Signing in and using the graphical user interface, Security alerts in internet explorer and firefox, Automatically signing in – HP Systems Insight Manager User Manual
Page 15: Configuring the cms
Signing in and using the graphical user interface
Systems Insight Manager provides a browser-based
. Supported browsers include:
•
For Windows:
Microsoft Internet Explorer 7 or later
•
•
Firefox 3.0.10 or later
•
For HP-UX:
Firefox 3.0.10 or later
To download, go to
•
For Linux:
Firefox 3.0.10 or later
NOTE:
Browser settings:
For all Windows Internet Explorer browsers, you must have the SSL 3.0 or Transport Layer Security
(TLS) 1.0 browser security options enabled for Systems Insight Manager to work properly.
•
•
To use automatic sign-in with Firefox, you must configure Firefox with a list of sites with automatic sign-in.
For more information, see
Initial setup section of the Systems Insight Manager online help.
Security Alerts in Internet Explorer and Firefox
Because the Systems Insight Manager web server uses a self-signed SSL certificate (unless otherwise
configured), you will encounter a browser warning when browsing to the CMS. Firefox warns of an
Untrusted
Connection. Internet Explorer warns of a Certificate Error. Both browsers let you continue, but you can take
measures to avoid repeatedly encountering those warnings. This applies to Systems Insight Manager, SMH,
Integrated Lights-Out (iLO), Onboard Administrator, and all web servers you browse to.
Each time you receive an
Untrusted Connection warning in Firefox, you must add a permanent security
exception to avoid seeing the warning again for that host. Note that if you browse to a single system using
its short host name, fully qualified Domain Name Service (FQDN), and IP address (for example, three different
ways), you must add three security exceptions.
With Internet Explorer, you must install the SSL certificate into the Trusted Root Certification Authorities
certificate store, but the browser will continue to warn you (by default) when details in the certificate do not
match (for example, browsing by short host name when the full host name is in the certificate). To avoid
certificate errors when names do not match, the following setting must be turned off: Internet
Explorer
→Advanced→Security→Warn about certificate address mismatch.
If you do not install the SSL certificate in Internet Explorer 8, these warnings appear for each pop-up window
that appears in Systems Insight Manager.
Automatically signing in
You can sign in to Systems Insight Manager using the same account with which you are logged in on your
desktop, bypassing the Systems Insight Manager sign-in page. If user groups are configured for Systems
Insight Manager, membership in these groups is accepted and treated the same as if you manually signed
in.
Configuring the CMS
•
Systems Insight Manager must be running on a Windows CMS that is a member of a Windows domain.
The browsing system must be a member of the same domain.
•
The Systems Insight Manager service account must be a domain account; local accounts can not be
used.
•
The CMS must be registered with an SPN in the domain, which requires a domain administrator to
configure. From any system that is a member of the domain, the domain administrator can run the
setspn.exe
utility from the Windows Support Tools. For example:
setspn -a HTTP/<cms_fqdn> <sim_service_account>
Signing in and using the graphical user interface
15