If the browser that is used to access TS7700 MI does not support TLS 1.2 and HTTPS-only is enabled, a warning message is displayed. The message states that access to MI might be lost if you proceed. 

GLYPH<SM590000> HTTP Settings: HTTP enablement can be changed in this session. The HTTP for web setting can be Enabled or Disabled from here. If the HTTP settings change, the TS7700 MI restarts. All users that are logged on at the time lose connection to the Management Interface and must log in again. 

GLYPH<SM590000> Usage Reporting: Use this section to enable or disable usage reporting. Usage reporting is enabled or disabled for all users on the client and server sides. By default, usage reporting is disabled. 

## Authentication policies 

The user can add, modify, assign, test, and delete the authentication policies that determine how users are authenticated to the TS7700 Management Interface. Each cluster is assigned a single authentication policy. The user must be authorized to modify security settings before changing authentication policies. 

Two categories of authentication policies are available: Local, which replicates users and their assigned roles across a grid, and External, which stores user and group data on a separate server and maps relationships between users, groups, and authorization roles when a user logs in to a cluster. External policies include Storage Authentication Service policies and Direct LDAP (lightweight directory access protocol) policies$^{1}$. 

Note:  A restore of cluster settings (from a previously taken backup) do not restore or otherwise modify any user, role, or password settings that are defined by a security policy. 

Policies can be assigned on a per cluster basis. One cluster can employ local authentication, while a different cluster within the same grid domain can employ an external policy. Also, each cluster in a grid can operate its own external policy. However, only one policy can be enabled on a cluster at a time. 

The Authentication Policies table lists the following information: 

GLYPH<SM590000> Policy Name: The name of the policy that defines the authentication settings. The policy name is a unique value that is composed of 1 - 50 Unicode characters. Heading and trailing blank spaces are trimmed, although internal blank spaces are retained. After an authentication policy is created, its policy name cannot be modified. 

Tip:  The Local Policy name is Local  and cannot be modified. 

GLYPH<SM590000> Type: The policy type, which can be one of the following values: 

– Local: A policy that replicates authorizati on based on user accounts and assigned roles. It is the default authentication policy. When enabled, it is enforced for all clusters in the grid. If Storage Authentication Service is enabled, the Local policy is disabled. This policy can be modified to add, change, or delete individual accounts, but the policy cannot be deleted. 

