HP Secure Key Manager - Manual (Page 214)

Table 108 Multiple Credentials for Key Administration section components
Component Description
Require Multiple
Credentials
Select this checkbox to enable the multiple credentials feature. You must have High
Access Administrator access control to enable this feature. Deselect this checkbox to
disable the multiple credentials feature. Disabling multiple credentials is governed
by the same rules as the operations that require multiple credentials. The specified
number of administrators must authorize the action.
Number of
Administrators
Required to Perform
Configuration
Operations
Select the number of administrators that must authorize the configuration operations.
There must be at least as many High Access Administrators as are required by this field.
Allow Time-Limited
Credentials
Select this checkbox to allow administrators to grant their credentials to other
administrators for a limited time period.
Maximum Duration
for Time-Limited
Credentials
Select the maximum length of time that credentials can be granted to another
administrator.
Edit Click Edit to modify the multiple credentials settings.
Credentials Granted
Use the Credentials Granted section to view the credentials granted to or by the current administrator.
Any credential grants that do not involve the current administrator are not displayed.
Figure 129 Viewing the Credentials Granted section
The following table describes the components of the Credentials Granted section.
Table 109 Credentials Granted section components
Component Description
Grant to Displays the administrator receiving the credentials.
Grant by Displays the administrator granting the credentials.
Expiration
Displays the date and time upon which the credential grant expires. Credential grants
expire automatically if the SKM is rebooted or the system time is altered.
Allowed Operations Lists the specific operations for which the credentials have been granted.
Delete/Revoke Click Delete/Revoke to cancel the grant.
Grant a Credential
Use the Grant a Credential section to grant credentials to another administrator for a specific period of
time.
214 Using the Management Console