HP StorageWorks P9000 Command View Advanced Edition Software Common Component Security Guide

Operating the system
35
6 Operating the system
When the preparations required for system operation are complete, operation of the system can
start. Of the tasks required for system operation, this chapter describes those related to the security
functions evaluated based on Common Criteria for Common Component, since these functions are
necessary for maintaining the security of the environment in which HP StorageWorks P9000
Command View Advanced Edition Suite software is used.
• Overview of system operations (see section 6-1 )
• Managing the HP StorageWorks P9000 Command View Advanced Edition Software Common
Component security parameters (see section 6-2 )
• Managing user authentication information (see section 6-3 )
• Changing the user's own password (see section 6-4 )
• Managing authentication information when using an external authentication server (see section
6-5 )
6-1 Overview of system operations
Two types of operation are possible for a system that uses the HP StorageWorks P9000 Command
View Advanced Edition Common Suite security functions:
• A storage administrator uses HP StorageWorks P9000 Command View Advanced Edition
Suite software to manage storage. In addition, the storage administrator can change his or her
own password.
• An account administrator uses the Common Component security functions to manage user
authentication information and security parameters.
These types of operation are not mutually exclusive. The storage administrator can use the system
to manage the storage while the account administrator uses the system in the background.
For details on the storage management operations performed by the storage administrator, see the
applicable manual. This chapter describes how the storage administrator changes a password and
the operations performed by the account administrator.
6-2 Managing the Common Component Security
Parameters
This section describes the management of the security parameters and warning banner text by the
account administrator. Management of the security parameters and the warning banner text must be
performed in the following case:
• When changes to the security parameters have been decided upon as described in section 5-2
.
• If changes are necessary, then the account administrator makes the changes determined as
described in section 5-2 . For the procedure for setting the parameters, see section 4-5 .
6-3 Managing user authentication information
This section describes the management of user authentication information by the account
administrator. Management of the user authentication information must be performed as described
in (1) Storage administrator information in section 5-2 when one of the following situations arises: