Release Notes

This section provides information to enhance your experience with Server Administrator
implementations and environments.
 To install Server Administrator on Windows Server 2008 R2 SP1 Core and Windows Server
2012 Core, Windows-on-Windows (WOW) mode must be enabled.
 Port 1311 is the default port for Server Administrator. It is a registered port number of
Server Administrator. If another application is configured to run on port 1311 before Server
Administrator is installed, the DSM SA Connection Service does not start after installation.
Before you install Server Administrator, make sure that the port 1311 is not in use.
 Before starting Server Administrator, you must enable the client-side scripting in Internet
Explorer. To do so, perform the following:
1. In Internet Explorer, navigate to the "Tools" menu.
2. Click "Internet Options".
3. Click the "Security" tab.
4. Select the security zone to which the system running Server Administrator belongs.
NOTE: This option should be set to "Trusted sites".
5. Click the "Custom Level" button.
6. For Windows 2003, perform the following:
o In "Miscellaneous", select the "Allow META REFRESH" radio button.
o In "Active Scripting", select the "Enable" radio button.
o Under "Active scripting", select the "Allow scripting of Microsoft web browser
controls" radio button.
7. Click "OK" and restart your browser.
To allow Single Sign-on for Server Administrator, perform the following steps:
1. In Internet Explorer, navigate to "Tools".
2. Click "Internet Options".
3. Click the "Security" tab.
4. Select "Trusted sites".
5. Click the "Custom Level" button.
6. Under "User Authentication", select the "Automatic Logon with current username and password" radio button.
Click ‘OK’ to exit the "Custom Level" window.
7. Select the "Advanced" tab and in "HTTP 1.1 settings", make sure "Use HTTP 1.1" is checked.
8. Select "Trusted sites". Click "Sites". Add the server to the website.
9. Click "Close".
10. Click "OK" and restart your browser.
If you run a security scanner tool such as Nessus, against the Server Administrator Web server, security warnings
may be displayed against port 1311, the port running the Server Administrator Web server. The warnings have been
investigated by engineering and are determined to be "false positives" (invalid security warnings) that you can ignore.
The following are the warnings:
 "The Web server on 1311 allows scripts to read sensitive configuration and / or XML files."
 "The Web server on 1311 allows to delete "/" which implies that the Webserver will allow a
remote user to delete the files in root on the server."
 "The web server on 1311 may be susceptible to a 'www Infinite Request' attack."
 "It is possible to make the remote thttpd server execute arbitrary code by sending a
request like: GET If-Modified-Since:AAA[...]AAAA