HP OpenView Operations Administrator's Reference - filibeto.org

About Secure Shell (SSH)
About OVO Security
About Network Security
The OVO agent software can alternatively be installed using the Secure
Shell (SSH) installation method. For details, see “Secure Shell
Installation Method” on page 59.
Secure Shell (SSH) is a UNIX shell program for logging into, and
executing commands on a remote computer. SSH is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
The SSH provides a number of security features, such as:
❏ Port forwarding
All communication between two systems is conducted between
well-known ports, thereby creating a virtual encrypted
communication channel.
❏ RSA authentication
All logins, even those without a password, use RSA authentication.
❏ Public-key encryption
All traffic between systems is secured with public-key encryption.
OVO Agent Installation Using Secure Shell
The SSH installation method provides enhanced security for
installations that are performed over insecure lines (for example, over
the Internet).
Files needed for agent installation are copied using SCP (Secure CoPy),
and remote commands are executed using the command execution
facility built into SSH. As a result, no one can eavesdrop on or alter
communications between systems.
The OVO installation procedure works with any configuration already
established on the management server, regardless of security features
used, as long as you have set up a passwordless login for user root on
the managed node. The best way to set up this login is to establish an
RSA-based passwordless login. For more information, see “To Install
OVO Agent Software Using SSH Installation Method” on page 61.
Chapter 12 493