Configuring HP SMH

After HP SMH is installed, you can configure the settings. If you are migrating from Management HTTP Server, the Management HTTP Server settings are retained. However, the retained settings are configurable.

To configure HP SMH settings:

Enter the following command to start the configuration:
perl /opt/hp/hpsmh/hpSMHSetup.pl
Enter the following command to start the configuration for Itanium systems:
perl /opt/hp/hpsmh/hpSMHSetup.sh
The Welcome screen appears, indicating that you can configure security and access parameters on the following screens.
The Welcome screen indicates that you can configure security and access parameters for HP System Management Homepage and related HP web-based management tools.
Press Enter. The Operating System Groups screen appears.
The Operating System Groups screen enables you to add operating system groups to HP SMH.
Add or delete operating system groups in HP SMH. The following options are available:
1. To add groups:
  1. At the prompt, enter 1 to add a group. The Add Operating System Groups screen displays the operating system group lists.
    Note: You can add up to five entries per group.
    Enter one of the following options to assign the operating system group to the Administrator Group List:
    - Enter 1 for Administrator.
      For example, to add admin1 to the Administrator operating system group:
      Enter 1 for Administrator.
      At the prompt, Enter the name of the operating system group: enter admin1.
      Press Enter. admin1 appears in the Administrator Group List.
      Enter n to go to the next screen.
    - Enter 2 for Operator.
    - Enter 3 for User.
  2. Enter n to go to the next screen.
2. To delete a group:
  1. Enter 2 to delete a group.
    The following options are available:
    - Enter 1 for Administrator. The Administrator Group List appears.
    - Enter 2 for Operator. The Operator Group List appears.
    - Enter 3 for User. The User Group List appears.
  2. At the prompt, enter 1, 2, or 3.
  3. Enter the number next to the group name to be deleted. The group is deleted from the group list.
    Note: You can delete as many groups as you want by repeating this step.
  4. Press Enter when you are finished deleting to go to the next screen.
  5. Enter n to go to the next screen. The Operating System Groups screen appears.
  6. Enter n to go to the next screen. The User Access screen appears.
Configure Local and Anonymous Access. The following options are available:
- Enter 1 to enable Anonymous Access.
  Caution: HP does not recommend the use of anonymous access.
- Enter 2 to disable Anonymous Access.
- Enter 3 to disable Local Access.
- Enter 4 to enable Local Access - Anonymous. Local Access enables you to locally gain access to HP SMH without being challenged for authentication. Any local user has access limited to unsecured pages without being challenged for a username and password.
  Caution: HP does not recommend the use of local access unless your management server software enables it.
- Enter 5 to enable Local Access - Administrator. This option grants full access to secure and unsecure pages. Any user with access to the local console is granted full access.
Enter n to go to the next screen or enter p to go to the previous screen.
Enter n to go to the next screen. The Trust Mode screen appears.
Configure the HP SMH trust mode.
Enter 1 for Trust by Certificate. Trust Mode: Trust by Certificate appears.
The following options are available: Trust by Certificate, Trust by Name, Trust All and Modify Certificate List.
1. Trust by Certificate
  1. To add a certificate file:
    1. Enter 1. You are prompted for the certificate location.
    2. Enter the file path of the trusted certificates to be added to the Trusted Certificates List. Press Enter when you are finished.
      For example:
      1. File: /home/ServerName/cert1.pem.
      2. Press Enter. The cert1.pem is added to the Trusted Certificates List.
        If the certificate file does not exist, a message appears indicating that /home/ServerName/cert1.pem does not exist.
    3. You can add as many certificates as you want by repeating these steps. Press Enter when you are finished adding certificate files.
  2. To import a certificate:
    1. Enter 2. You are prompted for the server name.
    2. Enter the name or IP address of the HP Systems Insight Manager server and press Enter. The certificate is retrieved and displayed.
      The following options are available:
      Enter 1 to accept the certificate. The file is saved.
      Enter 2 to reject the certificate. The file is not imported.
    3. Press Enter when you are finished. The imported certificates display in the Trusted Certificates List. You can import as many certificates as you want by repeating these steps.
    4. Press Enter when you are finished importing certificate files.
  3. To delete a certificate:
    1. Enter 3. You are prompted to enter the number associated with the certificate file to be deleted.
    2. Enter the number of the certificate file to be deleted.
    3. Press Enter when you are finished. You can delete as many certificate files as you want by repeating these steps.
    4. Press Enter when you are finished deleting certificate files.
2. Trust by Name
  1. Enter 2 to Trust by Name. Trust Mode: Trust by Name appears.
  2. Enter 4 to Modify Server Name list.
    To add an HP Systems Insight Manager server's certificate name:
    1. Enter 1. You are prompted to add an HP Systems Insight Manager server's certificate name.
    2. Enter the name of the certificate of HP Systems Insight Manager server to be trusted and press Enter. The certificate name appears in the Trusted Server Names list.
      Note: You can add as many server certificate names as you want.
    To delete a certificate name:
    1. From the Server Name list, enter 2.
    2. Enter the number associated with the name of the certificate of the HP SIM server to be deleted. The HP SIM server's certificate name is removed from the Server Name list.
  3. Enter n for next. The Trust Mode Settings screen appears.
3. Trust All
  1. Enter 3 to Trust All. Trust Mode: Trust All appears.
  2. Enter n for next. The IP Binding screen appears.
4. Modify Certificate List
  Enter 4 to Modify Certificate List.
Bind IP addresses that match a subnet and netmask.
The following options are available:
1. Enable IP Binding
  1. Enter 1 to enable the IP Binding, which sets it to ON. IP Binding: ON appears.
  2. Enter n to go to the next screen.
    The following options are available:
    To add an IP address:
    1. Enter 1 to add an IP address. You are prompted for the IP address.
    2. Enter the IP address to be added. IP Address: YourIPAddress appears. You are prompted for the netmask.
    3. Enter the netmask. netmask: YourNetmask appears.
      Note: You can add or delete as many IP addresses as you want.
    To delete an IP address:
    1. Enter 2.
    2. Enter the number of the IP address or netmask to be deleted. The IP address or netmask is removed from the IP address or netmask list.
  3. Enter n to go to the next screen. The IP Restricted Login screen appears.
2. Disable IP Binding
  1. Enter 2 to disable the IP Binding, which sets it to OFF. IP Binding: OFF appears.
  2. Enter n to go to the next screen or enter p to go to the previous screen. The IP Restricted Login screen appears.
Configure HP SMH to restrict login access based on the IP address of the system from which the login is attempted.
The following options are available:
1. Enter 1 to enable an IP Restricted Login, which sets it to ON. IP Restricted Login:ON appears.
  To enable the IP Restricted Login:
  1. Enter 1. IP Restricted Login is set to ON.
  2. Press n for next. The Set IP Address Restrictions screen appears.
    To add IP addresses to the Inclusion List:
    1. Enter 1 for Include Login Restriction IP Address.
    2. Enter 1 for Add.
    3. Enter the IP address or IP address range you want to add to the Inclusion List. The IP address or IP address range appears under the IP Address Inclusion List.
      Note: You can add or delete as many IP addresses or IP address ranges as you want.
    To delete an IP address or IP address range from the Inclusion list:
    1. Enter 2.
    2. Enter the number associated with the IP address or IP address range to be deleted and press Enter. The IP address or IP address range is deleted from the Inclusion List.
    To add an IP address or IP address range to the Exclusion list:
    1. Enter 2 for Exclude Login Restriction IP Address
    2. Enter 1 to add an IP address to the Exclusion List.
    3. Enter the IP address or IP address range to be added to the Exclusion List. The IP address or IP address range is added in the IP Address Exclusion List.
    4. Press Enter . The IP Address Exclusion List screen appears.
    5. Press n for next. The IP Address Inclusion List and IP Address Exclusion List appears.
    To delete an IP address or IP address range from the Exclusion list:
    1. Enter 2 to delete an IP address from the Exclusion list.
    2. Enter the number associated with the IP address or IP address range to be deleted.
    3. Press Enter. The IP address is deleted from the IP Address Exclusion List.
    4. Press Enter. The IP Address Exclusion List screen appears.
    5. Press n for next. The IP Address Inclusion list and IP Address Exclusion list appears.
      Note: You can add or delete as many IP addresses or IP address ranges as you want.
  3. Enter n for next.
2. Enter 2 to disable IP Restricted Login, which sets it to OFF. IP Restricted Login: OFF appears.
  To disable IP Restricted Login:
  Enter 2 to disable the IP Restricted Login. The IP Restricted Login is set to OFF.
Enter n to go to the next screen. The configuration completes, and a message appears indicating that HP SMH is successfully set up. The HP SMH service is stopped and started automatically.
Verify HP SMH is configured and working properly by navigating to it and verifying that it displays correctly.

Configuring HP SMH

Technical documentation

» Table of Contents

» Index