beautypg.com

3 scenarios, Ip binding, Ip restricted login – HP System Management Homepage-Software User Manual

Page 23: Local server certificate, Port 2301, Kerberos authentication, User groups, Alternative names

background image

3 Scenarios

IP Binding

You can use IP Binding for example when a system has multiple IP addresses and you want to limit the access
to HP SMH to particular networks or subnets:

For infrastructure (IPv4 and IPv6)

Multiple subnets

Security

Bandwidth

For more information, see

“IP Binding Category”

.

IP Restricted Login

IP Restricted Login is useful if you want to:

Limit remote access to HP SMH to include only specific remote servers

To exclude entire ranges of remote servers

Increase security by limiting remote access

For more information, see

“IP Restricted Login Category”

.

Local Server Certificate

Local server certificate is useful for security reasons through creating self-signed certificates instead of
certificates generated by HP.

For more information, see

“Local Server Certificate Category”

.

Port 2301

For security reasons, you can reduce the amount of open ports in the environment.

For more information, see

“Port 2301 Category”

.

Kerberos Authentication

Kerberos offers

Single Sign-On (SSO)

capability on secure networks. In a Kerberos environment, users log

in only once at the start of their session, acquiring Kerberos credentials that are used transparently to log in
on all other services available, such as

SSH

, FTP, and authenticated web sessions.

For more information, see

“Kerberos Authentication Category”

.

User Groups

The user groups feature allows you to manage user access to HP SMH based on operating system level
account groups. Operating system account groups can be configured for administration reasons.

For more information, see

“User Groups Category”

.

Alternative Names

The alternative names feature simplifies the use of certificates not generated by HP by enabling HP SMH to
recognize DNS names and IP addresses associated with a certificate.

For more information, see

“Alternative Names Certificates”

.

IP Binding

23