Working with credentials
To identify, monitor, and perform actions on devices, WhatsUp Gold uses one or more credential sets per device.
You can apply credentials to a devices at discovery or rescan time, as part of credential maintenance, and as new or additional monitors require them.
- Credentials are needed for network discovery.
- Each credential type you apply can affect the richness of information returned for discovering, monitoring, and reporting purposes.
- Richer credential sets provide a better picture of connectivity, including virtual hosts and hypervisors, guest VMs, VLANs, and so on.
- For core WhatsUp Gold performance monitors (CPU utilization, Memory Utilization) you need at least SNMP or Windows credentials during network discovery.
Credential Types (Built into WhatsUp Gold)
Credentials Library provides the following credential types:
. Simple Network Management Protocol (SNMPv1, SNMPv2, SNMPv3).
Credential Type
|
Description
|
Typical Use
|
SNMPv1
SNMPv2
|
Administrative SNMP domains (for example, networks and subnets) are defined by a shared SNMP community string.
|
Poll with WhatsUp Gold performance monitors with access to MIBs on any device running an SNMP agent with a default ("public") or otherwise configured community string.
|
SNMPv3
|
User based security with SNMP message authentication for data integrity and origin authentication.
|
Poll with WhatsUp Gold Performance monitors for SNMP-enabled devices using SNMPv1,v2,v3.
- Ensure message privacy between a SNMPv3 agent and management station.
- Protect against MITM attacks due to replay.
|
. Windows, VMware, SSH (typically used for Linux and UNIX).
Credential Type
|
Description
|
Typical Use
|
WMI (Windows)
|
Windows user credentials. It is best practice to scope these according to the principal of least privilege.
|
|
SSH, Telnet (UNIX, Linux)
|
Remote commands, scripts, and management.
|
- Connect WhatsUp Gold to devices running an SSH Server.
- Access filesystem partition information on Linux, UNIX devices if not available by way of SNMP.
- Action scripts/Shell Scripts.
|
Telnet (UNIX, Linux)
|
Remote commands, scripts, and management.
|
- Connect WhatsUp Gold to devices running a Telnet Server.
- Shell access.
|
VMware
|
VM platform attributes, status, and logs.
|
- Needed to connect to vCenter server.
- Add to vCenter server.
- Enables VM and virtual server information to be gathered by way of VMware services.
|
. Secure Shell client (SSH), Telnet client.
Credential Type
|
Description
|
Typical Use
|
SSH
|
Remote commands, scripts, and management.
|
- Connect WhatsUp Gold to devices running an SSH Server.
- Access filesystem partition information on Linux, UNIX devices if not available by way of SNMP.
- Linux/UNIX/router switch CLI.
- Action scripts/shell scripts (SSH action, for example).
|
Telnet
|
Remote commands, scripts, and management.
|
- Connect WhatsUp Gold to devices running a Telnet Server.
- Shell access.
- Linux/UNIX/router switch CLI.
|
. Storage Management Initiative Specification (SMI-S).
. Amazon Web Services (AWS), Microsoft Azure (Tenant and Enterprise).
. Meraki Cloud.
. ADO, JMX.
: Most active monitors that include scripting (PowerShell, for example) have the ability to apply credential sets as part of remote processing (before and during the active session).