How to access Lenovo Energy Management

There are two ways to launch Energy Manager.

  • By typing the URL directly in the address bar of a browser.

    Enter the following default URL in your web browser to launch the Energy Manager:

    https://localhost:8643/energymanager/

  • By clicking the Energy Manager shortcut if Energy Manager is installed on a Windows server.

The default built-in username is admin.

Note:

The default web session timeout is 30 minutes. If you want to change it, please follow the steps below.

  • Go to the folder ‘[Installation folder]/external/apache-tomcat/conf/’.

  • Open the file ‘web.xml’ and change the value of element ‘session-timeout’ like below. The unit is minutes.

     ================= Default Session Configuration ============== 
     You can set the default session timeout (in minutes) for all newly   
     created sessions by modifying the value below.                       
    
    30
        	  
    

  • Restart the Energy Manager service.

    • In Windows, the service display name is ‘Lenovo(R) Energy Manager Server’.

    • In Linux, go to the installation folder and execute the command ‘./startem.sh restart’.

Note: Follow below steps to renew the self-signed certificate when necessary (e.g. after expiration).

  1. Delete old certificate.

    keytool -delete -alias datacentermanager -keystore keystore.ssl

    You will be required to input keystore password. Then verify the entry with alias is removed from keystore.ssl.

    keytool -list -v -keystore keystore.ssl

  2. Create new certificate.

    keytool -genkeypair -alias datacentermanager -keyalg RSA -keystore
    keystore.ssl -dname
    "CN=MYDN,OU=MYORG,O=MYCMPY,L=MYADDRESS,S=MYCITY,C=CN" -
    validity 365 -storetype pkcs12 -keysize 3072

    Also, verify the entry with alias is inserted into keystore.ssl.

    keytool -list -v -keystore keystore.ssl

Note:

If you want to install a certificate from a Certificate Authority, please follow the steps below. Keytool is in the JDK package and Energy Manager keystore.ssl file is in its installation folder. The cert alias should be datacentermanager.

  • Create a certificate request: keytool -certreq -alias datacentermanager -sigalg MD5withRSA -file server.csr -keystore keystore.ssl

  • Submit the file server.csr to the Certificate Authority to sign it.

  • After you get the certificate from the Certificate Authority, please import it into Energy Manager keystore.

    • keytool -import -v -trustcacerts -alias root -file -keystore keystore.ssl

    • keytool-import -v -trustcacerts -alias datacentermanager -file -keystore keystore.ssl

  • Restart Energy Manager service.

Renew Passwords

As a maintenance effort, password / key used in Energy Manager may require update on a regular basis. Please make sure the installed services are stopped before updating them.

Renew database password

Follow below steps to renew database password.

  1. Renew database password.

    Follow the instruction at the link here.

    The database user name is available as entry DB_USER_NAME in both conf\user.config.xml and conf\console.config.xml:

    emdbnormal

  2. Synchronize new password into Energy Manager configuration file.

    The command below will update both conf\user.config.xml and conf\console.config.xml.

    java -cp bin\plugins\DCM.jar;bin\InstallTool.jar;bin\postgresql-42.2.5.jar 
    com.intel.dcm.install.Security -update dbpasswd yourpassword -file conf\user.config.xml

Renew keystore password

Follow below steps to renew keystore password.

  1. Renew keystore password.

    Follow the instruction at the link here.

    Energy Manager requires IDENTICAL passwords to protect both keystore and private key.

    Refer to this link on how to renew keystore password (using “keytool –storepasswd” command) that is used for protecting keystore file. And refer to this link on how to renew private key password (using “keytool - keypasswd” command) that is used for protecting individual private keys.

    Alias associated to Energy Manager private key is datacenter manager.

    The keystore file used by Energy Manager is keystore.ssl located under the installed folder.

    Keytool is located under \external\jre\bin.

  2. Synchronize new password into Energy Manager configuration file.

    The command below will update both conf\user.config.xml and conf\console.config.xml.

    java -cp bin\plugins\DCM.jar;bin\InstallTool.jar;bin\postgresql-42.2.5.jar
    com.intel.dcm.install.Security -update keystorepasswd yourpassword -file
    conf\user.config.xml

  3. Synchronize new password into Tomcat configuration file.

    Refer to the document at the link Tomcat document.

    The Tomcat configuration file used in Energy Manager is external\apache-tomcat\conf\server.xml.

Renew keys

Run below commands to renew keys used by Energy Manager.

java -cp bin\plugins\DCM.jar;bin\InstallTool.jar;bin\postgresql-42.2.5.jar 
com.intel.dcm.install.Security -update rootkey -file conf\user.config.xml
java -cp bin\plugins\DCM.jar;bin\InstallTool.jar;bin\postgresql-42.2.5.jar 
com.intel.dcm.install.Security -update dbpasswdkey -file conf\user.config.xml
java -cp bin\plugins\DCM.jar;bin\InstallTool.jar;bin\postgresql-42.2.5.jar 
com.intel.dcm.install.Security -update consolekeys -file conf\console.config.xml