VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Guida di Installazione Pagina 21
- Pagina / 90
- Indice
- SEGNALIBRI
Valutato. / 5. Basato su recensioni clienti
Server Zone Security
4
Server Zone Security
Address the following security environment guidelines for all systems in the server zone, including the
VCM Collector, SQL Server host, and Web server. These three functions might reside all on one system, or
they might be distributed across two or three. Be sure to apply the security settings in this chapter to all
the systems that are used.
Server zone systems must be treated and managed with security measures that are consistent with those
used for the infrastructure zone.
n
For security instructions that are unique to the VCM Collector, see "VCM Collector Server" on page 25.
n
For security instructions that are unique to the SQL Server host, see "SQL Server" on page 27.
n
For security instructions that are unique to the Web server, see "Web Server" on page 31.
Using VCM to Manage Server Zone Systems
After you install VCM, your first course of action should be to manage server zone systems in VCM and
subject them to assessment. VCM comes with compliance rules for some of the necessary security settings
on the Collector, SQL database server, and Web server. In addition, you can create your own templates
and rules.
The rest of this chapter briefly explains security hardening steps to pursue, manually or through
compliance rules, for all server zone systems.
Machines in the VCM server zone need to be trusted more than those in the user interface, managed
machine, or provisioning zones. In VCM, server zone systems must be controlled with the same measures
used for infrastructure systems such as domain controllers.
Server Zone Administrator Role
VCM can manage its own servers, but it is unsafe to allow nonadministrator VCM users into server zone
systems. When nonadministrator VCM users administer a VCM server, they have access to all the data
and actions that are authorized to VCM. To help prevent this situation, create a role dedicated solely to
server zone administration.
Having a role dedicated to server zone administration minimizes the risk of granting access to VCM
servers to nonadministrator VCM users.
Server Zone Auditor Role
Create an auditor role, for example, VcmAuditor, in VCM that has read-only access to all VCM data but
has no rights to create change actions or invoke inspections. Place at least one user account in that role.
Having an auditor role is an industry best practice.
VMware, Inc.
21
- Security Guide 1
- Copyright 2
- Contents 3
- Web Server 31 4
- VCM User Interface System 39 4
- Decommissioning 53 5
- Authentication 57 5
- Supplemental References 81 6
- Index 87 6
- About This Book 7
- VCM Security Guide 10
- VMware, Inc 10
- How Personnel Use VCM 11
- Trust Zones 12
- Introduction to VCM Security 13
- Domain Infrastructure 15
- Domain Accounts 16
- Personnel Considerations 17
- VCM Installation Kits 19
- Server Zone Security 21
- Protection Profiles 22
- Physical Security 22
- Disabling Automatic Login 22
- VCM Collector Server 25
- SQL Server 27
- Direct SQL Server Login 28
- Login Accounts for SQL Server 28
- Web Server 31
- Using HTTPS 32
- Web Server Certificates 32
- VCM Agent Systems and Managed 33
- Machines 33
- VCM Agent 34
- Unauthorized Agents 35
- Local Administrator Account 35
- BIOS Password 35
- Disabling Alternative Startup 35
- Maintenance Mode 35
- Trusted Certificate Store 36
- Enterprise Certificate 36
- Trustworthiness of Data 36
- Individual CollectionResults 37
- VCM User Interface System 39
- Access Control 40
- Cross-site Scripting 41
- Trusted Software 42
- Verifying Certificates 42
- Protection of Repositories 46
- Connecting to Repositories 46
- Closing Unnecessary Ports 50
- OS Provisioning Credentials 50
- Decommissioning 53
- Network Authority Accounts 54
- Erasing Server Disks 54
- Erasing Virtual Machines 54
- Authentication 57
- Using Single or Paired Keys 58
- Certificates 58
- Public Key Infrastructure 58
- Trust Chains 58
- How VCM Uses Certificates 59
- Collector Certificate 61
- Agent Certificates 62
- First Contact 63
- Changes to Agent Certificates 63
- Changing Certificates 64
- Replacing Certificates 65
- Installing the Agent 66
- Installing Using Provisioning 67
- Makecert Options 72
- Option Description 73
- Environment Variables 75
- Supplemental References 81
- Export Considerations 83
- VCM Ports 84
- Port Transport Usage 85
Prodotti e manuali riguardandi Software VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION
Software VMware VIEW 4.5 Manuale Utente
(11 pagine)
(11 pagine)
Software VMware VCENTER CONFIGURATION MANAGER 5.3 - SOFTWARE CONTENT REPOSITORY TOOL GUIDE Guida di Installazione
(282 pagine)
(282 pagine)
Software VMware VCENTER CONFIGURATION MANAGER 5.3 - SOFTWARE REQUIEREMENTS GUIDE Guida Utente
(54 pagine)
(54 pagine)
McCulloch Eager Beaver EBC1840DK Handbücher
Bedienungsanleitungen und Benutzerhandbücher für Benzinwerkzeug McCulloch Eager Beaver EBC1840DK.
Wir stellen 1 PDF-Handbücher McCulloch Eager Beaver EBC1840DK zum kostenlosen herunterladen nach Dokumenttypen zur Verfügung Bedienungsanleitung
Commenti su questo manuale