Home » HP Manuals » Desktops » HP BladeSystem bc2800 » Manual Viewer

HP BladeSystem bc2800 Administrator's Guide HP Session Allocation Manager (HP - Page 85

Setting Up Smart Card Login on the Access Device

View all HP BladeSystem bc2800 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 85 highlights

● Description-Search for incidents with the Description box containing the text entered. ● Time Frame-Narrow data to the dates entered. ● Asset Groups-Narrow data to asset groups selected. You have four operations you can perform: ● Save selected ● Save entire log ● Delete selected ● Delete entire log Setting Up Smart Card Login on the Access Device NOTE: RGS 5.1.3 or later is required when logging in using RGS with smart cards. Smart Card login does not work if RGS Single Sign-on is enabled. You must enable Easy Login on the RGS Sender and set the USB on the RGS Receiver to Remote and Local or Remote. Drivers for the smart card reader hardware are needed on the resource as well as on the access device. Before you attempt the following procedure for the HP SAM client, refer to this white paper to configure the smart card on the computing resource: Implementing ActivIdentity Smart Cards for Use with HP Compaq t5720 Thin Clients and HP Blade PCs at http://h20000.www2.hp.com/bc/docs/support/ SupportManual/c01153197/c01153197.pdf?jumpid=reg_R1002_USEN. You must successfully configure the smart card on the computing resource before attempting to configure it on the access device. Use the following steps to enable the HP SAM client to log in using a smart card. 1. Attach the smart card reader to the access device. 2. Install the smart card reader driver onto the access device. 3. Install the smart card cryptographic service provider (CSP) software onto the access device that supports your smart card solution. This software is required to read the contents of the smart card. 4. Install the HP SAM client software onto the access device. 5. If using the Internet Explorer-based client, configure the client on the HP SAM administrator console at System Settings > Web client > Smartcard cryptographic service providers (CSP). For more information, see Web client on page 70. NOTE: If you set the client to read the UPN or e-mail field from the user's certificate, whatever it reads from either of those fields must match the UPN name of the user. 6. If using the XPe Client, specify the CSP string in the .SAM file. Refer to Smart Card Settings on page 41. ENWW Setting Up Smart Card Login on the Access Device 77

Section	Page
Introduction	9
What's New in This Release	10
Resource Reservations (AKA Access Restrictions)	10
Authenticate Before Allocation	11
Switch To, Move, Minimize, and Minimize All Functions on HP SAM Connection Bar	12
Support for RGS Senders Running on a Non-default Port	12
Logoff Scheduler	12
Key Features	12
Overview	13
How HP SAM Works	14
HP SAM Software Components	16
Remote Graphics Software (RGS)	16
Common Tasks	17
Setting up HP SAM	17
Setting up a User with a Dynamic Resource	17
Setting up a User with Static (Dedicated) Resources	18
Configuring a Monitor Layout for a User	19
Requirements	21
HP SAM Hardware and Software Requirements	21
Architectural Considerations and Best Practices for Setting up an HP SAM Environment	21
Server Sizing	21
SQL Database Considerations	22
Number of HP SAM Servers	23
Regionalization of Data Centers	23
Multiple SQL Databases	24
Domain Environment Requirements for HP SAM	24
HP SAM Web and SQL Server Requirements	24
HP SAM Web Server Hardware Requirements	24
HP SAM Web Server Software Requirements	24
HP SAM SQL Database Server Hardware Requirements	25
HP SAM SQL Database Server Software Requirements	29
HP SAM Registration Service Requirements	29
Access Device Requirements	30
Thin Client	30
Mobile Thin Client	30
Desktop or Notebook PC	30
Blade Workstation Clients	31
Personal Workstation Clients	31
Other requirements	32
Create a Service Account	32
Obtain Administrative Rights	32
Change the Firewall	32
Active Directory	32
Installation	33
Order of Installation	33
New Installation	33
Upgrade	33
Install the HP SAM Web Server and SQL Software	35
Grant Users HP SAM Administrator Access	37
Configure HP SAM System Settings	37
Configure Secure Socket Layer (SSL)	37
Install and Validate the HP SAM Registration Service Software	37
Install the HP SAM Registration Service	38
Create the HP SAM Registration Service Configuration File	39
[WebServerList]	39
[RolesList]	40
[AssetGroupList]	40
ServicePort	40
DnsDomain	40
Start/Restart the HP SAM Registration Service	41
Test the HP SAM Registration Service	41
Install and Validate the HP SAM Client Software	41
Internet Explorer-Based Client	42
HP SAM ActiveX Controls	43
Windows XPe-Based Client	43
Customization Steps	44
Linux-Based Client	44
HP Blade Workstation Client Series	44
Customization Steps	44
HP ThinPro GT Client for the HP gt7725 Thin Client	45
Red Hat Enterprise Linux (RHEL) Client	46
Customization Steps	46
Configuration Settings	46
Options	46
Smart Card Settings	49
User Interface Customization Settings	50
Policy Entries	52
Global and Local Client Configuration Files	55
Legal Banner	56
Deploy the HP SAM Registration Service to All HP SAM Computing Resources	57
Deploy HP SAM Client Software to All HP SAM Access Devices	57
Administration	59
Log In	59
General Navigation and User Interface Design	59
Display More (or Fewer) Items Per Page	59
Move Columns	59
Sort Result List	59
Select More Than One Item	59
Managing the HP SAM Administrator Access List	60
Add Individual Users to the HP SAM Administrator Group	60
Add Security Groups or Organizational Units to the HP SAM Administrator Group	60
Remove Users or Groups From the HP SAM Administrator Group	61
HP SAM Administrator Console Tabs	62
Home Tab	62
Users and Roles Tab	62
Manage Resource Roles	62
Manage Asset Groups	63
Manage Administrative Permissions	64
Manage Users	65
Operation	65
To Assign Attributes	65
To Assign Resources	66
To Assign Resources Manually	66
To Assign Resources Automatically from Template User	67
To Assign Resources Automatically from Role	68
To Assign and Configure a Monitor Layout for the User	68
To Change the Monitor Layout Configuration for the User	68
To Delete a Monitor Layout ID for the User	69
To Delete a User	69
Add New Users	69
To Grant Access to Individual Users	69
To Grant Access to Security Groups or Organization Units	70
Resources tab	70
Manage Resources	70
Auto Refresh Feature	71
View Details	71
Operations	71
Operations	71
Customize View	72
Manage Access Devices	72
To Add an Access Device Manually	72
To Change an Access Device	72
To Delete an Access Device	73
Manage Monitor Layout	73
To Create a Monitor Layout	73
To Modify a Monitor Layout	73
To Delete a Monitor Layout	73
Manage Data Centers	73
To Create a Data Center	74
To Change a Data Center	74
To Add Enclosures into a Data Center	74
To Delete Enclosures from a Data Center	74
To Delete a Data Center	74
Policies Tab	74
Create or Update a Policy	76
View Effective Policy	76
System Settings Tab	77
General	77
Web client	78
Active Directory	79
Auto Schedules	80
Resource Synchronization Scheduler	80
Audit Log Clean Up Scheduler	80
Logoff User from Resource Scheduler	81
Licensing	81
Reports Tab	81
Resource Capacity Consumption Report	82
Filters	82
Display Options	82
Output Report	82
Resource Capacity Consumption Trend Report	82
Filters	83
Display Options	83
Output Report	83
Resource Utilization Report	84
Filters	84
Display Options	84
Output Report	84
Log Tab	84
Setting Up Smart Card Login on the Access Device	85
Configuring Session Time Limits for Remote Sessions	87
Firewall Rules	89
Web Server	89
Clients	89
Resources	90
SQL Server	90
Frequently Asked Questions	91
Registration Service Error Codes	95
Glossary	98

Match case Limit results 1 per page

●

Description

—Search for incidents with the

Description

box containing the text entered.

●

Time Frame

—Narrow data to the dates entered.

●

Asset Groups

—Narrow data to asset groups selected.

You have four operations you can perform:

●

Save selected

●

Save entire log

●

Delete selected

●

Delete entire log

Setting Up Smart Card Login on the Access Device

NOTE:

RGS 5.1.3 or later is required when logging in using RGS with smart cards. Smart Card log-

in does not work if RGS Single Sign-on is enabled. You must enable Easy Login on the RGS Sender

and set the USB on the RGS Receiver to

Remote and Local

Remote

. Drivers for the smart card

reader hardware are needed on the resource as well as on the access device.

Before you attempt the following procedure for the HP SAM client, refer to this white paper to configure

the smart card on the computing resource:

Implementing ActivIdentity Smart Cards for Use with HP

Compaq t5720 Thin Clients and HP Blade PCs

http://h20000.www2.hp.com/

bc/docs/support/

SupportManual/c01153197/c01153197.pdf?jumpid=reg_R1002_USEN

You must successfully configure the smart card on the computing resource before attempting to

configure it on the access device.

Use the following steps to enable the HP SAM client to log in using a smart card.

Attach the smart card reader to the access device.

Install the smart card reader driver onto the access device.

Install the smart card cryptographic service provider (CSP) software onto the access device that

supports your smart card solution. This software is required to read the contents of the smart card.

Install the HP SAM client software onto the access device.

If using the Internet Explorer-based client, configure the client on the HP SAM administrator console

System Settings

Web client

Smartcard cryptographic service providers (CSP)

. For

more information, see

Web client

on page

NOTE:

If you set the client to read the UPN or e-mail field from the user's certificate, whatever it

reads from either of those fields must match the UPN name of the user.

If using the XPe Client, specify the CSP string in the .SAM file. Refer to

Smart Card Settings

on page

ENWW

Setting Up Smart Card Login on the Access Device