HP BladeSystem Onboard Administrator User Guide - HP Business ...

Login Banner
Deselecting this option will allow other SSLv3 algorithms such as RSA, RC4, and MD5 to also be used
in SSH sessions. Web GUI sessions use FIPS140-2-pproved algorithms regardless of this setting. To set
this option, you must select the checkbox, and then click Apply.
The HP BladeSystem Onboard Administrator FIPS 140-2 implementation is based on the open source
package openssl-fips-1.2. For more information see, the OpenSSL website
(http://openssl.org/docs/fips/fipsnotes.html).
NOTE: The Enforce Strong Encryption option is available in Onboard Administrator version
3.60 and earlier.
To save the settings, click Apply.
NOTE: The Login Banner accepts English (ASCII) characters only.
Enabling the Login Banner option requires Onboard Administrator users to acknowledge the banner text
before they can log in.
Enable Display of Banner on User Login
Select this checkbox to enable the Login Banner option.
Acknowledgment of the Login Banner text provides access to all systems connected to the primary Onboard
Administrator.
Banner Text
The field size is limited to 1,500 printable characters, excluding the % or \ characters.
While spaces and line feeds are accepted, using only white space characters within this text field is not
allowed.
Apply
Trusted Hosts
Click Apply to validate the Banner Text field.
If the Banner Text field is empty or contains only white space characters, but the Enable Display of Banner on
User Login checkbox is selected, you are prompted to disable this feature.
The Trusted Hosts subcategory is used to restrict access to the Onboard Administrator to all hosts except those
listed. When enabled, this protocol only allows access to the Onboard Administrator to listed hosts.
This subcategory contains one dialog box, one entry field, and one display box, which, if enabled, is used
to list trusted IP addresses.
The Enable IP address access restriction checkbox is not selected by default. Selecting this checkbox allows
only those IP addresses listed as Trusted Addresses to connect to the Onboard Administrator.
CAUTION: Enabling IP address access restriction without first entering the user's IP address in the
Trusted Addresses list will disconnect the user from the Onboard Administrator.
The Trusted Addresses field is used to enter the IP addresses of all hosts that are to be trusted and allowed to
connect remotely to the Onboard Administrator through the protocols set up in the Protocol Restrictions
subcategory. This field allows for IP addresses only.
Configuring the HP BladeSystem c7000 enclosure and enclosure devices 84