The Trust Mode link provides options to enable you to select the security required by your
system. There are some situations that require a higher level of security than others. Therefore,
you are given the following security options:

•

Trust by Certificate

Sets the HP System Management Homepage (HP SMH) to accept

configuration changes only from HP Systems Insight Manager (HP SIM) servers with trusted

certificates

. This mode requires the submitted server to provide authentication by means of

certificates. This mode is the strongest method of security since it requires certificate data
and verifies the digital signature before allowing access. If you do not want to enable any
remote configuration changes, leave Trust by Certificate selected, and leave the list of
trusted systems empty by avoiding importing any certificates.

NOTE:

This is the default behavior on Linux Itanium.

NOTE:

HP strongly recommends using this option as it is more secure.

•

Trust by Name

Sets HP SMH to accept certain configuration changes only from servers

with the HP SIM names designated in the Trust By Name field. For example, you might
use the option if you have a secure network with two separate groups of administrators in
two separate divisions. It prevents one group from installing software to the wrong system.
This option verifies only the HP SIM server that you designate.

NOTE:

HP strongly recommends using the Trust by Certificate option as the other options

are less secure.

•

Trust All

Sets HP SMH to accept certain configuration changes from any system. For

example, you could use the Trust All option if you have a secure network, and everyone in
the network is trusted

NOTE:

HP strongly recommends using the Trust by Certificate option as the other options

are less secure.

Configuring Trust Mode

For HP-UX, the imported HP SMH certificates are stored in the /opt/hpsmh/certs directory.

For Linux, the imported HP SMH certificates are stored in the /opt/hp/hpsmh/certs directory.

For Windows, the imported HP SIM certificates are stored in the systemdrive
\hp\hpsmh\certs

directory.

NOTE:

You must have administrative authority to access this directory.

To trust by certificate:

Select Settings

→System Management Homepage→Security.

The Settings Page