Host Access Management and Security Server Administrator Guide October 2018 Legal Notice For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.microfocus.com/about/legal/. Copyright © 2018 Micro Focus. All rights reserved. The only warranties for this product and any associated updates or services are those that may be described in express warranty statements accompanying the product or in an applicable license agreement you have entered into. Nothing in this document should be construed as creating any warranty for a product, updates, or services. The information contained in this document is subject to change without notice and is provided “AS IS” without any express or implied warranties or conditions. Micro Focus shall not be liable for any technical or other errors or omissions in this document. Please see the product’s applicable end user license agreement for details regarding the license terms and conditions, warranties, and limitations of liability. Any links to third-party websites take you outside Micro Focus websites, and Micro Focus has no control over and is not responsible for information on third party sites. Contents Host Access Management and Security Server 7 1 About Management and Security Server 12.5.2 9 About Management and Security Server . 9 About Add-On Products . 9 2 Manage Sessions 11 Add a session . 11 Product- or Session-specific settings . 12 Configure a Reflection ZFE session. 12 Configure a Reflection/InfoConnect Desktop - Workspace Automated Sign-on session . 13 Configure a Rumba+ Desktop session. .14 Configure a Reflection for the Web session . .15 Edit a session . 18 Copy a session . 19 Delete a session . 19 3 Manage Packages 21 Configure a Package . 21 Upload or Update a Package . 21 4 Assign Access 23 Search & Assign . 23 Search for Users or Groups/Folders . 23 Assign Sessions or Packages . 24 Currently Assigned . 26 5 Configure Settings 27 General Settings . 27 Set VPA number. 27 Set server name. 28 Custom login page . 28 Applet tag . 28 Links List . 28 General Security . 29 Server access protocol. 29 Change administrator password . 30 Restrict administrator account . 31 Require new login . 32 Smart card settings . 32 Certificate chooser prompt . 34 Enable identity verification . 34 Change keystore password . 35 PKI Server . 36 Keychain . 36 Secure Shell . 37 Contents 3 Known Hosts List . 37 Shared User Key Pair . 38 Certificates . 40 Administer the Management and Security Server Certificate. 40 Administer Shared Client Certificate . 41 Other certificates . 41 Trusted Certificates . 44 Terminal Emulator Clients - Trusted Certificate list. .44 Trusted Root Certificate Authorities . 44 Management and Security Server - Trusted Certificate list . 44 Credential Store (Reflection for the Web) . 45 Enable credential store . 45 Select form of identity. 45 Regenerate encryption key . 45 Delete selected credentials . 46 Security Proxy. 46 Preliminary steps - Install and Configure . 46 Import Security Proxy settings . 47 Create and assign secure sessions . ..