Prerequisites

NetApp Filers

NetApp storage filers with Data ONTAP up to version 9 (both 7-mode and C-mode). For more recent versions, please contact our support team.

Filers from other vendors that have an OEM agreement with NetApp are also supported.

User Privileges

7-Mode

To monitor a NetApp storage system in 7-mode, you need to:

•	Create a user with read-only access to the DATA ONTAP API

•	Enable TLS on NetAPP

Creating a user with read-only access to the DATA ONTAP API

Copy-paste the following command lines into the NetApp CLI:

1.	Create a new role to access the Data ONTAP API used by NetApp Filers KM for PATROL:

> useradmin role add newrole -a login-http-admin,api-license-list-info,api-system-get-version,api-perf-object-get-instances,api-aggr-list-info,api-volume-list-info,api-lun-list-info,api-lun-map-list-info,api-qtree-list,api-system-get-info,api-storage-adapter-get-adapter-list,api-storage-adapter-get-adapter-info,api-net-config-get-active,api-fcp-adapter-list-info,api-fcp-adapter-stats-list-info,api-cifs-list-config,api-iscsi-service-status,api-iscsi-adapter-list-info,api-nfs-status,api-sis-status,api-snapmirror-get-status,api-snapvault-primary-destinations-list-info,api-storage-shelf-list-info,api-disk-list-info,api-storage-shelf-environment-list-info,api-vfiler-list-info,api-cifs-status,api-vfiler-get-status,api-snapvault-primary-get-relationship-status,api-quota-report,api-snapshot-volume-info,api-volume-autosize-get

2.	Create a new group using the previously created role:

> useradmin group add newgroup -c "adding group for newuser" -r newrole

3.	Create a new user in the previously created group:

> useradmin user add newuser -g newgroup

Enabling TLS on NetApp (7-Mode only)

Data ONTAP supports SSLv3 and TLS (disabled by default) to secure its connection with NetApp Filers KM for PATROL. When using Java 1.8, which no longer uses SSLv3 but TLS, NetApp Filers KM for PATROL cannot connect to Data ONTAP. To guarantee the correct operation of NetApp Filers KM for PATROL, you will have to first enable TLS. For more information, please refer to the NetApp documentation.

C-Mode:

To monitor a NetApp storage system in C-Mode, you need to create a user with read-only access to the Data ONTAP API.

When using Data ONTAP v7.x and 8.x

Copy-paste the following command lines into the NetApp CLI:

>::security >login create -username newuser -application http -authmethod password -role readonly

>::security >login create -username newuser -application ontapi -authmethod password -role readonly

When using Data ONTAP v9

Copy-paste the following command lines into the NetApp CLI:

security login create -user-or-group-name tsco -application ontapi -authentication-method password -role readonly

security login create -user-or-group-name tsco -application http -authentication-method password -role readonly

or add a user in NetApp OnCommand System Manager with the following login methods:

Add User - NetApp OnCommand System Manager

Other Components

•	Java 1.8 or higher