IBM z13s Technical Manual page 451

Full log offload and delta log offload (since the last offload request) are provided. Offloading
to removable media and to remote locations by FTP is available. The offloading can be
manually started by the new Audit and Log Management task or scheduled by the Customize
Scheduled Operations task. The data can be offloaded in the HTML and XML formats.
HMC user ID templates and LDAP user authentication
LDAP user authentication and HMC user ID templates enable the addition and removal of
HMC users according to your corporate security environment. These processes use an LDAP
server as the central authority. Each HMC user ID template defines the specific authorization
levels for the tasks and objects for the user who is mapped to that template. The HMC user is
mapped to a specific user ID template by user ID pattern matching. The system then obtains
the name of the user ID template from content in the LDAP server schema data.
Default HMC user IDs
It is no longer possible to change the Managed Resource or Task Roles of the default user
IDs operator, advanced, sysprog, acsadmin, and service.
If you want the capability to change the roles for a default user ID, create your own version by
copying an existing default user ID.
View-only user IDs and view-only access for HMC and SE
With HMC and SE user ID support, users can be created that have "view-only" access to
selected tasks. Support for "view-only" user IDs is available for the following purposes:
Hardware messages
Operating system messages
Customize or delete activation profiles
Advanced facilities
Configure on and off
HMC and SE secure FTP support
You can use a secure FTP connection from a HMC/SE FTP client to a customer FTP server
location. This configuration is implemented by using the Secure Shell (SSH) File Transfer
Protocol, which is an extension of SSH. You can use the Manage SSH Keys console action,
which is available to both the HMC and SE, to import public keys that are associated with a
host address.
The Secure FTP infrastructure allows HMC and SE applications to query whether a public key
is associated with a host address and to use the Secure FTP interface with the appropriate
public key for a host. Tasks that use FTP now provide a selection for the secure host
connection.
When selected, the task verifies that a public key is associated with the specified host name.
If none is provided, a message window is displayed that points to the Manage SSH Keys task
to input a public key. The following tasks provide this support:
Import/Export IOCDS
Advanced Facilities FTP IBM Content Collector Load
Audit and Log Management (Scheduled Operations only)
FCP Configuration Import/Export
OSA view Port Parameter Export
OSA Integrated Console Configuration Import/Export
Chapter 11. Hardware Management Console and Support Elements
423