Viglen LX275 User's Guide download pdf (Page 9)

INTRODUCING INTEL SERVER MANAGER 8.40

• Digital certificates

The following sections describe security methods used for accessing the administrator console

and for managing computers from the console.

Accessing the administrator console

The Intel Server Manager administrator console is accessed through a web browser, either on the

same computer as the console or from another computer. To access the console, a user must log

in to the OS with administrator or power user rights. (The user must be a member of the Windows

Administrators or Power Users groups.) Users with power user rights have restricted

administrator rights within Intel Server Manager. (See User rights for more information about

user groups and rights to Intel Server Manager.)

Console access is also protected by SSL encryption. A temporary web server certificate and key

pair is created at the beginning of each console session. After the session is completed this

certificate and its private key are erased. This certificate/key pair is used for privacy (data

encryption), but not authentication.

Remote access

When accessing the administrator console from a browser on another machine, the user can

install a CBA8 root authority certificate as a trusted root certification authority in their browser’s

certificate store. This will enable the use of an SSL connection for console access.

If the trusted authority certificate has not been installed, a warning dialog will appear when the

session is started indicating that the console’s certificate chain cannot be verified. At this point the

user can choose to ignore the warning or can install the root authority certificate. The root

authority certificate should only be installed if the browser is to be used regularly for Intel Server

Manager administrative purposes. If the administration is a one-time activity, it is simpler to ignore

the warning. The CBA8 root authority certificate is used to only to verify the temporary certificates

of the Intel Server Manager Management Agent. To maintain the highest level of security, it

should only be installed into browsers that are used regularly for Intel Server Manager

administration.

User rights

Intel Server Manager uses operating system groups to define user rights. Windows user groups

are listed below with a summary of user rights. Use the operating system's tools to add members

to groups and manage group membership.

Administrators

Includes complete and unrestricted rights to the computer/domain, including complete and

unrestricted administrator rights within Intel Server Manager

Power Users

Includes most administrative power with some restrictions, including restricted administrative

rights within Intel Server Manager:

• The administrator console shows the My computers and Others computers lists and the

Reports features; Management and Preferences features are not available

1 2 3 4 5 6 7 8 9 10 11 12 13 14 ... 76 77

No comments

Viglen LX275 User's Guide Page 9