HP Systems Insight Manager 5.3 with SP1 Installation and Configuration Guide for Microsoft Windows

1. In Internet Explorer, enable Integrated Windows Authentication under Tools→Internet
Options→Advanced tab.
2. The CMS must be in the Local Intranet or Trusted Sites zone, which can be configured under the
Tools→Internet Options→Security tab.
3. (Optional) If the CMS is in the Internet Explorer Local Intranet zone, select Automatic Logon only in
Intranet zone.
4. (Optional) If the CMS is in the Internet Explorer Trusted Sites zone, select Automatic logon with current
user name and password.
In Firefox:
Firefox must be configured with a list of sites (for example, the CMS) where automatic sign-in can be
performed, and should be restricted to local intranet sites. This list can be configured by entering
about:config in the Firefox address bar. From the list of Preference Names, select
network.negotiate-auth.trusted-uris and either double-click or right-click and select Modify. Here, you
can specify a comma-separated list of URLs or domains, enter the list of URLs used to access HP SIM. For
example:https://cms_fqdn, where cms_fqdn is the FQDN of the CMS.
Behavior
When automatic sign-in occurs, an intermediate sign-in page appears. If you click Cancel from this page,
the manual sign-in page appears. You might want to cancel automatic sign-in if any unexpected network or
domain errors occur. If any browser configuration errors are detected, automatic sign-in is cancelled and
the manual sign-in page appears along with the configuration error.
Failures encountered during automatic sign-in are logged as normal sign-in failures in both the audit log and
the event log. If automatic sign-in is not attempted, no failure is detected or logged by HP SIM.
If automatic sign-in is configured, you can manually sign in to HP SIM.
• If automatic sign-in fails, the manual sign-in page appears This might occur if you are logged in to
the operating system using an account that is not an HP SIM account.
• If automatic sign-in is not attempted This might occur if the browser is not properly configured for
automatic sign-in, or the feature is disabled in HP SIM.
• If you click Sign Out from HP SIM This enables you to specify another user account to use if you are
signed in to the operating system with a different account.
Signing in using SSL
CAUTION: If you are not certain that the HP SIM system to which you are browsing to is actually the HP
SIM system you think it is, do not select either of the last two SSL options. You might give your sign-in
credentials to a rogue system disguised as your HP SIM system, or you might import a certificate from a
rogue system disguised as your HP SIM system and give your sign-in credentials to that rogue system.
If your browser is not configured with the SSL system certificate of the HP SIM system, a security alert regarding
a certificate of untrusted origin might appear when first browsing to HP SIM using SSL. If a security alert
appears, perform one of the following procedures:
• Use the browser to import the certificate into your browser. View the certificate by double-clicking the
lock icon ( ), and then installing the certificate.
• Export the HP SIM system certificate to a file by first browsing from a local browser on the HP SIM
system, and then manually importing it into the remote browser.
• Sign in to the HP SIM system this time without a trusted certificate, but be sure to import the certificate
later. Your data is still encrypted.
After you have an SSL session established with HP SIM, all communications between the browser and HP
SIM are secure through SSL.
Security Alert in Internet Explorer
When you browse to an HP SIM server for the first time using either IE6 or IE7, an SSL certificate warning
is displayed that begins, "There is a problem with this website's security certificate." This warning occurs
Security Alert in Internet Explorer 99