HP System Management Homepage-Software - Manual (Page 48)

HP SMH uses the root certificate, intermediate certificate, and the Certificate Root List (CRL) of the
certificate to verify the revocation status of trusted certificate used for SSO. If the certificate is found
to be revoked or an error is encountered during verification, HP SMH does not allow the user to
access HP SMH through SSO and redirects the user to the login page. HP SMH displays the
following warning message on the login screen when the SSL certificate is revoked: Failed to
verify CA signed certificate used by SMH. See SMH logs for more details.
Detecting and handling memory leak at runtime (Windows only)
When loaded with Webapps, HP SMH may require large memory space. An option is realized
in CLI in HP SMH (Windows only) to monitor the memory usage, and if the memory usage exceeds
the user specified limit or the set default limit, HP SMH reboots (soft restart) without modifying user
settings.
HP SMH reads the memory usage, every 12 hours (twice a day). If the memory usage exceeds
the specified limit, HP SMH reboots. A timer thread is created and Waitable Timer Object (provided
by Windows SDK) is used to set the frequency of checking the memory usage. The Timer thread
is designed to check the operating system time every 1 hour.
Use the following command to set the maximum memory usage limit: smhconfig -J <
max-memory-usage >
where, smhconfig is the command to modify HP SMH settings, —J: Option
to modify max-memory-usage value, <max-memory-usage> is maximum memory usage (in MB).
This field accepts only unsigned integers. The default value is 60 MB. Any value below 60 MB is
not accepted.
If the memory usage exceeds the specified limit, HP SMH is restarted by running smhconfig command
smhconfig -r
, which does not disturb the existing user sessions.
Alternative Names Certificates (Windows and Linux only)
HP SMH allows the setting of multihomed or multiple names to certificates that are not generated
by HP. Through this functionality, SMHs certificate can contain additional information for the
machine, such as other names in the network and IPs that are available. In the same way, it is
possible to create a request certified to be signed by a
Certificate Authority (CA) .
Two kinds of values are acceptable as alternative names:
•
DNS name (for example, Linux;Linux.localdomain)
•
IP Address (for example, 10.16.165.1;192.168.1.189)
Only users in the Administrator User Group and System Administrators (root on Linux and
Administrator on Windows) can edit the Alternative Names fields through the browser.
The multihomed configuration is available by completing the following steps:
1. Select Settings from the menu
2. In the System Management Homepage box, click the Security link.
3. Click the Local Server Certificate link.
4. In the Current Certificate box, enter a value in the Alternative Names field.
5. Click Create.
6. Click Yes and the previous page appears with the message: Success: Value
successfully changed
.
When this happens, the new certificate with the alternative names set are negotiated with the
browser.
Menus (HP-UX only)
The Menus category provides links to add custom menus and remove custom menus:
•
Select Settings
→Menus→Add Custom Menu.
•
Select Settings
→Menus→Remove Custom Menu.
48 The Settings page