HP Systems Insight Manager 7.3 User Guide

a. hp.Database.ssl=authenticate
b. hp.Database.username=username
c. hp.Database.password=password
4. Append the following value at the end of the value set in the connection-url tab of the
hpsim-ds.xml file, located in the ~/HP Systems Insight Manager/ jboss/server/
hpsim/deploy/ folder.
;ssl=authenticate
5. Restart the SQL Server services.
6. Start HP SIM.
NOTE: This feature is supported only on Windows CMS with MS SQL Server as database.
You can use Java keytool to import SQL Server certificate into the hp.keystore file.
You can use HP SIM GUI by selecting tools.
For additional information, see:
http://support.microsoft.com/kb/316898
http://msdn.microsoft.com/en-us/library/ms189067.aspx
http://msdn.microsoft.com/en-us/library/ms378567%28v=sql.90%29.aspx
SQL Server and MSDE
HP SIM uses only Windows authentication with SQL Server and MSDE. The installation of MSDE
with previous versions of HP SIM creates a random password for the sa account, though it is not
used for HP SIM.
Remote SQL Server
SQL Server supports advanced security features, including SSL encryption during sign in and data
communication. More information can be found in SQL Server documentation and the Microsoft
website.
PostgreSQL
PostgreSQL uses a password that is randomly generated when HP SIM is installed. This password
can be changed through the command line. See the mxpassword manpage for more information.
Oracle
The Oracle database administrator must create a user (preferably with a non-blank password) for
HP SIM to use when connecting to Oracle. The Oracle user must have, at the minimum, the Connect
and DBA roles, which allow HP SIM to have the correct privileges to create and delete HP SIM
tables and views, along with read/write access to the HP SIM tables. Changes to the operating
data, such as authorizations, tasks, and collection information, can affect the operation of HP SIM.
System data contains detailed information about the managed systems, some of which might be
considered restricted, including asset information, configuration, and so on. Task data can contain
extremely sensitive data, such as user names and passwords.
Command-line interface
Much of HP SIM's functionality can be accessed through the command line. To access the
command-line interface, you must be logged on to the CMS using an operating system account
that is a valid HP SIM user account. That account's authorizations and privileges within HP SIM
apply to the command line interface as well.
114 Understanding HP SIM security