Custom install

Select Trust By Certificate, and click Next. The Trusted Certificates window appears. The Trusted Certificates window allows trusted certificate files to be added to the Trusted Certificate List.

Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Select File window appears. If an invalid file name is entered in the file name field, an error message appears, indicating the file does not exist. Click OK to select another file, or click Open to add the file to the Trusted Certificate List. The Trusted Certificate List appears. Click Next.

Note: If you click Next without adding any certificates to the list, and no certificates exist from a previous installation, a message appears, indicating that if you do not specify any trusted certificates, HP SIM cannot access the HP Insight Management Agent on this system. Click OK if you do not want HP SIM to access the Insight Management Agent on this system, or click Cancel to close the window and add the trusted certificates to the list.

Note: The Trust By Certificates option enables the System Management Homepage system and the HP SIM system to establish a trust relationship by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before enabling access.

Click Import. The Import Server Certificate window appears.

Enter the name or IP address of the server whose certificate you want to import.

Click Get Cert. The certificate information appears.

Verify the certificate information. If you want to add this certificate to the Trusted Certificate List, click Accept and the certificate is added to the Trusted Certificate List, or click Cancel if you do not want to add it to the Trusted Certificate List. The Trusted Certificate List appears. Click Next.

Note: You can add an unlimited number of trusted certificates.

Note: To delete a certificate, select the certificate, and click Delete. The selected certificate is removed.

From the IP Binding window, select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

From the IP Restricted Logins window, select the Enable IP Restricted Logins checkbox if you would like to include or exclude specific IP addresses or IP address ranges. Click Next, and the Summary Panel appears.

Select Trust By Name. Click Next. The Trusted Server window appears. Enter the names of the servers you want to trust.

Note: Although the Trust By Name mode is a slightly stronger method of security than the Trust All mode, it still leaves your system vulnerable to security attacks. The Trust By Name mode sets up the System Management Homepage to only accept certain requests from servers with the HP SIM names designated in the Trust By Name field. The Trust By Name option is easy to configure and can prevent non-malicious access. For example, you might want to use the Trust By Name option if you have a secure network, but your network has two groups of administrators in two separate divisions. The Trust By Name option would prevent one group from installing software to the wrong system. This option does not verify anything other than the HP SIM server name submitted.

Note: The server name cannot contain the following characters:

~ ! ` @ # $ % ^ & * ( ) + = " : ' < > ? , | ;

Click Add to add the name of a server you want to trust. Click Next.

Note: If you click Next without adding any server names to the list, an error message appears, indicating that if you do not specify any trusted server names, HP SIM cannot access the Insight Management Agent on this system. Click OK to proceed without trusting any systems, or click Cancel to close the window and add server names to the list.

Note: To delete a certificate, select the certificate and click Delete. The selected certificate is removed.

From the IP Binding window, select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

From the IP Restricted Logins window, select the Enable IP Restricted Logins checkbox if you would like to include or exclude specific IP addresses or IP address ranges. Click Next, and the Summary Panel appears.

Select Trust All. Click Next. The IP Binding window appears.

Select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

Note: The Trust All option leaves your system vulnerable to security attacks and sets up the System Management Homepage to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and everyone in the network is trusted.

Note: You can add up to five subnet IP address/netmask pairs.

Note: If you click IP Binding but do not specify the IP address/netmask, then you might not be able to connect to the System Management Homepage.

The IP Restricted Logins window appears. The IP Restricted Logins window enables you to select specific IP addresses or IP address ranges to include or exclude from gaining login access. Although optional, the System Management Homepage can restrict login access based on the IP addresses of the machine attempting to gain access.

Select Enable IP Restricted Logins, and click Next. The IP Addresses to Include window appears. This window enables you to specify the IP address or IP address ranges to grant login access permission. If there are IP addresses in the Inclusion list, then only those IP addresses are enabled for login privileges. If there are no IP addresses in the Inclusion list, then login privileges are permitted to all IP addresses that are not in the Exclusion list.

Note: A single address and ranges of addresses can be accepted in the IP Restricted Logins window. Enter the single address in the first box.

In the Include field, enter a beginning IP address to which you want to grant login access. In the To field, enter an ending IP address to which you want to grant login access. All IP addresses that fall between the beginning and ending IP addresses are granted login access. Click Add. The IP address or IP address range is added to the Exclusion list. If necessary, select an IP address or IP address range, and click Delete to remove it from the Exclusion list. Click Next.

Note: If you entered an invalid IP address or IP address range, an error message appears indicating the IP address is invalid. Click OK. Enter a valid IP address or IP address range, and click Add again. The IP Addresses to Exclude window appears.

In the Exclude field, enter a beginning IP address to which you want to deny login access.

In theTo field, enter an ending IP address to which you want to deny login access. All IP addresses that fall between the beginning and ending IP addresses are denied login access.

Click Add. The IP address or IP address range is added to the Inclusion list. If necessary, select an IP address or IP address range, and click Delete to remove it from the Inclusion list. Click Next.

Note: If you entered an invalid IP address or IP address range, an error message appears, indicating the IP address is invalid. Click OK. Enter a valid IP address or IP address range, and click Add again.

Note: If you select Next without adding any IP addresses to the Include or Exclude lists, a warning message appears, stating, IP Restricted Login checkbox will be marked as disabled. Do you want to proceed without adding any IP Address restrictions? If you click OK, the IP Restricted Login option on the IP Restricted Login window is cleared.