Symantec ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0, Руководство пользователя

Страница: 210 / 503

Deployment Solution 210
Securing Deployment Solution
This prevents you from manually granting this access to individual administrators as
they are added or removed from Deployment management responsibilities.
1. Open Enterprise Manager and connect to your SQL Server.
2. Browse to Security > Logins.
3. Add each user or group that will manage computers using Deployment Solution.
4. For each user or group, on the Database Access tab, grant the public role for the
eXpress database:
Part 4: Securing Communication
This section contains guidelines to secure Deployment Solution communication between
the Deployment Server and Deployment Agent, and discusses the following:
z
Deployment Agent Authentication (page 210)
z
Additional Agent Security (page 212)
z
Keyboard Locks in Automation (page 212)
Deployment Agent Authentication
We recommend providing a Deployment Server hostname rather than using multicast,
and implementing key-based authentication if additional security is needed. Key-based
authentication prevents agents from connection to un-trusted Deployment Servers if
hostname resolution is somehow compromised.
Key Authentication
Key authentication is enabled on the Server Connection agent configuration page. After
you enable this option, you are prompted to provide the server.key file containing the
server public key for your trusted Deployment Server. This key is located on your
Deployment Share. After enabling this option the Agent connects only to the trusted
Deployment Server.