HP Xw460c - ProLiant - Blade Workstation Огляд - Сторінка 9

Role-based user accounts

The BladeSystem Onboard Administrator provides configurable user accounts that can provide

complete isolation of multiple administrative roles such as server, LAN, and SAN. User accounts are

configured with specific device bay or interconnect bay permissions and one of three privilege levels:

administrator, operator, or user. An account with administrator privileges including BladeSystem

Onboard Administrator bay permission can create or edit all user accounts on an enclosure. Operator

privileges allow full information access and control of permitted bays. User privileges allow

information access but no control capability.

The BladeSystem Onboard Administrator requires user login to the web GUI or CLI with an account ID

and password. For a local account, the password is stored on the BladeSystem Onboard

Administrator. For an LDAP account, the BladeSystem Onboard Administrator contacts the defined

LDAP server to check the user credentials. Two-factor authentication allows even tighter security for the

user management session to the BladeSystem Onboard Administrator.

Rather than requiring separate logins to access multiple management processors within each

enclosure, the BladeSystem Onboard Administrator allows single point access. Thus, an administrator

can use single sign-on to log in to a single BladeSystem Onboard Administrator and use the web GUI

to graphically view and manage the HP BladeSystem c-Class components in up to seven linked

enclosures. For example, an IT administrator could automatically propagate management

commands—such as changing the enclosure power mode—throughout the linked enclosures.

The c7000 enclosure contains two enclosure link ports to allow any active BladeSystem Onboard

Administrator module to access linked enclosures. On a standalone enclosure or upper enclosure in a

series of linked enclosures, the upper enclosure link-up port functions as a service port for temporary

connection to a PC with a CAT5 patch cable. It provides quick access to any BladeSystem Onboard

Administrator module, ProLiant Onboard Administrator (iLO 2), or interconnect module with Ethernet

management ability.

The enclosure link-down port connects to the enclosure link-up port on the enclosure below it. Linking

the enclosures enables the rack technician to access all the enclosures through the open

link-up/service port. If more c-Class enclosures are added to the rack, they can be linked through the

open enclosure link-up port on the upper enclosure or the link-down port on the bottom enclosure.

NOTE

The linked enclosures will enforce a common rack name on all

the linked enclosures unless different rack names are established

prior to linking the enclosures and not changed after linking the

enclosures.

IMPORTANT

The HP BladeSystem c-Class Enclosure link ports are not

compatible with the HP BladeSystem p-Class Enclosure link

ports.