HP Secure Key Manager - Manual (Page 67)

2. Navigate to the Multiple Credentials for Key Administration section on the Administrator
Configuration page (Device > Administrators > Multiple Credentials).
3. Click Edit.
4. Select Require Multiple Credentials.
5. Specify the number of administrators required to perform configuration operations. There must be
at least as many administrators with High Access Administrator access control as are required
by this field.
6. To allow administrators to grant their credentials to other administrators for a limited time period
select Allow Time-Limited Credentials. Enter the time period in the Maximum Duration for
Time-Limited Credentials field.
7. Click Save.
Granting credentials
Prior to granting credentials, you must select Require Multiple Credentials and Allow Time-Limited
Credentials on the Multiple Credentials for Key Administration section.
To grant credentials:
1. Log in to the Management Console as an administrator with High Access Administrator access
control. This is the administrator that will grant credentials to another.
2. Navigate to the Grant a Credential section on the Administrator Configuration page (Device >
Administrators > Multiple Credentials).
3. Select the administrator that will receive the credentials in the Grant to field.
4. Enter the duration that the credentials will be granted. This value must be less that the Maximum
Duration for Time-Limited Credentials value in the Multiple Credentials for Key Administration section.
5. Select the operations for which you are granting credentials.
6. Click Grant. You can now view the granted credentials in the Credentials Granted section.
Revoking a credential grant
Prior to revoking a credential grant, you must have granted credentials.
To revoke a credential grant:
1. Log in to the Management Console as an administrator that has previously granted credentials.
2. Navigate to the Credentials Granted section on the Administrator Configuration page (Device >
Device Configuration > Administrators > Multiple Credentials).
3. Click Delete/Revoke. The credential grant will be removed from the system.
Remote administration procedures
Enabling the Web Admin User Authentication feature
The Web Admin User Authentication feature requires a client certificate signed by the local CA on the
SKM.
Signing a certificate request and downloading the certificate
This section describes how to sign a certificate request with a local CA and then download the certificate.
You must download the certificate immediately after it is signed by the CA.
To sign a certificate request with a local CA:
Secure Key Manager 67