VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT REQUIREMENTS Instrukcja Użytkownika Pobierz pdf (Strona 5)

vCenter Configuration Manager Security Environment Requirements

TECHNICAL WHITE PAPER / 5

1.0 Introduction to The Security Environment of VCM

VCM operates within the context of a security environment. This environment consists of host configuration, various

personnel and usage assumptions, organizational security policies, configuration settings, and best practices.

Ultimately all security requirements are met either by controls built into VCM that leverage the environment, or by

controls built into the environment itself. Understanding and maintaining the security environment is an important

responsibility of the VCM administrator and users. Toward that end, this document provides a description of the VCM

security environment and a checklist for its maintenance.

The security environment must provide certain guarantees. For example, authorized VCM users are presumed to be

trusted, and the hosts on which VCM is installed must be access-controlled to prevent access by unauthorized users.

Installation kits must be checked for alteration, and eventually VCM hosts must be decommissioned properly. Overall

security requirements must be observed for the domain and infrastructure, hosting environment, personnel, host

preparation, installation kit security, login roles, IIS preparation, SQL server preparation, web browsers preparation,

Agent installation and maintenance, and proper decommissioning.

When a security environment requirement is not met, the confidentiality, integrity, or availability of information assets

that flow through the deficient system are at risk.

This is not a prescriptive document. Described within are the assumptions made by VCM, not procedures for

administrators. For example, under the guarantees regarding VCM logins, an assumption made by VCM is that the

domain controller for each user is trusted. Not listed is a best practice such as "keep the domain controller in a locked

room."

1 2 3 4 5 6 7 8 9 10 ... 31 32

Brak uwag

VMware VCM 5.3 - CONFIGURATION MANAGER SECURITY ENVIRONMENT REQUIREMENTS Instrukcja Użytkownika Strona 5