Dell Data Protection | Encryption Bedienungsanleitung PDF herunterladen (Seite 48)

48 Enterprise Server Installation and Migration Guide

At the

Initialize Enterprise Database

window, a warning displays. Confirm that you have either backed up the entire

database or confirm that a backup does not need to be made of your existing database. Click

At the

Initialize Enterprise Database

window, read the information and click

At the

Initializing Database

window, informational messages display the status of the initialization.

When complete, check for errors.

NOTE: An error message identified by , signifies that a database task has failed and corrective action needs to be

taken before the database can be properly initialized. Click Fini

sh, correct the database errors, and reinitiate

the instructions in this section.

Click

Finish

From the top menu, select

Configuration

Save

. If prompted, confirm the save.

Configure Certificates.

The first time you run the Dell Server Configuration Tool for

initial Dell Enterprise Server setup, certificates must be configured

for the Dell Compatibility Server, Dell Core Server, and Message Security.

You have a choice of which type of certificates to use – self-signed or signed:

–

Self-signed

certificates are signed by their own creator. Self-signed certificates are appropriate for pilots, POCs, etc. For

a production environment, Dell recommends public CA-signed or domain-signed certificates.

–

Signed

(public CA-signed or domain-signed) certificates are signed by a public CA or a domain. In the case of certificates

that are signed by a public certificate authority (CA), the certificate of the signing CA will, usually, already exist in the

Microsoft certificate store and therefore, the chain of trust will be automatically established. For domain CA-signed

certificates, if the workstation has been joined to the domain, the signing CA certificate from the domain will have been

added to the workstation’s Microsoft certificate store, thereby also creating a chain of trust.

The components that are affected by certificate configuration:

– Java Services (for instance, Dell Device Server, Dell Console

Web Services, and so on)

– .NET Applications (Dell Core Server)

– Validation of smart cards used for Preboot Authentication (Dell Security Server)

–

Importing of private encryption keys to be used for signing policy bundles being sent to Dell M

anager. Dell Manager

performs SSL validation for remotely-managed Enterprise Edition clients with Hardware Crypto Accelerators,

self-encrypting drives, or BitLocker Manager.

– Client Workstations:

• Workstations running the web browser version of the Silverlight Console

• Workstations running Dell Data Protection | BitLocker Manager

• Workstations running Dell Data Protection | Enterprise Edition

(

Windows clients)

Information regarding which type of certificates to use:

Preboot Authentication using smart cards requires SSL validation with the Dell Security Server. Dell Manager performs SSL

validation when connecting to the Dell Core Server. For these types of connections, the signing CA will need to be in the

keystore (either the Java keystore or the Microsoft keystore, depending on which Dell Server component is being discussed).

If self-signed certificates are chosen, the following options are available:

– Validation of smart cards used for Preboot

Authentication:

•

Import the “Root Agency” signing certificate and full chain of trust into the Dell Security Server Java keystore. For

more information, see Create a Self-Signed Certificate and Generate a Certificate Signin

g Request. The full chain of

trust must be imported.

– Dell Manager:

• Insert the “Root Agency” signing certificate (from the self-signed certificate genera

ted) into the workstation’s

“Trusted Root Certification Authorities” (for “local computer”) in the Microsoft keystore.

• Modify the behavior of Dell Manager to not perform SSL validation. To turn off Dell Manager SSL trust validation,

check

Disable Trust Chain Check

on the

Settings

tab.

The client computer also must have the following registry entry to disable trust validation:

1 2 ... 43 44 45 46 47 48 49 50 51 52 53 ... 79 80

Kommentare zu diesen Handbüchern

Keine Kommentare

Dell Data Protection | Encryption Bedienungsanleitung Seite 48

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Datenbanksoftware Dell Data Protection | Encryption