Method and apparatus for configuration management of computer system

A configuration management method of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the method comprising the steps of, to be executed by a management computer connected to the storage subsystem over a management network:

• externally accepting replica configuration information of the volume via an input unit;
• when the volume accepted the replica configuration information is an original volume, and when path security setting information is already stored for application to a path for accessing the volume, storing, for update purpose, the path security setting information for a replica volume identified by the replica configuration information;
• receiving path definition information of the volume via the input unit;
• and
• when the volume externally accepted the path definition information already stores the path security setting information, transmitting a request for applying the path security information with the path security setting information to the volume toward the storage subsystem including the volume.

A management computer for exercising management of configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the management computer comprising:

• configuration information collecting means for collecting, from the storage subsystem over a management network, path definition information having contents of a security setting made to a path for accessing the volume in the storage subsystem, and when the volume is an original volume having a replica volume, replica configuration information of the original volume;
• replica relationship grasping means for grasping a replica relationship of the volumes based on the replica configuration information collected from the storage subsystem;
• and
• security state verifying means for verifying the contents of the security setting made to a path between the volumes under the same replica relationship based on the path definition information collected from the storage subsystem, and outputting a verification result.

A management computer for exercising management of configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the management computer comprising:

• a management port, a calculator, memory, and an output unit connected to the storage subsystem over a management network, wherein
• the memory stores a storage subsystem discovery list including an address of the storage subsystem structuring the computer system, wherein
• the calculator
• collects, from the storage subsystem whose address is stored in the storage subsystem discovery list, via the management port, path definition information having contents of a security setting made to a path for accessing the volume in the storage subsystem, and when the volume in the storage subsystem is an original volume having a replica volume, replica configuration information of the original volume;
• grasps a replica relationship of the volumes based on the replica configuration information collected from the storage subsystem;
• and
• verifies the contents of the security setting made to the path between the volumes under the same replica relationship based on the path definition information collected from the storage subsystem, and outputs a verification result from the output unit.

A management computer for exercising management of configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the management computer comprising:

• replica configuration information accepting means for accepting replica configuration information of the volume from a user;
• when the volume received the replica configuration information from the user is an original volume, and when path security setting information is already stored for application to a path for accessing the volume, security policy updating means for, for update purpose, storing the path security setting information for the replica volume identified by the replica configuration information;
• path definition information accepting means for accepting path definition information of the volume from the user;
• and
• when the path security setting information is already stored for the volume externally accepted the path definition information from the user, path defining means for transmitting a request for applying the path definition information with the path security setting information to the volume toward the storage subsystem including the volume over a management network.

A management computer for managing configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the management computer comprising

• a management port, a calculator, memory, and an input unit connected to the storage subsystem over a management network, wherein
• the memory stores a path security policy table for storing path security setting information for application to a path for accessing the volume in an interrelated manner to the volume, wherein
• the calculator
• externally accepts replica configuration information of the volume via the input unit,
• when the volume received the replica configuration information is an original volume, and when the path security setting information corresponding to the original volume is stored in the path security policy table, the path security setting information is stored in the path security policy table in an interrelated manner to a replica volume identified by the replica configuration information,
• externally accepts the path definition information of the volume via the input unit, and
• when the path security setting information corresponding to the volume accepted the path definition information is stored in the path security policy table, a request for applying the path definition information with the path security setting information to the volume is transmitted, via the management port, toward the storage subsystem including the volume.

A storage medium readable by a computer storing a computer-readable program for exercising management of configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the program having the computer execute:

• means for collecting, from the storage subsystem over a management network, configuration information including:
• path definition information having contents of a security setting made to a path for accessing the volume in the storage subsystem:
• and when the volume is an original volume having a replica volume, replica configuration information of the original volume;
• means for grasping a replica relationship of the volumes based on the replica configuration information collected from the storage subsystem;
• and
• means for verifying the contents of the security setting made to the path between the volumes under the same replica relationship based on the path definition information collected from the storage subsystem, and outputting a verification result.

A storage medium readable by a computer storing a computer-readable program for managing configuration information of a computer system including at least a storage network connecting together at least a host computer and a storage subsystem including at least a volume available for the host computer, the program having the computer execute:

• means for externally accepting replica configuration information of the volume;
• when the volume externally accepted the replica configuration information is an original volume, and when path security setting information is already stored for application to a path for accessing the volume, means for, for update purpose, storing the path security setting information for a replica volume identified by the replica configuration information;
• means for externally accepting path definition information of the volume;
• and
• when the volume externally accepted the path definition information already stores the path security setting information, means for transmitting a request for applying the path definition information with the path security setting information to the volume toward the storage subsystem including the volume via a management network.

A computer system including at least a storage subsystem connected to a host computer over a storage network, and a management computer connected to the storage subsystem over a management network, wherein

• the storage subsystem comprises:
• at least an I/O port connected to the storage network;
• a first management port connected to the management network;
• at least a disk drive storing a volume available for the host computer;
• a controller provided with a communications protocol using the first management port for exercising control over data transfer between the I/O port and the disk drive;
• and
• memory, wherein
• the memory stores:
• path definition information including contents of a security setting made to a path for accessing the volume in the storage subsystem;
• an inner replica table for storing, when the volume is an original volume including a replica volume created in the same storage subsystem by an inner replica capability, replica configuration information of the original volume;
• and a remote replica table for storing the replica configuration information of the original volume including the replica volume created in another storage subsystem by a remote replica capability, and
• the management computer comprises:
• a second management port connected to the management network;
• a calculator provided with a communications protocol using the second management port;
• memory;
• and
• an output unit, wherein
• the memory stores a replica relationship table for storing information of the volumes under a replica relationship for every replica relationship, and
• the calculator executes:
• configuration information collecting process of collecting, from the storage subsystem via the second management port, path definition information of the volume in the storage subsystem, and when the volume is an original volume having a replica volume, replica configuration information of the original volume;
• a replica relationship grasping process of, when the replica relationship table includes an entry storing at least either volume information of the original or replica volume for the replica configuration information included in the inner replica table collected from the storage subsystem, providing the entry with the original or replica volume information not stored therein, and when the replica relationship table does not include the entry, providing a new entry to the replica relationship table for storing the volume information of the original and replica volumes therein;
• and
• when the replica relationship table includes the volume information of the original and replica volumes in each different entry for the replica configuration information included in the remote replica table collected from the storage subsystem, merging the entries into one, when the replica relationship table includes one entry storing either the volume information of the original or replica volume, providing the entry with the volume information not stored therein, and when the entry of the replica relationship table includes neither the volume information of the original volume nor the volume information of the replica volume, providing a new entry to the replica relationship table for storing therein the volume information of the original and replica volumes;
• and
• a security state verifying process of verifying the entry stored in the replica relationship table in the memory for the replica relationship whether the path security setting is consistent in the path definition information of the volumes in the entry, and outputting a verification result to the output unit.