HP mt20 Administrator Guide 1 - Page 62

Configuring HP Velocity, Security settings, Local Accounts, HP Velocity

Get HP mt20 PDF manuals and user guides View all HP mt20 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 62 highlights

Note the following about creating a VPN using Cisco: ● The Gateway is the gateway's IP address or hostname. ● The Group name and Group password are the IPSec ID and IPSec password. ● The Domain setting is optional. ● The User name and User password are the user credentials that have rights to create a VPN connection on the server side. ● The Security Type should be set the same as it is on the server side. ● The NAT Traversal option should be set according to your VPN environment. ● The IKE DH Group option sets the Diffie-Hellman group to use for VPN. ● The PFS Type option sets the Diffie-Hellman group to use for Perfect Forward Secrecy. Note the following about creating a VPN using PPTP: ● The Gateway is the gateway's IP address or hostname. ● The NT Domain setting is optional. ● The User name and User password are the user credentials that have rights to create a VPN connection on the server side. Configuring HP Velocity Use the HP Velocity tab to configure HP Velocity settings. Go to http://www.hp.com/go/velocity for more information about the HP Velocity modes. Security settings Security settings can be configured using the Security Manager. To open the Security Manager, select Setup > Security in Control Panel. See the following sections for more information about the different tabs in the Security Manager. ● Local Accounts on page 50 ● Encryption on page 51 ● Options on page 51 Local Accounts The Local Accounts tab can be used to change the local root and user account passwords or to disable authentication using those accounts. CAUTION: Disabling the root and/or user accounts might leave your system in an unusable state unless Active Directory authentication is enabled. For example, if the root account is disabled, you will only be able to change to administrator mode using domain credentials of an administrator. However, disabling the local accounts might improve security when Active Directory authentication is enabled because you no longer have to maintain and update a shared secret such as the thin client's root password. If Active Directory authentication has been used and there is any cached data for domain users on the thin client, you can also delete the user's cached data from this tab. NOTE: If the user logged in using a domain account, they cannot delete their own account's data because it would leave the system in an indeterminate state. 50 Chapter 7 Control Panel

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
Note the following about creating a VPN using Cisco:
●
The
Gateway
is the gateway’s IP address or hostname.
●
The
Group name
and
Group password
are the IPSec ID and IPSec password.
●
The
Domain
setting is optional.
●
The
User name
and
User password
are the user credentials that have rights to create a VPN connection
on the server side.
●
The
Security Type
should be set the same as it is on the server side.
●
The
NAT Traversal
option should be set according to your VPN environment.
●
The
IKE DH Group
option sets the
Diffie-Hellman
group to use for VPN.
●
The
PFS Type
option sets the
Diffie-Hellman
group to use for Perfect Forward Secrecy.
Note the following about creating a VPN using PPTP:
●
The
Gateway
is the gateway’s IP address or hostname.
●
The
NT Domain
setting is optional.
●
The
User name
and
User password
are the user credentials that have rights to create a VPN connection
on the server side.
Configuring
HP Velocity
Use the
HP Velocity
tab to
configure
HP Velocity settings. Go to
go/velocity
for more
information about the HP Velocity modes.
Security settings
Security settings can be
configured
using the Security Manager. To open the Security Manager, select
Setup >
Security
in Control Panel.
See the following sections for more information about the
different
tabs in the Security Manager.
●
Local Accounts
on page
50
●
Encryption
on page
51
●
Options
on page
51
Local Accounts
The Local Accounts tab can be used to change the local root and user account passwords or to disable
authentication using those accounts.
CAUTION:
Disabling the root and/or user accounts might leave your system in an unusable state unless
Active Directory authentication is enabled. For example, if the root account is disabled, you will only be able to
change to administrator mode using domain credentials of an administrator. However, disabling the local
accounts might improve security when Active Directory authentication is enabled because you no longer have
to maintain and update a shared secret such as the thin client’s root password.
If Active Directory authentication has been used and there is any cached data for domain users on the thin
client, you can also delete the user’s cached data from this tab.
NOTE:
If the user logged in using a domain account, they cannot delete their own account’s data because it
would leave the system in an indeterminate state.
50
Chapter 7
Control Panel