Hp Systems Insight Manager Bedienungsanleitung Seite 98
- Seite / 234
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
20 Understanding HP SIM security
This chapter provides an overview of the security features available in the HP SIM framework. HP
SIM runs on a CMS and communicates with managed systems using various protocols. You can
browse to the CMS or directly to the managed system.
Securing communication
Secure Sockets Layer (SSL)
SSL is an industry-standard protocol for securing communications across the Internet. It provides
for encryption to prevent eavesdropping as well as data integrity to prevent modification, and it
can also authenticate both the client and the server, leveraging public-key technology. All
communications between the browser and the CMS are protected by SSL. HP SIM supports both
SSL 3 and TLS 1.0 and enforces stronger cipher suites for the HP SIM SSL web server and the
partner application SOAP servers. HP SIM does not enforce stronger cipher suites for the WBEM
indication receiver..
Secure Shell (SSH)
SSH is an industry-standard protocol for securing communications. It provides for encryption to
prevent eavesdropping plus data integrity to prevent modification, and it can also authenticate
both the client and the server utilizing several mechanisms, including key-based authentication. HP
SIM supports SSH 2.
Hyper Text Transfer Protocol Secure (HTTPS)
HTTPS refers to HTTP communications over SSL. All communications between the browser and HP
SIM are carried out over HTTPS. HTTPS is also used for much of the communication between the
CMS and the managed system.
Secure Task Execution (STE) and Single Sign-On (SSO)
STE is a mechanism for securely executing a command against a managed system using the Web
agents. It provides authentication, authorization, privacy, and integrity in a single request. SSO
provides the same features but is performed when browsing a system. STE and SSO are implemented
in very similar ways. SSL is used for all communication during the STE and SSO exchange. A
single-use value is requested from the system prior to issuing the STE or SSO request to help prevent
against replay or delay intercept attacks. Afterwards, HP SIM issues the digitally signed STE or
SSO request. The managed system uses the digital signature to authenticate the HP SIM server.
Note that the managed system must have a copy of the CMS SSL certificate imported into the Web
agent and be configured to trust by certificate to validate the digital signature. SSL can optionally
authenticate the system to HP SIM, using the system's certificate, to prevent HP SIM from inadvertently
providing sensitive data to an unknown system.
NOTE: For SSO to web agents, the Replicate Agent Settings and Install Software and Firmware
tools each provide administrator-level access to the web agents. HP System Management Homepage
As Administrator, System Management Homepage As Operator, and System Management
Homepage As User each provide SSO access at the described level.
Distributed Task Facility (DTF)
DTF is used for custom command tools and multiple- and single-system aware tools. Commands
are issued securely to the managed system using SSH. Each managed system must have the CMS
SSH public key in its trusted key store so that it can authenticate the CMS. Managed systems are
also authenticated to the CMS by their SSH public key.
98 Understanding HP SIM security
- HP Part Number: 601823-006 1
- Published: August 2012 1
- Edition: Edition 2 1
- Contents 3
- 4 Contents 4
- Contents 5 5
- 6 Contents 6
- Contents 7 7
- 8 Contents 8
- Contents 9 9
- 10 Contents 10
- Contents 11 11
- Part I Introduction 12
- 1 About this document 13
- 2 Product overview 14
- Inventory 15
- Status info 15
- Automatic event handling 15
- Tools and tasks 16
- Collections 16
- Users and Authorizations 16
- ◦ Firefox 3 (3.0.13) or later 16
- Automatically signing in 17
- Configuring the browser 18
- Behavior 18
- Customizing views 20
- Part II Setting up HP SIM 21
- 3 Setting up managed systems 22
- 24 Setting up managed systems 24
- 26 Setting up managed systems 26
- Configuring SSH access 30
- 32 Setting up managed systems 32
- /etc/init.d/hpasm start 33
- 4 Credentials 34
- 5 WMI Mapper Proxy 36
- 6 Discovery 37
- Options on the Discovery page 38
- Discovery credentials 39
- Discovery filters 39
- Discovery of Gen8 servers 40
- 7 Manage Communications 41
- 42 Manage Communications 42
- 8 Automatic event handling 43
- 44 Automatic event handling 44
- 9 Users and Authorizations 45
- 10 Managed environment 46
- Basic search 48
- Advanced search 48
- Searching for tools 49
- 12 Monitoring systems 50
- System status types 51
- Software status types 52
- Monitoring clusters 53
- System properties 54
- 13 Event management 56
- Examples of e-mail pages 58
- Example of a Pager/SMS page 59
- Example of an HTML page 59
- 60 Event management 60
- 62 Event management 62
- 14 Reporting in HP SIM 63
- Snapshot Comparison 64
- Enhanced Reports 64
- Predefined reports 65
- Run Enhanced reports 65
- New Enhanced reports 66
- Editing Enhanced reports 66
- E-mailing reports 66
- Deleting reports 66
- Standard reports 67 67
- 15 HP SIM tools 68
- Viewing results 69
- Example - Device ping 69
- 16 Collections in HP SIM 71
- Types of collections 72
- Other customization features 73
- 74 Collections in HP SIM 74
- ◦ Visible property 75
- ◦ Status Displayed property 76
- Collections in HP SIM 77 77
- 17 HP SIM custom tools 78
- 80 HP SIM custom tools 80
- Custom tool menu placement 81
- Custom tool URL format 81
- View tool definition 82
- Run Now/Schedule 83
- Creating a custom SSA tool 83
- 84 HP SIM custom tools 84
- Example Web launch tool 85
- Example MSA tool 86
- Adding a TDEF to HP SIM 88
- Removing a TDEF from HP SIM 88
- Modifying a TDEF 89
- 18 Federated Search 90
- 19 CMS Reconfigure Tool 92
- Dependencies 93
- Warnings 93
- Changing the CMS password 93
- 96 CMS Reconfigure Tool 96
- Securing communication 98
- Credentials management 99
- Alert on CRL file expiration 100
- CRL distribution points 101
- Warning or error 101
- Conditions for warning 101
- Customizable properties 101
- Certificate sharing 102
- SSH keys 102
- Passwords 102
- Password warnings 103
- Browser session 103
- Internet Explorer zones 103
- Operating-system dependencies 104
- HP SIM database 105
- Command-line interface 105
- Configuring the CMS 106
- Strong security 106
- Configuring managed systems 106
- Moderate 107
- 21 Privilege elevation 110
- Two-factor authentication 111 111
- Security measures to follow 112
- 22 Contract and warranty 113
- Overview 114
- System Information 114
- Contract 114
- 116 Contract and warranty 116
- 23 License Manager 118
- CLI mxlmkeyconfig 119
- License types 119
- Licensed System(s) 121
- Add Licenses 121
- Collect Remote License Info 121
- 122 License Manager 122
- Apply Licenses 123
- Add License page 124
- Key details page 124
- 126 License Manager 126
- About storage systems 127
- Storage events 128
- Storage inventory details 128
- Profiles 130
- SMI-S implementation 130
- Discovery and identification 130
- Using storage solutions 131
- Discovery 133
- 25 Managing MSCS clusters 136
- Cluster fields 137
- Node fields 137
- Network fields 137
- Resource fields 138
- Disk capacity thresholds 138
- CPU utilization thresholds 138
- Cluster Monitor states 139
- Cluster Monitor polling rate 139
- Disk polling rate 140
- MSCS status polling rate 140
- System status polling rate 140
- 26 HP SIM Audit log 141
- Log content 142
- Additional resources 143
- About integration 144
- About software repositories 145
- ◦ Offline mode 145
- ◦ Online mode 145
- MIB management tools 146
- MIB management tools 147 147
- mxmib -l 148
- mxmib -t <myfile.mib> 148
- mxmib -d <myfile.mib> 148
- MIB management tools 149 149
- SNMP Trap Settings page 152
- MIB management tools 153 153
- A Important Notes 154
- Database firewall settings 155
- Annotating the portal UI 155
- Security bulletins 155
- Validating RPM signatures 156
- Central Management Server 157
- Configure or Repair Agents 158
- Data collection reports 158
- B Troubleshooting 159
- 160 Troubleshooting 160
- Container View 162
- Credentials 163
- Data Collection 164
- Database 165
- Discovery 167 167
- Linux servers 168
- Health status 169
- Host name 169
- 170 Troubleshooting 170
- HP Smart Update Manager 171
- 172 Troubleshooting 172
- HP ProLiant Support Pack 173
- HP Systems Insight Manager 173
- Identification 173
- 174 Troubleshooting 174
- Installation 175
- License Manager 175
- Managed Environment 176
- Onboard Administrator 177
- Performance 177
- Ports used by HP SIM 177
- Privilege elevation 178
- Property pages 178
- Reporting 179
- Security 179
- SNMP settings 179
- SNMP traps 179
- 180 Troubleshooting 180
- Tools 181 181
- Virtual identifiers 182
- Virtual machines 183
- WBEM indications 183
- WMI Mapper 183
- 184 Troubleshooting 184
- C Protocols used by HP SIM 185
- 186 Protocols used by HP SIM 186
- D Data Collection 190
- Bi-weekly data collection 191
- E Default system tasks 192
- Biweekly Data Collection 193
- System Identification 193
- 194 Default system tasks 194
- Check Event Configuration 195
- Status polling 195
- F Host file extensions 196
- Default values 198
- DescriptionValueKeyword 199
- <Community String > 199
- Default values 199 199
- G System Type Manager rules 200
- SSA-specific attributes 201
- MSA-specific attributes 201
- WLA-specific attributes 202
- Parameterized strings 203
- Common tool attributes 205
- Table 31 Defined name values 206
- Table 32 All tools values 206
- Table 33 Web-launch tools 206
- Tool Filtering attributes 207
- Environment Variables 208
- Tool parameter guidelines 209
- J Support and other resources 216
- Glossary 217
- 218 Glossary 218
- 220 Glossary 220
- 222 Glossary 222
- 224 Glossary 224
- 226 Glossary 226
- 228 Index 228
- 230 Index 230
- 232 Index 232
- WBEM indications, 183 234
Verwandte Produkte und Handbücher für Werkzeug Hp Systems Insight Manager
Werkzeug Hp Insight Control Bedienungsanleitung
(73 Seiten)
(73 Seiten)
(248 Seiten)Whirlpool R 24 S (EU) podręczniki
Instrukcje obsługi i podręczniki użytkownika dla Lodówki Whirlpool R 24 S (EU).
Dostarczamy 1 pdf podręczników Whirlpool R 24 S (EU) do pobrania za darmo według typów dokumentów: Instrukcja Obsługi
Kommentare zu diesen Handbüchern