HP Operations Manager for UNIX Administrator’s Reference

About HPOM Security
About Security in HPOM
Assigning Passwords on Windows NT Managed Nodes
On Microsoft Windows NT managed nodes, you can assign the password
for the HPOM account during installation of the agent software. If you do
not assign a password for the HPOM account, a default password is
created. However, a password is not assigned by default.
Assigning Passwords on Novell NetWare Managed Nodes
On Novell NetWare managed nodes, the password for the default
operator opc_op is not assigned during installation of the agent
software.
IMPORTANT
For security reasons, assign a password to opc_op with NetWare tools
after the agent software is installed.
Protecting Configuration Distribution
The command opctmpldwn provides a way of bypassing the standard
HPOM template distribution mechanism: it allows you to download and
encrypt HPOM templates and configuration data on the management
server and then copy it to the target location on the managed nodes. Only
assigned logfile, SNMP trap, opcmsg, threshold monitor, scheduled
action, event correlation, and Manager-of-Manager (MoM) templates are
downloaded.
The files are encrypted, either with the default key of the managed node,
or with keys generated specifically for the node.
Specific keys can be generated and managed with the HPOM key
management tools opcsvskm and opcskm. opcsvskm is used to create and
export keys on the management server; opcskm is used to import keys on
the managed nodes. Both tools must be used with the -t option so that a
template key file is used.
See the man pages opctmpldwn(1M), opcsvskm(1M), and opcskm(1M) for
more information.
370
Chapter 11