Cisco CISCOWORKS COMMON SERVICES 3.0, Руководство пользователя

Страница: 61 / 286

3-15
User Guide for CiscoWorks Common Services
78-16571-01
Chapter 3 Configuring the Server
Enabling Single Sign-On
Step 4 Enter the value of the Non-SSL(HTTP) Port of the peer CiscoWorks Server.
Step 5 Click OK.
The default Non-SSL(HTTP) Port of the peer CiscoWorks Server is 1741.
Deleting Peer Certificates
To delete peer certificates:
Step 1
Select the check box corresponding to the certificate you want to delete.
Step 2
Click Delete.
.
You can also view the details of the client certificates. For this, select the
check box corresponding to the certificate and click View.
Enabling Single Sign-On
With Single Sign-On (SSO), you can use your browser session to transparently
navigate to multiple CiscoWorks Servers without authenticating to each of them.
Communication between multiple CiscoWorks Servers is enabled by a trust model
addressed by Certificates and shared secrets.
The following tasks need to be done initially:
•
One of the CiscoWorks Servers should be set up as the authentication server.
•
Trust should be built between the CiscoWorks Servers, using self signed
certificates. A trusted certificate is created by adding it in the trust key store
of the server.
CiscoWorks TrustStore or KeyStore is maintained by the
certificate management framework in Common Services.
•
Each CiscoWorks Server should setup a shared secret with the authentication
server. The System Identity user password acts as a secret key for SSO.
The SSO authentication server is called the Master, and the SSO regular server is
called the Slave.