Technical data

For more information on what suppression means, including the difference between permanent
and temporary suppression, see “Suppressing Alarms” (page 52) and “Suppressing Problem
Attributes” (page 51).
To disable suppression persistence in T0682 H02 ABX and later, put the following parameter into
your OSMCONF file:
SuppressionPersistenceAcrossOSMRestart = OFF
To make changes to your OSMCONF file take effect, see “Creating and Using an OSMCONF
File” (page 15).
Suppressing Redundant IRs from ServerNet Cluster Nodes
With OSM version T0682 AAY and later, you can suppress ServerNet Problem IRs from being
propagated to other nodes connected to a ServerNet Cluster, in order to avoid redundant Problem
IRs.
For each node on which you want to suppress ServerNet Problems IRs from being propagated,
this line must be entered into the OSMCONF file for that node:
SuppressServerNetClusterAlarm = ON
To make changes to your OSMCONF file take effect, see “Creating and Using an OSMCONF
File” (page 15).
Configuring Secure Sockets Layer (SSL) Support
Starting with T0682H02 AAM, OSM provides Secure Sockets Layer (SSL) support to provide a
secure connection between OSM server software and:
• OSM Service Connection*
• OSM Event Viewer*
• HP Systems Insight Manager (HP SIM) – SSL is required for using HP SIM and SIM plug-ins
such as HP Insight Remote Support Advanced with NonStop servers. For more information on
configuring Insight Remote Support Advanced, see Insight Remote Support Advanced for
NonStop, located in the Support and Services collection of NTL.
For T0682 H02 ADD (or later), SSL is now enabled for OSM by default for all NonStop systems
running H-series or J-series software; you no longer have to enable the SSL support built into OSM
by adding the UseSSL parameter to your OSMCONF file.
SSL encryption and authentication depend on X509 certificates to provide keys and identify the
parties involved in the communication. The SSL support built into OSM relies on a “shared” SSL
certificate. For maximum security, HP recommends that you generate a private SSL certificate.
OpenSSL toolkits, available as shareware, can help you generate your own SSL certificate.
With T0682 H02 ACC and later, the OSM Service Connection has updated its handling of SSL
server certificates relative to the CIMOM server. The dialog that relates to the default OSM certificate
has been replaced by a new dialog with slightly modified certificate rules. If you use customized
server certificates, you may see a new dialog after entering user credentials related to problems
that the certificate may have. You will have the option to exit from OSM due to the problems or
to continue with OSM despite the problems.
Configuring the Cipher Suites Used by SSL
You can control the cipher suites used by SSL for communication between OSM server processes
and OSM Service Connection, OSM Event Viewer, HP SIM, and Insight Remote Support Advanced
through the following parameter in your OSMCONF file:
CIPHERSUITES = value
NOTE: This parameter is valid only on a NonStop BladeSystem or when the UseSSL parameter
in the OSMCONF file is set to On.
22 OSM Server-Based Components