Jump to content


English
hp.com home
HP System Management Homepage  |  The Settings Tab  |  Security  |  Trust Mode

Security
Trust Mode

» HP System Management Homepage

»table of contents
»index
»Product Overview
»Getting Started
»Navigating the Software
»System Management Homepage Overview
»The Home Tab
»The Settings Tab
»Credits
»Security
»IP Binding
»IP Restricted Login
»Local Server Certificate
»Local and Anonymous Access
Trust Mode
»Trusted Management Servers
»User Groups
»The Tools Tab
»The Tasks Tab
»The Log Tab
»Troubleshooting
»glossary
»using help
Content starts here
» Configuring Trust Mode
» Related Topics

The Trust Mode options enable you to select the security required by your system. There are some situations that require a higher level of security than others. Therefore, you are given the following security options:

  • Trust by Certificate. The trust by certificate mode sets the System Management Homepage to accept configuration changes only from HP Systems Insight Manager servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security since it requires certificate data and verifies the digital signature before allowing access. If you do not want to enable any remote configuration changes, leave Trust by Certificate selected, and leave the list of trusted systems empty by avoiding importing any certificates.

    Note: HP recommends using this option.

  • Trust by Name. The trust by name mode sets the System Management Homepage to accept certain configuration changes only from servers with the HP Systems Insight Manager names designated in the Trust By Name field. The trust by name option is easy to configure, and prevents non-malicious access. For example, you could use the trust by name option if you have a secure network with two separate groups of administrators in two separate divisions. It would prevent one group from installing software to the wrong system. This option does not verify anything other than the HP Systems Insight Manager server name submitted.

  • Trust All. The trust all mode sets the System Management Homepage to accept certain configuration changes from any system. For example, you could use the trust all option if you have a secure network, and everyone in the network is trusted.

Configuring Trust Mode

For Windows, the imported HP Systems Insight Manager certificates are stored in the systemdrive \hp\hpsmh\certs directory.

For Linux, the imported System Management Homepage certificates are stored in the /opt/hp/hpsmh/certs directory.

You must have administrative authority to access this directory.

To trust by certificate:

  1. Click SettingsSystem Management HomepageSecurity.

  2. Click Trust Mode.

    The Trust Mode page appears.

  3. Select Trust by Certificate to require trusted certificates.

  4. Click [Trust Certificate] to access the Trusted Management server certificate

  5. Click [Save Configuration] to save the current configurations, or click [Reset Values] to cancel all changes.

The server name option must meet the following criteria:

  • The overall length of the server name list is 1,024 characters

  • Each server name must be less than 64 characters

  • Do not use the following characters as part of the server name:

    ~ ' ! @ # $ % ^ & * ( ) + = \ " : ' < > ? , |

  • Use semi-colons to separate server names

To trust by name:

  1. Click SettingsSystem Management HomepageSecurity.

  2. Click Trust Mode.

    The Trust Mode page is displayed.

  3. Select Trust by Name to trust by server names.

  4. Enter the server name.

  5. Click [Save Configuration] to save the current configurations, or click [Reset Values] to cancel all changes.

To trust all servers:

  1. Click SettingsSystem Management HomepageSecurity.

  2. Click Trust Mode.

    The Trust Mode page is displayed.

  3. Select Trust All to trust all servers.

  4. Click [Save Configuration] to save the current configurations, or click [Reset Values] to cancel all changes.

Related Topics

» Getting Started - Automatically Importing Certificates
» Security - IP Binding
» Security - IP Restricted Login
» Security - Local and Anonymous Access
» Security - Local Server Certificate
» Security - Trusted Management Servers
» Security - User Groups