HP System Management Homepage User Guide HP-UX, Linux, and Windows Operating Systems HP Part Number: 509679-006 Published: April 2011 Edition: 1
© Copyright 2009, 2011 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Table of Contents 1 Product overview........................................................................................9 Product features......................................................................................................................................9 HP SIM..................................................................................................................................................9 2 Getting started..............................................................
Local Server Certificate category..................................................................................................36 Port 2301 category.....................................................................................................................37 Timeouts category......................................................................................................................39 Session Timeout.......................................................................................
Maximum Number of Sessions (Windows and Linux only)..........................................................................68 Session Timeout....................................................................................................................................68 UI Timeout...........................................................................................................................................68 Log Level.........................................................................
List of Tables 2-1 4-1 4-2 6-1 9-1 9-2 12-1 12-2 13-1 A-1 B-1 Firewall exceptions..........................................................................................................................14 Status icons....................................................................................................................................24 Icon View......................................................................................................................................
1 Product overview HP System Management Homepage (HP SMH) is a web-based interface that consolidates and simplifies single system management for HP servers running the HP-UX, Linux, and Microsoft Windows operating systems.
2 Getting started To get started with HP System Management Homepage (HP SMH), use the following information when configuring HP SMH and setting up users and security properly. To configure HP SMH: • On Linux operating systems, HP SMH is installed with default settings. You can configure the settings using the script /opt/hp/hpsmh/sbin/hpSMHSetup.sh for Itanium systems. • On Windows operating systems, the installation enables you to configure HP SMH settings during installation.
1 2 User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name and password for signing-in to HP SMH. Clear. Erases user name and password input fields. 5 Question mark. Show/hide tooltip box. If an error occurs on a sign-in attempt, you are returned to the Sign In page. A configuration mechanism enables the administrator to customize the image and the message in the Sign In page.
Administrator on Windows and root on Linux have administrator access on HP SMH. 4. 5. Enter the password that is recognized by the operating system. Click Sign In. The System Management Homepage appears. Starting HP SMH from Mozilla or Firefox To sign in to HP SMH with Mozilla or Firefox: 1. Navigate to https://hostname:2381/.
Configuring firewall settings Windows Some operating systems including Windows XP with Service Pack 2 and Windows Server 2003 SBS implement a firewall that prevents browsers from accessing the ports required for the Version Control Repository Manager access. To resolve this issue, configure the firewall with exceptions to enable browsers to access the ports used by HP SIM and Version Control Repository Manager.
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT The following displays the new value in the iptables firewall rules for Red Hat Enterprise Linux 4 and 5 that allows access to HP SMH in the /etc/sysconfig/iptables file: # Firewall configuration written by redhat-config-securitylevel # Manual customization of this file is not r
Configuring timeout settings for HP-UX Two HP SMH timeout settings can be configured: • SMH service timeout Sets the amount of time, in minutes, before the HP SMH server stops. • SMH session timeout Sets the amount of time, in minutes, before an HP SMH GUI session stops. NOTE: Selecting the Session never expires check box avoids HP SMH session timeouts by sending a background request every three minutes. This option, when selected, also prevents HP SMH service timeouts.
NOTE: 1 2 Your login must have administrative access to HP SMH to automatically import the HP SIM certificate. User Name. The user must be part of a user group accepted by HP SMH. Password. The user name and password must match a valid user. 3 4 Sign In. Validates user name and password for signing in to HP SMH. Clear. Erases user name and password input fields. 5 6 Question mark. Show/hide tooltip box. Automatically import management server certificate.
3 Scenarios IP Binding You can use IP Binding for example when a system has multiple IP addresses and you want to limit the access to HP SMH to particular networks or subnets like: • For infrastructure (IPv4 and IPv6) • Multiple subnets • Security • Bandwidth For more information, see “IP Binding category”.
4 Navigating the Software The HP System Management Homepage (HP SMH) displays all HP Web-enabled System Management Software that provides information. In addition, HP SMH displays various categories (in boxes) that have icons defining the status of the items. The HP SMH main page is divided into two major areas: the header and the standard container. • Header Frame The header frame is constantly visible regardless of the page you are viewing and contains the following four subareas: • Master header.
• Data Frame. The standard container contains the sections or pages as: • Boxes • Icons • Pages as configurations • Support • Help • Webapps The data frame shows the status for all HP Web-enabled System Management Software and utilities on the system.
• • If Local Access is enabled, the Current User displays hpsmh_local_anonymous or hpsmh_local_administrator, depending on what level of access has been enabled, and local access appears below user type. • If user type is hpsmh_local_administrator, no sign in or sign out link appears. Boxes. Boxes display webapps results in a list of items with their result status.
• • Dynamic Lists in Pages. A dynamically created list of elements appears for each item you want to add or remove to a page and are available for the following pages: • IP Binding • IP Restricted Login • Trust Mode • Kerberos Authentication • User Groups Legend: This link displays a tooltip box that lists the status of the installed webapps. Table 4-1 Status icons Icon Status Critical Major Minor Warning Normal Disabled Unknown Informational • Management Processor.
Table 4-2 Icon View Icon Description Component Status Summary The Component Status Summary displays links to all subsystems that have a critical, major, minor, or warning status, which the integrated HP Web-enabled System Management Software provides. If there are no agents installed or no critical, major, minor or warning items, the Component Status Summary displays no items. Generic Icon The generic icon is provided when a webapp does not have an icon.
Icon Description Trusted Management Servers Configures the certificates that are stored in the server and allows you to add or remove certificates. User Groups Allows an authorized user to configure which group of users has access to HP SMH and their respective access level. Kerberos Users Allows an authorized user to configure which users have Kerberos authenticated access to HP SMH and their respective access level. UI Properties Controls options for the appearance of HP SMH.
5 The Home page The Home page provides the system, subsystem, and status views of the server. The Home page displays groupings of systems and their status. The information on the Home page is provided by the integrated agents or management utilities. For Linux and Windows operating systems, the Home page includes information provided by integrated version control, server, and storage agents.
6 The Settings Page The Settings page contains links to the settings and configuration pages of the HP System Management Homepage (HP SMH) and other integrated management tools found on the Tools page. SNMP webagent box Provides links that enable you to configure HP Web-enabled System Management Software agents. • SMH Data Source category (Windows and Linux only) • SNMP Configuration category (Windows and Linux only) Management Software agents.
To configure the UI Options, complete the following steps: 1. 2. 3. Select Settings from the menu. In the SNMP Webagent box, click the UI Options link. Remove the check in the check box beside Show Help Icons to no longer display inline help icons. Select the check box beside Show Help Icons to display the inline help icons. 4. Click Save and Apply Changes. System Management Homepage Box The System Management Homepage Box provides links that enable you to configure HP SMH settings.
To set UI Properties, complete the following steps: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the UI Properties link. From the Presentation Mode list, Select List or Icon. From the Box ordering list, select By status or By name. From the Box item ordering dropdown list, select either By status or By name. To use a custom image and custom warning, complete the following steps: a.
6. 7. If you do not want the session to expire (in the case of HP-UX only), click the check box beside Session Never Expires. Click Apply. NOTE: Each user is able to set their preferences for a session. Individual user preferences take precendence over settings in UI properties.
1 2 Allow Anonymous users access to unsecured pages. Turn on automatic logon in HP System Management Homepage 3 Anonymous Access Enables a user to access the HP SMH without logging in. If Anonymous is selected, any user, local or remote, has access to unsecured pages without being challenged for a username and password. 4 5 Apply Save page data. Enables a Administrator to access the HP SMH without logging in. To enable anonymous access: 1. 2. 3. 4. 5. Select Settings from the menu.
IP Binding category IP Binding specifies the IP addresses that HP SMH accepts requests from and controls the nets and subnets that requests are processed. Administrators can configure HP SMH to only bind to addresses specified in the IP Binding window. Five subnet IP addresses and netmasks can be defined. An IP address on the server is bound if it matches one of the entered IP Binding addresses after the mask is applied. HP SMH on Windows and Linux supports both IPv4 and IPv6 addresses.
5. 6. Click Remove. Click Apply to apply the configurations. Each IP address and netmask must consist of four octets with values between 0 and 255 (the same for each netmask). Netmasks must start with the number 1 in the highest bit and continue with all number 1s until they switch to all number 0s (for example, 255.255.0.0, 192.0.0.0, 255.192.0.0).
6. 7. Click Add to add the configurations. Click Apply to apply the configurations. To remove IP addresses from the list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the IP Restricted Login link. Select the check box beside the IP addresses you want to remove. Click Remove. Click Apply to apply the configurations.
To create a certificate: 1. 2. 3. 4. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Local Server Certificate link. Replace the default values in the Organization or Organizational Unit fields in the Create PKCS #10 Data box with your values, up to 64 characters. If not specified, they are filled in with Hewlett-Packard Company for the Organization and Hewlett-Packard Network Management Software (SMH) for the Organizational Unit. 5.
1 Enable Port 2301 2 Sets Port 2301 as enabled or disabed. Enables Autostart mode. Sets Port 2301 as enabled or disabed. 3 Apply Record the option into the XML configuration file. To enable or disable Port 2301, complete the following steps: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Port 2301 and Autostart link. To enable Port 2301, check Port 2301 check box. To disable Port 2301, clear the Port 2301 check box.
IMPORTANT: ▲ Consider the following before you disable port 2301: If you disable port 2301 when HP SMH is in autostart URL mode, the start mode automatically changes to start on boot mode. To disable Port 2301, complete the following steps: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Port 2301 link. In the Configuration box, clear the Enable Port 2301 check box. Click Apply. To enable Port 2301, complete the following steps: 1.
Table 6-1 Timeout settings Timeout Range Session timeout 1 – 60 minutes (Windows and Linux) UI timeout 10 – 3600 seconds Session Timeout To change the value for Session timeout, complete the following steps: 1. 2. 3. 4. 5. Select Settings from the menu In the System Management Homepage box, click the Security link. Click the Timeouts link. In the Session timeout (minutes) textbox, enter a value between 1 and 60 minutes in the case of Windows and Linux. Click Apply.
System Management Homepage Box 41
1 Trust by Certificate Sets HP SMH to accept configuration changes only from HP SIM servers with trusted certificates. This mode requires the submitted server to provide authentication by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before allowing access.
Configuring Trust Mode For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory. For Windows, the imported HP SIM certificates are stored in the systemdrive: \hp\hpsmh\certs directory. You must have administrative authority to access this directory. To trust by certificate: 1. 2. 3. 4. Select Settings from the menu. In the System Management Homepage box, click the Security link . Click the Trust Mode link.
Trusted Management Servers category Certificates establish the trust relationship between HP SIM or Insight Manager 7 and HP SMH. The Trusted Management Servers link enables you to manage your certificates in the Trusted Certificates List. Note the following: To import a certificate to the trusted certificates list: 1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Trusted Management Servers link.
1. 2. 3. 4. 5. The user logs in to the system (client) using his or her domain username and password. The user’s password is hashed, and this hash becomes the user’s secret key. When the user tries to access a service, a message informs the AS that the user wants to access that service. If the user is in the AS database, two messages are sent back to the client: a. A Client/TGS session key is encrypted with the user’s secret key, which is used in the communication with the TGS. b.
The following levels of user authorizations are available: • Administrator Users with Administrator access can view all information provided through HP SMH. The appropriate default user group, Administrators for Windows operating systems and and the root user on Linux operating systems always has administrative access. • Operator Users with Operator access can view and set most information provided through HP SMH. Some web applications limit access to the most critical information to administrators only.
1. 2. 3. 4. 5. 6. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Kerberos Authorization link. Select the check box beside the Group Name in the dynamic list that you want to remove from HP SMH. Click Remove. Click Apply. Kerberos User To add a Kerberos User: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the Kerberos Authorization link.
1 Group Name 4 All user groups must exist in the HP System Management Homepage host system. Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 2 3 Users with User access can view most information provided through HP SMH. Some web applications restrict viewing of critical information from individuals with User access.
Only alphanumeric and underline values are permitted. The use of special characters such as ~ ' ! @ # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted. 5. 6. Click the Administrator radio button beside Type. Click Add. The values entered are added as a new line in the list table. You can continue to add up to five Administrator groups by following steps 4 through 6. 7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply.
7. 8. Select the check box beside the Group Names in the dynamic list you want to add to SMH. Click Apply. To remove a User Group: 1. 2. 3. 4. 5. Select Settings from the menu. In the System Management Homepage box, click the Security link. Click the User Groups link. Select the check box beside the Group Names in the dynamic list that you want to remove from SMH. Click Apply.
Only HP SMH users with Administrator authorization can create menus and can run custom menus that are set to run as the "root" user. For HP SMH users with Operator or User authorization, the custom menus they are allowed to run are run as the user id of the user logged in. These custom menus are stored and managed in the /opt/hpsmh/data/htdocs/xlaunch/custom-menus.js file, which can be manually copied from one system to other systems.
7 The Tasks Page The Tasks page displays links to routine tasks provided by participating HP Web-enabled System Management Software. If no tasks are provided by HP Web-enabled System Management Software, the Tasks page is not visible.
8 The Tools Page (HP-UX only) The Tools page displays links to system management tools provided by participating HP Web-enabled System Management Software. For HP-UX, the Tools page provides an entry point into management tools that are analogous to the System Administration Manager (SAM) main page, also known as the SAM Functional Area Launcher (or FAL). For HP-UX this also includes categories and menus for several X-based management applications.
9 The Logs Page At a minimum, the Logs page provides the following log categories: • System Management Homepage Log • Httpd Error Log (Windows and Linux) Logs contained in the installed HP Web-enabled System Management Software appear on this page. For example, if the HP Version Control Agent is installed, a link to the Version Control Agent log appears on the Logs page.
The Httpd Error Log is available on HP-UX directly but is visible in Windows and Linux by adding the httpd-error-log tag in the smhpd.xml file. You must have administrative access to HP SMH to access the Httpd Error Log. For HP SMH 3.
Language Linux locale name Windows locale name Simplified Chinese zh_CN.UTF-8 chinese-simplified Traditional Chinese zh_TW.UTF-8 chinese-traditional The following table contains the suffixes of the log_messages.
10 The Installed Webapps Page (Windows and Linux only) The Installed Webapps page contains a list of installed Webapps in the HP System Management Homepage (HP SMH). It contains links to the following HP Web-enabled System Management Software: Integrated Agents Lists Webapps names. Participants are agents that contribute information contained in HP SMH. If no HP Web-enabled System Management Software is installed that provides this information, an informative message appears.
11 The Support Page The Support page provides information about HP Essentials Software and instructions on how to obtain guidance from HP Support and official forums. This page also provides the following links for help outside the HP System Management Homepage server domain. • Insight Essentials Software Information • Integrity Essentials Software Information • Support Links In the case of HP-UX, the support link opens the IT Resource Center (ITRC) home page.
1 Search terms 2 Webapp to search Enables you to enter search criteria. 3 Search Validates search field and chosen webapp. The Help page provides links for the following: • System Management Homepage Help Contains information about the HP SMH infrastructure and its configuration and log pages. The remaining entries link to help systems associated with the webapps installed on the system (those that provide a help system). • Credits Displays information regarding open source licensing and credits.
12 Command Line Interface configuration The Command Line Interface (CLI) provides users with administrative rights access to set these values through the command line. You can use the CLI to modify configuration options, including the required security checks that allow the configuration options to be changed. NOTE: --kerberos, --user-kerberos, --operator-kerberos, --admin-kerberos, --max-threads and --win32-disable-acceptex options are only available on Windows operating systems.
IP Restricted Logins IP addresses can be explicitly permitted or restricted based on user type. If there are IP addresses in the permitted list, only those IP addresses are allowed login access. If there are no IP addresses in the permitted list, login access is granted to any IP address not in the restricted list.
server1,server2.domain1;server3,server4.domain2 • Trusted Certificates This command establishes the trust relationship between HP SIM or HP Insight Manager 7 7 and the HP SMH using the certificate.
Maximum Number of Threads Allowed The Maximum Number of Threads Allowed value allows the user to increase or reduce the maximum number of threads HP SMH creates to handle page requests. The default is 64 for Windows. NOTE: Maximum Number of Threads Allowed is only available on Windows operating systems. smhconfig -M|--max-threads[=] max-number-of-threads Where max-number-of-threads is a number in the range of 64-512. Maximum Number of Threads Allowed is only available on Windows.
smhconfig -v|--log-level[=] logging-level NOTE: Log level only affects new messages written in the HTTP error log. You must perform a soft restart of the system. Port 2301 Port 2301 determines whether HP SMH listens on port 2301. If the value is set to True, HP SMH listens on port 2301. If the value is set to False, HP SMH does not listen on port 2301. The default is set to True.
When Autostart mode is enabled, you can set the timeout in minutes for the server timeout value between 1 and 60 minutes (default value is 30 minutes) To set the server timeout in minutes, execute the following command: smhconfig -F|--timeoutsmh(1-60) where, (1-60) corresponds to the time in minutes for the server timeout. Restart the HP SMH application for the Apache server to use the newly-configured values. NOTE: Enabling the Autostart mode enables port 2301.
smhconfig –K|--user-kerberos[=] GROUPLIST Note: GROUPLIST is a single Kerberos group or a list of Kerberos group names separated by semicolons. NOTE: --user-kerberos is only available on Windows operating systems. User Groups User Groups are a set of policies to access and modify HP SMH functionalities. Only valid existing operating system groups can be added to the group list. To add groups into HP SMH user types, complete the following: Administrators HP SMH.
Command Line Log Reader The command line log reading tool provides the users with a command line tool for reading the SMH log messages without using the UI. The command is: smhlogreader [options] where, the [options] are: -h|--help, displays the help message. --version, displays the HP SMH version. -f|--file FILE, FILE represents a path to a file. --from FROM, FROM: to display a range of messages, this option describes the ID of the first message.
For example, to display messages the recent five messages, the user should use the following command: smhlogreader --from 1 --to 5 • File-based command line log reading The smhlogreader CLI allows the user to use a properly-formatted log file as an input. The following command allows the user to use a properly-formatted log file as an input and also backs up the log files.
13 Troubleshooting topics Access Problems Browser Problems Installation Problems IP Address Problems Sign In Problems Security Problems Other Problems NOTE: If noted, a topic might only apply to the HP-UX, Linux, or Windows operating system. 13.1 Access Problems 13.13.1.1 13.13.1.2 13.13.1.3 SMH Documentation Unclear on Treatment of securetty. The HP System Management Homepage (HP SMH) does not use /etc/securetty. See login(1) for details on /etc/securetty.
13.2 Browser Problems 13.13.2.1 When I sign into HP SMH and close the browser, the HP SMH session is not ended. If I reopen Internet Explorer, after closing it I can sign into HP SMH without credentials. How can I fix this problem? There are two possible solutions in order to be sure the HP SMH shortcut asks for credentials. Solution 1 1. 2. 3. 4. Select Tools Internet Options Choose the Advanced tab. Under Settings Browsing, deselect Reuse windows for launching shortcuts (when tabbed browsing is off).
Internet Explorer 6.0 on Windows 2003 sometimes causes only the Account Sign in text in a blue bar to appear, instead of the entire Sign in page. This issue occurs when browsing on a local system or a remote system. To resolve the issue, enable Javascript support and add this site to the Trusted sites list. 13.3 Installation Problems 13.13.3.1 13.13.3.2 After running setup.exe /r on a Windows system to import certificates, the installation fails. Do not use setup.exe /r to import or copy certificates.
NOTE: The word localhost does not work in all languages. In addition, if you have a proxy server configured in your browser, you might need to add 127.0.0.1 to the browser list of addresses that should not be proxied. 13.13.4.3 13.13.4.4 13.13.4.5 When I use the IP Restricted Login feature, entering my server IP address does not have the desired effect. How can I be sure that the local machine IP addresses are recognized by this feature? Enter 127.0.0.
13.13.5.4 On Windows systems in the defined user groups, only Administrators, Users, Guests and Power Users are recognized. Other groups defined by Windows, such as Backup Operators, are not recognized. Create a new group and use it for providing access to HP SMH. I cannot sign in to HP SMH on my server running the Windows operating system. Complete the following: 1.
1. 2. 3. 4. 5. 6. 7. 8. 9. In Internet Explorer, click Tools → Internet Options. Click Security. Select Local Intranet. Click Sites → Advanced. In Add this website to the zone, enter the IP address of the HP SMH system for example, enter https://ipaddress . Click Add. Click OK. Click OK again. Click OK. The changes are saved. 13.13.5.
This configuration leaves the default SP2 security enhancements intact, but allows traffic over the ports previously indicated. These ports are required for HP SIM and Version Control Repository Manager to run. Ports 2301 and 2381 are required for the Version Control Repository Manager and ports 280 and 50000 are required by HP SIM. The secure and insecure ports must be added for each product to enable communication with the applications. 13.13.6.2 Why can't I import X.
To successfully downgrade HP SMH from 3.x and above to 2.x, stop the HP SMH service and execute the downgrade by completing the following steps: 1. $/etc/init.d/hpsmhd stop 2. $rpm --oldpackage -U hpsmh-old version.rpm 13.13.7.2 Why can't I install HP SMH on my system? The HP SMH install action requires a Java version that requires at least 256 colors to load. NOTE: 13.13.7.3 13.13.7.4 13.13.7.5 13.13.7.6 This applies to Windows only.
14 Service and Support Support for HP SMH is provided as an adjunct to support of the underlying hardware. The HP Support pages provide you with a variety of product, service, and support-related resources for HP SMH. • Access HP SMH on the Software Depot home. Go to http://www.hp.com/go/softwaredepot and select Security and manageability. Look for the HP System Management Homepage link. The support for Linux Integrity is found by selecting the Linux link on Software Depot home.
Support and other resources Information to collect before contacting HP Be sure to have the following information available before you contact HP: • Software product name • Hardware product model number • Operating system type and version • Applicable error message • Third-party hardware or software • Technical support registration number (if applicable) How to contact HP Use the following methods to contact HP technical support: • In the United States, see the Customer Service / Contact HP Uni
HP authorized resellers For the name of the nearest HP authorized reseller, see the following sources: • In the United States, see the HP U.S. service locator web site: http://www.hp.com/service_locator • In other locations, see the Contact HP worldwide web site: http://welcome.hp.com/country/us/en/wwcontact.html Documentation feedback HP welcomes your feedback. To make comments and suggestions about product documentation, send a message to: docsfeedback@hp.
www.hp.com/go/hpux-core-docs select HP-UX 11i v2 and search with the document title "Next generation single-system management on HP-UX 11i v2 (B.11.23)." • hpsmh (1m) manpage For HP-UX releases, the manpage is available from the command line using the man hpsmh command. This information is not available for Linux and Windows operating systems. • smhstartconfig (1M) manpage For HP-UX operating system releases, the manpage is available from the CLI using the man smhstartconfig command.
A HP SMH file locations Table A-1 HP SMH file locations Description HP SMH Root The root of the HP SMH installation. Windows SystemDrive\hp\hpsmh Linux /opt/hp/hpsmh HP SMH Executable The HP SystemDrive\hp\hpsmh\bin\hpsmhd.exe /opt/hp/hpsmh/sbin/hpsmhd SMH binary. A webapp can use detection of this file's pressence to verify that HP SMH is installed on the system. HP-UX /opt/hpsmh /opt/hpsmh/lbin Certificate and Key files The certificate and private key files used by HP SMH.
B HP SMH Ciphers Ciphers used in HP SMH This appendix provides a list of all the Ciphers used in the HP SMH product. Table B-1 Ciphers used in HP SMH Cipher SSLProtocol Syntax Description SSLProtocol [+|-]protocol Configure usable SSL ... protocol flavors Directive used in HP SMH SSLProtocol all -SSLv2 Description Enable SSLv3 and TLSv1, but not SSLv2. NOTE: All includes SSLv3, TLSv1, and SSLv2.
Glossary Accounts for Users & Groups tool (ugweb) The HP-UX Accounts for Users and Groups (ugweb) tool is used to manage user accounts and group accounts on the local system. This tool can also be used to manage user accounts on a NIS system. The ugweb tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH. AS See Kerberos Authentication Server. CA See certificate authority.
performance management, and workload management enable systems administrators to pick the value added software required to deliver complete lifecycle management of their hardware assets. To obtain more information about HP SIM, go to http://www.hp.com/go/hpsim. HP Version Control Agent (VCA) An Insight Management Agent that is installed on a system to enable the customer to see the HP software installed on that server.
Kernel Configuration tool (kcweb) The HP-UX Kernel Configuration (kcweb) tool is used to manage kernel tunables, modules and alarms. The Kernel Configuration tool can be launched from the HP-UX System Administration Manager (SAM) tool or from HP SMH MIT Massachusetts Institute of Technology. multihomed Multiple names set to a certificate. parMgr See Partition Manager.
server, so the client can be assured it is communicating with the system that the system claims to be. It is application protocol independent. Secure Task Execution (STE) Secure execution of a task from a managed system. This feature of HP SMH ensures that the user requesting the task has the appropriate rights to perform the task and encrypts the request to protect data from snooping.
products is the HP-UX implementation of the DMTF (Distributed Management Task Force) WBEM standard.
Index C O certificates trust mode, 29 trusted management server certificates, 29 ciphers HP SMH, 91 CLI configuration HP SMH, 65 credits HP SMH, 63 overview getting started, 11 HP SMH, 9 D reference troubleshooting, 83 resources, 86 documentation, 86 E error log, 57 examples scenarios, 19 F features, 86 file locations HP SMH, 89 G getting started sign in, 11 H home HP SMH, 27 HP SMH ciphers, 91 L languages HP SMH, 57 logs error log, 57 HP SMH, 57 SAM log, 57 System Management Homepage log, 57 M
W webapps Integrated Agents, 61 Other Agents, 61 100 Index
