www.amulethotkey.com |
13
3. Deployment security
This section describes how to harden security for your DXZC-AM
zero clients and how to configure event logging. It also covers
secure disposal of DXZC-AM devices.
3.1 Physical inspection of the DXZC-AM enclosure
We recommend that you store and use the zero clients in an
appropriately secure environment to reduce the potential for
the device to be physically compromised.
DXZC-AM and DXZC-AMC zero clients are fitted with anti-tamper
seals on the underside of the enclosure. Inspect these seals
when you receive the zero client and thereafter at regular
intervals after deploying the zero client.
If you find any signs of interference or physical damage, you
must immediately report this to the site security administrator
and stop using the zero client. Quarantine the zero client until
the reason for interference or damage is fully understood and
appropriate precautions have been taken.
3.2 Controlling the use of USB devices
Note:
You must make these configuration changes using
the Administrative Web Interface (AWI), which we
recommend that you disable before deploying zero clients
to end-users (see
). Therefore, you must make
the configuration changes described below on each zero
client unit before you deploy it to end-users.
The DXZC-AM zero client supports access control of peripheral
USB and audio devices. We advise that you limit the USB devices
accepted by the zero client to only include those devices that
are critical for zero client usage.
To specify or deny permissions for attached USB devices:
1 Launch the AWI for the zero client that you want to
configure.
2 From the home screen, choose
Permissions > USB
.
3 Specify lists of authorized and unauthorized USB devices.
You can identify devices by ID (vendor or device) or by class
(for example, ‘Mass Storage’ or ‘Wireless’).
First, add a ‘white list’ of any authorized USB devices. Then
add a ’black list’ of unauthorized USB devices.
In both cases, you can use wildcards (* and ?) to define
general device types that you want to allow or block.
Note:
A list of hexadecimal vendor IDs and USB device
IDs is available at:
We also recommended that you disable the zero client audio
inputs and outputs if they are not critical to the deployment
operation. To disable audio:
1 Launch the AWI for the zero client that you want to
configure.
2 From the home screen, choose
Permissions > Audio
.
3 Clear the
Enable HD Audio
check box.
3
Anti-tamper seals on underside of the DXZC-AMC enclosure.