Job Management Partner 1/Performance Management - Agent Option for Virtual Machine Description, User's Guide and Reference

2.5.2 For Hyper-V

When the virtual environment to be monitored is Hyper-V, PFM - Agent for Virtual Machine uses WMI to collect performance data from the monitored host. If a WMI connection has not been set up, performance data cannot be collected. Therefore, you must set up WMI on the PFM - Agent host and the monitored host.

Organization of this subsection

(1) Setting up WMI connection

(2) Checking the WMI connection status

(3) Checking the Windows firewall settings

(1) Setting up WMI connection

This subsection explains how to set up WMI connection.

The following are the settings for connecting WMI:

• DCOM
  You must set DCOM on both the PFM - Agent host and the monitored host.
  If you run the PFM - Agent host in a cluster system, set DCOM at both the executing node and the standby node. Note also that if you use Windows MSCS with cluster software, you must set the distributed transaction coordinator (MSDTC) resources. For details about the setup method, see technical support on Microsoft's home page.
  
• Firewall
  Set a firewall on the monitored host, if necessary.
  
• WMI namespace
  Set a WMI namespace on the monitored host, if necessary.
  

When the above settings have been made, check that connection can be established from the PFM - Agent host to the monitored host. For details about how to check the connection, see (2) Checking the WMI connection status.

Note about setting up WMI connection:

Data cannot be collected if the startup type of the Windows Management Instrumentation service (service name: WinMgmt) that provides system management information for the OS of the monitored host is disabled.

(a) Environment settings required for connection

The following settings are required in order to set WMI:

• User account settings
  To use WMI, you must have accounts for the PFM - Agent host and the monitored host.
  
  • Account for the PFM - Agent host
    To set up an account, specify the appropriate values for HostUserID, HostPassword, and HostDomain, as shown in Table 2-5. You specify this account when you set up an instance.
    If you run PFM - Agent for Virtual Machine in a cluster system, set up an account for the PFM - Agent host in such a manner that the same user name and password can be used to log on to both the running system and the standby system.
    
  • Account for the monitored host
    To set up an account, specify the appropriate values for UserID, Password, and Domain, as shown in Table 2-5. You specify this account when you set up the monitoring target.
    The account for the monitored host must be set as a member of the Administrators, Performance Log Users, or Performance Monitor Users group. If the monitored host's UAC security function is enabled and the account to be used is not a Built-in Administrator's account, that account must be set as a member of the Performance Log Users or Performance Monitor Users group.
    
• WMI service settings
  Set the monitored host's WMI service startup to a setting other than Disabled. If it is set to Disabled, performance data cannot be collected.
  

(b) Setting DCOM

This subsection describes how to set DCOM on the PFM - Agent host and the monitored host.

• Setting on the PFM - Agent host

To set DCOM on the PFM - Agent host:

1. In Windows, choose Start, and then Run.
2. Enter dcomcnfg.exe, and then click the OK button.
   The Component Services window appears.
   

   

3. Click Component Services, then Computers to expand the tree.
   

   

4. Choose My Computer and then, from the right-click menu, choose Properties.
   The My Computer Properties dialog box appears.
   

   

5. Choose the Default Properties tab, and then select Enable Distributed COM on this computer.
   

   

6. Click the OK button.
   The My Computer Properties dialog box closes.
   
7. Restart the machine.
   This is necessary only when the Enable Distributed COM on this computer setting has been changed.
   

• Setting on the monitored host
  This subsection describes how to set DCOM on the monitored host.
  If the monitored host's UAC security function is enabled and the account to be used is not a Built-in Administrator's account, you must perform steps 6 through 11. Perform these steps for a user group that does not belong to the Users or Administrators group or for a user of that user group.
  

To set DCOM on the monitored host:

1. In Windows, choose Start and then Run.
2. Enter dcomcnfg.exe, and then click the OK button.
   The Component Services window appears.
   
3. Click Component Services, then Computers, to expand the tree.
4. Choose My Computer and then, from the right-click menu, choose Properties.
   The My Computer Properties dialog box appears.
   
5. Choose the Default Properties tab, and then select Enable Distributed COM on this computer.
   

   

6. Select the COM Security tab and then, in Access Permissions, click the Edit Limits button.
   

   

   The Access Permission dialog box appears.
   Check if the user who connects to the monitored host or the group to which this user belongs is displayed in Group or user names.
   If the user or its group is not displayed, click the Add button and add the user or the group.
   
7. In Group or user names, select the user that connects to the monitored host or the group to which this user belongs.
   Check that the check box for Allow is selected for Remote Access. If this check box is cleared, select it.
   

   

8. Click the OK button.
   The Access Permission dialog box closes.
   
9. Select the COM Security tab and then, in Launch and Activation Permissions, click the Edit Limits button.
   

   

   The Launch and Activation Permission dialog box is displayed.
   Check if the user who connects to the monitored host or the group to which this user belongs is displayed in Group or user names.
   If the user or its group is not displayed, click the Add button and add the user or the group.
   
10. In Group or user names, select the user that connects to the monitored host or the group to which this user belongs.
    Check that the check boxes for Allow are selected for Remote Launch and Remote Activation. If these check boxes are cleared, select them.
    

    

11. Click the OK button.
    The Launch and Activation Permission dialog box closes and the My Computer Properties dialog box is displayed.
    
12. Click the OK button.
    The My Computer Properties dialog box closes.
    
13. Restart the machine.
    This is necessary only when the Enable Distributed COM on this computer setting has been changed.
    

(c) Setting a firewall

If the Windows firewall is enabled, you must perform this setting. For details about how to check the firewall status, see (3) Checking the Windows firewall settings.

To set a firewall:

1. In Windows, choose Start and then Run.
2. Enter gpedit.msc, and then click the OK button.
   The Local Group Policy Editor window is displayed.
   

   

3. Click Computer Configuration, Administrative Templates, Network, Network Connections, and Windows Firewall in this order to expand the tree.
   

   

4. Click Standard Profile^# and then, in the right-hand pane, from the right-click menu of Windows Firewall: Allow inbound remote administration exception, choose Properties.
   The Windows Firewall: Allow inbound remote administration exception Properties dialog box is displayed.
   

   

   #

   If the host is a domain environment, click Domain Profile instead.

5. Choose the Setting tab, and then select Enabled.
6. Click the OK button.
   The Windows Firewall: Allow inbound remote administration exception Properties dialog box closes.
   

(d) Setting a WMI namespace

If the user that connects to the monitored host does not have the Administrator permissions, you must set a WMI namespace.

If the monitored host's UAC security function is enabled and the account to be used is not a Built-in Administrator's account, you must set a WMI namespace even when the user has the Administrator permissions. Set a WMI namespace for a user group that does not belong to the Users or Administrators group or for a user of that user group.

To set a WMI namespace:

1. In Windows, choose Start and then Run.
2. Enter wmimgmt.msc, and then click the OK button.
   The wmimgmt - [Console Root\WMI Control (Local)] window is displayed.
   

   

3. Choose WMI Control (Local) and then, from the right-click menu, choose Properties.
   The WMI Control (Local) Properties dialog box is displayed.
   

   

4. Select the Security tab, and then click Root and CIMV2 in this order to expand the tree.
   

   

5. Click the Security button.
   The Security for ROOT\CIMV2 dialog box is displayed.
   Check if the user who connects to the monitored host or the group to which this user belongs is displayed in Group or user names. If the user or its group is not displayed, click the Add button and add the user or the group.
   
6. In Group or user names, select the user that connects to the monitored host or the group to which this user belongs.
   Check if the check boxes for Allow are selected for Enable Account and Remote Enable. If these check boxes are cleared, select them.
   

   

7. Click the OK button.
   The Security for ROOT\CIMV2 dialog box closes and the WMI Control (Local) Properties dialog box is displayed.
   
8. Select the Security tab, and then click Root and virtualization in this order to expand the tree.
   

   

9. Click the Security button.
   The Security for ROOT\virtualization dialog box is displayed.
   Check if the user who connects to the monitored host or the group to which this user belongs is displayed in Group or user names. If the user or its group is not displayed, click the Add button and add the user or the group.
   
10. In Group or user names, select the user that connects to the monitored host or the group to which this user belongs.
    Check if the check boxes for Allow are selected for Enable Account and Remote Enable. If these check box are cleared, select them.
    

    

11. Click the OK button.
    The Security for ROOT\virtualization dialog box closes and the WMI Control (Local) Properties dialog box is displayed.
    
12. Click the OK button.
    The WMI Control (Local) Properties dialog box closes.
    

(2) Checking the WMI connection status

Use the wbemtest.exe Windows tool to check if the PFM - Agent host is connected to the monitored host.

To check the WMI connection status (perform this procedure on the PFM - Agent host):

1. At the command prompt, execute the following command:
   runas /user:user-name wbemtest
   The Windows Management Instrumentation Tester window appears.
   

   

   For the user name, enter the values set for HostUserID and HostDomain in the instance environment settings. If entry of a password is requested after command execution, enter the value for HostPassword.
   For details about HostUserID, HostDomain, and HostPassword, see Table 2-5.
   
2. Click the Connect button.
   The Connect dialog box is displayed.
   

   

3. Enter appropriate information in Namespace, User, Password, and Authority.
   The following explains the information to be entered:
   
   • Namespace
     Enter \\monitored-host-name\root\cimv2 or \\monitored-host-name\root\virtualization. For monitored-host-name, specify the value that is set for VM_Host in the instance environment settings.
     
   • User
     Enter the user name used to log on to the monitored host. For this user name, specify the value set for UserID in the instance environment settings.
     
   • Password
     Enter the user's password. For the user password, specify the value set for Password in the instance environment settings.
     
   • Authority
     Enter ntlmdomain:monitored-host's-domain-name. If the monitored host is a work group, leave this item blank. For the domain name of the monitored host, specify the value set for Domain in the instance environment settings.
     
   The following shows an example:
   

   

   For details about VM_Host, UserID, Password, and Domain, see Table 2-5.
   
4. Click the Connect button.
   If connection is established successfully, the Connect dialog box closes and all the buttons in the Windows Management Instrumentation Tester dialog box are enabled.
   

   

   If an error dialog box is displayed, check the settings on the basis of the displayed error number. The error numbers and their causes are listed below.
   Note that if you change settings while the wbemtest.exe tool is running, an error might result when you retry connection establishment. If this happens, restart the tool and then retry establishing connection.
   
   • 0x8001011c
     DCOM has not been set up on the PFM - Agent host.
     

     

   • 0x80070005
     Possible causes are as follows:
     DCOM has not been set up on the PFM - Agent host.
     DCOM has not been set up on the monitored host.
     The user name, password, or domain name used to connect to the monitored host is invalid.
     

     

   • 0x80041003
     On the monitored host, Namespace has not been set for WMI.
     

     

   • 0x80041008
     The value specified in Authority does not begin with ntlmdomain:.
     

     

   • 0x800706XX
     Possible causes are as follows:
     The monitored host name is invalid.
     The monitored host is not running.
     A firewall has not been set up on the monitored host.
     The password for the user logging on to the monitored host has expired.
     

     

5. Click the Enum Instances button.
   The Class Info dialog box is displayed.
   
6. In Enter superclass name, enter Win32_PerfRawData_PerfOS_System, and then click the OK button.
   

   

   The Query Result dialog box is displayed.
   Check if the list contains the entry Win32_PerfRawData_PerfOS_System=@. If it doesn't or an error dialog box is displayed, the user who connects to the monitored host might not be a member of the Administrators, Performance Log Users, or Performance Monitor Users group.
   Note that if you change settings while the wbemtest.exe tool is running, an error might result when you retry instance enumeration. If this happens, restart the tool and then check again.
   

   When the result is normal:
   

   
   

   When the result is an error (applicable when the monitoring target is Windows Server 2008):
   

   
   

(3) Checking the Windows firewall settings

Check if the Windows firewall is enabled or disabled.

In Windows, from the Start menu, choose Control Panel, and then Windows Firewall to display the Windows Firewall window. You can check the settings in this window.

The following figure shows an example in which the Windows firewall is disabled.

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2010, Hitachi, Ltd.