HP Systems Insight Manager - Manual (Page 99)

Systems Insight Manager database
Access to the database server should be restricted to protect Systems Insight Manager data. Specify
appropriate non-blank passwords for all database accounts, including the system administrator
(sa) account for SQL Server. Changes to the operating data, such as authorizations, tasks, and
collection information, can affect the operation of Systems Insight Manager. System data contains
detailed information about the managed systems, some of which might be considered restricted
including asset information, configuration, and so on. Task data might contain extremely sensitive
data, such as user names and passwords.
SQL Server and MSDE
Systems Insight Manager uses only Windows authentication with SQL Server and MSDE. The
installation of MSDE with previous versions of Systems Insight Manager creates a random password
for the sa account, though it is not used for Systems Insight Manager.
Remote SQL Server
SQL Server supports advanced security features, including SSL encryption during sign in and data
communication. More information can be found in SQL Server documentation and the Microsoft
website.
PostgreSQL
PostgreSQL uses a password that is randomly generated when Systems Insight Manager is installed.
This password can be changed through the command line. See the mxpassword manpage for
more information.
Oracle
The Oracle database administrator must create a user (preferably with a non-blank password) for
Systems Insight Manager to use when connecting to Oracle. The Oracle user must have, at the
minimum, the Connect and DBA roles, which allow Systems Insight Manager to have the correct
privileges to create and delete Systems Insight Manager tables and views, along with read/write
access to the Systems Insight Manager tables. Changes to the operating data, such as authorizations,
tasks, and collection information, can affect the operation of Systems Insight Manager. System
data contains detailed information about the managed systems, some of which might be considered
restricted, including asset information, configuration, and so on. Task data can contain extremely
sensitive data, such as user names and passwords.
Command-line interface
Much of Systems Insight Manager's functionality can be accessed through the command line. To
access the command-line interface, you must be logged on to the CMS using an operating system
account that is a valid Systems Insight Manager user account. That account's authorizations and
privileges within Systems Insight Manager apply to the command line interface as well.
NOTE: On a Windows system, the operating system account must have administrator-level access
on the CMS for all of the commands to work properly.
How to: configuration checklist
General
•
Configure firewalls to allow desired ports and protocols
•
Review lockdown versus ease of use
•
After configuring the CMS and managed systems, run discovery on the CMS
Systems Insight Manager database 99