Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Search for | Example | Results |
---|---|---|
A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Search for | Operator | Example |
---|---|---|
Two or more words in the same topic |
|
|
Either word in a topic |
|
|
Topics that do not contain a specific word or phrase |
|
|
Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
A combination of search types | ( ) parentheses |
|
Requirements for trusted sign-on
This configuration is intended for customers who have an HPE Service Manager server running in a secured environment and want users to be able to log on to the server without providing a user name and password.
- Parameter required in the server configuration file (sm.ini)
- trustedsignon:1
- ssl:1
- ssl_reqClientAuth:2
- Parameters required in the web tier configuration file (web.xml)
- isCustomAuthenticationUsed – Set the value to false to make Service Manager send the current user name in the HTTP header.
Other requirements
- Configure your web application server to use a trusted authentication source.
- Stop the web application server running the web tier.
- Navigate to the folder
<web tier installation path>\WEB-INF\classes
, and open the fileapplication-context.xml
in a text editor. - Search for the following string:
/**=httpSessionContextIntegrationFilter,anonymousProcessing Filter
- Replace the search string with the following text to use Microsoft Integrated Windows Authentication as your trusted authentication source:
/**=httpSessionContextIntegrationFilter,preAuthenticationFilter, anonymousProcessingFilter
- Save the file and restart the web application server.
- Create an operator record for each Windows user you want to log on to Service Manager. These operators do not need a password.
- Install and configure an external authentication source, such as Microsoft Integrated Windows Authentication, to ensure that Service Manager can use your private certificates.
- Beginning with Service Manager 9.30, Trusted Sign-On requires the parameter
ssl_reqClientAuth:2
to be set. You must then create unique client SSL certificates for each Service Manager client wanting to access Service Manager with Trusted Sign-On. For example, if you have 20 Service Manager Windows clients, you must create 20 unique client SSL certificates. If you have four Service Manager Web Tier servers, you must create four unique client SSL certificates. Note that if maintaining these unique client SSL certificates incurs unsustainable IT operation costs, you can consider the use of theacceptsharedcert:1
parameter. See Parameter: acceptsharedcert.
Related concepts
Example: Enabling trusted sign-on
Example: Generating a client certificate with OpenSSL
Example: Generating a server certificate with OpenSSL
Related tasks
Add a client certificate to the web tier
Add a client certificate to the Windows client
Update the cacerts keystore file
Related references
Requirements for optional SSL encryption
Requirements for required SSL encryption
Requirements for required SSL encryption and client authentication
Requirements for required SSL encryption and trusted clients
Parameter: acceptsharedcert
We welcome your comments!
To open the configured email client on this computer, open an email window.
Otherwise, copy the information below to a web mail client, and send this email to ovdoc-ITSM@hp.com.
Help Topic ID:
Product:
Topic Title:
Feedback: