GRASS VALLEY K2 SAN, Инструкция по установке и обслуживанию

Страница: 264 / 346

About application security on the K2 SAN
The K2Config application and the Storage Utility application both require that you be logged in to
the application with administrator privileges in order to modify any settings. These privileges are
based on the Windows account that you use when you log in to the K2Config application. When
you open Storage Utility from within the K2Config application, the account information is passed
to Storage Utility, so you do not need to log in separately to Storage Utility.
In SiteConfig you configure global and/or device-type credentials for device access. These credentials
are likewise based on Windows accounts.
You must use a Windows account that has local administrator privileges on the machine to be
configured. For example, when you are on a control point PC and you run the K2Config application
for the purpose of configuring a K2 Media Server, the account with which you log in to the K2Config
application must be present on the K2 Media Server and must have administrator privileges on the
K2 Media Server.
For initial setup and configuration, you can use the default Windows Administrator username and
password to log in to applications and machines as you work on your K2 SAN. However, for ongoing
security you should change the username/password and/or create unique accounts with similar
privileges. When you do this, you must ensure that the accounts are present locally on all K2 SAN
machines, including control point PCs, K2 Media Servers, K2 Media Clients, K2 Summit Production
Clients, and other iSCSI clients.
Grass Valley recommends mapping the SNMP manager administrator with product administrator
accounts for your K2 and other Grass Valley products. This allows you to log on to the SNMP
manager as administrator using the product administrator logon.
Refer to related topics about Grass Valley recommended deployment and monitoring solutions in
"K2 Release Notes".
About credentials in SiteConfig
SiteConfig requires administrative privileges on devices in order to perform most of the network
configuration and deployment tasks. For known devices types, SiteConfig has a default administrator
account and password. These default credentials depend on the SiteConfig version, so check your
SiteConfig Release Notes for any changes. When you add a device based on a known device type,
SiteConfig references the default administrator account and password. Then, when you use remote
desktop or perform software deployment to the device, SiteConfig automatically uses these
credentials. These credentials are called "global" credentials for the device since the same credentials
are used on all devices of that type in the system.
You can choose to override the default credentials for a given device type. For example, if you have
specified a different administrator account or a different password on the devices when commissioning
the system, then you want SiteConfig to use these modified credentials.
It is possible to also override the default credentials for a single device.
264 K2 SAN Installation and Service Manual 2014 01 27
Administering and maintaining the K2 SAN