System Management Homepage 7.3 Installation and Configuration Guide

6. Select one of the following options:
• Anonymous Access
Anonymous Access is disabled by default. Anonymous Access enables a user to access
HP SMH without logging in. Select this option to allow anonymous access.
CAUTION: HP does not recommend the use of anonymous access.
• Local Access
Local Access is disabled by default. Local Access enables a user to locally gain access
to the HP SMH without being challenged for authentication. If you select Administrator
any user with access to the local console is granted full access. If you select Anonymous,
any local user has access limited to unsecured pages without being challenged for a user
name and password.
CAUTION: HP does not recommend the use of local access unless your management
server software enables it.
Port 2301 field:
The Port 2301 link provides options to enable or disable Port 2301. The default value is
enabled, which preserves the compatibility with HP Web-enabled System Management
Software. For more information about enabling and disabling Port 2301, see the HP System
Management Homepage User Guide.
7. Click Next. You can click Save to save your changes up to this point, or click Cancel to discard
the changes and close the wizard.
8. Select one of the following Trust Mode security options:
• Trust by Certificate
Sets the HP SMH to accept configuration changes only from HP SIM servers with trusted
certificates. This mode requires the submitted server to provide authentication by means
of certificates. This mode is the strongest method of security because it requires certificate
data and verifies the digital signature before allowing access. If you do not want to enable
any remote configuration changes, leave Trust by Certificate selected and leave the list
of trusted systems empty to avoid importing any certificates.
NOTE: HP strongly recommends using this option because the other options are less
secure.
To trust by certificate:
1. Select Trust by Certificate, and click Next.
2. In the Certificate Name field, click Browse to select the certificate file. After you select
the certificate file, the certificate data appears on the screen.
3. Click Add. The certificate appears under Certificate Files. You can click Save to save
your changes up to this point or click Cancel to discard the changes and close the
wizard.
4. Click Next. The IP Binding page appears.
• Trust by Name
Sets HP SMH to accept certain configuration changes only from servers with the HP SIM
certificate names designated in the Trust By Name field. The Trust By Name option is
easy to configure. For example, you might use the Trust By Name option if you have a
secure network with two separate groups of administrators in two separate divisions. This
option prevents one group from installing software to the wrong system. This option verifies
only the HP SIM server certificate name submitted.
Preconfiguring the HP SMH component 47