HP System Management Homepage-Software - Manual (Page 32)

Related Topics
• Security
• IP Binding
• IP Restricted Login
• Local Server Certificate
• Trust Mode
• Trusted Management Servers
• User Groups
Trust Mode
The Trust Mode link provides options to enable you to select the security required by your
system. There are some situations that require a higher level of security than others. Therefore,
you are given the following security options:
• Trust by Certificate Sets the HP System Management Homepage (HP SMH) to accept
configuration changes only from HP Systems Insight Manager (HP SIM) servers with trusted
certificates . This mode requires the submitted server to provide authentication by means of
certificates. This mode is the strongest method of security since it requires certificate data
and verifies the digital signature before allowing access. If you do not want to enable any
remote configuration changes, leave Trust by Certificate selected, and leave the list of
trusted systems empty by avoiding importing any certificates.
NOTE: This is the default behavior on Linux Itanium.
NOTE: HP strongly recommends using this option as it is more secure.
• Trust by Name Sets HP SMH to accept certain configuration changes only from servers
with the HP SIM names designated in the Trust By Name field. For example, you might
use the option if you have a secure network with two separate groups of administrators in
two separate divisions. It prevents one group from installing software to the wrong system.
This option verifies only the HP SIM server that you designate.
NOTE: HP strongly recommends using the Trust by Certificate option as the other options
are less secure.
• Trust All Sets HP SMH to accept certain configuration changes from any system. For
example, you could use the Trust All option if you have a secure network, and everyone in
the network is trusted
NOTE: HP strongly recommends using the Trust by Certificate option as the other options
are less secure.
Configuring Trust Mode
For HP-UX, the imported HP SMH certificates are stored in the /opt/hpsmh/certs directory.
For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory.
For Windows, the imported HP SIM certificates are stored in the systemdrive
\hp\hpsmh\certs
directory.
NOTE: You must have administrative authority to access this directory.
To trust by certificate:
1. Select Settings
→System Management Homepage→Security.
32 The Settings Page