Andy, There's surprising little about HMC Security. The Intro redbook you found, chapters 5 and 6, were helpful.
Your company firewall will be helpful. You'll need to have them enable ports 443 and 9960 for browser support, and possibly port 123 for timer support. You can either integrate the signon ID's with LDAP or define them manually on the HMC. Set up a password rule that reflects your company's rules. Also set timeouts to company rules. Plan how to get console and security logs for the auditors. Plan who will reset passwords. I put a security plan together for our hmc access, but it's heavily customized. I'll try to scrub it and send it to you off list, but give me a few hours. The biggest problem for us was getting people to stop using shared ID's. We did this several months ahead so they had time to adjust. Mary Anne ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
