Setting up an authentication profile

An authentication profile is a collection of information that the system uses to conduct a logon session. When you log on to the TrueSight Server Automation Console, you must select an authentication profile.

When you set up an authentication profile, you can choose the type of authentication you want to perform. By default, TrueSight Server Automation provides secure remote password (SRP) authentication. For more information about configuring all types of authentication, see Implementing-authentication.

During a logon session, the Authentication Service authenticates users and issues session credentials. The Authentication Service is a service implemented within the TrueSight Server Automation Application Server. The Authentication Service is responsible for authenticating users and issuing session credentials.

Note

Authentication profiles are stored in a file called authenticationProfiles.xml. If multiple users share the same machine and decide to define their own authentication profiles, they could access the same file simultaneously. To avoid this situation, BMC recommends that administrators set up standard authentication profiles for all users sharing the same machine. The administrator should also limit write access to the authenticationProfiles.xml file. For information about storing authentication profiles, see System-capabilities-related-to-security.

To set up an authentication profile

  1. (Microsoft Windows) Perform one of the following steps to open the logon window for the TrueSight Server Automation Console:
    • From the Start menu, select Programs > BMC Software > BladeLogic Server Automation Suite > Server Automation Console releaseNumber.

    • From the directory where TrueSight Server Automation is installed (for example, C:\Program Files\BMC Software\BladeLogic\CM), enter:

      .\rcp\BSAClient.exe

      If more than one version of the client is installed, the different versions reside in directories called BladeLogicN, such as BladeLogic2.

  2. In the logon window, click Options. The window expands to show additional options in a tabbed format.
  3. Click the Authentication Profile tab.
  4. Do one of the following:
    • To modify an existing authentication profile, select the profile in the profiles list. Then click Edit. The Edit Authentication Profile dialog opens.
    • To create a new profile, click Add. The New Authentication Profile dialog box opens. It provides the same fields as the Edit Authentication Profile dialog box.

  5. In the Authentication Profile dialog box, enter values for the following:

  6. Click OK.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*