Configuring the credentials of a target system

You can configure the credentials of a target system in OnCommand Workflow Automation (WFA) and use the credentials to connect to that specific system and execute commands.

About this task

After initial data acquisition, you must configure the credentials for the arrays on which the commands are run. PowerShell WFA controller connection works in two modes:

With credentials
WFA tries to establish a connection using HTTPS first, and then tries using HTTP. You can also use Microsoft Active Directory LDAP authentication to connect to arrays without defining credentials in WFA. To use Active Directory LDAP, you must configure the array to perform authentication with the same Active Directory LDAP server.
Without credentials (for storage systems operating in 7-Mode)
WFA tries to establish a connection using domain authentication. This mode uses the remote procedure call protocol, which is secured using the NTLM protocol.
WFA checks the Secure Sockets Layer (SSL) certificate for ONTAP systems. Users might be prompted to review and accept/deny the connection to ONTAP systems if the SSL certificate is not trusted.
You must reenter the credentials for ONTAP, NetApp Active IQ and Lightweight Directory Access Protocol (LDAP) after you restore a backup or complete an in-place upgrade.

Procedure

Log in to WFA through a web browser as an admin.
Click Settings, and under Setup click Credentials.
Click on the toolbar.
In the New Credentials dialog box, select one of the following options from the Match list:
- Exact
  Credentials for a specific IP address or host name
- Pattern
  Credentials for the entire subnet or IP range
  
  Note: The use of regular expression syntax is not supported for this option.
Select the remote system type from the Type list.
Enter either the host name or the IPv4 or IPv6 address of the resource, the user name, and the password.

Note: WFA 5.1 verifies the SSL certificates of all resources added to WFA. As certificate verification might prompt you to accept the certificates, using wildcards in credentials is not supported. If you have multiple clusters using the same credentials, you cannot add them all at once.

Test the connectivity by performing the following action:

If you selected the following match type...	Then...
Exact	Click Test.
Pattern	Save the credentials and choose one of the following: Select the credential and click on the toolbar. Right-click and select Test Connectivity.

Click Save.