HAFM SW 08.08.00 HP StorageWorks HA-Fabric Manager User Guide (AA-RS2CH-TE, August 2006)

HA-Fabric Manager user guide 177
Changing security data externally
When security data is changed by another interface such as HTTP or Telnet, the Security
Administrator should be notified because the working data can be affected by the table’s live
update.
If the security settings for a switch or director are changed by another management interface, then
the following occurs:
• If the switch that was changed by another interface is not currently configured by your HAFM
appliance user, the top table accepts the changes, and an event is generated in the Security
Log.
• If the changes made by another interface affect the switch whose security data is currently
being modified by a Security Administrator, a message is displayed indicating the security
settings have been changed by an external source. The message asks you if you want to load
the new settings from the switch or keep your changes.
•Click Load New Settings—The information is displayed on the top table and configuration
on the bottom tab update. All working data is overridden by the new data in the switch.
•Click Keep Changes—The updates are made to the switch, but you can maintain the
configuration both on the top table and bottom tab. If needed, these changes can be
overridden with the current configuration.
Accessing SANtegrity Security Center tabs
The Authentication section has five tabs:
• Users—Allows the Security Administrator to set up users accessing the switch from CLI and web
interfaces tab, the Security Administrator specifies whether the Telnet and HAFM Basic
interfaces are enabled, which method the switch or director uses to authenticate users, and
which users are authorized to use these interfaces.
• Software—Allows the Security Administrator to set up software applications that can
communicate with the switch through API.
• Device—Allows the Security Administrator to set device-to-device authentication parameters.
The Device tab is PFE key-enabled. If a proper PFE key is not provided, the Device tab is not
accessible.
• IP Access Control—Allows the Security Administrator to set up IP addresses to manage the
switch.
• Radius Server—Allows the Security Administrator to set RADIUS server parameters that the
switch can use to pass authentication information to the designated RADIUS servers.
The following buttons are used on the Authentication tabs: