Owner's Manual

Security

Power Center is designed to ensure data confidentiality, data integrity, and the security of user authentication. Power

Center not only provides authentication and access control to user accounts (see Access Control), but also protects all

of the communication channels to the Power Center server and the stored sensitive data (for example, passwords) on

the Power Center server.

To enhance security for your Power Center system:

• Start services with a normal Windows operating system (OS) user account: After installation, Power Center

services are logged on with the Network Service account by default. You can use a normal Windows OS user

account instead of the Network Service account to provide better security.

• OS hardening: You can apply OS hardening on the system where Power Center is installed. By doing so, the

minimum security foundation is set up for Power Center security-related configurations.

• Audit log: Power Center tracks the action log for critical user operations, including user login/logout, emergency

power reduction, start/stop network discovery, security configuration, and policy change.

• Certificate management: To enforce communication confidentiality and data integrity, Power Center enables

SSL/TLS communication between the Power Center management console and the Power Center server and

between the Power Center server and managed chassis. The SSL/TLS authentication is certificate-based.

Power Center uses a Keystore file to manage certificates.

Starting Services with a Windows Operating System Standard User

Account

To configure a standard Windows user account, follow these steps:

1. Stop all Power Center services.

2. Go to Control Panel → User Accounts → Manage User Accounts , and add a new standard user (either local or

domain), or select an existing standard user.

3. Grant Full Control permission of the following directories or files to the user account.

Directory:

– Dell\OpenManagePowerCenter\bin

– Dell\OpenManagePowerCenter\external\apache-tomcat

– Dell\OpenManagePowerCenter\external\pgsql\bin

– Dell\OpenManagePowerCenter\logs

– Dell\OpenManagePowerCenter\pgdata

File:

– Dell\OpenManagePowerCenter\conf\user.config.xml

– Dell\OpenManagePowerCenter\conf\app.config.xml

– Dell\OpenManagePowerCenter\external\apache-tomcat\conf\context.xml

– Dell\OpenManagePowerCenter\external\apache-tomcat\conf\server.xml