HP Systems Insight Manager - Manual (Page 19)

Configuring the CMS
•
HP SIM must be running on a Windows CMS that is a member of a Windows domain. The
browsing system must be a member of the same domain.
•
The HP SIM service account must be a domain account; local accounts can not be used.
•
The CMS must be registered with an SPN in the domain, which requires a domain administrator
to configure. From any system that is a member of the domain, the domain administrator can
run the setspn.exe utility from the Windows Support Tools. For example:
setspn -a HTTP/<cms_fqdn> <sim_service_account>
Where HTTP is in all capital letters, <cms_fqdn> is the FQDN of the CMS, and
<sim_service_account> is the domain account under which HP SIM service runs.
IMPORTANT: Automatic sign-in fails if the SPN registered more than once. If you change
the name of the HP SIM service account, you must first delete the SPN associated with the old
service account name, and then register the new service account name:
setspn -d HTTP/<cms_fqdn> <old_sim_service_account>
setspn -a HTTP/<cms_fqdn> <new_sim_service_account>
NOTE: Local accounts cannot be used for HP SIM service account if automatic sign-in is
desired.
•
The automatic sign-in feature must be enabled in HP SIM in the globalsettings.props
file. You can use the mxglobalsettings command, or directly modify the file. Set the value
for the AutomaticSignIn property to 1. Restarting HP SIM is not necessary.
Configuring the browser
•
Supported in Internet Explorer 8, Internet Explorer 9, Internet Explorer 10 and Firefox. Internet
Explorer 7 is not supported.
•
The browsing system must be remote; browsing locally from the CMS does not perform
automatic sign-in.
•
The browsing system and the CMS must be members of the same Windows domain.
•
You must be logged in to the browsing system with a domain account that is configured as a
user account in HP SIM, or is a member of a user group configured in HP SIM.
•
There must be no proxy servers between the browser and the CMS. Use the proxy bypass list
in the browser, or use no proxy at all.
•
The browser must be configured to support automatic sign-in.
•
The remote browsing machine must use Adobe 10. Adobe 11 is not supported.
Procedure 1 Configuring the browser in Internet Explorer
1. In Internet Explorer, enable Integrated Windows Authentication under Tools
→Internet
Options
→Advanced tab.
2. The CMS must be in the Local Intranet or Trusted Sites zone, which can be configured under
the Tools
→Internet Options→Security tab.
3. (Optional) If the CMS is in the Internet Explorer Local Intranet zone, select Automatic Logon
only in Intranet zone.
4. (Optional) If the CMS is in the Internet Explorer Trusted Sites zone, select Automatic logon
with current user name and password.
Configuring the browser in Firefox:
Firefox must be configured with a list of sites (for example, the CMS) where automatic sign-in can
be performed, and should be restricted to local intranet sites. This list can be configured by entering
Signing in and using the graphical user interface 19