HP System Management Homepage 7.0 Installation Guide

1. Select Trust by Certificate, and click Next.
2. In the Certificate Name field, click Browse to select the certificate file. After you select
the certificate file, the certificate data appears on the screen.
3. Click Add. The certificate appears under Certificate Files. You can click Save to save
your changes up to this point or click Cancel to discard the changes and close the
wizard.
4. Click Next. The IP Binding page appears.
• Trust by Name
Sets HP SMH to accept certain configuration changes only from servers with the HP SIM
certificate names designated in the Trust By Name field. The Trust By Name option is
easy to configure. For example, you might use the Trust By Name option if you have a
secure network with two separate groups of administrators in two separate divisions. This
option prevents one group from installing software to the wrong system. This option verifies
only the HP SIM server certificate name submitted.
CAUTION: HP strongly recommends using the Trust by Certificate option because the
other options are less secure.
The server name option must meet the following criteria:
◦ Each server certificate name must be less than 64 characters.
◦ Special characters must not be included as part of the server certificate
name: ~ ' ! @ # $ % ^ & * ( ) + = \ ": ' < > ? , | .
To trust by name:
1. Select Trust by Name, and click Next.
2. In the Trusted Server Name field, enter the HP SIM server certificate name to be
trusted.
3. Click Add. The trusted HP SIM server certificate name appears under the Trusted
Servers list. You can click Save to save your changes up to this point or click Cancel
to discard the changes and close the wizard.
4. Click Next. The IP Binding page appears.
• Trust All
Sets HP SMH to accept certain changes from any server.
CAUTION: HP strongly recommends using the Trust by Certificate option because the
other options are less secure.
To trust all servers:
1. Select Trust All. You can click Save to save your changes or click Cancel to discard
the changes and close the wizard.
2. Click Next. The IP Binding page appears.
9. IP Binding specifies from which IP addresses HP SMH accepts requests and provides control
over which nets and subnets requests are processed.
Administrators can configure HP SMH to bind only to addresses specified in the IP Binding
page. You can define a maximum of five subnet IP addresses and netmasks.
An IP address on the server is bound if it matches one of the entered IP Binding addresses
after the mask is applied.
NOTE: HP SMH always binds to 127.0.0.1. If IP Binding is enabled and no subnet/mask
pairs are configured, then the HP SMH is available only to 127.0.0.1. If IP Binding is not
enabled, HP SMH binds to all addresses.
Preconfiguring the HP SMH component 45