You can change basic startup options for the CIMOM
with the cimconfig command.
The following list describes the startup options and default
values for the cimconfig command. None of the basic startup
options are dynamic.
- enableHttpConnection
- Allows user access through the httpPort, using HTTP TCP/IP
communication. The default is false, which means that the CIM server will
not listen at the httpPort. Set this property to true if you are certain your
environment is secure.
If this property is set
to false, then enableHttpsConnection should be set to true to allow HTTPS
connections.
- Default value
- false
- enableHttpsConnection
- Allows user access through the httpsPort, using HTTPS TCP/IP
communication. The default is true because an HTTPS connection has better
security than an HTTP connection.
- Default value
- true
- httpPort
- Port to listen for HTTP requests. If set,
then this must be set to a valid port number, and it overrides the port number
of the wbem-http service in the TCP/IP services table. If not set, then the
port from the wbem-http service is used. If neither this property nor the
wbem-http service port is set, then a hard-coded default of 5988 is used.
This property only takes affect if enableHttpConnection is set
to true.
- Default value
- 5988
- httpsPort
- Port to listen for HTTPS requests. If set, then this
must be set to a valid port number, and it overrides the port number of the
wbem-https service in the TCP/IP services table. If not set, then the port
from the wbem-https service is used. If neither this property nor the wbem-https
service port is set, then a hardcoded default of 5989 is used.
This
property only takes affect if enableHttpsConnection is set to true.
- Default value
- 5989
- httpAuthType
- Type of HTTP authentication (Basic, Kerberos).
Note: You should not use Basic authentication unless the one
or both of the following conditions are true:- You are using HTTPS.
- You have a highly secure environment, where passing clear-text
passwords is not an issue.
This property determines the authentication
to be performed over the HTTP and HTTPS ports (but see also the sslClientVerificationMode
property). This property does not determine the authentication over the wbem-exp-https
port (see the enableSSLExportClientVerification property).
- Default value
- Basic
Note: If the value of the httpAuthType is set
to Basic, the user's password is sent in the clear. If this option is set
to an unrecognized value the httpAuthType will automatically default to Kerberos.
- kerberosServiceName
- If the httpAuthType is set to Kerberos, this sets the Kerberos
service name for the CIMOM service, which should match the CIMOM service
name configured in the key distribution center (KDC).
- Default value
- cimom