HP System Management Homepage HP Part Number: 466304-001 Published: January 2009 Edition: 16
© Copyright 2004-2009 Hewlett-Packard Development Company, L.P.
Table of Contents 1 Product Overview.......................................................................................9 HP SIM .................................................................................................................................................9 Integrated Management Tools...................................................................................................................9 HP-UX System Administration Manager (SAM) Deprecation....................................
Related Procedures...........................................................................................................................27 Related Topic..................................................................................................................................27 Add Custom Menu (HP-UX Only)........................................................................................................27 Related Topics.........................................................................
Administrator Group...................................................................................................................45 Operator Group.........................................................................................................................46 User Group................................................................................................................................46 Related Procedures..............................................................................
Log Level..............................................................................................................................................66 Port 2301.............................................................................................................................................66 Multihomed certificate alternative names list.............................................................................................66 Custom UI.......................................................
List of Tables 2-1 2-2 3-1 5-1 5-2 5-3 5-4 5-5 5-6 5-7 8-1 8-2 8-3 12-1 12-2 13-1 14-1 Tooltip box.....................................................................................................................................12 Firewall exceptions..........................................................................................................................15 Status icons.........................................................................................................................
1 Product Overview The HP System Management Homepage (HP SMH) is a Web-based interface that consolidates and simplifies single system management for HP servers on HP-UX, Linux (x86, AMD64, and Intel Itanium), and Microsoft® Windows® operating systems.
Additional Resources • HP SMH at Software Depot Home at http://www.hp.com/go/softwaredepot. • For HP-UX Select Security and manageability and then HP System Management Homepage HP-UX. • For Linux Select Linux and then HP Integrity Essentials Foundation Pack for Linux. • HP Insight Essentials software page at http://www.hp.com/servers/manage.
2 Getting Started To get started with HP System Management Homepage (HP SMH), use the following information when configuring HP SMH and setting up users and security properly. To configure HP SMH: • On HP-UX operating environments, HP SMH is installed with default settings. You can change the configuration by modifying the environment variables and tag values set in the following files: • /opt/hpsmh/lbin/envvars • /opt/hpsmh/conf.common/smhpd.xml • /opt/hpsmh/conf/timeout.
Table 2-1 Tooltip box Name Description User Name User must be part of a user group accepted by SMH Password User name and password must match a valid user Sign In Validates user name sign-in to SMH Clear Erases user name and password input fields ? Show/hide tooltip box Checkbox Automatically imports the management server certificate when selected. This is applicable when using SSO from HP SIM and the trust mode is set to TrustByCert.
If the user credentials cannot be authenticated, the user is denied access. After logging into HP SMH as an initially allowed user, use the Security Settings to grant access to users in other operating system groups. Administrator on Windows and root on HP-UX or Linux have administrator access on HP SMH. 4. 5. Enter the password that is recognized by the operating system. Click Sign In. The System Management Homepage appears.
appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser. 2. Click Yes. The Sign In page appears. 3. 4. 5. 6. 7. 8. 9. Enter your user name that is recognized by the operating system. Enter the password that is recognized by the operating system. Click Sign In. Select Tools→System Information→System Management Homepage. Select a target system from the list.
Repository Manager to run. The secure and insecure ports must be added to enable proper communication with your browser. To configure the firewall: 1. 2. 3. 4. 5. Select Start→Settings Control Panel. To configure the firewall settings, double-click Windows Firewall. Select Exceptions. Click Add Port. Enter the following product name and the port number information.
*filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p 50 -j ACCEPT -A RH-Firewall-1-INPUT -p 51 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT
Configuring Timeout Settings for HP-UX Two HP SMH timeout settings can be configured: • SMH service timeout Sets the amount of time, in minutes, before the HP SMH server stops. • SMH session timeout Sets the amount of time, in minutes, before an HP SMH GUI session stops. NOTE: Selecting the Session never expires checkbox avoids HP SMH session timeouts by sending a background request every three minutes. This option, when selected, also prevents HP SMH service timeouts.
• Signing Out • HP SMH Pages Automatically Importing Certificates The Automatically Import Management Server Certificate feature enables you to automatically import the HP SIM certificate when accessing the HP SMH from an HP SIM system. NOTE: Your login must have administrative access to HP SMH to automatically import the HP SIM certificate. To automatically import the HP SIM certificate: 1. From an HP Systems Insight Manager or HP Insight Manager 7 system, select a link to a system.
3 Navigating the Software The HP System Management Homepage (HP SMH) displays all HP Web-enabled System Management Software that provides information. In addition, HP SMH displays various categories (in boxes) that have icons defining the status of the items. For more information, see “The Home Page”. The HP SMH main page is divided into two major areas: the header and the standard container.
• Help • Webapps The data frame shows the status for all HP Web-enabled System Management Software and utilities on the system.
• Timeout Warnings. Timeout warnings appear as a floating box in the page footer on the right side when you do not load a page in SMH within the time limit set for timeouts. • Dynamic Lists in Pages.
HP SMH Pages The HP SMH displays up to nine pages that enable you to access and configure settings related to participating HP Web-enabled System Management Software. The Tasks page and the Tools page appears if HP Web-enabled System Management Software provides information for them.
4 The Home Page The Home page provides the system, subsystem, and status views of the server. The Home page displays groupings of systems and their status. The information on the Home page is provided by the integrated agents or management utilities. For HP-UX operating systems, the Home page includes information provided by integrated Web-Based Enterprise Management (WBEM) property pages and management utilities.
Related Topics 24 • Getting Started • The Home Page • The Settings Page • The Tasks Page • The Tools Page (HP-UX Only) • The Logs Page • The Installed Webapps Page • The Support Page • The Help Page The Home Page
5 The Settings Page The Settings page contains links to the settings and configuration pages of the HP System Management Homepage (HP SMH) and other integrated management tools found on the Tools page. Table 5-1 Settings page links Name SNMP Webagent Box Description Access Provides links that enable you to configure Select Settings from the menu. HP Web-enabled System Management Software agents. • “SMH Data Source Management” Sets options for HP SMH Data Source.
Name Description Access User Preferences Category Enables you to set how HP SMH appears. It has controls for choosing between list and icon view, session never expires (HP-UX only), and box and item ordering type by name or status. These settings are valid for the user who sets them. These values are stored for 30 days. For more information, see “User Preferences”. Select Settings from the menu, and then click the User Preferences link in the System Management Homepage box.
Name Description Access “Trusted Management Servers” Configures the certificates that are stored in the server and allows you to add or remove certificates. For more information, see “Trusted Management Servers”. Select Settings from the menu, click the Security link in the System Management Homepage box, and then click the Trusted Management Servers link.
Only HP SMH users with Administrator authorization can create menus and can run custom menus that are set to run as the "root" user. For HP SMH users with Operator or User authorization, the custom menus they are allowed to run are run as the user id of the user logged in. These custom menus are stored and managed in the /opt/hpsmh/data/htdocs/xlaunch/custom-menus.js file, which can be manually copied from one system to other systems.
Related Topic ▲ The Settings Page UI Options The UI Options page enables you to display inline help icons. To configure the UI Options, complete the following steps: 1. 2. 3. Select Settings from the menu. In the SNMP Webagent box, click the UI Options link. Remove the check in the checkbox beside Show Help Icons to no longer display inline help icons. Select the checkbox beside Show Help Icons to display the inline help icons. 4. Click Save and Apply Changes.
6. To use a custom image and custom warning, complete the following steps: a. Place the image and text files in the following directories: • SMHBaseDir/data/htdocs/custom_ui/logo0.jpg (for the loading screen image) • SMHBaseDir/data/htdocs/custom_ui/logo1.jpg (for the master header image) • SMHBaseDir/data/htdocs/custom_ui/warning1.txt (for the warning text) All three files must be present to view custom images and warning text. b. 7. Click the checkbox beside Use custom text and images.
NOTE: Each user is able to set their preferences for a session. Individual user preferences take precendence over settings in UI properties.
Name “User Groups” Description Allows an authorized user to configure which group of users has access to HP SMH and their respective access level. For more information, see “User Groups”. Access Select Settings from the menu, click the Security link in the System Management Homepage box, and then click the User Groups link.
Related Procedures • IP Binding • IP Restricted Login • Local Server Certificate • Alternative Names Certificates • Port 2301 • Timeouts • Trust Mode • Trusted Management Servers • Kerberos Authorization Procedure • User Groups Related Topic ▲ The Settings Page IP Binding IP Binding specifies the IP addresses that HP SMH accepts requests from and controls the nets and subnets that requests are processed.
Each IP address and netmask must consist of four octets with values between 0 and 255 (the same for each netmask). Netmasks must start with the number 1 in the highest bit and continue with all number 1s until they switch to all number 0s (for example, 255.255.0.0, 192.0.0.0, 255.192.0.0).
4. 5. 6. Select the checkbox beside the IP addresses you want to remove. Click Remove. Click Apply to apply the configurations.
7. Use a secure method to send PKCS #10 certificate request data to a certificate authority, request the certificate request reply data in PKCS #7 format, and request that the reply data is in Base64-encoded format. If your organization has its own Public Key Infrastructure (PKI) or Certificate Server implemented, send the PKCS #10 data to the CA manager and request the PKCS #7 reply data. NOTE: 8. 9. A third-party certificate signer generally charges a fee.
1. 2. 3. 4. 5. 6. Select Settings from the menu In the System Management Homepage box, click the Security link. Click the Local Server Certificate link. In the Current Certificate box, enter a value in the Alternative Names field. Click Create. Click Yes and the previous page appears with the message: Success: Value successfully changed. When this happens, the new certificate with the alternative names set are negotiated with the browser.
Related Topic ▲ The Settings Page Timeouts The Timeouts link provides options to configure the values of the Session timeout and UI timeout. • The session timeout value represents the amount of time in minutes that a user can remain inactive in an SMH session. If a user logs in and remains inactive for an amount of time greater than that specified by session timeout, the user is redirected to the Sign In page in their next interaction with the user interface.
• Trusted Management Servers • Kerberos Authorization Procedure • User Groups Related Topic ▲ The Settings Page Trust Mode The Trust Mode link provides options to enable you to select the security required by your system. Some situations require a higher level of security than others. Therefore, you have the following security options: • Trust by Certificate Sets HP SMH to accept configuration changes only from HP SIM servers with trusted certificates.
6. Click Add. When you click Add, the Server Certificate Name is validated to see if it meets the following criteria: • Each HP SIM server's certificate name must be less than 64 characters • The following invalid characters are not included: ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | • The Server Certificate Name is not already in the list If the validation test accepts the value, Server Certificate Name is added as a new line in the list table.
Related Topic ▲ The Settings Page Trusted Management Servers Certificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH. The Trusted Management Servers link enables you to manage your certificates in the Trusted Certificates List. Note the following: • Import Certificate Data • Add Certificate From Server Certificates establish the trust relationship between HP SIM and HP SMH. You can add a trusted certificate from an HP SIM server.
1. 2. 3. 4. 5. The user logs in to the system (client) using his or her domain username and password. The user’s password is hashed, and this hash becomes the user’s secret key. When the user tries to access a service, a message informs the AS that the user wants to access that service. If the user is in the AS database, two messages are sent back to the client: a. A Client/TGS session key is encrypted with the user’s secret key, which is used in the communication with the TGS. b.
Situation HTTP error code The user has a Kerberos credential, and the clock skew is within the desired limits, but the user is not listed in the allowed Kerberos users list in the SMH configuration file. 401 Message ERROR: Kerberos login failure; Authorization Required. When an authentication error occurs, the system administrator should check the SMH HTTP server error log to obtain more information about the error.
5. In the Group Name textbox, enter a name in the group@REALM format or REALM\groupname. Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 6. 7. Click the Operator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add groups with operator access by following steps 5 through 7. 8. Click Apply. To remove a Kerberos Operator: 1. 2.
Related Topic ▲ The Settings Page User Groups HP SMH uses operating system accounts for authentication and enables you to manage the level of access of operating system accounts at an operating system account group level. The users in the operating system group Administrators for Windows, or the operating system group root (which in turn contains the user root by default) for HP-UX and Linux, can define operating system groups that correspond to HP SMH access levels of Administrator, Operator, or User.
7. 8. Select the checkbox beside the Group Names in the dynamic list you want to add to SMH. Click Apply. To remove an Administrator Group: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the User Groups link. Select the checkbox beside the Group Names in the dynamic list that you want to remove from SMH. Click Apply. Operator Group To add an Operator Group: 1. 2. 3. 4. Select Settings from the menu.
4. 5. Select the checkbox beside the Group Names in the dynamic list that you want to remove from SMH. Click Apply.
6 The Tasks Page The Tasks page displays links to routine tasks provided by participating HP Web-enabled System Management Software. If no tasks are provided by HP Web-enabled System Management Software, the Tasks page is not visible. System (HP-UX Only) This category provides four built-in tasks to enable easy execution of commands on a system without signing in. • The Launch X Application link displays options for you to launch an X application. Enter the command line of the X Application to launch.
7 The Tools Page (HP-UX Only) The Tools page displays links to system management tools provided by participating HP Web-enabled System Management Software. For HP-UX, the Tools page provides an entry point into management tools that are analogous to the System Administration Manager (SAM) main page, also known as the SAM Functional Area Launcher (or FAL). For HP-UX this also includes categories and menus for several X-based management applications.
8 The Logs Page At a minimum, the Logs page provides the following log categories: • System Management Homepage Log • SAM Log Viewer (HP-UX only) • Httpd Error Log Logs contained in the installed HP Web-enabled System Management Software can appear on this page. For example, if the HP Version Control Agent is installed, a link to the Version Control Agent log appears on the Logs page.
System Management Homepage Log The System Management Homepage Log contains HP System Management Homepage (HP SMH) configuration changes as well as successful and failed signin attempts. It is helpful when troubleshooting signin or access issues when signing in directly to HP SMH, or from the HP Systems Insight Manager (HP SIM). You must have administrative access to HP SMH to access the System Management Homepage Log.
Select Logs from the menu and click the Httpd Error Log link in the System Management Homepage box. Related Topics • The Logs Page • System Management Homepage Log • SAM Log Supported Languages HP SMH maintains PHP files that contain translated strings for supported languages. For each supported language, there is a file named log_messages.php in the data/htocs/lang/ directory, where lang is the two-letter suffix for a language. The log_messages.
Related Topics 56 • The Home Page • The Settings Page • The Tasks Page • The Tools Page (HP-UX Only) • The Installed Webapps Page The Logs Page
9 The Installed Webapps Page The Installed Webapps page contains a list of installed Webapps in the HP System Management Homepage (HP SMH). It contains links to the following HP Web-enabled System Management Software: Integrated Agents Lists Webapps names. Participants are agents that contribute information contained in HP SMH. If no HP Web-enabled System Management Software is installed that provides this information, an informative message appears.
10 The Support Page The Support page provides information about HP Essentials Software and instructions on how to obtain guidance from HP Support and official forums. This page also provides the following links for help outside the HP System Management Homepage server domain.
11 The Help Page The Help page provides help for the HP System Management Homepage (HP SMH) and its webapps. The Help page provides links for the following: • System Management Homepage Help Contains information about the HP SMH infrastructure and its configuration and log pages. The remaining entries link to help systems associated with the webapps installed on the system (those that provide a help system). • Credits Displays information regarding open source licensing and credits.
12 Command Line Interface Configuration The Command Line Interface (CLI) provides users with administrative rights access to set these values through the command line. You can use the CLI to modify configuration options, including the required security checks that allow the configuration options to be changed. NOTE: --kerberos, --user-kerberos, --operator-kerberos, --admin-kerberos, --max-threads and --win32-disable-acceptex options are only available on Windows operating systems.
The following is an example of how IPLIST is formatted: 122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 IP Address Exclusion Perform the IP address restricted command as follows: smhconfig -e|--ip-restricted-exclude [=] IPLIST The following is an example of how IPLIST is formatted: 122.23.44.1-122.23.44.255;172.84.100.35;172.168.10.5;168.172.10.1-168.172.10.128 NOTE: IPv4 and IPv6 address ranges are supported.
smhconfig -r|--restart Reject Program Admin Login Reject or accept and HP Web-enabled System Management Software or VCA login request. smhconfig -j|--reject-prog-admin-login [=] true|false Win32DisableAcceptEX AcceptEX() is a Microsoft WinSock v2 API that provides performance improvements over the use of the BSD style accept() API in specific circumstances.
Session Timeout The default session timer is set to 15 minutes. The session timeout can be set as low as 1 minute or as high as 60 minutes. smhconfig -U|--session-timeout [=] session-timeout-in-minutes Log Level By default, the logging level of HP SMH error messages is set to error. When a log level is set, all events that are the same or superior to the configured log level are written to the log file.
Httpd Error Log The httpd error log option enables you to determine if it is possible to view the httpd error_log log file through the user interface. smhconfig -p|--httpd-error-log [=] True | False Icon View Icon view allows you to set the default view mode to show icons (True) like a desktop File Manager appearance or to show the traditional list (False) that displays items in boxes. smhconfig -n|--iconview [=] True | False Box Order Box order defines the ordering method used to display the boxes.
Administrators HP SMH. Users with Administrator access can view and set all information provided throughout the The default user group (Administrators for Microsoft operating systems and root for Linux) always has administrative access. Windows systems that are part of a domain can specify domain groups and local groups for any level of access. smhconfig -d|--admin-group [=] [ groupList ] Operators Users with Operator access can view and set most information provided through the HP SMH.
13 File locations Table 13-1 HP SMH file locations Description HP SMH Root The root of the HP SMH installation. Windows SystemDrive\hp\hpsmh Linux /opt/hp/hpsmh HP SMH Executable The HP SystemDrive\hp\hpsmh\bin\hpsmhd.exe /opt/hp/hpsmh/sbin/hpsmhd SMH binary. A webapp can use detection of this file's pressence to verify that HP SMH is installed on the system. HP-UX /opt/hpsmh /opt/hpsmh/lbin Certificate and Key files The certificate and private key files used by HP SMH.
14 Troubleshooting Access Problems Browser Problems Installation Problems IP Address Problems Sign In Problems Security Problems Other Problems NOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system. 14.1 Access Problems 14.14.1.1 14.14.1.2 SMH Documentation Unclear on Treatment of securetty. The HP System Management Homepage (HP SMH) does not use /etc/securetty. See login(1) for details on /etc/securetty. After entering a hostname on Linux, HP SMH does not start.
Mozilla browsers share sessions when launched separately. Separate sessions are shared in Mozilla when launched from the desktop. However they are not shared in Internet Explorer. 14.14.2.4 14.14.2.5 14.14.2.6 14.14.2.7 14.14.2.8 I get security messages or partially displayed pages when browsing into HP SMH from Internet Explorer running on Windows 2003. Internet Explorer 6.0 on Windows 2003 Server has different default security settings.
When browsing secure pages, Internet Explorer 7 might ask you to add the page to its Trusted Site Zone. Even clicking Add, the message returns. In this case, Internet Explorer 7 fails to handle IPv6 URLs since the Internet Explorer parser uses a colon as the separator of the IP address and the Port number. For example, • On IPv4, the HP SMH IP address might be https://127.0.0.1:2381. The IP address is 127.0.0.1 and the port number is 2381.
Any ProLiant server configured with Windows 2000 Server or Windows Server 2003 (any edition) and HP SMH Version 2.1.3 (or later) when SMH is allowed to interact with the desktop can be affected. To prevent HP SMH from interacting with the server desktop, perform the following: 1. 2. 3. 4. 5. 6. 14.14.5.2 Click Start→Programs→Administrative Tools→Services Click HP System Management Homepage Properties. Click the Log On tab. Deselect Allow service to interact with desktop. Click Apply and then click OK.
14.14.5.8 When I use Internet Explorer 6.0 in Windows and browse through the management server to a system that was discovered by IP address, I cannot sign in to HP SMH. If anonymous access is enabled, I get through anonymously but the user name is incorrect. or When I use Internet Explorer 6.0 in Windows and browse through the management server to a device that was discovered by IP address, the detailed certificate information does not appear in the text box of the Automatic Import Certificate screen.
Windows XP Service Pack 2 implements a software firewall that prevents browsers from accessing the ports required for HP SIM and Version Control Repository Manager access. To resolve this issue, configure the firewall with exceptions to allow browsers to access the ports used by HP SIM and Version Control Repository Manager. HP recommends the following actions: 1. 2. 3. 4. 5. Select Start→Settings Control Panel. Double-click Windows Firewall to configure the firewall settings. Select Exceptions.
1. 2. 3. 14.14.6.7 Create the PKCS #10 data packet by clicking Settings→SMH→Security→Local Server Certificate page. Press the Ctrl+ C keys to copy the data into a buffer. Navigate to http://W2003CA/certsrv where W2003CA is the name of your Windows 2003 certificate authority system and complete the following: a. Select Request a certificate. b. Select Advanced certificate request. c. Select Submit a certificate request by using a base. d. Press the Ctrl+ V keys to paste the PKCS #10 data into the field.
For more information about Bastille, see bastille(1M) and the Bastille User Guide, installed at /opt/sec-mgmt-bastille/docs/user-guide.txt. 14.7 Other Problems 14.14.7.1 I am having problems downgrading HP SMH from 3.x to 2.x. To successfully downgrade HP SMH from 3.x to 2.x, stop the HP SMH service and then execute the downgrade by completing the following steps: 1. $/etc/init.d/hpsmhd stop 2. $rpm --oldpackage --U hpsmh-old version.rpm 14.14.7.
Keeping good records of your configuration can significantly speed up the troubleshooting process.
15 Legal Notices Warranty The information in this document is subject to change without notice. Hewlett-Packard makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be held liable for errors contained herein or direct, indirect, special, incidental, or consequential damages in connection with the furnishing, performance, or use of this material.
MPN: 466304-001. The first edition of HP System Management Homepage 3.0 contains Linux and Windows information and tasks including the following: • New user interface • Support for Kerberos on Windows • Support for Command Line Interface • The ability to disable port 2301 • User configurable user interface properties • User control of session and user interface timeouts • Log localization • IPv6 support Revision Edition 15 February 2008 MPN: 436304-007.
Glossary Accounts for Users & Groups tool (ugweb) The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts and group accounts on the local system. This tool can also be used to manage user accounts on a NIS system. The ugweb tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH. AS See Kerberos Authentication Server. CA See certificate authority.
performance management, and workload management enable systems administrators to pick the value added software required to deliver complete lifecycle management of their hardware assets. To obtain more information about HP SIM, go to http://www.hp.com/go/hpsim. HP Version Control Agent (VCA) An Insight Management Agent that is installed on a system to enable the customer to see the HP software installed on that server.
tasks: create, modify, and delete nPartitions; examine the nPartition configuration of a complex, check the complex for potential configuration and hardware problems, and manage hardware resources on the complex. NOTE: At this time, HP System Management Homepage does not support Partition Manager. pdweb See Peripheral Device tool. Peripheral Device tool (pdweb) The HP-UX Peripheral Device (pdweb) tool can be used to easily and quickly view I/O devices and OLRAD cards.
self-signed certificate A certificate that is its own certificate authority (CA), so that the subject and the CA are the same. See also certificate, certificate authority. single sign on Permission granted to an authenticated user browsing to HP Systems Insight Manager (HP SIM) to browse to any of the managed systems from within HP SIM without re-authenticating to the managed system. HP SIM is the initial point of authentication and browsing to another managed system must be from within HP SIM.
Index A HP SMH , 23 access trust relationships, 14 alternative name certificate security, 36 anonymous access security, 32 auto import certificate certificates, 18 security, 18 I C L certificates auto import certificate, 18 trust mode, 39 trusted management server certificates, 41 CLI configuration HP SMH , 63 configuring firewall settings firewall, 14 getting started, 14 security, 14 configuring timeout getting started, 17 security, 17 configuring timeout settings timeout, 17 copyright notice, 81 cre
S SAM logs, 54 security alternative name certificate, 36 anonymous access, 32 auto import certificate, 18 configuring timeout, 17 HP SMH , 31 IP Binding, 33 IP Restricted sign in, 34 Kerberos user groups, 41 local access, 32 local server certificate, 35 Port 2301, 37 Timeouts, 38 trust mode, 39 trust relationships, 14 trusted management server certificates, 41 user groups, 45 settings HP SMH , 25 sign in getting started, 11 sign out getting started, 18 SNMP Configuration HP SMH , 28 support HP SMH , 59 T t
