Domain Management

Cisco UCS Domains and Cisco UCS Central

Cisco UCS Central provides centralized management capabilities to multiple Cisco UCS domains across one or more data centers. Cisco UCS Central works with Cisco UCS Manager to provide a scalable management solution for a growing Cisco UCS environment.

Cisco UCS Central does not reduce or change any local management capabilities of Cisco UCS Manager, such as its API. This allows you to continue using Cisco UCS Manager the same way you did before Cisco UCS Central. This also allows all existing third party integrations to continue to operate without change.

Registering Cisco UCS Domains

To manage Cisco UCS Manager through Cisco UCS Central, you must register the Cisco UCS domains in Cisco UCS Central. You can register a Cisco UCS domain as a part of a domain group or as an ungrouped domain. When you have a domain group, all registered domains in the domain group can share common policies and other configurations.

You can use a Fully Qualified Domain Name (FQDN) or IP address to register Cisco UCS domains in Cisco UCS Central.


Note


During the initial registration process with Cisco UCS Central, all of the active Cisco UCS Manager GUI sessions are terminated.


Before registering a domain in Cisco UCS Central, do the following:

  • Configure an NTP server and the correct time zone in both Cisco UCS Manager and Cisco UCS Central to ensure that they are in sync. If the time and date in the Cisco UCS domain and Cisco UCS Central are out of sync, the registration might fail.

  • Obtain the hostname or IP address of Cisco UCS Central. You cannot use the same hostname for both Cisco UCS Central and Cisco UCS Manager. For standalone mode, use individual VM IP address. If you plan to setup in cluster mode, use virtual IP address.


    Note


    We recommend that you always register Cisco UCS domains using a Fully Qualified Domain Name (FQDN).


  • Obtain the shared secret that you configured when you deployed Cisco UCS Central.


Note


  • If you register Cisco UCS domains using a domain name, Cisco UCS Manager can gracefully move to a different IP address.

    If you register a Cisco UCS domain in Cisco UCS Central using an IP address, you cannot change or swap the IP address used by Cisco UCS Manager. If you need to change or swap the IP address, you must contact Cisco TAC.

  • You can register or un-register a Cisco UCS domain using Cisco UCS Manager GUI or CLI.

  • If Cisco UCS Central is deployed on RHEL 7.2 KVM, the first time you register a Cisco UCS domain, you must regenerate the certificate using the set regenerate yes command.

  • If the registered Cisco UCS domains have a latency of greater than 300ms for a round trip from Cisco UCS Central, there might be some performance implications for the Cisco UCS domains.

  • When you unregister a Cisco UCS domain from Cisco UCS Central the global service profiles become local service profiles in Cisco UCS Manager.



Warning


You must upgrade to Cisco UCS Manager Release 2.1(2) or greater before registering with Cisco UCS Central. If you try to register earlier versions of Cisco UCS Manager, the registration will fail.


Registering a Cisco UCS Domain with the CLI

You can register a Cisco UCS Manager domain to any Cisco UCS Central system. However you can only register the Cisco UCS Manager domain to one Cisco UCS Central system at a time.

Procedure
     Command or ActionPurpose
    Step 1 UCSC# connect resource-mgr  

    Enters resource manager mode.

     
    Step 2 UCSC(resource-mgr) # scope system  

    Enters into the system.

     
    Step 3UCSC(resource-mgr) /system # create policy-control-ep UCSM domain IP address admin  
    Creates a policy control for the UCSM domain.
    Note   

    You must be logged in as an admin to register a domain.

     
    Step 4UCSC(resource-mgr) /system # Domain Admin Password: password   Specifies the password.  
    Step 5UCSC(resource-mgr) /system/policy-control-ep # set srcaddrfmt ipv4 { hostname | ipv4 | ipv6 }  

    Sets the address format for the domain.

     
    Step 6UCSC(resource-mgr) /system/policy-control-ep # commit-buffer  

    Commits the transaction to the system and registers the Cisco UCS Manager domain to Cisco UCS Central.

     
    Step 7UCSC(resource-mgr) /system/policy-control-ep # show detail  

    Displays the status of the Cisco UCS Manager domain.

     

    The following example shows how to register a Cisco UCS Manager domain with Cisco UCS Central:

    UCSC# connect resource-mgr
    UCSC(resource-mgr)# scope system
    UCSC(resource-mgr) /system # create policy-control-ep 10.193.01.01 admin
    UCSC(resource-mgr) /system #  Domain Admin Password: 
    UCSC(resource-mgr) /system/policy-control-ep* #
    UCSC(resource-mgr) /system/policy-control-ep # set srcaddrfmt ipv4
    UCSC(resource-mgr) /system/policy-control-ep # commit-buffer
    UCSC(resource-mgr) /system/policy-control-ep # show detail
    hostname or ip address: 10.193.190.130
    Registration Status: Registered
    Cleanup Mode: Localize Global
    Current Task:
     

    Unregistering a Cisco UCS Domain with the CLI


    Caution


    If you want to unregister any registered Cisco UCS domain in a production system, contact Cisco Technical Support.


    When you unregister a Cisco UCS domain from Cisco UCS Central:

    • You can no longer manage the service profiles, policies and other configuration for the Cisco UCS Domain from Cisco UCS Central

    • All global service profiles and policies become local and continue to operate as local entities. When you re-register the domain, the service profiles and polices still remain local.

    Procedure
       Command or ActionPurpose
      Step 1 UCSC# connect resource-mgr  

      Enters resource manager mode.

       
      Step 2 UCSC(resource-mgr) # scope system  

      Enters into the system.

       
      Step 3UCSC(resource-mgr) /system # scope policy-control-ep UCSM domain IP address  

      Creates a policy control for the UCSM domain.

       
      Step 4UCSC(resource-mgr) /system/policy-control-ep # set actionevent unregister  

      Prepares to unregister the domain.

       
      Step 5UCSC(resource-mgr) /system/policy-control-ep # commit-buffer  

      Commits the transaction to the system and unregisters the Cisco UCS Manager domain from Cisco UCS Central.

       

      The following example shows how to unregister a Cisco UCS Manager domain with Cisco UCS Central:

      UCSC# connect resource-mgr
      UCSC(resource-mgr)# scope system
      UCSC(resource-mgr) /system # scope policy-control-ep 10.193.01.01 admin
      UCSC(resource-mgr) /system/policy-control-ep # set actionevent unregister
      UCSC(resource-mgr) /system/policy-control-ep # commit-buffer
      UCSC(resource-mgr) /system/policy-control-ep # show detail
      hostname or ip address: 10.193.190.130
      Registration Status: Failed
      Cleanup Mode: Localize Global
      Current Task:
       

      Domains and Domain Groups

      When you register a Cisco UCS Manager instance in Cisco UCS Central, that instance becomes an ungrouped domain in Cisco UCS Central. You must assign this domain to a domain group to start managing this domain using global policies in Cisco UCS Central.

      Cisco UCS Central creates a hierarchy of Cisco UCS domain groups for managing multiple Cisco UCS domains.

      • Domain Group— A group that contains multiple Cisco UCS domains. You can group similar Cisco UCS domains under one domain group for simpler management.

      • Ungrouped Domains—When a new Cisco UCS domain is registered in Cisco UCS Central, it is added to the ungrouped domains. You can assign the ungrouped domain to any domain group.

      If you have created a domain group policy, and a new registered Cisco UCS domain meets the qualifiers defined in the policy, it is automatically be placed under the domain group specified in the policy. If not, it is placed in the ungrouped domains category until the domain group is assigned to a domain group.

      You can only assign each Cisco UCS domain to one domain group. You can assign or reassign membership of the Cisco UCS domains at any time. When you assign a Cisco UCS domain to a domain group, the Cisco UCS domain automatically inherits all management policies specified for the domain group.

      Before adding a Cisco UCS domain to a domain group, make sure to change the policy resolution controls to local in the Cisco UCS domain. This avoids accidentally overwriting service profiles and maintenance policies specific to that Cisco UCS domain. Even when you have enabled auto discovery for the Cisco UCS domains, enabling local policy resolution protects the Cisco UCS domain from accidentally overwriting policies.

      Creating a Domain Group

      Procedure
         Command or ActionPurpose
        Step 1UCSC# connect policy-mgr  

        Enters policy manager mode.

         
        Step 2UCSC(policy-mgr)# scope domain-group 

        Enters the domain group root mode.

         
        Step 3UCSC(policy-mgr) /domain-group # create domain-group 12 

        Creates the specified domain group.

         
        Step 4UCSC(policy-mgr) /domain-group* # commit-buffer 

        Commits the transaction to the system.

         

        The following example shows how to create a domain group:

        UCSC# connect policy-mgr
        UCSC(policy-mgr)# scope domain-group
        UCSC(policy-mgr) /domain-group # create domain-group 12
        UCSC(policy-mgr) /domain-group* # commit-buffer
        UCSC(policy-mgr) /domain-group # 

        Deleting a Domain Group

        Procedure
           Command or ActionPurpose
          Step 1UCSC# connect policy-mgr  

          Enters policy manager mode.

           
          Step 2UCSC(policy-mgr)# scope domain-group 

          Enters the domain group root mode.

           
          Step 3UCSC(policy-mgr) /domain-group # delete domain-group 12 

          Deletes the specified domain group.

           
          Step 4UCSC(policy-mgr) /domain-group* # commit-buffer 

          Commits the transaction to the system.

           

          The following example shows how to delete a domain group:

          UCSC# connect policy-mgr
          UCSC(policy-mgr)# scope domain-group
          UCSC(policy-mgr) /domain-group # delete domain-group 12
          UCSC(policy-mgr) /domain-group* # commit-buffer
          UCSC(policy-mgr) /domain-group # 

          Assigning a Domain Group Membership

          Procedure
             Command or ActionPurpose
            Step 1UCSC# connect resource-mgr  

            Enters resource manager mode.

             
            Step 2UCSC(resource-mgr) # scope domain-mgmt  

            Enters the UCS domains.

             
            Step 3UCSC(resource-mgr) /domain-mgmt # show ucs-membership IP Address  

            Displays the membership information for the registered domains.

             
            Step 4UCSC(resource-mgr) /domain-mgmt # scope ucs-membership IP Address  

            Enters the Cisco UCS domain specified in the IP address.

             
            Step 5UCSC(resource-mgr) /domain-mgmt/ucs-membership # set domain-group  Domain Group Name  

            Specifies the domain group for the IP address.

             
            Step 6UCSC(resource-mgr) /domain-mgmt/ucs-membership # commit-buffer  

            Commits the transaction to the system.

             

            The following example shows how to assign membership to a Cisco UCS domain:

            UCSC# connect resource-mgr
            UCSC(resource-mgr)# scope domain-mgmt
            UCSC(resource-mgr) /domain-mgmt # show ucs-membership 
            UCS-Domain Group Membership:
               Mgmt IP         Qualification Type Domain Group DN
               --------------- ------------------ ---------------
               10.193.01.01    Manual             domaingroup-root 
            UCSC(resource-mgr) /domain-mgmt # scope ucs-membership 10.193.01.01
            UCSC(resource-mgr) /domain-mgmt/ucs-membership # set domain-group DG-test 
            UCSC(resource-mgr) /domain-mgmt/ucs-membership # 

            Domain Group Qualification Policy

            Domain group qualification policy enables you to automatically place new Cisco UCS domains under domain groups. You can create qualifiers based on Owner, Site and IP Address of various Cisco UCS domains based on your management requirements. When you register a new Cisco UCS domain, Cisco UCS Central analyses the domain based on the pre defined qualifiers in the domain group qualification policy and places the domain under a specific domain group for management.

            Creating a Domain Group Policy

            Procedure
               Command or ActionPurpose
              Step 1UCSC# connect policy-mgr  

              Enters policy manager mode.

               
              Step 2UCSC(policy-mgr) # scope org org-name  

              Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

               
              Step 3UCSC(policy-mgr) /org # create domain-group-policy domain-group-name  

              Creates domain group under selected domain group.

               
              Step 4UCSC(policy-mgr) /org/domain-group-policy # set qualifier qualifier   (Optional)

              Specifies domain group to use for qualifying the domain group.

               
              Step 5UCSC(policy-mgr) /org//domain-group-policy # commit-buffer  

              Commits the transaction to the system configuration.

               

              This following example shows how to create a qualifier:

              UCSC# connect policy-mgr
              UCSC(policy-mgr) # scope org
              UCSC(policy-mgr) /org # create domain-group-policy dm-gsp1
              UCSC(policy-mgr) /org/domain-group-policy* # set qualifier DMGroup1
              UCSC(policy-mgr) /org/domain-group-policy* # commit-buffer
              UCSC(policy-mgr) /org/domain-group-policy #

              Deleting a Domain Group Policy

              Procedure
                 Command or ActionPurpose
                Step 1UCSC# connect policy-mgr  

                Enters policy manager mode.

                 
                Step 2UCSC(policy-mgr) # scope org org-name  

                Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

                 
                Step 3UCSC(policy-mgr) /org # delete domain-group domain-group-name  

                Deletes the specified domain group.

                 
                Step 4UCSC(policy-mgr) /org* #commit-buffer  

                Commits the transaction to the system configuration.

                 

                The following example shows how to delete a domain group called dm-gsp1, and commits the transaction to the system:

                UCSC# connect policy-mgr
                UCSC(policy-mgr) # scope org 
                UCSC(policy-mgr) /org # delete domain-group dm-gsp1
                UCSC(policy-mgr) /org* # commit-buffer
                UCSC(policy-mgr) /org #

                Creating a Registration Policy

                Procedure
                   Command or ActionPurpose
                  Step 1UCSC# connect policy-mgr  

                  Enters policy manager mode.

                   
                  Step 2UCSC(policy-mgr) # scope org org-name  

                  Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

                   
                  Step 3UCSC(policy-mgr) /org # create registration-policy policy-name  

                  Creates a registration policy.

                   
                  Step 4UCSC(policy-mgr) /org/registration-policy # set descr description  

                  Provides a description for the registration policy.

                  Note    If your description includes spaces, special characters, or punctuation, you must begin and end your description with quotation marks. The quotation mark will not appear in the description field of any show command output.
                   
                  Step 5UCSC(policy-mgr) /org/registration-policy # create address-qual minimum-ip-address maximum-ip-address  

                  Creates an address qualifier for the registration policy.

                   
                  Step 6UCSC(policy-mgr) /org/registration-policy # create owner-qual  

                  Creates an owner qualifier for the registration policy.

                   
                  Step 7UCSC(policy-mgr) /org/registration-policy # create site-qual  

                  Creates a site qualifier for the registration policy.

                   
                  Step 8UCSC(policy-mgr) /org/registration-policy # commit-buffer  

                  Commits the transaction to the system configuration.

                   

                  The following example shows how to create a registration policy:

                  UCSC# connect policy-mgr
                  UCSC(policy-mgr) # scope org /
                  UCSC(policy-mgr)/org # create registration-policy RegPol1
                  UCSC(policy-mgr)/org/registration-policy* # create address-qual 0.0.0.0 1.1.1.1
                  UCSC(policy-mgr)/org/registration-policy/address-qual* # exit
                  UCSC(policy-mgr)/org/registration-policy* # create owner-qual TestOwner
                  UCSC(policy-mgr)/org/registration-policy/owner-qual* # exit
                  UCSC(policy-mgr)/org/registration-policy* # create site-qual TestSite
                  UCSC(policy-mgr)/org/registration-policy/site-qual* # commit-buffer
                  UCSC(policy-mgr)/org/registration-policy/site-qual #

                  Policies in Cisco UCS Central and Cisco UCS Domains

                  You can create and manage global policies in Cisco UCS Central and include them in service profiles or service profile templates for one or more Cisco UCS domains. The service profiles and service profile templates that include global policies can be either of the following:

                  • Local service profiles or service profile templates that are created and managed by Cisco UCS Manager in one Cisco UCS domain. You can only associate local service profiles with servers in that domain. When you include a global policy in a local service profile, Cisco UCS Manager makes a local read-only copy of that policy.

                  • Global service profiles or service profile templates that are created and managed by Cisco UCS Central. You can associate global service profiles with servers in one or more registered Cisco UCS domains.

                  You can only make changes to global policies in Cisco UCS Central. Those changes affect all service profiles and service profile templates that include the global policy. All global policies are read-only in Cisco UCS Manager.

                  You can configure all operational policies under a domain group using IPv6 addresses. These policies are located in the Operations Management tab of the Cisco UCS Central GUI.

                  This feature helps the Cisco UCS Manager to use an IPv6 address while importing these policies from Cisco UCS Central.

                  Policy Resolution between Cisco UCS Manager and Cisco UCS Central

                  Policy Resolution Control

                  For each Cisco UCS domain that you register with Cisco UCS Central, you can choose which application will manage certain policies and configuration settings. This policy resolution does not have to be the same for every Cisco UCS domain that you register with the same Cisco UCS Central.

                  You have the following options for resolving these policies and configuration settings:

                  • Local—The policy or configuration is determined and managed by Cisco UCS Manager.

                  • Global—The policy or configuration is determined and managed by Cisco UCS Central.

                  The following table contains a list of the policies and configuration settings that you can choose to have managed by either Cisco UCS Manager or Cisco UCS Central:


                  Note


                  The policy resolution options in Cisco UCS Central are not supported on all versions of Cisco UCS Manager. If your Cisco UCS Manager version is earlier than the earliest supported release, the policy resolution screen may display the value as global even if it is not applicable.


                  In a case where you choose certain policies to be resolved locally using the Policy Resolution Control feature in Cisco UCS Central, or when a Cisco UCS Domain is unregistered from Cisco UCS Central, the global settings/unnamed policies (such as QoS Settings, Discovery policies) stay as previously configured. You must manually change the policy details to the desired state.


                  Caution


                  Unregistering a Cisco UCS Domain has serious implications. You must not unregister the Cisco UCS Domain unless you choose to permanently not manage it from Cisco UCS Central.
                  Name

                  Earliest Supported Release

                  Description

                  Infrastructure & Catalog Firmware

                  2.1(2)

                  Determines whether the Capability Catalog and infrastructure firmware policy are defined locally in Cisco UCS Manager or come from Cisco UCS Central.

                  Time Zone Management

                  2.1(2)

                  Determines whether the time zone and NTP server settings are defined locally in Cisco UCS Manager or comes from Cisco UCS Central.

                  Communication Services

                  2.1(2)

                  Determines whether HTTP, CIM XML, Telnet, SNMP, web session limits, and Management Interfaces Monitoring Policy settings are defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Global Fault Policy

                  2.1(2)

                  Determines whether the Global Fault Policy is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  User Management

                  2.1(2)

                  Determines whether authentication and native domains, LDAP, RADIUS, TACACS+, trusted points, locales, and user roles are defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  DNS Management

                  2.1(2)

                  Determines whether DNS servers are defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Backup & Export Policies

                  2.1(2)

                  Determines whether the Full State Backup Policy and All Configuration Export Policy are defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Monitoring

                  2.1(2)

                  Determines whether Call Home, Syslog, and TFTP Core Exporter settings are defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  SEL Policy

                  2.1(2)

                  Determines whether the SEL Policy is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Power Allocation Policy

                  2.1(2)

                  Determines whether the Power Allocation Policy is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Power Policy

                  2.1(2)

                  Determines whether the Power Policy is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Equipment Policy

                  2.2(7)

                  Determines whether the Equipment Policy is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Port Configuration

                  2.2(7)

                  Determines whether port configuration is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Quality of Service (QoS) Configuration

                  2.2(7)

                  Determines whether QoS configuration is defined locally in Cisco UCS Manager or in Cisco UCS Central.

                  Policies

                  To assign a policy or a Management IP pool/policy to a domain profile, click on the policy and then click on the drop-down list to select the policy you want to assign to a profile. You can assign the following policies to a domain:

                  • QoS System Class - Defines a configurable set of system classes that you can include in a QoS Policy.

                  • Port Auto-Discovery Policy- Determines whether Server Port Auto-Discovery enabled or disabled in Cisco UCS Central.

                  • KMIP Certification Policy

                  Management IP

                  You can assign the following pools/policies from the Management IP pool:
                  • In-Band Policy - Policy to configure the In-Band IP address on a server directly, or through an Inband policy.

                  • Out-Band Pool - Sets the Management IP Pool created for Out-of-band network management.


                  Note


                  The Management IP tab in the Domain Configuration Settings window is enabled only when the registered Cisco UCS Domain is Cisco UCS Manager 3.1(3) and later. For all earlier Cisco UCS Manager releases, the Management IP tab is hidden.


                  Consequences of Policy Resolution Changes

                  When you register a Cisco UCS domain, you configure policies for local or global resolution. The behavior that occurs when the Cisco UCS domain is registered or when that registration or configuration changes, depends upon several factors, including whether a domain group has been assigned or not.

                  The following table describes the policy resolution behavior you can expect for each type of policy.

                  Policies and Configuration Policy Source Behavior in Cisco UCS Manager on Registration with Cisco UCS Central Behavior in Cisco UCS Manager when Registration Changed
                  Cisco UCS Central Cisco UCS Manager

                  Domain Group Unassigned

                  Domain Group Assigned

                  Unassigned from Domain Group

                  Deregistered from Cisco UCS Central

                  Call Home

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  SNMP configuration

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  HTTP

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Telnet

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  CIM XML

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Management interfaces monitoring policy

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Power allocation policy

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Power policy (also known as the PSU policy)

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  SEL policy

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Authentication Domains

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  LDAP

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  LDAP provider groups and group maps

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  TACACS, including provider groups

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  RADIUS, including provider groups

                  N/A

                  Cisco UCS Manager only

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  SSH (Read-only)

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  DNS

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Time zone

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Web Sessions

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Fault

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Core Export

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Syslog

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Global Backup/Export Policy

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Default Authentication

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Remote

                  Retains last known policy state

                  Converted to a local policy

                  Console Authentication

                  Domain group root

                  Assigned domain group

                  Local

                  Can be local or remote

                  Retains last known policy state

                  Converted to a local policy

                  Roles

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Combine (Remote replacing Local)

                  Deletes remote policies

                  Converted to a local policy

                  Locales - Org Locales

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Combine (Remote replacing Local)

                  Deletes remote policies

                  Converted to a local policy

                  Trust Points

                  Domain group root

                  Assigned domain group

                  Local

                  Local/Combine (Remote replacing Local)

                  Deletes remote policies

                  Converted to a local policy

                  Firmware Download Policy

                  Domain group root

                  N/A

                  N/A

                  N/A

                  N/A

                  N/A

                  ID Soaking Policy

                  Domain group root

                  N/A

                  N/A

                  N/A

                  N/A

                  N/A

                  Locales - Domain Group Locales

                  Domain group root

                  N/A

                  N/A

                  N/A

                  N/A

                  N/A

                  Infrastructure Firmware Packs

                  N/A

                  Assigned domain group

                  Local

                  Local/Remote (if Remote exists)

                  Retains last known policy state

                  Converted to a local policy

                  Catalog

                  N/A

                  Assigned domain group

                  Local

                  Local/Remote (if Remote exists)

                  Retains last known policy state

                  Converted to a local policy

                  Maintenance Policy

                  Schedule

                  Host Firmware Packs

                  N/A

                  Assigned domain group

                  See Consequences of Service Profile Changes on Policy Resolution

                  See Consequences of Service Profile Changes on Policy Resolution

                  Deletes remote policies

                  Converted to a local policy

                  Maintenance Policy

                  Schedule

                  Host Firmware Packs

                  N/A

                  Assigned domain group

                  See Consequences of Service Profile Changes on Policy Resolution

                  See Consequences of Service Profile Changes on Policy Resolution

                  Deletes remote policies

                  Converted to a local policy

                  Maintenance Policy

                  Schedule

                  Host Firmware Packs

                  N/A

                  Assigned domain group

                  See Consequences of Service Profile Changes on Policy Resolution

                  See Consequences of Service Profile Changes on Policy Resolution

                  Deletes remote policies

                  Converted to a local policy

                  Consequences of Service Profile Changes on Policy Resolution

                  For certain policies, the policy resolution behavior is also affected by whether or not one or more service profiles that include that policy have been updated.

                  The following table describes the policy resolution behavior you can expect for those policies.

                  Policy Behavior in Cisco UCS Manager on Registration with Cisco UCS Central Domain Group Assigned after Registration with Cisco UCS Central

                  Domain Group Unassigned / Domain Group Assigned

                  Service Profile not Modified

                  Service Profile Modified

                   

                  Maintenance Policy

                  Note   

                  If you are using a global maintenance policy in a local service profile, all pending activities must be acknowledged on the Cisco UCS Central Pending Activities page.

                  Local

                  Local, but any "default" policies are updated on domain group assignment

                  Local/Remote (if resolved to "default" post registration)

                  Schedule

                  Local

                  Local, but any "default" policies are updated on domain group assignment

                  Local/Remote (if resolved to "default" post registration)

                  Host Firmware Packages

                  Local

                  Local, but any "default" policies are updated on domain group assignment

                  Local/Remote (if resolved to "default" post registration)