Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 143 / 532

Chapter 5, Working with Server Security 143
Additional Server Security Considerations
The migration not only migrates the server certificate, it migrates the whole
trust database associated with the server instance. All the Certificate Authorities
(CAs) in your 3.6 database are migrated to the 4.0 database. If they duplicate
the 4.0 CAs, you use the 3.6 CA until it expires, then the 4.0 CA. Do not attempt
to delete duplicate CAs.
Additional Server Security Considerations
There are other security risks besides someone trying to break your encryption.
Networks face risks from external and internal hackers, using a variety of tactics
to gain access to your server and the information on it.
So in addition to enabling SSL on your server, you should take extra security
precautions. For example, put the server machine into a secure room, and don’t
allow untrusted individuals to upload programs to your server.
The following sections describe the most important things you can do to make
your server more secure:
• Limit Physical Access
• Limit Administration Access
• Choose Good Passwords
• Secure Your Key-Pair File
• Limit Other Applications on the Server
• Prevent Clients from Caching SSL Files
• Limit Ports
• Know Your Server’s Limits
• Consider Additional Measures for Unprotected Servers
Limit Physical Access
This simple security measure is often forgotten. Keep the server machine in a
locked room that only authorized people can enter. This prevents anyone from
hacking the server machine itself.
Also, protect your machine’s administrative (root) password, if you have one.