HP Management Integration Framework Administrator Guide (T5494-96539, October 2012)

This condition can be resolved by installing the Management Group self-signed certificate in the
browser as a trusted certificate authority. See Management Group security certificate installation.
• When an installed Management Group certificate is valid, the next time the browser connects
to the Management Group member machine, the connections will be automatically
authenticated.
• When an installed Management Group certificate is not valid, then a message will appear
for the user to make a decision. If the user does not additionally accept the invalid certificate,
then the connection will fail.
For a security certificate to be considered valid by a browser, the following conditions must be
met:
• The certificate can be authenticated by a trusted certificate authority.
• The dates on the certificate must be valid.
• The common name, or entry in subject alternative name section on the certificate, must match
the address the browser client is using to connect to the Management Integration Framework
service.
OS security domains
The term OS security domain refers to a security domain which is managed by a Management
Group member machines's operating system. All OS security domains have an associated type.
For example, in Windows the types are: local and active directory.
OS user groups (security groups)
An OS user group is a collection of user accounts, managed by an OS, that all have the same
access and security privileges.
The HP Management Integration Framework software automatically establishes relationships
between OS user groups and Management Integration Framework roles. LDAP security domains
can also be associated with the roles by using the Manage OS Security Domains wizard in the
Security interface.
Registry (Management Integration Framework specific)
The term registry refers to the distributed registry tables where Management Integration Framework
discovery components store information and where Management Integration Framework capable
applications can advertise their services and find the services that they need. A registry is located
in every discovery component on every Management Integration Framework server.
The distributed Management Integration Framework discovery components cooperate to replicate
their registries and to forward lookup requests, if necessary. There is no central discovery component
or registry.
You can view a registry page in the configuration interface. See registry page quick tour
OS security domains 47