background image

Configuration

Avira GmbH

Avira Security Management Center

52

Double-click the file 

SSLCertRequester.exe

 (located in 

C:\Program 

Files\Avira\Avira Security Management Center Server\

), and press 

Next

.

Select the first option - 

Create a SSL Certificate Request and Private Key

.

Fill in the data fields and press 

Create Certificate

.

Along with the CSR (

YourNameReq.pem

) the tool also creates a private key 

(

YourNameKey.pem

) for the SMC Server.

2. Keep the private key in a safe place and send the CSR to a trusted Certificate 

Authority for signing.

3. When you receive the signed certificate by email, use the 

Certificate Creation 

Tool

 to update the certificate and the private key in SMC:

Double-click the file 

SSLCertRequester.exe

 (located in 

C:\Program 

Files\Avira\Avira Security Management Center Server\

), and press 

Next.

Summary of Contents for BUSINESS BUNDLE

Page 1: ...Avira Security Management Center User Manual...

Page 2: ...ity Environment 34 5 5 1 Installing SMC Agent through SMC Frontend Windows 2000 XP Professional Vista UNIX 35 5 5 2 Installing SMC Agent manually Win XP Home Edition optional Windows 2000 XP Professio...

Page 3: ...96 7 2 Updating Packages in the Software Repository 97 7 3 Updating Avira Products manually 98 7 4 Update overview 99 7 4 1 Updating the SMC using the IUM automatic mode 99 7 4 2 Updating the SMC with...

Page 4: ...The manual for your Avira software provides the following information Chapter Contents 1 About this Manual The structure of the manual signs and symbols 2 Product Information Overview of the software...

Page 5: ...wn before a condition that must be met prior to performing an action shown before a step you have to perform shown before the result that directly follows your action shown before a warning if there i...

Page 6: ...files Emphasis in text Explanation Abbreviation Meaning DHCP Dynamic Host Configuration Protocol a protocol for dynamic allocation of the host IP address GUI Graphical User Interface IUM Avira Interne...

Page 7: ...About this Manual 7 Avira Security Management Center Avira GmbH...

Page 8: ...uns on a central network server with three services Server Event Manager Avira Internet Update Manager two integrated databases for storing Avira products and for events management z The SMC Agent cli...

Page 9: ...to a database and forwards them for display or reports in the SMC Frontend The Avira Internet Update Manager service performs updates for the installed Avira products for software packages in the Rep...

Page 10: ...iles SSL encrypted communication protocol and certificate management Support for computers with dynamically allocated IP addresses DHCP Operating Avira security products over the network Central manag...

Page 11: ...m Requirements SMC Server Operating system Windows 2000 Server SP4 update rollup 1 Windows Server 2003 SP1 x32 or x64 Windows Server 2008 x32 or x64 RAM 1GB Disk space 512MB including all products and...

Page 12: ...must specify this data during installation in a dialog window Moreover if you intend to allow access to Agent installation files over the network you have to activate the option Create SMC Agent Netw...

Page 13: ...www avira com and extract it to a local directory Double click the self extracting archive AntiVir_Security_Management_Center_Server_en exe A dialog window with a security warning appears Click Accept...

Page 14: ...u want to use a different account for SMC login through SMC Frontend disable the option Reuse account of SMC Server service as SMC user account and enter the SMC User and SMC IUM Password else just le...

Page 15: ...ed by other applications see Before installation Page 12 Double click the self extracting file AntiVir_Security_Management_Center_Frontend_en exe Depending on your Windows configuration a dialog windo...

Page 16: ...roprietary elements of SMC Frontend For further information on MMC and manual integration of a snap in please refer to the instruction manual or online help provided with your operating system A mouse...

Page 17: ...es connection to the SMC Server The Login window appears Type in the Login username and Password you provided at SMC setup Select Local Computer if SMC Frontend is installed on the same computer as th...

Page 18: ...created an individual certificate for your SMC Server and want the clients to authenticate the Server see SSL Certificates Management on page 51 click the SSL Configuration tab and activate the Serve...

Page 19: ...nd graphical user interface are installed see Installation Page 12 3 License file is available saved locally Start the SMC Frontend and connect to the SMC Server see Starting SMC Frontend and Connecti...

Page 20: ...e window appears displaying the Invalid entry marked in red in the Status field Click New License and enter the path to the license file Select the license file default hbedv key and confirm with OK T...

Page 21: ...s the Console tree left window and the Details panel right window The entries of the expandable navigation structure are shown as nodes for example the Events node the computers group win_group etc Yo...

Page 22: ...t of all managed users Here you can create delete or modify SMC users Avira Internet Update Manager Integrated update servers and settings for mirroring Avira updates for scheduling SMC and product up...

Page 23: ...the clients are back online available or when the Agents synchronize Events Further details of the reported events The events list can be filtered so that specific lists of events can be viewed for ex...

Page 24: ...Security Environment Page 34 You can make settings for SMC Server services if required z Configuring Avira SMC Page 41 z SSL Certificates Management Page 51 In addition you can easily update Avira SM...

Page 25: ...ira Security Management Center Frontend node and select Settings The Settings window appears Enter the required information in the fields of the Administrator Account tab and save them You may choose...

Page 26: ...For this purpose you should organize the so called virtual groups under the Security Environment nodes to reflect your company s structure You can create various network groups such as computers in s...

Page 27: ...to SMC Server Green monitor green arrow red marker on the left side pending operations and commands are saved because the Agent on the computer is set to use the pull mechanism The tasks are executed...

Page 28: ...node and then go to the node corresponding to your network for example Microsoft Windows network You will see the connected computers in the Details panel Drag and drop the computer group from Network...

Page 29: ...chronize option from the context menu of the Security Environment It offers the following three options Network neighbourhood Comma separated file Active directory Network neighborhood To import the c...

Page 30: ...ndfloor Reception PC Reception Group Name of the group with relative path to the Security Environment node if necessary Example 1stfloor Marketing Name Display name of the computer in the Security Env...

Page 31: ...munication ports must be open default setting See Prerequisites for ADS synchronization Page 101 Automatic synchronization with ADS LDAP In environments with multiple administrative users the SMC can...

Page 32: ...s Finish The SMC uses a poll mechanism at a static synchronization interval When synchronization errors occur this may lead to node database corruption To view and edit the scheduled import tasks Righ...

Page 33: ...ra products installed on those computers right click the group or the computer and select Delete The group computer will be deleted from the Security Environment You can use the Search function in the...

Page 34: ...e system you can install SMC Agents automatically If necessary you can configure the SMC Agent for the whole system or just for certain groups or computers after installation and assign the new config...

Page 35: ...matically See Automatic product installation Page 67 5 5 1 Installing SMC Agent through SMC Frontend Windows 2000 XP Professional Vista UNIX 3 Computers groups must be integrated into the Security Env...

Page 36: ...ng SMC Agent manually Win XP Home Edition optional Windows 2000 XP Professional Vista To install SMC Agent on Windows XP Home Edition you need the file AntiVir_Security_Management_Center_Agent_en exe...

Page 37: ...ration data Enter the data for the local computer Computer name as it appears in the Security Environment and Port for communication with the Server Here you can also activate the Pull Mode if the com...

Page 38: ...t Setup on Windows If you prefer using a Windows logon script to install SMC Agents instead of the interactive remote installation feature in SMC Frontend you can execute an install script via file sh...

Page 39: ...r xzvf AntiVir_Security_ Management_Center_UNIX_Agent tgz The files are extracted Change to the installation directory linux tmp cd AntiVir_Security_ Management_Center_UNIX_Agent Install the SMC Agent...

Page 40: ...the Details panel 5 5 5 Uninstalling SMC Agent If you uninstall SMC Agent from a computer the Avira products installed on that computer can no longer be managed by Avira SMC We recommend that you unin...

Page 41: ...evel You can change the settings for every node if you deactivate the option Inherit configuration It is recommended to configure the SMC Agents starting from the root node Security Environment right...

Page 42: ...e traffic and the size of the Events Manager s database Events commit interval The time interval for the services to send the events to the Event Manager The events are not sent immediately but are co...

Page 43: ...nstalled Request Server authentication Activation of SSL Server authentication validate Common Name Host Validate the Common Name of the Host in the Server certificate 5 6 2 Changing the Configuration...

Page 44: ...notifications about error status and events use the General Settings options SMTP Server Name of the mail server Sender email address The email address which the SMC uses to send notification emails...

Page 45: ...ame or IP address with client values If you have activated the option Synchronize client node hostname or IP address with client values you can choose whether you would like to specify a hostname or a...

Page 46: ...SMTP server settings from the General Settings tab are used Show warnings If you want to receive notifications about warnings via email activate this option Select Email to specify a minimum number of...

Page 47: ...ters The client computers in your network will no longer need to download the updates from the Internet themselves but instead they can update the products via your Intranet reducing your Internet tra...

Page 48: ...ntication is necessary on the selected server activate the option Use authentication for root directory then fill in the User and Password Updates In the Updates area you can use the option Activate t...

Page 49: ...the option Use own server list and enter the address IP address or computer name of the required download server in the Update server list field You can also provide multiple download servers separat...

Page 50: ...ent Separate the individual addresses with a comma Example recipientname testcompany com Authentication If an authentication on the mail server is necessary activate the option Use authentication in t...

Page 51: ...true identity of the server and the server has to verify the true identity of the client Then the communication peers can start exchanging encrypted information Avira SMC supports signed SSL certifica...

Page 52: ...Create Certificate Along with the CSR YourNameReq pem the tool also creates a private key YourNameKey pem for the SMC Server 2 Keep the private key in a safe place and send the CSR to a trusted Certi...

Page 53: ...d Settings on page 51 and SMC Frontend see Connecting to SMC Server on page 17 5 8 Updating Avira SMC It is very important to keep your software up to date and to make sure the components versions are...

Page 54: ...ate Frontend update The following message appears for Server update for Frontend update Confirm with Yes and close SMC Frontend if necessary The connection to the SMC Server will be interrupted The Av...

Page 55: ...ware in your Security environment Click on the server s node then on the Update Status tab in the Details Panel to see the update progress Creating an SMC Server Update Task You can use update tasks f...

Page 56: ...he Avira SMC Agent under the computer node in the Security Environment and select Commands Start Update The SMC Agent update can also be scheduled by pressing the button Schedule this command in the C...

Page 57: ...ated Configure the user rights in the Permissions tab Click OK and enter the password to add the user The new user appears in the Details panel Configure User Account The following settings are availa...

Page 58: ...e SMC Configure IUM Create filtering groups Display filtering groups Set password Right click a user icon in User Management and select Set password The Password window appears Type the password confi...

Page 59: ...ironment for all users These rights are assigned in cascading form and inherited downwards in the hierarchy of the virtual groups Consequently you can set the authorized users for every node and estab...

Page 60: ...select User permissions The User permissions window appears Select a user and configure the rights in the Permissions area Manage users You can configure the users and their rights for every node When...

Page 61: ...the users that should not have access to the node and confirm with Remove The users are added in removed from the Selected users area Use Parent Settings In order to inherit the settings from its supe...

Page 62: ...z Display and filter Avira SMC messages after installing and configuring the software packages Viewing Events Page 79 z Perform product specific actions e g scan or update or schedule regular tasks Pe...

Page 63: ...ory node The Details panel shows general information on the software Avira product name name of the setup file version as well as license file 6 2 1 Adding and Deleting a Software Package For example...

Page 64: ...play the data contained in the package s info file Click on the browse button enter the path to the software license file and click Open The Details panel will show the path to the license file Click...

Page 65: ...mmands for example installing a product are saved and automatically triggered by the program immediately after the computers groups go online or the Agent performs the synchronization The computers wi...

Page 66: ...installation dialogs of every Avira product To modify the install settings of the Avira product disable the option Inherit configuration make the changes and click OK The SMC Agent installs the produ...

Page 67: ...ts automatically the SMC user account must have administrative access rights on the new computers The SMC Agent has to be installed manually on Unix systems Right click the group under the Security En...

Page 68: ...certain computers or sub groups if you deactivate the option Inherit configuration the computer will overwrite the settings inherited from the root During configuration of each Avira product a product...

Page 69: ...ration window Deactivate the option Inherit configuration and adjust the product settings If you want to immediately apply the new settings to the computer group Click Send now The new configuration i...

Page 70: ...r wizard starts Type the name of the filtered group you want to create for example errors and press Next The Filter type window appears Error states Select the first filter type if you want to create...

Page 71: ...eate a sub group with all computers on which a product reports an error and press Next The Module error window appears Select the module errors you want to group and press Finish The sub group appears...

Page 72: ...omputer The information on a virtual group Computer amount in group number of computers in the group Available the number of computers currently connected to the Avira SMC Product and count name and n...

Page 73: ...oup Status Error messages Tasks and Pending operations z for a computer Products status Product version Error messages Events Tasks and Pending operations Setting and Sorting the Displayed Information...

Page 74: ...is displays the following information on every group Name Computer name Operating system Information on the operating system Computer status Information on the computer Online Online agent installed O...

Page 75: ...ironment shows the group name source group and filter type Product Version View This will display information on all modules of Avira programs installed on the computer Module name List of installed A...

Page 76: ...The name of the Avira product reporting the event Actor The name of the program component reporting the event Message Product specific text for the event Time Date time of the event Tasks View There a...

Page 77: ...eek for a daily command Mon Tue Wed Created The date and time when the task was created Pending Operations View There are product specific commands for every Avira product for example scanning or upda...

Page 78: ...when executing tasks and commands Avira SMC can display the logfiles of Avira products and those of the SMC services in the SMC Frontend Errors always occur at computer level therefore the group node...

Page 79: ...in the Events node You can use filter criteria only on the Events node Displaying all events for all computers may take a large amount of time Events Node The Details panel of the Events node displays...

Page 80: ...ails panel will show all events in the Security Environment unfiltered If you click on a column header the data is sorted by that criterion e g Level or Time Right click Events Select Filter and then...

Page 81: ...ails panel of the Events node or of the group computer Push and Pull Mechanisms According to the Agents settings see Changing the SMC Agent Configuration Page 41 there are two mechanisms for performin...

Page 82: ...nd then the command for example Start update If the command accepts parameters you can insert them in the Commands dialog window Example for Avira AntiVir Professional Type the required parameters and...

Page 83: ...Type the required parameters and click Schedule this command The dialog window for Creating a task appears Type a name for the task and select the frequency Click Next The window with time and date se...

Page 84: ...kages or for SMC Server updates Scheduled tasks for updating SMC Server components or software packages appear in the Events node of Avira Security Management Center Frontend Right click Avira Securit...

Page 85: ...ronment Managed Computers Managed Products Product Version Information Product License Information Engine and VDF Version Found Malware General Found Malware File Found Malware Email Found Malware Htt...

Page 86: ...lected report type Group The virtual computer group on which the report is run Timeframe The frequency of the report where applicable Start time The time of the first reported results Schedule The sel...

Page 87: ...Next The Configure report window appears Enter a name for the report template If you want to run the report regularly Activate the option Schedule report enter a start date and time and the report fr...

Page 88: ...t window appears You can edit the Name and Scheduler settings and click Finish The changes are saved The modified report template is displayed in the Reports Details panel Listing Reports You can view...

Page 89: ...d in the HTML editor Use the Print command of the editor 6 8 Deploying Files Licenses Programs in the Security Environment You can share only certain programs signed by Avira between computers in the...

Page 90: ...the event of improper program configuration When sharing executable files Please read and observe all instructions for programs commands and parameters given in the documentation before sharing and ru...

Page 91: ...uct you have to distribute the new license file using the Copy files function Update the license file in the Software Repository to be used for future installations Right click on the computer group o...

Page 92: ...n of software packages or during actions of Avira products on computers or groups or when executing commands and tasks Avira SMC can display the logfiles of Avira products and of SMC services in the S...

Page 93: ...ment areas are marked with a red Stop icon in the console tree 3 An error icon appears next to the computer group node Select the Error messages view from the toolbar for the computer group in the Sec...

Page 94: ...ble the automatic mode not recommended z You can update the software packages in the Software Repository via an Internet connection command or scheduled task z You can update the products installed on...

Page 95: ...Updating Avira Products 95 Avira Security Management Center Avira GmbH installed on the Security Environment computers are not updated...

Page 96: ...l Settings Update Automatically synchronize software repositories between SMC and IUm Servers is activated by default all IUM servers automatically mirror all packages integrated in the SMC Software R...

Page 97: ...se deployment right click on Test products and select Commit products You can assign groups or individual computers to update from the test servers If you are in test mode and want to update via IUM p...

Page 98: ...e frequency for updates and click Next The next window asks for the start date and time Select the start date and time and click Finish The task is saved You can edit the task at any time using the ri...

Page 99: ...the IUM automatic mode You can deactivate the automatic mode by selecting Server Settings General Updates and deactivating the option Automatic mode for updates If the automatic mode is deactivated o...

Page 100: ...e repository Right clickonSoftware Repository node Update Start update Any IUM included in the SMC Configurations Update Default IUM for all updates Agent Right click on Agent node Commands Start upda...

Page 101: ...older Options View Use simple file sharing recommended 3 The SMC Server must have access to the client s hidden drive C client s IP address c 3 To ease the installation of SMC Agents over the network...

Page 102: ...file A message appears at the end of the backup process telling you how to use the archive if necessary 8 4 MMC Error when Installing SMC Agent Cause The option Use simple file sharing Recommended is...

Page 103: ...Avira AntiVir WebGate UNIX 9 2 Product specific Configuration Panels Avira SMC manages Avira products as software packages When installing and configuring a software package on a computer in the Secur...

Page 104: ...pport with which you can contact and obtain advice from our experts during business hours when technical problems are encountered Another optional service is the Avira Premium Support which in additio...

Page 105: ...nses quickly and safely The Online Shop guides you step by step through the order menu A multi lingual Customer Care Center explains the order process payment transactions and delivery Resellers can o...

Page 106: ...s publi cation or parts thereof in any form is prohibited without previous written consent from Avira GmbH Errors and technical subject to change Issued Q1 2010 AntiVir is a registered trademark of th...

Reviews: