Virtualization security

If your architecture includes a master core and one or more secondary cores, follow the steps in this section for the master core and for each of the secondary cores. Similarly, if your SA computer has a sliced-core installation with one or more slices, repeat the steps for each slice.

HP Server Automation (SA) complies with the Federal Information Processing Standards (FIPS) publication 140-2, a security standard that enables government entities to procure equipment that uses validated cryptographic modules.

Secure Mode in SA Virtualization allows you to upload CA Certificates for secure communication to the VS. When Secure Mode is enabled, it secures the communication with the VS by authenticating the certificate that the customer uploads to the non-FIPS keystore. Secure Mode is enabled (or True) by default in a new SA 10.1 installation and disabled (or False) on an upgrade to SA 10.1

  • If FIPS is enabled, it overrides Virtualization Secure Mode. In this case, you need to upload the VS certificate to the FIPS keystore.
  • If FIPS is disabled, then Secure Mode can be True or False.

    • If Secure Mode is True, you must upload the certificate to the non-FIPS keystore. This will use SSL to communicate with the VS and also validate the certificate.

    • If False, you do not need to upload any certificates.

For more information about FIPS, see SA FIPS 140-2 Compliance Statement in the SA Get started section.