Browser session, Internet explorer zones, System link format – HP Systems Insight Manager User Manual

Page 107: Operating-system dependencies, User accounts and authentication

Advertising
background image

Browser session

By default, HP SIM does not time-out a user session while the browser is displaying the HP SIM
banner. This is known as monitor mode, and allows a continuous monitoring of the managed
systems without any user interaction. The session times-out after 20 minutes if the browser is closed
or navigates to another site.

An active mode is also supported where the session times out after 20 minutes if the user does not
interact with HP SIM, by clicking a menu item, link or button. You can enable active mode by
editing the globalsettings.props file and change the EnableSessionKeepAlive setting to
false.

Best security practices include care when visiting other websites. You should use a new browser
window when accessing other sites; when you are finished using HP SIM you should both sign out
and close the browser window.

Internet Explorer zones

Internet Explorer supports several zones that can each be configured with different security settings.
The name used to browse to HP SIM or managed systems can affect which browser zone Internet
Explorer places the system. For example, browsing by IP address or full Domain Name System
(DNS) (for example, hpsim.mycorp.com) can place the system into the browser's more restrictive
Internet zone, causing improper operation. Ensure systems are being placed into the correct Internet
zone when browsing. You might need to configure Internet Explorer, or use a different name format
when browsing.

System link format

To facilitate navigation to managed systems, HP SIM provides the System Link Configuration option
to configure how links to managed systems are formed. Go to Options

→Security→System Link

Configuration.

The following options are available:

Use the system name

Use the system IP address

Use the system full DNS name

If you need full DNS names to resolve the system on your network, keep in mind that the browser
might display a warning if the name in the system's certificate does not match the name in the
browser.

Operating-system dependencies

User accounts and authentication

HP SIM accounts are authenticated against the CMS host operating system. Any operating system
features that affect user authentication affect signing into HP SIM. The operating system of the CMS
can implement a lock-out policy to disable an account after a specified number of invalid sign in
attempts. Additionally, an account can be manually disabled in the Microsoft Windows domain.
Any account that cannot authenticate against the operating system prevents signing into HP SIM
using that account. For automatic sign-in to HP SIM,

user accounts

must be domain accounts.

NOTE:

A user who is already signed into HP SIM is not re-authenticated against the operating

system until the next sign in attempt and continues to remain signed into HP SIM, retaining all rights
and privileges therein, until signing out of HP SIM.

Operating-system dependencies 107

Advertising