HP Integrity rx2800 System Management Homepage User Guide - Page 47

Configuring Trust Mode, Settings, Apply, Remove

Page 47 highlights

Configuring Trust Mode For HP-UX, the imported HP SMH certificates are stored in the /opt/hpsmh/certs directory. For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory. For Windows, the imported HP SIM certificates are stored in the systemdrive: \hp\hpsmh\certs directory. You must have administrative authority to access this directory. To trust by certificate: 1. Select Settings from the menu. 2. In the System Management Homepage box, click the Security link . 3. Click the Trust Mode link. 4. In the Secure Trust Modes box, click the Trust by Certificate radio button. Choosing this option sets up the HP SMH to accept Secure Task Executions and Single Sign On requests that are signed by a HP SIM with a Trusted Certificate. 5. Click Apply. To trust by name: 1. Select Settings from the menu. 2. In the System Management Homepage box, click the Security link. 3. Click the Trust Mode link. 4. In the Other Trust Modes box, click the Trust by Name radio button. 5. In the Server Certificate Name textbox, enter the Server Certificate Name. 6. Click Add. When you click Add, the Server Certificate Name is validated to see if it meets the following criteria: • Each HP SIM server's certificate name must be less than 64 characters • The following invalid characters are not included The Server Certificate Name is not already in the list If the validation test accepts the value, Server Certificate Name is added as a new line in the list table. You can add as many as five Server Certificate Names by following steps 5 and 6. If you enter more than five certificate names, you receive the alert No more names can be added. 7. Click Apply to save the configurations. Choosing this option sets up HP SMH to only accept Secure Task Executions and Single Sign On requests from HP SIM on servers with names listed. To remove a Server Certificate Name from the list, complete the following steps: 1. Select Settings from the menu. 2. In the System Management Homepage box, click the Security link. 3. Click the Trust Mode link. 4. In the Other Trust Modes box, find the Server Certificate Name to remove and click the check box beside that name. 5. Click Remove. 6. Click Apply. To trust all servers: 1. Select Settings from the menu. 2. In the System Management Homepage box, click the Security link. 3. Click the Trust Mode link. 4. In the Other Trust Modes box, click the Trust All button. 5. Click Apply. Choosing the trust all option sets HP SMH to accept Secure Task Execution and Single Sign On requests from any HP SIM server. System Management Homepage Box 47

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102

Configuring Trust Mode
For HP-UX, the imported HP SMH certificates are stored in the
/opt/hpsmh/certs
directory.
For Linux, the imported HP SMH certificates are stored in the
/opt/hp/hpsmh/certs
directory.
For Windows, the imported HP SIM certificates are stored in the
systemdrive:
\hp\hpsmh\certs
directory.
You must have administrative authority to access this directory.
To trust by certificate:
1.
Select
Settings
from the menu.
2.
In the
System Management Homepage
box, click the
Security
link .
3.
Click the
Trust Mode
link.
4.
In the
Secure Trust Modes
box, click the
Trust by Certificate
radio button.
Choosing this option sets up the HP SMH to accept
Secure Task Executions
and
Single Sign On
requests
that are signed by a HP SIM with a
Trusted Certificate
.
5.
Click
Apply
.
To trust by name:
1.
Select
Settings
from the menu.
2.
In the
System Management Homepage
box, click the
Security
link.
3.
Click the
Trust Mode
link.
4.
In the
Other Trust Modes
box, click the
Trust by Name
radio button.
5.
In the
Server Certificate Name
textbox, enter the Server Certificate Name.
6.
Click
Add
.
When you click
Add
, the
Server Certificate Name
is validated to see if it meets the following criteria:
Each HP SIM server's certificate name must be less than 64 characters
The following invalid characters are not included: ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , |
The Server Certificate Name is not already in the list
If the validation test accepts the value,
Server Certificate Name
is added as a new line in the list table.
You can add as many as five
Server Certificate Names
by following steps 5 and 6. If you enter more
than five certificate names, you receive the alert
No more names can be added
.
7.
Click
Apply
to save the configurations.
Choosing this option sets up HP SMH to only accept
Secure Task Executions
and
Single Sign On
requests
from HP SIM on servers with names listed.
To remove a Server Certificate Name from the list, complete the following steps:
1.
Select
Settings
from the menu.
2.
In the
System Management Homepage
box, click the
Security
link.
3.
Click the
Trust Mode
link.
4.
In the
Other Trust Modes
box, find the
Server Certificate Name
to remove and click the check box beside
that name.
5.
Click
Remove
.
6.
Click
Apply
.
To trust all servers:
1.
Select
Settings
from the menu.
2.
In the
System Management Homepage
box, click the
Security
link.
3.
Click the
Trust Mode
link.
4.
In the
Other Trust Modes
box, click the
Trust All
button.
5.
Click
Apply
.
Choosing the
trust all
option sets HP SMH to accept
Secure Task Execution
and
Single Sign On
requests
from any HP SIM server.
System Management Homepage Box
47