20 understanding hp sim security – HP Systems Insight Manager User Manual

Page 6

Advertising
background image

Changing the HP SIM and HP Insight Control database credentials.....................................97

Changing the database authorizations for Matrix OE and HP Operations Orchestration....97

Reconfiguring the CMS to use a different database................................................................98

Dependencies...............................................................................................................98
Warning......................................................................................................................98
Changing the database associated with the CMS..............................................................98

20 Understanding HP SIM security...........................................................100

Securing communication...................................................................................................100

Secure Sockets Layer (SSL)............................................................................................100

How to configure ciphers.........................................................................................100

Secure Shell (SSH).......................................................................................................100
Hyper Text Transfer Protocol Secure (HTTPS)....................................................................100
Secure Task Execution (STE) and Single Sign-On (SSO)....................................................100
Distributed Task Facility (DTF)........................................................................................101
WBEM......................................................................................................................101
LDAP.........................................................................................................................101
RMI...........................................................................................................................101

Credentials management..................................................................................................101

SSL certificates............................................................................................................101

HP SIM main certificate...........................................................................................101
HP SIM SSO certificate............................................................................................102
WBEM certificate...................................................................................................102
Upgrading to HP SIM 7.2........................................................................................102

Certificate expiration and Certificate Revocation Check (CRL Check)..................................102

Source of client and server certificates.......................................................................102
Enabling or disabling certificate revocation check.......................................................103
Offline and online mode of certificate revocation check...............................................103

Offline mode....................................................................................................103
Online mode....................................................................................................103

CRL distribution points.............................................................................................103
Warning or error....................................................................................................104
Conditions for warning............................................................................................104
Customizable properties..........................................................................................104

Certificate sharing.......................................................................................................104
SSH keys....................................................................................................................104
Passwords..................................................................................................................105
Insight Control for VMware vCenter Server server authorizations........................................105

Browser..........................................................................................................................106

SSL............................................................................................................................106
Cookies.....................................................................................................................106
Passwords..................................................................................................................106
Password warnings......................................................................................................106
Browser session...........................................................................................................107
Internet Explorer zones.................................................................................................107
System link format.......................................................................................................107

Operating-system dependencies.........................................................................................107

User accounts and authentication..................................................................................107
File system..................................................................................................................108
Background processes.................................................................................................108
Windows Cygwin.......................................................................................................108
HP-UX and Linux.........................................................................................................108

HP SIM database.............................................................................................................108

Configuring the SQL Server to enable SSL connection on database in HP SIM.....................108

Installing a certificate on a server with Microsoft Management Consold (MMC)..............109

6

Contents

Advertising