HP Integrity rx5670 HP System Management Homepage Installation Guide - Page 41

Certificate Files, Cancel, IP Binding, Trust By Name, Trust by Certificate, Trusted Server Name

Get HP Integrity rx5670 PDF manuals and user guides View all HP Integrity rx5670 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 41 highlights

3. Click Add. The certificate appears under Certificate Files. You can click Save to save your changes up to this point or click Cancel to discard the changes and close the wizard. 4. Click Next. The IP Binding page appears. • Trust by Name Sets HP SMH to accept certain configuration changes only from servers with the HP SIM certificate names designated in the Trust By Name field. The Trust By Name option is easy to configure. For example, you might use the Trust By Name option if you have a secure network with two separate groups of administrators in two separate divisions. This option prevents one group from installing software to the wrong system. This option verifies only the HP SIM server certificate name submitted. CAUTION: HP strongly recommends using the Trust by Certificate option because the other options are less secure. The server name option must meet the following criteria: • Each server certificate name must be less than 64 characters. • Special characters must not be included as part of the server certificate name: ~ ' To trust by name: 1. Select Trust by Name, and click Next. 2. In the Trusted Server Name field, enter the HP SIM server certificate name to be trusted. 3. Click Add. The trusted HP SIM server certificate name appears under the Trusted Servers list. You can click Save to save your changes up to this point or click Cancel to discard the changes and close the wizard. 4. Click Next. The IP Binding page appears. • Trust All Sets HP SMH to accept certain changes from any server. CAUTION: HP strongly recommends using the Trust by Certificate option because the other options are less secure. To trust all servers: 1. Select Trust All. You can click Save to save your changes or click Cancel to discard the changes and close the wizard. 2. Click Next. The IP Binding page appears. 9. IP Binding specifies from which IP addresses HP SMH accepts requests and provides control over which nets and subnets requests are processed. Administrators can configure HP SMH to bind only to addresses specified in the IP Binding page. You can define a maximum of five subnet IP addresses and netmasks. An IP address on the server is bound if it matches one of the entered IP Binding addresses after the mask is applied. NOTE: HP SMH always binds to 127.0.0.1. If IP Binding is enabled and no subnet/mask pairs are configured, then the HP SMH is available only to 127.0.0.1. If IP Binding is not enabled, HP SMH binds to all addresses. To configure IP binding: 1. Select IP Binding. The IP Binding page appears. 2. Enter the IP address. 3. Enter the netmask. Note: The masking field is not required for IPv6 addresses. Preconfiguring the HP SMH component 41

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
3.
Click
Add
. The certificate appears under
Certificate Files
. You can click
Save
to save your
changes up to this point or click
Cancel
to discard the changes and close the wizard.
4.
Click
Next
. The
IP Binding
page appears.
•
Trust by Name
Sets HP SMH to accept certain configuration changes only from servers with the
HP SIM certificate names designated in the
Trust By Name
field. The
Trust By Name
option is
easy to configure. For example, you might use the
Trust By Name
option if you have a secure
network with two separate groups of administrators in two separate divisions. This option prevents
one group from installing software to the wrong system. This option verifies only the HP SIM server
certificate name submitted.
CAUTION:
HP strongly recommends using the
Trust by Certificate
option because the other
options are less secure.
The server name option must meet the following criteria:
•
Each server certificate name must be less than 64 characters.
•
Special characters must not be included as part of the
server certificate name
:~'
! @ # $ % ^ & * ( ) + = \ ": ' < > ? , | .
To trust by name:
1.
Select
Trust by Name
, and click
Next
.
2.
In the
Trusted Server Name
field, enter the HP SIM server certificate name to be trusted.
3.
Click
Add
. The trusted HP SIM server certificate name appears under the
Trusted Servers
list. You can click
Save
to save your changes up to this point or click
Cancel
to discard the
changes and close the wizard.
4.
Click
Next
. The
IP Binding
page appears.
•
Trust All
Sets HP SMH to accept certain changes from any server.
CAUTION:
HP strongly recommends using the
Trust by Certificate
option because the other
options are less secure.
To trust all servers:
1.
Select
Trust All
. You can click
Save
to save your changes or click
Cancel
to discard the
changes and close the wizard.
2.
Click
Next
. The
IP Binding
page appears.
9.
IP Binding specifies from which IP addresses HP SMH accepts requests and provides control over which
nets and subnets requests are processed.
Administrators can configure HP SMH to bind only to addresses specified in the
IP Binding
page. You
can define a maximum of five subnet IP addresses and netmasks.
An IP address on the server is bound if it matches one of the entered IP Binding addresses after the mask
is applied.
NOTE:
HP SMH always binds to 127.0.0.1. If IP Binding is enabled and no subnet/mask pairs are
configured, then the HP SMH is available only to 127.0.0.1. If IP Binding is not enabled, HP SMH
binds to all addresses.
To configure IP binding:
1.
Select
IP Binding
. The
IP Binding
page appears.
2.
Enter the IP address.
3.
Enter the netmask.
Note:
The masking field is not required for IPv6 addresses.
Preconfiguring the HP SMH component
41