HP Systems Insight Manager 7.2 Technical Reference Guide

Security
HP SIM provides the following security options:
User and Authorizations.
Select OptionsSecurityUsers and Authorizations.
Server Certificate.
Select OptionsSecuritySystems Insight Manager Server Certificates.
Global Credentials.
Select OptionsSecurityCredentialsGlobal Credentials.
Systems Credentials.
Select OptionsSecurityCredentialsSystems Credentials.
Trusted Certificate
Select OptionsSecurityCredentialsTrust Systems.
SSH Host Keys
Select OptionsSecurityTrusted Systems, and then select the SSH Host Keys tab.
Sign-In Event Settings
Select OptionsSecuritySign-In Event Settings.
Two-Factor Authentication Configuration
Select OptionsSecurityTwo Factor AuthenticationTwo Factor Authentication Configuration.
OptionsSecurityTwo Factor AuthenticationChange Authentication Mechanism
System Link Configuration
Select OptionsSecuritySystem Link Configuration.
Privilege Elevation
Select OptionsSecurityPrivilege Elevation.
Certificate Revocation Check Configuration
Select OptionsSecurityCertificate Revocation Check Configuration.
For more information, see Security.
Security related information
Creating a server certificate
Users with administrative rights can create a new self-signed certificate when they replace the HP
SIM SSL server certificate and private key in the following situations:
The integrity of the HP SIM server certificate private key is compromised.
The existing HP SIM server certificate expires,
This self-signed certificate is configured to expire 10 years from the date of creation.
Create a new self-signed certificate when you must replace the HP SIM SSL server certificate and
private key. The public key is included in the certificate that goes out to the client. The private key
is kept secure in the keystore database on the HP SIM server file system. The public and private
key pair of the local HP SMH (on the CMS) is overwritten with the new HP SIM public and private
key pair.
240 Operations