User guide

Security Settings for CIM/WBEM Functionality
CIM/WBEM functionality supports SSL communication for the following
functions:
• Object operations
In the object operation feature, a CIM client acts as an SSL client and the
Device Manager server acts as an SSL server.
By default, you can perform SSL communication in object operations. If
you want to modify a keystore file used for SSL, see Authenticating File
Operations.
• Event indication
In the event indication feature, the Device Manager server acts as an SSL
client and a CIM client (Indication Listener) acts as an SSL server.
By default, the Device Manager server can use SSL communication to
receive event indications by following the CIM client requests. In this case,
settings must be specified beforehand to enable SSL communication
between the CIM clients.
Additionally, you can strengthen security by applying two-way authentication
for object operations and event indication. Two-way authentication enables
communications between pre-specified trusted users. In this way, users can
accept object operations from specific CIM clients only, and send event
indications to specific CIM clients only. For details on the setting procedures,
see Specifying Two-Way Authentication for Event Indications
.
Caution: You must enable CIM/WBEM functionality to perform SSL
communication.
Note: Use Java™ commands to set up SSL, as described in
Authenticating File Operations
.
1-28 Overview and Setup of CIM/WBEM
Hitachi Device Manager SMI-S Provider Installation and User Guide