com
STREAM http://www.cs.virginia.edu/stream/
SAP http://www.sap.com/solutions/benchmark/index.epx
Oracle Applications http://www.oracle.com/us/solutions/benchmark/apps-benchmark/index-166919.html
ANSYS FLUENT http://www.ansys.com/Support/Platform+Support/Benchmarks+Overview
TOP500 Supercomputers http://www.top500.org/
Ideas International http://www.ideasinternational.com/Free-Advisory/Benchmark-Gateway
Storage Performance Council http://www.storageperformance.org/results

IBM Power Systems
Notes on HPC Benchmarks and Values
The IBM benchmarks results shown herein were derived using particular, well configured, development-level and generally-available computer
systems. Buyers should consult other sources of information to evaluate the performance of systems they are considering buying and should consider
conducting application oriented testing. For additional information about the benchmarks, values and systems tested, contact your local IBM office or
IBM authorized reseller or access the Web site of the benchmark consortium or benchmark vendor.
IBM benchmark results can be found in the IBM Power Systems Performance Report at http://www.ibm.com/systems/p/hardware/system_perf.html .
All performance measurements were made with systems running AIX or AIX 5L operating systems unless otherwise indicated to have used Linux. For
new and upgraded systems, the latest versions of AIX were used. All other systems used previous versions of AIX. The LINPACK, and Technical
Computing benchmarks were compiled using IBM's high performance C, C++, and FORTRAN compilers for AIX and Linux. For new and upgraded
systems, the latest versions of these compilers were used: XL C for AIX V11.1, XL C/C++ for AIX V11.1, XL FORTRAN for AIX V13.1, XL C/C++ for
Linux V11.1, and XL FORTRAN for Linux V13.1. Linpack HPC (Highly Parallel Computing) used the current versions of the IBM Engineering and
Scientific Subroutine Library (ESSL). For Power7 systems, IBM Engineering and Scientific Subroutine Library (ESSL) for AIX Version 5.1 and IBM
Engineering and Scientific Subroutine Library (ESSL) for Linux Version 5.1 were used.
For a definition/explanation of each benchmark and the full list of detailed results, visit the Web site of the benchmark consortium or benchmark vendor.
SPEC http://www.spec.org
LINPACK http://www.netlib.org/benchmark/performance.pdf
PTC Creo (formerly Pro/E) http://www.ptc.com/products/creo/
GPC http://www.spec.org/gwpg/
STREAM http://www.cs.virginia.edu/stream/
TOP500 Supercomputers http://www.top500.org/
AMBER http://ambermd.org/
GAMESS http://www.msg.chem.iastate.edu/gamess
GAUSSIAN http://www.gaussian.com
ANSYS FLUENT http://www.ansys.com/services/hardware-support-db.htm
ABAQUS http://www.simulia.com/support/v68/v68_performance.php
ECLIPSE http://www.sis.slb.com/content/software/simulation/index.asp?seg=geoquest&
MM5 http://www.mmm.ucar.edu/mm5/
MSC.NASTRAN http://www.mscsoftware.com/support/prod%5Fsupport/nastran/performance/v04_sngl.cfm
STAR-CD http://www.cd-adapco.com/products/star_cd/performance/406/index.html
NAMD http://www.ks.uiuc.edu/Research/namd
HMMER http://hmmer.janelia.org/
http://powerdev.osuosl.org/project/hmmerAltivecGen2mod

Unit 02 - AIX - Management & Security

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Unit 02 - AIX - Management & Security

Uploaded by

Copyright:

Available Formats

IBM Power Systems Sales School:

AIX & Linux

© 2013 IBM Corporation

After completing this unit you should be able to...

2 © 2013 IBM Corporation

UNIX System Administration Challenges

 Lots of commands to remember

3 © 2013 IBM Corporation

AIX System Management Objectives

 Minimize time and resources spent managing systems

4 © 2013 IBM Corporation

SMIT (System Management Interface Tool)

 An interactive, menu-oriented application

5 © 2013 IBM Corporation

IBM Systems Director Console for AIX (pConsole)

 A Web based management tool

6 © 2013 IBM Corporation

AIX 7 Profile Manager (Formerly AIX Runtime Expert)

System A Systems... System C

7 © 2013 IBM Corporation

IBM Workload Partition Manager

 Manage AIX WPARs

8 © 2013 IBM Corporation

AIX Workload Partitions (WPARs)

 Create and manage SAN

9 © 2013 IBM Corporation

AIX Live Application Mobility

Shared Storage (SAN or NFS)

10 © 2013 IBM Corporation

AIX Live Application Mobility

What it is How it can help

11 © 2013 IBM Corporation

PowerVM Live Partition Mobility

12 © 2013 IBM Corporation

PowerVM Live Partition Mobility

What it is How it can help

13 © 2013 IBM Corporation

Live Mobility on Power Systems

PowerVM Live Partition Mobility AIX Live Application Mobility

14 © 2013 IBM Corporation

AIX 7 WPAR Enhancements

 Export of Fibre channel adapters to WPARs

15 © 2013 IBM Corporation

AIX 5.2 or 5.3 Workload Partitions for AIX 7

 Allows customers to simplify the migration of

16 © 2013 IBM Corporation

AIX 5.2 or 5.3 Workload Partitions for AIX 7

AIX 7 Na tive Environme nt

 Client applications continue WPAR WPAR WPAR WPAR mks ys b

provides a single focal point AIX 7 Ke rne l

17 © 2013 IBM Corporation

When to Use Workload Partitions

Requirement Micro-Partitions Workload Partitions

Hardware enforced Isolation

18 © 2013 IBM Corporation

AIX Provides Leadership Security

AIX fell off the list due to low vulnerabilities!

19 © 2013 IBM Corporation

AIX Role Based Access Control (RBAC) with Domains

20 © 2013 IBM Corporation

AIX Role Based Access Control (RBAC) with Domains

What it is How it can help

21 © 2013 IBM Corporation