HP Systems Insight Manager 5.2 Update 2 Technical Reference Guide

• Configure secure shell (SSH) access. Select this option to configure SSH access on managed systems.
If this option is selected, you must select one of the following options:
• Host based authentication for SSH
Note: For this option to work, the user name and password provided in step 2 must be an
administrative level account. For Linux or HP-UX targets, it must be the "root" account and
password.
• Each user has to be authenticated on the managed system
Note: If you do not want all users that have login access to HP SIM to run the tool and you
would like to control which users need to have access, this option is more secure.
Note: SSH can be configured only if the OpenSSH service is running on the managed systems.
OpenSSH can be installed on Windows systems, by running the Install Open SSH as done
in step three or by selecting the tool under Deploy→Deploy Drivers→Firmware and
Agents→Install Open SSH.
• Set Trust relationship to "Trust by Certificate". Select this option to configure systems to use the
Trust by Certificate trust relationship with the System Management Homepage.
For System Management Homepage on the target systems, this option sets the trust mode to Trust
by Certificate and copies the HP SIM system certificate to the target system trusted certificate
directory. This option enables HP SIM users to connect to the System Management Homepage
using the certificate for authentication. See “Trusted certificates” for more information.
Note: If you experience problems later setting the trust status on a Linux managed system, see
“Troubleshooting” under Certificate Problems for assistance.
You can configure Single Sign-On (SSO) to management processors for Onboard Administrators
and for Integrated Lights-Out 2 (iLO2). To configure SSO, select Set Trust Relationship. After
SSO is configured, you are not continually prompted to supply the login credentials for the
management processor.
Note: For systems with Management HTTP Server 4.x and earlier, Configure or Repair Agents
adds the Administrator password in the Management HTTP Server store and modifies the SNMP
settings but cannot change trust relationship information because Management HTTP Server 4.x
and earlier did not deploy trust relationships.
• Configure Version Control Agent (VCA). Select this option to configure the VCA to point to the HP
Version Control Repository Manager (VCRM), where the repository of software and firmware is
located, enabling version comparison and software updates. This option is available only for
Windows systems. This section can be accessed in the Configuration section of all CMS systems
including Windows, Linux and HP-UX.
To configure VCA:
1. In the Select the system where the VCRM is installed field, select the server where the
VCRM is installed from the dropdown list.
2. In the User Name field, enter the user name to access the VCRM. This user cannot be the
default Administrator user. The user must have administrative privileges.
3. In the Password field, enter the password to access the VCRM.
4. In the Confirm Password field, reenter the password for the VCRM just as you entered it in
the Password field.
• Set administrator password for Insight Management Agents version 7.1 or earlier. Select this option
to repair the administrator password on all Insight Management Agents installed on the target
systems as applicable for Windows and Linux systems.
Note: Do not set this option if you have Insight Management Agents 7.2 or later installed.
Note: If the remote system is running HP-UX, this option is not executed on the remote system
because it is not applicable on HP-UX systems. If only HP-UX target systems are being configured
at this time, you do not need set this option.
If this option is selected, you must complete the following steps:
Setting up managed systems 75