HP Systems Insight Manager 7.0 User Guide
Table Of Contents
- Systems Insight Manager 7.0 User Guide
- Table of Contents
- Part I Introduction
- Part II Setting up HP SIM
- 3 Setting up managed systems
- 4 Credentials
- 5 WMI Mapper Proxy
- 6 Discovery
- 7 Manage Communications
- 8 Automatic event handling
- 9 Users and Authorizations
- 10 Managed environment
- Part III HP SIM basic features
- 11 Basic and advanced searches
- 12 Monitoring systems
- 13 Event management
- 14 Reporting in HP SIM
- 15 HP SIM tools
- Part IV HP SIM advanced features
- 16 Collections in HP SIM
- 17 HP SIM custom tools
- 18 Federated Search
- 19 CMS reconfigure tools
- 20 Understanding HP SIM security
- 21 Privilege elevation
- 22 Contract and warranty
- 23 License Manager
- 24 Storage integration using SMI-S
- 25 Managing MSCS clusters
- 26 HP SIM Audit log
- 27 HP Version Control and HP SIM
- 28 Compiling and customizing MIBs
- A Important Notes
- System and object names must be unique
- Setting the Primary DNS Suffix for the CMS
- Distributed Systems Administration Utilities menu options not available
- Virtual machine guest memory reservation size
- Insight Remote Support Advanced compatibility
- Database firewall settings
- Annotating the portal UI
- Security bulletins
- Validating RPM signatures
- Central Management Server
- Complex systems displaying inconsistency with the number of nPars within the complex
- Configure or Repair Agents
- Data collection reports
- B Troubleshooting
- Authentication
- Browser
- Central Management Server
- Complex
- Configure or Repair Agents
- Container View
- Credentials
- Data Collection
- Database
- Discovery
- iLO
- Linux servers
- Event
- Host name
- HP Insight Control power management
- Insight Control virtual machine management
- HP Smart Update Manager
- Systems Insight Manager
- Identification
- Installation
- License Manager
- Locale
- Managed Environment
- HP MIBs
- Onboard Administrator
- OpenSSH
- Performance
- Ports used by HP SIM.
- Privilege elevation
- Property pages
- Reporting
- Security
- Sign-in
- SNMP settings
- SSH communication
- System Page
- System status
- Target selection wizard
- Tasks
- Tools
- Upgrade
- UUID
- Virtual identifiers
- Virtual machines
- VMware
- WBEM
- WBEM indications
- WMI Mapper
- C Protocols used by HP SIM
- D Data Collection
- E Default system tasks
- Biweekly Data Collection
- System Identification
- Old Noisy Events
- Events Older Than 90 Days
- Status Polling for Non Servers
- Status Polling for Servers
- Status Polling for Systems No Longer Disabled
- Hardware Status Polling for Superdome 2 Onboard Administrator
- Data Collection
- Hardware Status Polling
- Version Status Polling
- Version Status Polling for Systems no Longer Disabled
- Check Event Configuration
- Status polling
- F Host file extensions
- G System Type Manager rules
- H Custom tool definition files
- I Out-of-the-box MIB support in HP SIM
- J Support and other resources
- Glossary
- Index
links or resources that have arrived from unauthorized sites when a valid HP SIM session is
running on browsers.
• Configure firewalls to allow desired ports and protocols
• Review lockdown versus ease of use
• After configuring the CMS and managed systems, run discovery on the CMS
• User account policies (password, lockout, and so on) must be configured and enforced by
your environment.
• CMS must be configured on the local intranet.
Configuring the CMS
• Inspect SSL server certificate and update if desired
• Configure passwords and SNMP community strings (See the “Configuring managed systems”
section below)
• Configure user accounts, based on operating system accounts that will access HP SIM
• Review and configure toolboxes if defaults are not appropriate
• Review and configure authorizations for users
• Configure system link configuration format
• Review audit log
Strong security
NOTE: How-to: lockdown versus ease of use for more details.
• Enable Require Trusted Certificates, inspect and import desired system SSL certificates or
root signing certificates
• Require only known SSH keys, inspect and import desired system SSH public keys
Configuring managed systems
• Configure SNMP community strings, which are required at the CMS.
• For WBEM on HP-UX and Linux, configure the WBEM password. This password is required
at the CMS. For the highest level of security, a different user name and password can be used
for each managed system; each user name and password pair must be entered into the CMS
to enable access.
For HP-UX, certificates can be used instead of username and password for WBEM
authentication. For more information, see the HP SIM online help.
• The CMS requires a user name and password to access WMI data on Windows systems. By
default, a domain administrator account can be used for this, but you should use an account
with limited privileges for WMI access. You can configure the accounts accepted by each
Windows managed system by using the Computer Management tool:
1. Select the WMI Control item.
2. Right-click WMI Control, and then select Security.
3. Select the Security tab, select Root namespace, and then click Security>
4. Add a user to access WMI data along with their access rights. The enable account and
remote enable permissions options must be enabled for correct operation of HP SIM.
5. The user name and password specified here must be configured in the CMS.
• Set up user accounts for Insight Web Agents
• Add the CMS SSH public key to the system's trusted key store by running mxagentconfig
on the CMS.
• Configure trust relationship option for Insight Web Agents; import the CMS SSL certificate if
set to trust by certificate.
124 Understanding HP SIM security