HP Tower Uninterruptible Power System - Manual (Page 98)

Security considerations 98
Security considerations
Security considerations overview
HPPP has browser accessibility.
To better ensure the security of HPPP and the devices it manages, consider the following topics in accordance
with your organization's security policies and the environment in which HPPP will operate:
• Remote access to HPPP requires a user account. Logging in requires the use of a user name and
password, which should be kept properly secured.
• Each account can be given different access levels, providing different capabilities. Ensure that the
appropriate access level is granted to users.
• Enforce a strong password policy for all users.
• Browsing to HPPP can be done using SSL, which encrypts the data between the browser and HPPP.
HPPP is supported by a 128-bit encryption level. SSL also provides authentication of HPPP by means of
its digital certificate. Securely importing this certificate must be done to ensure the identification of
HPPP.
• Use a custom SSL certificate that is certified by a third-party SSL authority.
• Keeping HPPP to an internal network is preferred.