HP Matrix Operating Environment 7.0 Integrity CMS Installation and Configuration Guide (7.0 and 7.1)

instead of using a WBEM user account and password, select Use certificate instead. Online
help for this option is available in Systems Insight Manager. Online help for certificates in
general can be found in the Systems Insight Manager help system under the Networking and
Security topic.
NOTE: On all HP-UX managed systems, HP WBEM Services for HP-UX version A.02.05 or
later is required in order to use certificate-based WBEM authentication.
For more information about WBEM security configuration in Systems Insight Manager, see the HP
white paper Understanding HP SIM 5.3 Security, available from the Information Library link at
http://www.hp.com/go/insightmanagement/sim/.
Preinstallation steps for Linux managed systems
On managed systems running Red Hat Enterprise Linux, disable SELinux to avoid conflicts with
the WBEM providers and agent software.
In order for Linux managed systems to be correctly discovered by Systems Insight Manager, you
must install WBEM and the required WBEM providers from the HP Integrity Essentials Foundation
Pack for Linux Management CD. Download and install the contents of this CD using Procedure 1.
Procedure 1 Download and install Linux management software
1. On the HP Open Source and Linux website at http://hp.com/go/integritylinux, click the HP
Integrity Essentials Foundation Pack for Linux link.
2. Click the Download for HP Integrity Essentials Foundation Pack for Linux link.
3. Click the HPIEFPL - Support Pack link.
The HP Integrity Essentials Foundation Pack for Linux - Support Pack page has installation
requirements and instructions.
4. Click Receive for Free and select the appropriate software specification.
After entering information in the required fields, click Next to download the software.
5. Install the software according to the instructions included on the HP Integrity Essentials
Foundation Pack for Linux - Support Pack page or in the docs directory contained in the tar
file.
6. Make sure that the tog-pegasus package is installed and running on the system.
7. On Red Hat Enterprise Linux, you might need to modify the file /etc/Pegasus/access.conf
to allow WBEM access using your designated WBEM user name and password. Perform the
following steps to configure this file. In this example, your designated WBEM user name is
assumed to be wbemuser.
a. Look for the following line in this file:
-: ALL EXCEPT pegasus:wbemNetwork
b. Change this line to either of the following options:
# Allow access only from user 'wbemuser':
-: ALL EXCEPT wbemuser pegasus:wbemNetwork
# Allow access by all users:
+: ALL EXCEPT :wbemNetwork
c. If tog-pegasus is not running, start it by executing the following command:
# /etc/init.d/tog-pegasus start
OpenSSH on Linux managed systems must be configured for use by Systems Insight Manager.
Normally you can use the same procedure that is used to configure OpenSSH for Systems Insight
Manager on HP-UX managed systems, as described in “Install Insight Management agent software
and configure managed systems” (page 15). However, if you are using SUSE Linux Enterprise
Server 9, you must first manually configure OpenSSH to use password authentication.
Prepare for installation 9