Oracle Secure Backup 10.3, Руководство по установке и настройке

Страница: 129 / 174

Configuring Security for the Administrative Domain
Managing Security for Backup Networks 6-19
You can set the key size in the
obparameters
file when you install Oracle Secure
Backup on the administrative server . When you install Oracle Secure Backup
interactively, the install script gives you an opportunity to modify the
obparameters
file.
To set the key size in
obparameters
when installing interactively:
1.
Before running the install script on the administrative server, or when the install
script prompts you to modify
obparameters
, open the file in a text editor.
2.
Search for the following string:
certificate key size
. Set the key size to the
desired default value. The following example sets the default key size to 2048 bits:
identity certificate key size: 2048
3.
Save and close the file after making any other changes to
obparameters
.
4.
Proceed with the installation.
Oracle Secure Backup uses the key size in
obparameters
to set the initial value for
the
certkeysize
security policy. This security policy specifies the default security
key size for hosts in the domain. You can change or override this default when
configuring an individual host.
Setting the Key Size in the certkeysize Security Policy
You can change the default key size in the security policy at any time. Any hosts
configured after the change default to the changed key size.
You can set the key size in the
certkeysize
security policy through obtool or the
Oracle Secure Backup Web tool . Oracle Secure Backup uses the modified key size the
next time you configure a host. You can change the
certkeysize
value at any time,
but the change only applies to the next
mkhost
command.
To set the
certkeysize
security policy:
1.
Log in to
obtool
as a user with the
modify administrative domain's
configuration
right.
2.
Set the
certkeysize
policy to the desired default value. The following example
shows how to use
obtool
to set the key size to 3072 bits:
ob> cdp security
ob> setp certkeysize 3072
Setting the Key Size in mkhost
You can override the default key size for any individual host. Different hosts in the
domain can have different key sizes.
Note:
There is no equivalent procedure for Windows. Windows
users are restricted to the default value.
See Also:
Appendix B, "Oracle Secure Backup obparameters
Installation Parameters"
See Also: Oracle Secure Backup Administrator's Guide to learn how to
set a policy