 | | Configuration at the Managed System |
For Single Login and
Secure Task Execution (STE) to work, the managed system must be running a supported agent and be configured to trust the HP Systems Insight Manager server. Three levels of trust configuration are available and all are configured on the System Management Homepage or in other configurable components, such as HP Version Control Agent. Refer to documentation for the appropriate component for detailed instructions on setting these options.
Trust All. The Trust All mode sets the System Management Homepage to accept certain configuration changes from any system. For example, you could use the Trust All option if you have a secure network, and everyone in the network is trusted.
Trust By Name. The Trust By Name mode sets the System Management Homepage to accept certain configuration changes only from servers with the HP Systems Insight Manager names designated in the Trust By Name field. The Trust By Name option is easy to configure, and prevents non-malicious access. For example, you might use this option if you have a secure network with two separate groups of administrators in two separate divisions. It prevents one group from installing software to the wrong system. This option verifies only the HP Systems Insight Manager server name submitted.
Trust By Certificate. The Trust by Certificate mode sets the System Management Homepage to accept configuration changes only from HP Systems Insight Manager servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security since it requires certificate data and verifies the digital signature before allowing access. If you do not want to enable any remote configuration changes, leave Trust by Certificate selected, and leave the list of trusted systems empty by avoiding importing any certificates. HP recommends this option
| | Setting up a Trust Relationship |
How to set up a trust relationship between an HP SIM CMS and a managed Windows server having ProLiant Agents installed.
Setting up the central management server to Trust Managed ProLiant Servers Setting up the Managed Server to Trust the central management server
Complete the following on the managed server:
From a browser, open IE and browse to the managed server through https://managed-server:2381. The System Management Homepage is displayed.
Log in to the System Management Homepage.
Select Settings System Management HomepageSecurity. Click Trust Mode. The Trust Mode page appears. Select Trust by Certificate to require trusted certificates. Click [Trust Certificate] to access the Trusted Management server certificate. Click [Save Configuration] to save the current configurations or [Reset Values] to cancel all changes. Enter the name of the HP Systems Insight Manager server that contains the certificate to be added. Click [Add Certificate From Server]. The certificate information is presented for verification/confirmation before it is added to the list. Verify the certificate information, and if you want to add it to the trusted certificate list, click [Add Certificate to Trust List]. Select Trusted Management Server, and enter the HP Systems Insight Manager server name.
Click [Import Certificate Data].
Note: If you are setting up a trusted certificate on a cluster, refer to Troubleshooting - Cluster Problems for more information.
On the HP Systems Insight Manager server, complete the following:
In Internet Explorer, select ToolsInternet OptionsContentCertificates and select the Trusted Root Certificate Authorities tab. Import the copied file in Step 4d and select Automatically select the certificate store....
(Optional) In HP Systems Insight Manager, select OptionsSecurityCertificatesTrusted Certificates, and then click [Import]. Locate and import the file which was exported in Step 1.
Note: HP Systems Insight Manager uses the same keystore for the server certificate and trusted certificate.
Open HP Systems Insight Manager and select OptionsSecurityCertificatesTrusted Certificates, and enable the Require trusted certificates option.
|
Browser Warning Messages - How to Manage To have the browser warning messages stop displaying on the managed server, complete the following: From the browser, open Internet Explorer and browse to the managed server by https://managed_server:2381.
On the Internet Explorer Security Alert, click [View Certificate].
After reviewing the certificate, click [Install Certificate].
Click [Next].
Click [Place all certificates in the following store].
Click [Browse].
Select Trusted Root Certificate Authorities and click [OK].
Click [Next].
Click [Finish].
Click [OK].
| | Related Procedures |
| | Related Topics |
|
