HP Secure Key Manager - Manual (Page 226)

Description Component
Access control options related to device security configuration.
• Keys and Authorization Policies: Create, modify and delete keys and establish au-
thorization policies.
• Users and Groups: create and modify local users and groups and maintain LDAP
user server settings.
• Certificates: Create and import certificates.
• Certificate Authorities: Manage certificate authorities on the SKM.
• Advanced Security: Manage advanced security settings, including FIPS configuration.
• SSL: Modify SSL configuration.
Access Control – Se-
curity Configuration
Access controls relating to general SKM configuration.
• Cluster: create a cluster, join or remove this device from an existing cluster.
• Network and Date/Time: Configure network and date/time settings.
• High Availability: Enable and configure high availability settings.
• SNMP: Manage SNMP community names and management stations.
• Logging: Modify logging settings.
Access Control –
Device Configura-
tion
Access control options relating to the Enterprise Manager feature. This section is only
visible when the Enterprise Manager feature is activated.
• Enterprise Services: Access Enterprise Services.
• Profile Creation & Configuration: Add, delete and edit profiles.
• Profile Key Selection: Add and remove keys from profiles.
Access Control - En-
terprise Manager
Access controls relating to backing up and restoring device and cryptographic config-
urations.
• Backup Configuration: Create system backups that include everything but keys,
certificates and local CAs.
• Backup Keys & Certificates: Create backups of keys and certificates
• Backup Local CAs: Create backups of local CAs.
• Restore Configuration: Restore system backups that include everything but keys,
certificates and local CAs.
• Restore Keys and Certificates: Restore backups of keys and certificates.
• Restore Local CAs: Restore backups of local CAs.
Access Control –
Backup & Restore
Access control options relating to device maintenance.
• Services: Modify startup service setting.
• Software Upgrade and System Health: Upgrade to a new version of the software
and perform RAID disk add or remove options.
Access Control –
Maintenance
Access control options relating to remotely administering the SKM.
• Admin Access via Web: Administer the SKM through the web interface.
• Admin Access via SSH: Administer the SKM through SSH.
These access control options specify whether an administrator can configure the SKM
appliance from the Management Console and the CLI. You should note that
administrators who cannot log in via either of these interfaces can only manage the
SKM appliance from a serial console connection, which would preclude that
administrator from modifying almost all security configuration settings and some device
configuration settings (for example: Server, Keys, Users & Groups, Database Tools).
Access Control –
Administrative Ac-
cess
Using the Management Console 226