Signing in

The Sign In page enables you to access the Home page, which contains the available HPE Insight Management Agents.


[NOTE: ]

NOTE: The following warning is displayed on the login screen whenever the certificate or the keys or both are modified:

The certificate and keys used by HPE SMH to establish SSL (https) connection have been replaced. This can happen due to any one the following reasons: the previous version is deleted (accidentally or maliciously), the previous version is replaced by another application (HPE SIM replaces the certificate and keys when installed on top of HPE SMH), or the location information in self-signed certificate is changed. Take the appropriate action after verifying the status of the previous version.


The Sign In page components include:

  • Two fields to input your user name and password from an account that is part of a valid group configured in the SMH users groups configuration article.


    [NOTE: ]

    NOTE: HPE SMH verifies the revocation status of the trusted certificate used for SSO against the root certificate, intermediate certificate, and the Certificate Revocation List (CRL) of the certificate. If the certificate is found to be revoked or if an error is encountered during verification, HPE SMH logs a critical error as: Trusted certificate used for SSO is either revoked or HPE SMH failed to verify it against CRL.


    HPE SMH loads both root and intermediate CA certificates for only Base64 encoded certificates with .cer extension from PATH_TO_CAFILES\cacerts\ and loads CRLs for only files with .crl extension from PATH_TO_CAFILES\cacrls\ to verify the status of the trusted certificate.

    To modify the PATH_TO_CAFILES, a CLI option -W|| –cafiles is available in HPE SMH. Run the following command to change the PATH_TO_CAFILES: smhconfig -W|| --cafiles[=] DIR where, cafiles is the complete path to the CA files directory.


    [NOTE: ]

    NOTE: smhconfig -W “” will disable the CA revocation check.


  • Two buttons under the input fields:

    • Sign In  

      Validates the values in the user name and password. If both values are valid, the HPE SMH Home page appears.

    • Clear  

      Erases the input values.

  • The question mark icon, ?, when clicked, displays or hides the tooltip box that displays information about the authentication mechanism and sign-in process.

    The following table provides more information about the tooltip box.

Tooltip box

Name Description
User Name User must be part of a user group accepted by HPE SMH
Password User name and password must match a valid user
Sign In Validates user name sign-in to HPE SMH
Clear Erases user name and password input fields
? Show/hide tooltip box
Checkbox Automatically imports the management server certificate when selected. This is applicable when using SSO from HPE SIM and the trust mode is set to TrustByCert.

[NOTE: ]

NOTE: If an error occurs on a sign-in attempt, you are returned to the Sign In page.


A configuration mechanism enables the administrator to customize the image and the message in the Sign In page. The administrator can use a custom logo and warning message. As the pages load, HPE SMH verifies if the personalized content is enabled and available. If the content is not available, HPE SMH uses the standard image and warning message.

Single sign-on from HPE SIM to HPE SMH

When a CA certificate is used, you might be unable to do an SSO from HPE SIM to HPE SMH v7.0.0 onwards. The following error message is displayed on the SMH login page Trusted certificate used for SSO is either revoked or SMH failed to verify it against CRL. In such a case, you have to manually log in to SMH.

To use a CA Certificate for SSO, follow the prerequisites listed here to:

Create a certificate request:

  1. Log in to SIM.

  2. Select Options → security → certificate → HPE SIM server certificate.

  3. Click Import.

  4. Click more… at the end of first option Create a Certificate Signing Request (CSR).

  5. Click Create to download PKCS 10 certificate file and save it.

  6. Submit the certificate request to CA to get a signed certificate.

Get the signed certificate from CA:


[NOTE: ]

NOTE: You can also set up local certificate services such as Microsoft Certificate Services to get the signed certificate.


  1. Access http://hostname/certsrv, where hostname is the name of the machine having certificate services.

  2. Select Request a certificate.

  3. Select Advanced certificate request.

  4. Select Submit a certificate request by using a base-64-encoded CMC, PKCS #10 file, or Submit a renewal request by using a base-64-encoded PKCS #7 file.

  5. To download a certificate that is pending for approval:

    1. Access http://hostname/certsrv, where hostname is the name of the machine having certificate services.

    2. Click View the status of a pending certificate request and download the signed certificate to save it.

Get the Root Certificate and the CRL from CA:


[NOTE: ]

NOTE: You can also set up local certificate services such as Microsoft Certificate Services to get the Root Certificate and the CRL.


  1. Access http://hostname/certsrv, where hostname is the name of the machine having certificate services.

  2. Select Download a CA certificate, certificate chain, or CRL.

  3. Select Base64 as encoding method.

  4. Select Download a CA certificate.

  5. Click Save.

  6. Click Download latest base CRL.

  7. Click Save to save the CRL.

Import the signed certificate in SIM:

  1. Log in to SIM.

  2. Select Options  → Security → Credentials → Trusted Systems.

  3. Select Trusted Certificates tab.

  4. Click Import.

  5. Browse to select root CA certificate file.

  6. Click OK. The root CA certificate will be added to Trusted Certificates.

  7. Select Options  → security → certificate → HPE SIM server certificate.

  8. Click Import.

  9. Click more…at the end of the third option Import signed certificate reply from CA.

  10. Browse to select signed certificate file.

  11. Click Import.

Set up SMH:

  1. Log in to the console of the SMH system.

  2. Select Settings → SMH  → Security  → Trusted Management Servers.

  3. Select Get Certificate Information, provide the server name or the IP address of the SIM machine.

  4. Click Add certificates to add the certificate to the trusted certificate list.

Configure on SMH system:

  1. Log in to the console of the SMH system.

  2. Create a directory; for example, c:\cafiles.

  3. Create two subfolders cacerts and cacrls.

  4. Place the root and the intermediate certificates in the cacerts directory.

  5. Place CRLs in the cacrls directory.

  6. Enter the command smhconfig -W c:\cafiles to set the cafiles path and then execute smhconfig –r.


    [NOTE: ]

    NOTE: The smhconfig -W “” will completely disable the CA revocation check.


After SMH is configured to use the CA, SMH accepts SSO requests from SIM.

  • To revoke a certificate:

    1. Log in to the console of the Certificate Service machine.

    2. Click the Issued Certificates folder.

    3. Right-click the certificate to be revoked, All Tasks → Revoke certificate.

    4. After revoking the certificate publish the CRL.

  • To publish a CRL:

    1. Log in to the console of the Certificate Service machine.

    2. Right-click the Revoked Certificates folder, or option and select All Tasks  → Publish.


      [NOTE: ]

      NOTE: You must use the latest CRL for certificate verification.


Starting HPE SMH from Internet Explorer

To sign in to HPE SMH with Internet Explorer:

  1. Navigate to https://hostname:2381/.

    The first time you browse to this URI, the Security Alert dialog box appears, prompting you to indicate whether to trust the server. If you do not import the certificate, the Security Alert appears every time you browse to HPE SMH.

    For more information about procedures on changing the configuration variables, see the HPE System Management Homepage Installation and Configuration Guide available at the HPE SMH web page at System Management Homepage documentation.


    [NOTE: ]

    NOTE: To implement your own Public Key Infrastructure (PKI) or install your own generated certificates into each managed system, you can install a certificate authority Root Certificate into each browser to be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser.



    [NOTE: ]

    NOTE: To implement or install your own generated certificates into each managed system, you can install a certificate authority Root Certificate into each browser to be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser.


  2. Click Yes.

    The Sign In page appears. If you have enabled Anonymous access during installation, then System Management Homepage appears.

  3. Enter your user name that is recognized by the operating system.


    [NOTE: ]

    NOTE: HPE SMH initially allows access to the root user only.


    • Linux 

      HPE SMH initially allows access to users belonging to the root operating system group.

    • Windows 

      HPE SMH allows access to users belonging to the Administrators operating system group.

    If the user credentials cannot be authenticated, the user is denied access.

    After logging into HPE SMH as an initially allowed user, use the Security Settings to grant access to users in other operating system groups.

    Administrator on Windows and root on Linux have administrator access on HPE SMH.

  4. Enter the password that is recognized by the operating system.

  5. Click Sign In.

    The System Management Homepage appears.

Starting HPE SMH from Mozilla or Firefox

To sign in to HPE SMH with Mozilla or Firefox:

  1. Navigate to https://hostname:2381/.

    For more information about procedures on changing the configuration variables, see the HPE System Management Homepage Installation and Configuration Guide available at the HPE SMH web page at System Management Homepage documentation.

  2. Click OK.

    The Sign In page appears. If you have enabled Anonymous access during installation, then System Management Homepage appears.

  3. Enter your user name that is recognized by the operating system.

    • Linux 

      HPE SMH initially allows access to users belonging to the root operating system group.

    • Windows 

      HPE SMH allows access to users belonging to the Administrators operating system group.

    Administrator on Windows and root on Linux have administrator access on HPE SMH.

  4. Enter the password that is recognized by the operating system.

  5. Click Sign In.

    The System Management Homepage appears.

Starting HPE SMH from HPE SIM

To start HPE SMH by signing in to HPE SIM with a Web browser:

  1. Navigate to https://hostname:50000/.

    The first time you browse to this link, the Security Alert dialog box appears, asking if you want to trust the server. If you do not import the certificate, the Security Alert appears each time you browse to HPE Systems Insight Manager (HPE SIM).


    [NOTE: ]

    NOTE: To implement a custom Public Key Infrastructure (PKI) or install your own generated certificates into each managed system, you can install a certificate authority Root Certificate into each browser to be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser.



    [NOTE: ]

    NOTE: To implement or install your own generated certificates into each managed system, you can install a certificate authority Root Certificate into each browser to be used for management. If a Root Certificate is implemented, the Security Alert dialog box does not appear. If the alert appears, you might have browsed to the wrong system. For more information about installing the certificate authority Root Certificate, see the online help in your browser.


  2. Click Yes.

    The Sign In page appears.

  3. Enter your user name that is recognized by the operating system.

  4. Enter the password that is recognized by the operating system.

  5. Click Sign In.

  6. Select Tools → System Information → System Management Homepage.

  7. Select a target system from the list.

  8. Select a check box next to a target system, and then click Apply.

  9. Verify the target system by selecting a check box next to the system, and then click Run Now.

    The Security Alert dialog box appears, prompting you to trust the server. If you do not import the certificate, the Security Alert appears each time you browse to HPE SMH.

    The System Management Homepage appears.

Related Topics

Getting started
Configuring firewall settings
Automatically importing certificates
Signing out
HPE SMH pages