Configure the credentials of a target system

You can configure the credentials of a target system in OnCommand Workflow Automation (WFA) and use the credentials to connect to that specific system and execute commands.

After initial data acquisition, you must configure the credentials for the arrays on which the commands are run. PowerShell WFA controller connection works in two modes:

  • With credentials

    WFA tries to establish a connection using HTTPS first, and then tries using HTTP. You can also use Microsoft Active Directory LDAP authentication to connect to arrays without defining credentials in WFA. To use Active Directory LDAP, you must configure the array to perform authentication with the same Active Directory LDAP server.

  • Without credentials (for storage systems operating in 7-Mode)

    WFA tries to establish a connection using domain authentication. This mode uses the remote procedure call protocol, which is secured using the NTLM protocol.

  • WFA checks the Secure Sockets Layer (SSL) certificate for ONTAP systems. Users might be prompted to review and accept/deny the connection to ONTAP systems if the SSL certificate is not trusted.

  • You must reenter the credentials for ONTAP, NetApp Active IQ and Lightweight Directory Access Protocol (LDAP) after you restore a backup or complete an in-place upgrade.

  1. Log in to WFA through a web browser as an admin.

  2. Click Settings, and under Setup click Credentials.

  3. Click New icon on the toolbar.

  4. In the New Credentials dialog box, select one of the following options from the Match list:

    • Exact

      Credentials for a specific IP address or host name

    • Pattern

      Credentials for the entire subnet or IP range

      Note The use of regular expression syntax is not supported for this option.
  5. Select the remote system type from the Type list.

  6. Enter either the host name or the IPv4 or IPv6 address of the resource, the user name, and the password.

    Note WFA 5.1 verifies the SSL certificates of all resources added to WFA. As certificate verification might prompt you to accept the certificates, using wildcards in credentials is not supported. If you have multiple clusters using the same credentials, you cannot add them all at once.
  7. Test the connectivity by performing the following action:

    If you selected the following match type…​ Then…​


    Click Test.


    Save the credentials and choose one of the following:

    • Select the credential and click Test connectivity icon on the toolbar.

    • Right-click and select Test Connectivity.

  8. Click Save.