Computer system, virtual computer system, computer activation management method and virtual computer activation management method

A virtual computer system has a plurality of computers for executing a program and a storage system connected to the computers via a network. A virtualization mechanism in a first computer of the plurality of computers generates at least one virtual computer on the first computer. The virtualization mechanism in the first computer executes at least one of a first judgment and a second judgment when a request for activating a first virtual computer of the at least one virtual computer is received, the first judgment being for judging whether or not the activation of the first virtual computer is prohibited based on first information stored in a memory of the virtualization mechanism, and the second judgment being for judging whether or not an identifier included in a logic I/O adapter device assigned to the first virtual computer is invalid based on second information stored in the memory of the virtualization mechanism. The activation of the first virtual computer is permitted or prohibited based on the executed judgment in response to the request for activating the first virtual computer.

BACKGROUND OF THE INVENTION

This invention relates to a method of managing the activation or booting of a computer system and a virtual computer system, or in particular, to a technique for suppressing the activation of the computer.

The virtualization technique for concentrating a plurality of jobs on a single computer improves the utilization efficiency of the hardware resources such as the processor, the memory and the input and output units on the one hand and can change the resource assignment in accordance with the processing amount on the other hand.

A configuration in which a plurality of computers are activated by reading the operating system (OS) from the same storage volume, on the other hand, can change the computer for executing a job. The configuration of a storage unit that can be shared by a plurality of computers is called a storage area network (SAN), in which the storage unit and the computers are connected through a fiber channel switch or a storage switch.

In the storage unit that can be shared, the storage volume can be accessed or updated from all the computers connected, and therefore, the problem of security has been posed. To overcome this problem, the storage unit sets a specified computer in correspondence with the storage volume in the storage unit using a world wide name (WWN) as unique device identification information stored in a host bus adapter (HBA) making up an I/O adapter of the fiber channel (FC) held by the computer.

This function of setting in correspondence is called a host group, and by use of the host group, the right of access to the storage volume is granted only to a computer having the HBA with the WWN thereof registered in the storage volume.

In the case where a plurality of computers are prepared to execute a job, either the WWN of the computer executing the job is registered anew in the host group each time the computer is switched, or the WWNs of the plurality of the computers are registered in the host group beforehand. The WWN is registered anew each time of switching the computer at the sacrifice of a bothersome operation.

The advance registration of the WWNs of a plurality of computers in the host group, on the other hand, makes it possible for the plurality of the computers to access the same storage volume, and therefore, fails to solve the security problem.

In view of this, U.S. Pat. No. 7,321,927 discloses a management server which simplifies the operation by eliminating the need of changing the setting in the host group. According to this method, the WWN is transferred to that of the new computer to which the computer executing the job is changed. A plurality of WWNs assignable to a plurality of computers and the storage area identification information are stored in correspondence with each other in the management server in advance, and a WWN and the corresponding storage area identification information are sent from the management server to the computer executing the job. The computer executing the job sets the WWN and is booted from the area indicated by the storage area identification information.

In the case where these computers are virtual computers, a virtualization mechanism defines a virtual I/O adapter to store unique virtual device identification information. U.S. Published Application No. 2006/0195617 discloses a system in which the unique virtual device identification information is set in the I/O adapter of the virtual computer using the technique by which a plurality of device identification information can be registered in the I/O adapter of a computer. With this system, the WWN registered in the host group of the storage unit can be rendered to coincide with the WWN of the virtual I/O adapter of the virtual computer, and therefore, only a specified virtual computer can access the storage volume.

Conventionally, in the case where the computer executing the job is switched from a virtual computer to a (physical) computer or to a virtual computer on a different computer, the registration change or the multiple registration in the host group is avoided by transferring the device identification information set in the I/O adapter to that of the computer to which the computer executing the job is switched.

In this system, assume that it becomes impossible to use the management server, the operation is interfered with by other than the management server, or an application occurs in which the same device identification information would be originally set in a plurality of computers. In such a case, a plurality of computers may come to have the same device identification information.

Once a plurality of computers having the same device identification information are activated, the problem is posed that the access control mechanism of the storage unit fails to work effectively, with the result that a plurality of computers can undesirably access the same storage volume. Also, in the case where the I/O adapter is a network interface, a communication error may be caused if a plurality of computers have the same network device identification information such as a MAC address.

SUMMARY OF THE INVENTION

Accordingly, it is an object of this invention to provide a computer activation management method in which even in the case where a virtual computer or a computer with the device identification information changeable to switch the job-execution computer is triggered at a timing not intended by the user, the computer can be controlled not to be activated.

The above and other objects, features and advantages will be made apparent by the detailed description taken in conjunction with the accompanying drawings.

A typical computer system disclosed by this invention is briefly described below.

Specifically, a typical computer system according to the invention includes an I/O adapter for storing information indicating whether setting the activation of the computer is valid or invalid, and an activation management unit for preventing the computer from being switched on in the case where information contained in the computer switch-on command received is judged as invalid based on the information stored in the I/O adapter.

Also, a computer system according to the invention comprises a virtualization mechanism including a device identification management table for storing a logic I/O adapter and device identification information assignable to a virtual computer in correspondence with each other, and a virtual computer activation unit for checking the device identification information corresponding to the logic I/O adapter assigned to the virtual computer based on the device identification management table and suppressing the activation of the virtual computer in the case where the device identification information has a value indicating the activation suppression.

According to a first aspect of the invention, there is provided a computer activation management method for a computer system comprising a plurality of computers for executing a program and a storage system connected to the computers through a network, wherein the computers each include an I/O adapter connected to the network and an activation management unit for controlling the power on/off of the computers, wherein the I/O adapter stores information as to whether setting the activation of each computer is valid or invalid, and wherein the activation management unit, upon reception of a switch-on command for the computer, prevents the computer from being switched on in the case where the information contained in the command is judged as invalid based on the information stored in the I/O adapter.

According to a second aspect of the invention, there is provided a virtual computer activation management method for a virtual computer system comprising a plurality of computers for executing a program, a storage system connected to the computers through a network and a virtualization mechanism built in each computer to generate a virtual computer on the computer, wherein the virtualization mechanism stores the correspondence between the logic I/O adapter and device identification information assignable to the virtual computer, checks the device identification information corresponding to the logic I/O adapter assigned to the virtual computer at the time of activating the virtual computer, and suppresses the activation of the virtual computer in the case where the device identification information has a value indicative of the activation suppression.

DETAILED DESCRIPTION OF THE INVENTION

The advantage of a typical embodiment of the invention disclosed by the present application is briefly explained below.

Specifically, the advantage of a typical embodiment of the invention is that the virtual computer or the computer can be controlled not to be activated even in the case where the computer is triggered at a timing not intended by the user.

Embodiments of the invention are described in detail below with reference to the drawings. Incidentally, in all the drawings for explaining the embodiments, the same component members are basically designated by the same reference numerals, respectively, and not described repeatedly.

First Embodiment

With reference toFIG. 1, the configuration of the computer system according to a first embodiment of the invention is explained.FIG. 1is a diagram showing the configuration of the computer system according to the first embodiment of the invention.

InFIG. 1, the computer system is configured of a plurality of computers100, a storage system160, a storage switch140for connecting the plurality of computers100and the storage system160and a network switch150. Also, the network switch150is connected with a terminal190for various settings.

The plurality of the computers100are each connected to the storage switch140through a host bus adapter (HBA)110of the fiber channel, and also to the network switch150through a network interface card (NIC)120.

Also, the storage switch140and the network switch150are connected to the storage system160through an HBA161and a NIC162, respectively, and thus permit access from the plurality of the computers100.

Each computer100has built therein a BMC (baseboard management controller)130and, therefore, the power supply of the hardware can be controlled through the network.

A disk management unit170in the storage system160has the function of setting the host group to limit the computers100accessible to disk volumes180. The disk management unit170also relates the HBA110mounted on each computer100to the disk volumes180, and stores the relation as host management information175. The host management information175is set from the terminal190.

The computers100can also use the blades of a blade system. One of the blades may be assigned to the terminal190. Also, the plurality of the computers100may be installed at mutually distant places.

Next, the detailed configuration of each of the computers included in the computer system according to the first embodiment is explained with reference toFIG. 2.FIG. 2is a diagram showing a detailed configuration of each computer of the computer system according to the first embodiment of the invention.

The computer100is configured of a display unit310for displaying the computer status and a program execution result, an input unit320for supplying data to the program, a memory330for holding the job processing program and the data, a CPU340for executing the program, an HBA110, a NIC120and a BMC130.

The HBA110holds a unique identifier called WWN required to specify to the other party of the fiber channel communication. The BMC130, on the other hand, mainly monitors and controls the hardware of the computer100. The BMC130has an activation management unit135and can switch on/off the power of the computer100at the request of the terminal190.

Next, the operation of the activation management unit of the computer system according to the first embodiment of the invention is explained with reference toFIG. 3.FIG. 3is a flowchart showing the operation of the activation management unit of the computer system according to the first embodiment of the invention.

The computer100is activated by the activation management unit135of the BMC130.

First, in step1210, the request to switch on the power of the computer100is accepted. Incidentally, the BMC135can be activated with another power supply before activating the computer100.

Then, the definition information for an invalid WWN is acquired in step1215.

The definition information of an invalid WWN acquired in step1215is, for example, a value set beforehand in the activation management unit135in response to an external command or by an external operation, a value stored in the BMC130and changeable later through the interface, or a value not held in the BMC130but input from an external computer at the time of executing the process of step1215.

Next, the process proceeds to step1220, in which the WWN of the HBA110is read and checked as to whether it coincides with the definition information of an invalid WWN acquired in step1215.

When step1220judges that an invalid WWN is registered, step1230generates error information indicating that the computer100cannot be activated by switching on power.

Upon judgment in step1220that an invalid WWN is not registered, on the other hand, the computer100is switched on and activated in step1240.

Finally, in step1250, the processing result such as information indicating the successful computer activation or the error information prohibiting the switch-on power is output to the source of activation.

As described above, according to this embodiment, the activation, if requested, of the computer100can be suppressed by the BMC130. Even in the case where the same I/O adapter identifier is set on different computers100, the registration of an invalid WWN in at least one HBA110can suppress the activation of the computer having the particular HBA110.

As described above, according to this embodiment, assume that the same I/O adapter identifier is set on different computers or the LPARs of different computers. Even in that case, by registering an invalid WWN on at least one HBA110, the activation of the computer having the particular HBA110is suppressed.

This process makes it possible to control the computer not to be activated even in the case where the computer activation is triggered at a timing not intended by the user.

Second Embodiment

The second embodiment represents a virtual computer system equivalent to the first embodiment in which the computer100further includes a virtualization mechanism and which is operated with the LPAR under the control of the virtualization mechanism to perform the computer activation management.

With reference toFIG. 4, the configuration of each computer of the virtual computer system according to the second embodiment of the invention is explained.FIG. 4is a diagram showing the configuration of each computer of the virtual computer system according to the second embodiment of the invention, which is similar to the configuration of the computer system according to the first embodiment shown inFIG. 1.

InFIG. 4, the computer100, as compared with the computer100shown inFIG. 2, includes a virtualization mechanism220in addition to an HBA110, a NIC120, a BMC130, and a display unit310, an input unit320, a memory330and a CPU340not shown. In the virtualization mechanism220, the CPU340and the memory330of one physical computer are divided and assigned to the LPARs (logical partitions)200. The LPARs200make up a virtual computer.

As a result, the single computer100presents the appearance of a plurality of logic computers LPAR200. Each LPAR200, like the computer100, includes a virtual HBA210and a virtual NIC215. A unique WWN is assigned to the port of the virtual HBA210.

Also, a WWN management unit115of the HBA110of the computer100has a plurality of port identification information (N port IDs), and the WWN of each virtual HBA210can be registered in the virtual port of the HBA110.

The virtualization mechanism220includes a WWN management unit230, a device management unit240, an LPAR management unit250, an LPAR activation unit260and a memory270.

The memory270stores the computer identification information235, a WWN management table400making up a device identification management table, a device management table500, virtualization mechanism identification information255and an LPAR management table700. The virtualization mechanism220, to which the operation request is input from the terminal190, operates the LPAR200using the data stored in the memory270and outputs the operation result to the terminal190.

Next, the commands and the tables used in the virtual computer system according to the second embodiment of the invention are explained with reference toFIGS. 5 to 8.FIGS. 5 to 8are diagrams showing the commands and the tables used in the virtual computer system according to the second embodiment of the invention.FIG. 5is a diagram showing the command formats,FIG. 6a diagram showing the detail of the WWN management table,FIG. 7a diagram showing the detail of the device management table, andFIG. 8a diagram showing the detail of the LPAR management table.

InFIG. 5, the command600input to the virtualization mechanism220has a format including a command610, a request code620indicating the detailed request content of the command, and a parameter630required for the command. Two or more parameters630may be included depending on the command610and the request code620.

As shown inFIG. 5, for example, the command610includes a WWN registration command601and LPAR management commands602to604. The request code620, on the other hand, includes an invalid/reset/update code, a change attribute, a MAC element and the activation suppression. The information following the request code makes up the parameter630.

InFIG. 6, the WWN management table400stores a list of the virtual HBAs210assignable to the LPARs200.

A column410designates the slot information indicating the mounting position of the HBA110. In the case where the computer is a blade, the slot mounting sequence information for each blade may be used as the slot information.

The column420designates the port information held by each HBA110. The column430designates a common number whereby one port is shared by a plurality of LPARs200. In the case ofFIG. 6, the HBA110can hold VFC1 to VFC4, and therefore, four LPARs200can share each port.

The column440designates the WWN assigned to the virtual HBA210indicated by the columns410,420and430. Once the WWN of the column440is changed, the virtual HBA210of the LPAR200to which the particular port is assigned uses the WWN after the change. The column450stores the LPAR information of the LPAR200with the port of the virtual HBA210assigned to the LPAR200.

InFIG. 7, the device management table500stores the information on the I/O adapter including the virtual HBA210and the virtual NIC215assigned to the LPAR200.

The column510designates the identification information of the LPAR200. The column520designates the slot information of the I/O adapter used by the LPAR200. The column530designates the port information of the I/O adapter used by the LPAR.

The column540designates the management number. In the case where the I/O adapter is the virtual NIC (VNIC)215, the management number is a unique VNIC number in the LPAR200. In the case where the I/O adapter is the virtual HBA210, on the other hand, the management number is a common number used in the WWN management table400.

The column550designates the information indicating whether the I/O adapter is the virtual NIC215or the virtual HBA210. In the device management table500, the row can be added at the time of assigning the I/O adapter to the LPAR200, or the row can be deleted or the contents of registration changed at the time of canceling the assignment of the I/O adapter. The column560designates the adapter type.

Once the virtual HBA210is assigned to the LPAR200, the identification information of the LPAR200is stored in the column450of the WWN management table400. In the case where the assignment is canceled, on the other hand, the information stored in the column450is deleted.

The job processing program executed by the LPAR200uses the WWN as the identification information of the virtual HBA210. The WWN thus used is designated in the column440in the row corresponding to the virtual HBA210assigned to the LPAR200in the WWN management table400. In the case where the virtualization mechanisms220of different computers100register the same WWN in the column440of the WN management table, respectively, LPARs200of the same WWN configuration can be constructed. Between the LPARs200of this same WWN configuration, the job processing program can be relocated without changing the host group setting of the storage system160.

InFIG. 8, the LPAR management table700stores the LPAR operation and the definition generated at the time of initial activation of the virtualization mechanism220and required for managing each LPAR.

The column710designates information for identifying the LPAR200. The columns720and730store information used to generate the MAC address for identifying the virtual NIC215. Specifically, the column720stores information as to whether the value of the virtualization mechanism identification information255is used or not, or if not used, what value is used to generate the unique MAC address in the computer system.

Similarly, the column730stores information as to whether the identification information of the LPAR200including the virtual NIC215is used or not, or if not used, what value is used as an element to generate the MAC address. The column740stores information as to whether the change in the definition information of the LPAR200is prohibited or not. An example of the definition information of the LPAR is the information on the I/O adapter assigned to the LPAR managed in the table500.

The column750designates information as to whether the LPAR200can be activated or not. Even in the case where an activation request is input to the LPAR with the activation suppression in the on state, the virtualization mechanism220controls the particular LPAR not to be activated. The column760, on the other hand, designates information as to whether the LPAR200is in activation or not.

Next, the process executed by the WWN management unit of the computers of the virtual computer system according to the second embodiment of the invention is explained.FIG. 9is a flowchart showing the process executed by the WWN management unit of the computers of the virtual computer system according to the second embodiment of the invention. This flowchart shows the process of registering a list of the WWNs of the virtual HBA210managed by the virtualization mechanism220.

First, step810accepts a request for updating the WWN management table400. The request thus accepted is a WWN registration command in the form designated by numeral601inFIG. 5. The request code620is indicative of an invalid WWN registration, the restoration of WWN to the initial value or a change in WWN. The parameter630includes the slot number, the port number and the common number. In the case where the request code indicates a change in WWN, the WWN value after change is received also with the parameter630.

Then, step820checks whether the WWN management table400is stored in the memory270or not. Upon judgment in step820that the WWN management table400is not so stored, step825secures an area for the WWN management table400in the memory270, and based on the number of HBAs110mounted, generates the rows in the number equal to the total number of sets of the slot number, the port number and the common number. Also, step827stores the initial WWN value in the column440on each row.

The initial WWN value is, for example, a unique value of 64 bits generated using the slot number, the port number, the common number and the computer identification information235. The computer identification information235can be the identifier of the blade with the computer100mounted thereon and the identifier of the chassis accommodating the blade.

Upon judgment in step820that the WWN management table400is stored in the memory270, on the other hand, step830judges whether the request code620indicates an invalid WWN setting request. Upon judgment in step830that the request code620is indicative of an invalid WWN setting, step835stores the invalid WWN information in the column440in the row that can be specified from the parameter630indicating the slot number, the port number and the common number in the WWN management table400. Then, the process proceeds to step880.

The invalid WWN information is, for example, the 64-bit information such as the hexadecimal value 2000000000000000 defined in advance by the virtualization mechanism220.

In the case where the judgment in step830is NO, the process proceeds to step840. Step840judges whether the request code620indicates the reset request to restore the WWN to the initial value, and upon judgment in step840that the request code620indicates the reset request, step845generates the initial WWN value from the computer identification information235and the value of the parameter630indicating the slot number, the port number and the common number.

In the case where the judgment in step840is NO, step850judges whether the request code620is indicative of the WWN update request or not. Upon judgment in step850that the request code620is indicative of the WWN update request, the process proceeds to step860, while in the case where the judgment in step850is NO, on the other hand, the process proceeds to step880.

Step860judges whether the initial WWN value generated in step845or the changed WWN received with the parameter630is registered on other than the corresponding row in the WWN management table400or not. Upon judgment in step860that a WWN already registered exists, step865generates the error information indicating that the changed WWN doubles with the existing WWN. Upon judgment in step860that there is no WWN registered, on the other hand, step870changes the column440on the corresponding row to the initial WWN value or the changed WWN received with the parameter630.

Finally, step880sends to the requester the processing result indicating the failure of registration in the WWN management table400, the WWN information before or after the change or no registration.

Incidentally, before changing the WWN in step870, the column740of the LPAR management table700may be checked and in the case where the WWN is associated with the virtual HBA210of the LPAR with the definition change prohibition registered, the change of the WWN may be prohibited.

As described above, the WWN used by the virtual HBA210can be changed in the virtualization mechanism220. When changed to the WWN thus far used in the LPAR200of a different computer100, therefore, the disk volume180thus far used in the LPAR200of the different computer100can be accessed from the LPAR200with the changed WWN without changing the host management information175.

Next, the process executed in the LPAR management unit of the computers of the virtual computer system according to the second embodiment of the invention is explained with reference toFIGS. 10 and 11.FIG. 10is a flowchart showing the process executed in the LPAR management unit of the computers of the virtual computer system according to the second embodiment of the invention, andFIG. 11a flowchart showing the detailed process of changing the MAC element of the computers of the virtual computer system according to the second embodiment of the invention.

First, step1010accepts the update request for the LPAR management table700. The request thus accepted is the LPAR management command in a form designated by numeral602,603or604inFIG. 5.

In the case where the request code620represents a request to change the definition change attribute, the form602is used and the parameter630assumes a value indicating the LPAR information and whether the definition change is prohibited or the prohibition thereof is canceled. In the case where the request code620represents a request to change the MAC element, on the other hand, the form603is used and the parameter630assumes a value indicating the LPAR information and whether the MAC element is reset to the initial value or changed, and if changed, a value including two values, i.e., a value used as the information on the virtualization mechanism and a value of the LPAR information used as the MAC element. In the case where the request code620represents a request to set the activation suppression of the LPAR, the form604is used and the parameter assumes a value indicating the LPAR information and whether the activation suppression is turned on or off.

Then, step1020judges whether the request code620is indicative of a request to register the definition change attribute or not. Upon judgment in step1020that the request code620is indicative of the request to register the definition change attribute, step1025stores the information on the prohibition or the prohibition cancellation of the parameter630in the column740in the row corresponding to the LPAR information of the parameter630, and the process proceeds to step1080.

Upon judgment in step1020that the request code620is not indicative of a request to register the definition change attribute, step1030judges whether the definition change prohibition in the column740in the row corresponding to the LPAR information of the parameter630is registered or not. Upon judgment in step1030that the value indicating the change prohibition is stored, step1035generates the definition change prohibition error information indicating the command execution result of the definition change prohibited, and the process proceeds to step1080.

Upon judgment in step1030that the definition change is possible, the process proceeds to step1040to judge whether the request code620is indicative of the MAC element change request or not. Upon judgment in step1080that the request code620is indicative of the MAC element change request, the process proceeds to step1045.

Now, the process of step1045is described in detail with reference to the flowchart ofFIG. 11.

First, in the MAC address element change process of step1045, step910judges whether the parameter630contains a value indicative of resetting the MAC address generation element, and upon judgment in step910that the parameter630contains a value indicative of resetting the MAC address generation element, step915provisionally generates the MAC element after resetting. This MAC element is the value stored in the columns720and730at the time of generating the LPAR management table700initially, and includes both a value indicating the use of the value of the virtualization mechanism identification information255and a value indicated by the LPAR information designated by the parameter630.

Upon judgment in step910that the parameter630contains a value indicative of not resetting but changing the MAC address generation element, on the other hand, the process proceeds to step920to acquire the values of the columns720and730corresponding to the LPAR information designated by the parameter630.

Next, step930judges whether the MAC element after resetting or the value of the element LPAR and the virtualization mechanism identification information delivered with the parameter630is already stored in another LPAR not in the row of the particular element LPAR.

Upon judgment in step930that the value of the element LPAR is already registered, step935generates the error information that the MAC element after change doubles as another LPAR, and the process proceeds to step960.

Upon judgment in step930that the value of the element LPAR is not registered, on the other hand, step940changes the columns720and730in the particular row to a designated value, and the process proceeds to step960.

Finally, step960sends, to step1080inFIG. 10, the error information or the information indicating that the MAC element is successfully registered.

In the case where step1040judges that the request code620is not indicative of the MAC element change request, on the other hand, the process proceeds to step1050. Step1050judges whether the request code620is indicative of the request to register the LPAR activation suppression attribute or not. Upon judgment in step1050that the request code620is indicative of the request to register the LPAR activation suppression attribute, the process proceeds to step1060. Upon judgment in step1050that the request code620is not indicative of the request to register the LPAR activation suppression attribute, on the other hand, the process proceeds to step1080.

Step1060judges whether the column760in the row corresponding to the LPAR information delivered with the parameter630assumes a value indicating the in-activation state. Upon judgment in step1060that the particular column assume a value indicating the in-activation state, step1065generates change error information due to the in-activation state of the LPAR.

In the case where step1060judges that LPAR is not in activation, on the other hand, the process proceeds to step1070, and the on or off state of the activation suppression attribute delivered with the parameter630is registered in the column750.

Finally, the information indicating the successful registration in the LPAR management table700or the error information is output to the command requester in step1080.

The job processing program executed by the LPAR200may use a virtual MAC address as the identification information of the virtual NIC215. The virtual mechanism220can change the MAC element used to generate the value of the MAC address used by the virtual NIC215.

Once the MAC element is changed to the one thus far used by the LPAR200of a different computer100, network communication similar to the LPAR200of the different computer100becomes possible. Specifically, the job processing program can be relocated between the LPARs200without changing the communication setting of the job processing program or the device management table500.

Next, the process executed by the LPAR activation unit of the computers of the virtual computer system according to the second embodiment of the invention is explained with reference toFIG. 12.FIG. 12is a flowchart showing the process executed by the LPAR activation unit of the computers of the virtual computer system according to the second embodiment of the invention.

First, the LPAR activation request is accepted in step1110.

Then, step1120judges from the LPAR management table700whether the column760in the row corresponding to the LPAR of which the activation is requested assumes a value indicating the in-activation state. Upon judgment in step1120that the LPAR is not in activation, the process proceeds to step1130, while upon judgment in step1120that the LPAR is in activation, on the other hand, the process proceeds to step1160.

Step1130judges from the LPAR management table700whether the column750in the row corresponding to the LPAR of which the activation is requested assumes the on-state value indicating that the activation of the LPAR is suppressed.

Upon judgment in step1130that the column750is not in the on state, the process proceeds to step1140, while upon judgment in step1130that the column is in the on state, on the other hand, the process proceeds to step1160.

Step1140judges whether an LPAR is assigned the virtual HBA210with an invalid WWN registered therein. This judgment is made by determining, using the WWN management table400, whether the value stored in the column440coincides with an invalid WWN for all the rows for which the identifier of the LPAR to be activated is registered in the column450.

Upon judgment in step1140that an invalid WWN is registered, step1160generates the error information that the LPAR cannot be activated.

Upon judgment in step1140that an invalid WWN is not registered, on the other hand, the LPAR is activated in step1150. In the process, the value indicating that the LPAR is in activation is registered in the column760in the row of the corresponding LPAR of the LPAR management table700. Further, the information for identifying the I/O adapter is stored in the column560of the device management table500.

In the case where the device type of the column550is NIC, a MAC address generated by combining the MAC elements of the columns720,730of the LPAR management table700with the value of the column540of the device management table500is used as the identification information. In the case where the device type of the column550is HBA, on the other hand, the WWN stored in the column440of the WWN management table400is used.

Finally, in step1170, the processing result such as the information indicating that the LPAR is successfully activated or the error information that the LPAR has failed to be activated is output to the requester.

As described above, according to this embodiment, the virtualization mechanism220can prepare an LPAR of which the activation is suppressed against an activation request. Even in the case where the same I/O adapter identifier is set on the LPARs of different computers, therefore, the simultaneous activation of the plurality of these LPARs which otherwise might be caused by a careless LPAR operation can be suppressed.

By executing the process as described above, the virtual computer, if triggered at a timing not intended by the user, can be controlled not to be activated.

The embodiments of the invention achieved by the present inventor are specifically described above. Nevertheless, this invention is not limited to such embodiments, and can of course be variously modified without departing from the spirit of the invention.

The present invention relating to the computer activation management method for the computer system and the virtual computer system is widely applicable to systems for controlling by suppression of the activation of a computer and a virtual computer.