Hp Secure Key Manager Manuel d'utilisateur télécharger pdf (Page 215)

Figure 130 Viewing the Grant a Credential section

The following table describes the components of the Grant a Credential section.

Table 110 Grant a Credential section components

Component Description

Grant to

Enter the name of the administrator to whom you grant your credentials.

Duration (in

minutes)

Enter the length of duration. This duration cannot be longer than the Maximum

Duration for Time-Limited Credentials established in the Multiple Credentials for Key

Administration section.

Allowed Operations

Select the s

peciﬁc operations for which you are granting your credentials. You may

only grant credentials for those operations listed here.

Grant

Click Grant to execute the credential grant.

Remote Administration Settings overview

You can administer the SKM locally and remotely. Local administration involves logging into the

SKM from a machine that is physically connected to the device via a null modem cable. Remote

administration involves logging into the SKM from the Management Console or an SSH session. The

Remote Administration Settings, which are ﬁ rst speciﬁed during initial conﬁguration, determine the IP

addresses and ports that are used to administer the SKM.

The Web Admin User Authentication feature provides an additional security safeguard against

unauthorized conﬁguration of the SKM. When this feature is enabled, administrators are asked for

a Client Certiﬁcate when they attempt to log in to the SKM. After presenting a client certiﬁcate,

administrators can only log in to the SKM with a username that matches the common name ﬁeld

on the client certiﬁcate. For example, if the common name of the client certiﬁcate is admin, then the

administrator can only log in as admin.

From the Remote Administrations Settings page, you can also recreate the Web Administration Certiﬁcate

and the SSH Key used by the SKM. The Remote Admin Certiﬁcate is a self–signed certiﬁcate created

during initial conﬁguration that can be used to verify that the hostname in the certiﬁcate matches the

hostname of the machine being logged into. Because the certiﬁcate is only presented to people logging

into the Management Console, there is no reason to have the certiﬁcate signed by a Certiﬁcate Authority.

The SSH Key is used to generate a session key that is used for encryption and decryption operations

whileyouareloggedintotheSKM.

Remote Administration Settings sections

The Administrator Conﬁguration page enables to conﬁgure remote administration. This page contains the

following remote administration-related section:

• Remote Administration Settings

Secure Key Manager

215

1 2 ... 210 211 212 213 214 215 216 217 218 219 220 ... 326 327

Pas de commentaire

Hp Secure Key Manager Manuel d'utilisateur Page 215