HP WBEM Services Version A.02.07, Release Notes, March 2008

HP WBEM Services Version A.02.07, Release Notes
Security
Chapter 114
Remote User Authentication
The CIM Server can authenticate remote users by:
• HTTP Basic Authentication
• Certificate Based Authentication (CBA)
The following table details each remote authentication option in greater detail.
Table 1-2 Remote User Authentication Methods
Certificate Based Authentication
(CBA)
HTTP Basic Authentication
Description
The cimserver requests the client
certificate while HTTPS connection is in
progress.
Using a request/challenge mechanism and
authenticating the user-supplied username
and password through Pluggable
Authentication Modules (PAM).
Benefits and Considerations
• Requires a one-time server
configuration.
• Does not require the remote user to
provide a password each time to
access the WBEM data.
The benefits of not requiring a password
include:
• Prevents intruders from gaining
access to internal network resources
by “spoofing” passwords.
• Additional configuration or updates
to applications is not required
whenever a password is changed.
• Easier to setup, as it does not require
any server configuration.
• Requires the remote user to provide a
password each time to access the
WBEM data.
• You will have to update the client
application each time the password is
changed.