HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Security in OVO Operations
508
Assigning Passwords on Windows NT Managed Nodes
On Microsoft Windows NT managed nodes, you can assign the password
for the OVO account during installation of the agent software. If you do
not assign a password for the OVO account, a default password is
created. However, a password is not assigned by default.
Assigning Passwords on Novell NetWare Managed Nodes
On Novell NetWare managed nodes, the password for the default
operator opc_op is not assigned during installation of the agent
software.
IMPORTANT For security reasons, assign a password to opc_op with NetWare tools
after the agent software is installed.
Protecting Configuration Distribution
The command opctmpldwn provides a way of bypassing the standard
OVO template distribution mechanism: it allows you to download and
encrypt OVO templates and configuration data on the management
server and then copy it to the target location on the managed nodes. Only
assigned logfile, SNMP trap, opcmsg, threshold monitor, scheduled
action, event correlation, and Manager-of-Manager (MoM) templates are
downloaded.
The files are encrypted, either with the default key of the managed node,
or with keys generated specifically for the node.
Specific keys can be generated and managed with the OVO key
management tools opcsvskm and opcskm. opcsvskm is used to create and
export keys on the management server; opcskm is used to import keys on
the managed nodes. Both tools must be used with the -t option so that a
template key file is used.
See the man pages opctmpldwn(1M), opcsvskm(1M), and opcskm(1M) for
more information.
Chapter 12