External Security

In the context of:

Directory Server
If a Directory Server has Restrict Directory Server Access checked, but there are no Security Managers in the Security Manager list, then it will be using internal security only and will require verification. Micro Focus strongly recommends that you do not rely on internal security and that an External Security Manager must always be used.
Region
A region will default to CASESM security if there are no Security Managers in the Security Manager list. Micro Focus strongly recommends that you do not rely on CASESM and that an External Security Manager must always be used.

Configuration options

Directory Server

To prevent a Directory Server from using internal security, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the directory server you require, then click Security > Directory Server Configuration.

    This takes you to the Directory Server Security Facility Configuration page.

  4. Click Add.

    This opens the Defined External Security Managers dialog box.

  5. Choose an external security manager and then click Select.

If the Use ES Default Security Managers check box is checked, then an External Security Manager can be added. Click Security > Default ES Configuration.

If there are no External Security Managers specified, click Security > Security Managers and then click Add. See Securing an Enterprise Server Installation for more information about External Security Managers (ESMs)

Region

To prevent a region from using CASESM security, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the region you require.
  4. Click General > Security.
  5. Add a Security Manager to the Security Managers list, so that the region is using External Security.
  6. Restart the region so the changes are applied.

If the Use Default Security Facility Configuration check box is checked, then an External Security Manager can be added. Click Security > Default ES Configuration.

If there are no External Security Managers specified, then you must specify one. For the Directory Server you require, click Security > Security Mangers. See Securing an Enterprise Server Installation for more information about External Security Managers (ESMs).

Parent topic: Configuration Report