beautypg.com

3 scenarios, Ip binding, Ip restricted login – HP System Management Homepage-Software User Manual

Page 16: Local server certificate, Port 2301, Kerberos authentication (windows only), User groups, Alternative names (windows and linux only)

background image

3 Scenarios

IP Binding

You can use IP Binding for example when a system has multiple IP addresses and you want to limit
the access to HP SMH to particular networks or subnets like:

For infrastructure (IPv4 and IPv6)

Multiple subnets

Security

Bandwidth

For more information, see

“IP Binding category” (page 31)

.

IP Restricted Login

IP Restricted Login is useful if you want to:

Limit remote access to HP SMH to include only specific remote servers

To exclude entire ranges of remote servers

Increase security by limiting remote access

For more information, see

“IP Restricted Login category” (page 32)

.

Local Server Certificate

Local server certificate is useful for security reasons through creating self-signed certificates instead
of certificates generated by HP.

For more information, see

“Local Server Certificate category” (page 34)

.

Port 2301

For security reasons, you can reduce the amount of open ports in the environment.

For more information, see

“Port 2301 category” (page 35)

.

Kerberos Authentication (Windows only)

Kerberos offers

Single Sign-On (SSO)

capability on secure networks. In a Kerberos environment,

users log in only once at the start of their session, acquiring Kerberos credentials that are used
transparently to log in on all other services available, such as

SSH

, FTP, and authenticated web

sessions.

For more information, see

“Kerberos Authentication category (Windows only)” (page 41)

.

User Groups

The user groups feature allows you to manage user access to HP SMH based on operating system
level account groups. Operating system account groups can be configured for administration
reasons.

For more information, see

“User Groups category” (page 44)

.

Alternative Names (Windows and Linux only)

The alternative names feature simplifies the use of certificates not generated, by HP by enabling
HP SMH to recognize DNS names and IP addresses associated with a certificate.

For more information, see

“Alternative Names Certificates (Windows and Linux only)” (page 48)

.

16

Scenarios