HP Insight Management Agents - Manual (Page 24)

are considered less secure than certificate based trust modes. The following are the security
options in the Trust Mode:
◦ Trust by Certificate—Sets HP SMH to accept configuration changes only from HP SIM
servers with trusted certificates. This mode requires the submitted server to provide
authentication by means of certificates. This mode is the strongest method of security
because it requires certificate data and verifies the digital signature before allowing
access. If you do not want to enable remote configuration changes, leave Trust by
Certificate selected, and leave the list of trusted systems empty by not importing certificates.
HP strongly recommends using Trust by Certificate.
◦ Trust by Name—Sets HP SMH to accept configuration changes only from servers with
HP SIM names designated in the Trust By Name field. For example, you might use this
option if you have a secure network with two groups of administrators in two divisions.
It prevents one group from installing software to the wrong system. This option verifies
only the HP SIM server that you designate. Trust by name have a limit of five allowed
Server certificate names.
◦ Trust all—Sets HP SMH to accept specific configuration changes from systems. For
example, you could use the Trust All option if you have a secure network, and everyone
in the network is trusted.
•
Trusted Management Servers—Certificates are used to establish the trust relationship between
Systems Insight Manager or Insight Manager 7 and the System Management Homepage. To
add a certificate to the Trusted Certificates list: Select Import Certificate Data option, copy
and paste the base64 encoded certificate into the text box and press the Import button or
select Add Certificate From Server option, type Server Name into the text box and press Add
button. The certificate information is presented for verification/confirmation before it is added
to the list.
•
User Groups—Users with Administrator access can view and set all information provided
through the System Management Homepage. The appropriate default user group
(Administrators for Microsoft operating systems and root for Linux) always has administrative
access. Windows systems that are part of a domain may specify domain groups as well as
local groups for any level of access. Users with Operator access can view and set most
information provided through the System Management Homepage. Some web applications
limit access to the most critical information to administrators only. Users with User access can
view most information provided through the System Management Homepage. Some web
applications restrict viewing of critical information from individuals with User access.
UI properties
Each user is able to set their preferences for a session. Individual user preferences take precedence
over settings in UI properties. You can change the default look for SMH components. List view
displays it as boxes with children items inside and icon view shows each item as an icon.
You can also change the order in which boxes and items in boxes are displayed. You may choose
to display items either alphabetically or by status, in which case more critical items are listed first.
Enabling the use of custom imagery and warning text provides the ability to customize the sign in
and header images as well as adding a small text in the sign in page.For more information, see
the README.txt file in the hpsmh/data/htdocs/custom_ui directory in the HP SMH install path.
User Preferences
You can change the look for SMH components for your user here. List view displays it as boxes
with children items inside and iconview shows each item as an icon.
You can also change the order in which boxes and items in boxes are displayed. You may choose
to display items either alphabetically or by status, in which case more critical items are listed first.
24 HP Insight Management Agents for servers