HP WBEM Services Version A.02.07, Release Notes, March 2008

HP WBEM Services Version A.02.07, Release Notes
Security
Chapter 1 13
NOTE OpenSSL is an open source cryptography toolkit that implements the network
protocols and related cryptography standards of SSL v2/v3 and TLS (Transport
Layer Security). For more information about OpenSSL, go to
http://www.openssl.org.
HP WBEM Services supports only SSL v3 and TLS protocols.
On the HTTPS port, CIM clients are required to use SSL to establish connections with the
CIM Server and to send CIM requests.
To disable the HTTPS port, use the cimconfig command to set the planned value of the CIM
Server configuration property enableHttpsConnection to false. Be sure the planned value
for enableHttpConnection is set to true and restart the CIM Server.
To disable the Export HTTPS port, use the cimconfig command to set the planned value of
the configuration property enableSSLExportClientVerification to false and restart the
CIM Server.
Local User Authentication
The CIM Server automatically authenticates local connections - that is connections
established using the connectLocal method in the CIMClient interface. This eliminates the
need for the user to specify a user name or password when issuing management commands on
the local system.
The Unix domain socket connection point is used for local connections, so this traffic is not
visible on the network interconnect.