Chapter 2 Login and Logout

This chapter describes how to open and close the ROR console.

Preparations

Before opening the ROR console, be sure to read the following instructions and restrictions.

The ROR console uses the Web browser's standard fonts and is designed to be viewed in a window of 1024 by 768 pixels or larger. When using a monitor with a higher resolution than this, it is recommended to enlarge the screen size. If the Web browser is resized by a significant amount, the display quality may deteriorate.
Surrogate pair characters cannot be used on the ROR Console.
In environments where the admin server is Windows, and multiple IP addresses are used, when a login window with a different URL from the address bar's URL in which the IP address or host name (FQDN) is specified, the warning may not disappear. Also, the following may occur.
- The login window is not displayed
- A certificate error occurs even though the certificate is registered
Perform the following corrective action:
- Windows Server 2008
  Set a higher priority for binding of the network adapter used on the admin LAN than for other network adapters.
  Example
  When changing the order of priority of network adapter binding in Microsoft(R) Windows Server(R) 2008 R2 Enterprise
  1. Click <Start>, and then click [Control Panel].
  2. When [Network and Internet] is displayed, click this item.
    When [Network and Internet] is not displayed, proceed to the next step without clicking.
  3. Click [Network and Sharing Center], and click [Change adapter settings] in the left side of the window.
  4. Click [Advanced Settings] in the [Advanced] menu.
    When the [Advanced] menu is not displayed, push the [Alt] key.
  5. From the list of [Connections] in the [Adapters and Bindings] tab, click the target network adapter, and the "Up" or "Down" buttons to change the order of priority of connections.
  6. Click <OK>.
- Windows Server 2012 or later
  On the admin server, set the metric of the admin LAN interface that is smaller than other interface.
  The metric value of interfaces can be checked using the "netstat -r" command.
  Example
  When modify the value of Interface metric in Microsoft(R) Windows Server(R) 2012 Standard
  1. Press [Windows logo + R] key.
    [Run] will be opened.
  2. Type ncpa.cpl and click <OK>.
  3. Right-click the LAN Icon that connects, and click [Properties].
  4. Click [Internet Protocol Version4 (TCP/IPv4)] and click [Properties] button.
  5. Click [Advanced] button.
  6. Uncheck [Automatic metric] in the [IP Settings], and input the value in [Interface metric] field.
When opening the ROR console with Internet Explorer, read the following additional instructions and restrictions.
- When accessing the ROR console, be sure to enable the Compatibility View in Internet Explorer. Select [View]-[Encoding] in Internet Explorer, and check if [Auto-Select] is checked. If [Auto-Select] is not checked, select it.
- When downloading files using the ROR console, it is necessary to disable [Do not save encrypted pages to disk] in the Advanced Settings of the browser.
- The ROR console uses JavaScript, Active Script, Cookies, and IFRAMEs. These must be enabled in the Web browser settings before using the ROR console. Use SSL 3.0 and TLS 1.0.
- Specify either one of the following for the Web browser pop-up blocker:
  - Disable the pop-up blocker
  - Add the URL of the ROR Console to the Address of web site to allow setting.
    Check with the system administrator for the URL of the ROR Console.
- When opening the ROR console right after launching a Web browser, a warning window concerning the site's security certificate will be displayed.
  The following message is displayed: "There is a problem with this web site's security certificate." This warns the user that Resource Orchestrator uses a self-signed certificate to encrypt its HTTPS (SSL) communication with the Web browser.
  Resource Orchestrator generates a unique, self-signed certificate for each admin server during manager installation.
  Within a firewall-protected intranet, a network where the risk of identity theft is low, or where all correspondents are trusted, there is no risk in using self-signature certificates for communications. Accept the warning to display the Resource Orchestrator login screen.
  The login screen can be displayed by selecting the following option: "Continue to this web site (not recommended)."
- The background of the address bar will become red and the words "Certificate Error" will be displayed on the right side of the address bar of the login screen, the ROR console, and BladeViewer.
  Furthermore, the Phishing Filter may show a warning on the status bar. These warnings are referring to the same self-signed certificate issue discussed in the previous bullet. It is safe to continue with the current browser settings.
- To stop displaying the security certificate warning screen and the certificate error icon, create a certificate associated with the IP address or hostname of the admin server and add it to the Web browser.
  Refer to "Appendix B HTTPS Communications" in the "Design Guide CE" for details.
- Add the URL of the ROR console to the "Trusted sites" of the browser.
When opening the ROR console with Firefox, read the following additional instructions and restrictions.
- Confirm that the "Allow pages to choose their own fonts, instead of my selections above" is checked in the Advanced setting in [Options]-[Content]-[Fonts & Colors]. If it is not checked, check it.
- The ROR console uses JavaScript, Cookies, and IFRAMEs. These must be enabled in the Web browser settings before using the ROR console. Use SSL 3.0 and TLS 1.0.
- Specify either one of the following for the Web browser pop-up blocker:
  - Disable the pop-up blocker
  - Add the URL of the ROR Console to the Address of web site to allow setting.
    Check with the system administrator for the URL of the ROR Console.
- Create a certificate associated with the IP address or hostname of the admin server and add it to the Web browser.
  Refer to "Appendix B HTTPS Communications" in the "Design Guide CE" for detail instructions to create and install certificate.

Opening the ROR Console

This section explains how to access the ROR console.

Start a Web browser from an admin client and specify the URL of the ROR console for connection.
If the port number was changed, specify the new port number.

When the ROR console is connected, the login window is displayed.
When Single Sign-On authentication has already been performed, the ROR console can be started without displaying the login window.

Refer to "Chapter 12 Installing and Defining Single Sign-On" in the "Design Guide CE" for details on Single Sign-On.

URL: https://Admin_server_FQDN:23461/

On a Windows admin server, the ROR console can also be opened by selecting [start]-[All Programs]-[Fujitsu]-[Resource Orchestrator]-[ROR console].

When modifying the URL of the start menu from localhost to the FQDN of an admin server, edit the following file:

System drive\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\Resource Orchestrator\ROR Console
- Before Editing
  [InternetShortcut]
  URL=https://localhost:23461/
- After Editing
  [InternetShortcut]
  URL=https://FQDN:23461/

Note

If the login screen is not displayed, confirm the following.
- URL entered in address bar of the Web browser.
- The proxy settings of the Web browser are correct.
- The firewall settings on the admin server are correct.
If already logged in from another Web browser window, login may be performed automatically (without displaying the login screen).

In the login screen, enter the following items, and click <Login>.
The ROR console or BladeViewer is displayed after a successful login.

User ID
Password

When logging in for the first time, the [Home] tab is displayed. When logging in for the second time and successive times, the tab that was displayed at the last logout is displayed.

It is also possible for each user to set whether the [Home] tab is to be displayed at login. To change the option, click "Options" in the upper right corner of the ROR Console. This option is not reflected on the backup site during switchover due to Disaster Recovery. Each user has to change the option individually after switchover.

Logout

To log out, select "Logout" in the global header, and click <OK> in the confirmation dialog.

Note

If the Web browser is closed without logging out first, user authentication may be skipped the next time Resource Orchestrator is accessed. In that case, users will be automatically logged in using the previously used session.
It is advised that the users log out properly after using the ROR console or BladeViewer.
If the ROR console or BladeViewer has been opened simultaneously in several Web browser windows, those login sessions may be terminated.