HP Systems Insight Manager - Manual (Page 28)

4 Credentials
In Systems Insight Manager, credentials are used to enable the CMS to communicate with managed systems,
through WBEM, WS-MAN, SSH, and SNMP. However, the Sign-in credential is used unless you configure
the other protocols. The Sign-in credential is protocol independent and can be tied to systems through the
discovery credential. In Systems Insight Manager, there are three different types of credentials:
•
System credentials Credentials used by identification to access managed systems. These credentials
include WBEM, WS-MAN, and SSH credentials, Sign-in, SNMP community string, and Single Sign-On
(SSO) credentials.
•
Discovery task credentials Credentials used by a discovery task that apply to all systems discovered
by that task.
•
Global Credentials Global credentials are system credentials that apply to all systems.
During the identification process (done automatically during discovery), credentials are tried, starting with
System Credentials. If they do not work, and the Try Others setting is chosen for them, then Discovery
credentials are used. Similarly, if those do not work and the Try Others setting is chosen, then Global
Credentials are tried. As soon as a credential is found that works, Systems Insight Manager notes that
credential as
working and continues to use it for regular communications with the managed system as long
as it continues to work. If it should fail, then the process is repeated the next time identification is run. To see
the
working credentials for any managed system, go to the System Credentials page
(Options
→Security→Credentials→System Credentials). These working credentials appear in the
Credentials that are in use table.
When a discovery credential is used to successfully communicate with a system, a credential reference is
created for that system. If the credential is later changed on that same discovery task, the credential that is
used on all systems referencing it changes. This enables credentials to be changed in one place (usually
passwords for an account) and immediately be available for use in Systems Insight Manager. The same is
true for global credentials.
Because of this, if a global or discovery credential is deleted, you are asked if all references to that credential
should be removed or if copies should be made as system credentials for each system that is referencing the
current credential.
However, when a credential is overwritten, instead of deleted and then re-added, the credential is changed
and each system referencing it uses the new username/password values.
If the intent is not to change what is currently in use, you must add a new credential. For discovery tasks, a
new discovery task must be created with its own credentials, instead of editing an existing discovery task,
if the systems require different credentials than contained in the existing discovery task.
Example XML file to add more than 10 WBEM username and password
pairs
To save time and effort, create an XML file that defines your system authorizations before running discovery.
For example:
<?xml version="1.0" encoding="UTF-8"?>
<!--
15.43.215.47
15.43.212.150
15.3.110.117
15.3.105.51
15.3.110.113
-->
<nodelist>
<node name="system1">
<credential protocol="wbem" username="root"
Example XML file to add more than 10 WBEM username and password pairs 28