Draft Document for Review February 7, 2020 3:15 pm 8464ch09_Oper.fm If the browser that is used to access TS7700 MI does not support TLS 1.2 and  HTTPS-only is enabled, a warning message is displayed. The message states that access  to MI might be lost if you proceed. GLYPH<SM590000> HTTP Settings: HTTP enablement can be changed in this session. The HTTP for web  setting can be Enabled or Disabled from here. If the HTTP settings change, the TS7700  MI restarts. All users that are logged on at the time lose connection to the Management  Interface and must log in again. GLYPH<SM590000> Usage Reporting: Use this section to enable or disable usage reporting. Usage reporting  is enabled or disabled for all users on the client and server sides. By default, usage  reporting is disabled. Authentication policies The user can add, modify, assign, test, and delete the authentication policies that determine  how users are authenticated to the TS7700 Management Interface. Each cluster is assigned  a single authentication policy. The user must be authorized to modify security settings before  changing authentication policies. Two categories of authentication policies are available: Local, which replicates users and their  assigned roles across a grid, and External, which stores user and group data on a separate  server and maps relationships between users, groups, and authorization roles when a user  logs in to a cluster. External policies include Storage Authentication Service policies and  Direct LDAP (lightweight directory access protocol) policies$^{1}$. Note:  A restore of cluster settings (from a previously taken backup) do not restore or  otherwise modify any user, role, or password settings that are defined by a security policy. Policies can be assigned on a per cluster basis. One cluster can employ local authentication,  while a different cluster within the same grid domain can employ an external policy. Also, each  cluster in a grid can operate its own external policy. However, only one policy can be enabled  on a cluster at a time. The Authentication Policies table lists the following information: Tip:  The Local Policy name is  Local  and cannot be modified. GLYPH<SM590000> Policy Name: The name of the policy that defines the authentication settings. The policy  name is a unique value that is composed of 1 - 50 Unicode characters. Heading and  trailing blank spaces are trimmed, although internal blank spaces are retained. After an  authentication policy is created, its policy name cannot be modified. GLYPH<SM590000> Type: The policy type, which can be one of the following values: – Local: A policy that replicates authorizati on based on user accounts and assigned  roles. It is the default authentication policy. When enabled, it is enforced for all clusters  in the grid. If Storage Authentication Service is enabled, the Local policy is disabled.  This policy can be modified to add, change, or delete individual accounts, but the policy  cannot be deleted.  1 When operating at code level 8.20.x.x or 8.21.0.63-8.21.0.119 with Storage Authentication Service enabled, a  5-minute web server outage occurs when a service person logs in to the machine. Chapter 9. Configuring and operating the IBM TS7700  465