4 credentials – HP Systems Insight Manager User Manual
Page 32
4 Credentials
In Systems Insight Manager, credentials are used to enable the CMS to communicate with managed
systems, through WBEM, WS-MAN, SSH, and SNMP. However, the Sign-in credential is used
unless you configure the other protocols. The Sign-in credential is protocol independent and can
be tied to systems through the discovery credential. In Systems Insight Manager, there are three
different types of credentials:
•
System credentials
Credentials used by
to access managed systems. These credentials include
WBEM, WS-MAN, and SSH credentials, Sign-in, SNMP community string, and
(SSO) credentials.
•
Discovery task credentials
Credentials used by a discovery task that apply to all systems discovered by that task.
•
Global Credentials
Global credentials are system credentials that apply to all systems.
During the identification process (done automatically during discovery), credentials are tried,
starting with System Credentials. If they do not work, and the Try Others setting is chosen for them,
then Discovery credentials are used. Similarly, if those do not work and the Try Others setting is
chosen, then Global Credentials are tried. As soon as a credential is found that works, Systems
Insight Manager notes that credential as working and continues to use it for regular communications
with the managed system as long as it continues to work. If it should fail, then the process is
repeated the next time identification is run. To see the working credentials for any managed system,
go to the System Credentials page (Options
→Security→Credentials→System Credentials). These
working credentials appear in the Credentials that are in use table.
When a discovery credential is used to successfully communicate with a system, a credential
reference is created for that system. If the credential is later changed on that same discovery task,
the credential that is used on all systems referencing it changes. This enables credentials to be
changed in one place (usually passwords for an account) and immediately be available for use
in Systems Insight Manager. The same is true for global credentials.
Because of this, if a global or discovery credential is deleted, you are asked if all references to
that credential should be removed or if copies should be made as system credentials for each
system that is referencing the current credential.
However, when a credential is overwritten, instead of deleted and then re-added, the credential
is changed and each system referencing it uses the new username/password values.
If the intent is not to change what is currently in use, you must add a new credential. For discovery
tasks, a new discovery task must be created with its own credentials, instead of editing an existing
discovery task, if the systems require different credentials than contained in the existing discovery
task.
Example XML file to add more than 10 WBEM username and password
pairs
To save time and effort, create an XML file that defines your system authorizations before running
discovery. For example: