Manualshelf

HP Insight Control Server Provisioning 7.2 Administrator Guide

ManualsBrandsHP ManualsSoftwareHP Insight Control including 1yr 24x7 Technical Support and Updates Single Server License
21222324252627282930
to succeed. The certificate can be obtained from a browser pointed at the appliance. See
“Download” (page 27) for information on downloading the certificate.
4.12 Appliance hardening
4.12.1 Port list
The following table lists the ports that must be open for Insight Control server provisioning.
DescriptionPort
ssh22 (tcp)
http80 (tcp)
https443 (tcp)
SA agent communications3001 (tcp)
DHCP67 (udp)
TFTP69 (udp)
Agent gateway8017 (tcp, udp)
Agent cache8081 (tcp)
RPC – for boot file NFS111 (tcp, udp)
NFS – for boot files only2049 (tcp, udp)
mountd892 (tcp, udp)
ntp123 (udp)
4.12.2 Console access
Console access is provided for three purposes: a UI Kiosk, appliance administrator password reset,
and access by an on-site HP Services tech. Access to the local console itself, for example, using
the vSphere client, should be restricted to prevent unauthorized users from attempting to login
through the console. See “Restricting console access” (page 30). The UI Kiosk is displayed in a
graphical console while password reset and HP Services access are available via a non-graphical
console.
The instructions for switching from one console to the other are:
Open the appliance console from vSphere.
1. Press and hold Ctrl+Alt.
2. Press and release the spacebar.
3. Press F1 to select the non-graphical console or F2 to select the graphical console.
4. Release Ctrl+Alt.
4.12.3 Console UI kiosk
The kiosk-mode browser is locked down and restricted to prevent any potential misuse or security
issues. It is not intended as a full-featured replacement for your own browser, but rather as a means
to access the appliance to run first time setup to initially configure the appliance network so it can
be accessed remotely.
4.12.4 Appliance administrator password reset
If the Administrator user password is lost, it can be reset from the appliance console. The steps
to reset the password are:
1. Open the appliance console from vSphere and display the non-graphical console.
4.12 Appliance hardening 29