Reference Guide

Tables........................................................................................................................................... 5
Chapter 1: PREFACE..................................................................................................................... 6
Chapter 2: Security Quick Reference............................................................................................ 8
Deployment models............................................................................................................................................................. 8
Virtual Hard Disk (VHD) and Open Virtual Appliance (OVA)deployment.............................................................. 8
Security profiles................................................................................................................................................................... 8
Chapter 3: Product and Subsystem Security................................................................................. 9
Security Controls Map........................................................................................................................................................9
Authentication.................................................................................................................................................................... 10
Access control.............................................................................................................................................................. 10
OMIMSSC Appliance administration........................................................................................................................10
Infrastructure administration using Microsoft System Center Console .......................................... 11
Login security settings...................................................................................................................................................... 11
Failed login behavior.................................................................................................................................................... 12
Local user account lockout........................................................................................................................................ 12
Automatic session timeout.........................................................................................................................................12
Infrastructure administration using Microsoft System Center Console......................................................... 12
Authentication types and setup considerations..........................................................................................................12
OMIMSSC Appliance administration........................................................................................................................12
Infrastructure administration using Microsoft System Center Console ........................................................ 13
User and credential management.................................................................................................................................. 15
Pre-loaded accounts................................................................................................................................................... 15
Managing credentials.................................................................................................................................................. 15
Authorization................................................................................................................................................................. 16
Infrastructure administration using Microsoft System Center Console ........................................................ 17
Network security................................................................................................................................................................ 17
Network exposure........................................................................................................................................................ 17
Management Station Ports........................................................................................................................................17
Data security....................................................................................................................................................................... 19
Data at rest encryption...............................................................................................................................................19
Generate Encryption Key........................................................................................................................................... 19
Change Encryption Key.............................................................................................................................................. 19
Sensitive Data Migration........................................................................................................................................... 20
Cryptography..................................................................................................................................................................... 20
Manage HTTPS certificate ...................................................................................................................................... 20
Auditing and logging.......................................................................................................................................................... 21
Download troubleshooting bundle............................................................................................................................21
Serviceability....................................................................................................................................................................... 21
Security patches...........................................................................................................................................................21
OMIMSSC Operating System update...........................................................................................................................22
Product code integrity..................................................................................................................................................... 22
Contents
Contents 3