HP Secure Key Manager - Manual (Page 45)

Authorization policy procedures
Creating an authorization policy
To create an authorization policy:
1. Log in to the Management Console as an administrator with Keys and Authorization Policies access
control.
2. Navigate to the Authorization Policies section of the Authorization Policy Configuration page
(Security > Authorization Policies).
3. Click Add.
4. Enter a Policy Name.
5. Click Save.
6. Select the Policy to access the Authorization Policy Configuration page.
7. Click Edit to establish a rate limit using the Maximum Operations per Hour field. Click Save.
8. Click Add to establish a time limit using the Start Day, Start Time, End Day, and End Time fields.
Click Save. Repeat this step to set multiple usage periods.
Deleting an authorization policy
To delete an authorization policy:
1. Log in to the Management Console as an administrator with Keys and Authorization Policies access
control.
2. Navigate to the Authorization Policies section of the Authorization Policy Configuration page
(Security > Authorization Policies).
3. Select a Policy Name and click Delete.
User and group procedures
NOTE:
User accounts and groups can be managed locally on the SKM and shared among clustered nodes.
This is the preferred method, as this maintains the Federal Information Processing Standards (FIPS)
compliance for the nodes. User accounts and groups can also be managed centrally. If managing all
user and group accounts centrally is a priority, refer to HP StorageWorks Secure Key Manager Key
Protection Best Practices white paper.
Creating a user
To create a user:
1. Log in to the Management Console as an administrator with Users, Groups, and LDAP access control.
2. Navigate to the Local Users section of the User & Group Configuration page (Security > Local
Users & Groups).
3. Click Add.
4. Enter a username and password.
5. To give this user the ability to create, modify, and delete users and groups via the XML interface,
select User Administration Permission.
Secure Key Manager 45