Amulet Hotkey DXZ4-A, Руководство пользователя

Страница: 31 / 44

www.amulethotkey.com | Page 31
s
ecurity
6. Deployment security
This section describes how to improve security for your DXZ4-A
and DXZ4-AM zero clients.
Important! Some of the security measures described below
recommend disabling the Administrative Web Interface
(AWI). However, do not disable the AWI on your zero clients
until after you have made all the security-based configuration
changes in this chapter.
The National Cyber Security Centre (NCSC) document, “Security.
Procedures:.Amulet.Hotkey.Zero.Client.DXZ4,.DXZ2.and.DXZC”
(available at https://www.ncsc.gov.uk/products/amulet-hotkey-
zero-client-dxz4-dxz2-and-dxzc ) describes in detail the secure
usage procedures for compliance with the NCSC rating.
See this document for a full description of the security
considerations for your network, some of which are presented in
this chapter.
This chapter tells you how to:
• Check the anti-tamper seals ;
• Restrict access to the management tools ;
• Set up the control of allowed USB devices ;
• Disable the audio (optional) ;
• Use event logs ;
• Dispose of zero clients securely .
6.1 Check the anti-tamper seals
We recommend that you store and use DXZ4 security edition
zero clients in an appropriately secure environment to reduce
the potential for the device to be physically compromised.
DXZ4 security edition zero clients are fitted with anti-tamper
seals on the underside of the enclosure, see Figure 24 . Inspect
these seals when you receive the zero client and thereafter at
regular intervals after deploying the zero client.
If you find any signs of interference or physical damage, you
must immediately report this to the site security administrator
and stop using the zero client.
Quarantine the zero client until the reason for interference or
damage is fully understood and appropriate precautions have
been taken.
Anti-tamper labels
Figure 24: Location.of.the.anti-tamper.seals
6.2 Restrict access to the management tools
For additional security, we recommend that you disable the AWI
and PCoIP Management Console interface on your zero clients
before you deploy the zero clients to end-users.
With these interfaces disabled, you can only configure a zero
client through its local On Screen Display (OSD). This security
measure prevents malicious third parties from configuring your
zero clients remotely.
6.2.1 Disable the AWI and PCoIP Management Console
Important! Remember to complete the configuration
procedures in this chapter before disabling the AWI.
To disable the AWI and Management Console interface and
restrict configuration changes to the zero client’s OSD:
1. From the OSD Options menu, choose Configuration >
Access .
2. Select both of the following check boxes:
• Disable Administrative Web Interface;
• Disable Management Console Interface.
6