HP StorageWorks Application Recovery Manager Installation and Licensing Guide (T4395-96002, February 2008)

Maintaining the Installation
Security Considerations
Chapter 362
IMPORTANT The list must contain all possible hostnames (or IP addresses) where
connections can come from. Multiple hostnames may be needed if any of
the above clients is multihomed (has multiple network adapters and/or
multiple IP addresses) or is a cluster.
If the DNS configuration in the cell is not uniform, additional
considerations may apply. For more information, refer to “Securing
Clients” on page 64.
While it may not always be necessary to secure each and every client in
the cell, it is important that the computers that other clients will trust
are secured themselves:
• Cell Manager
• Installation Servers
NOTE User interface clients do not need to be added to the list of trusted
clients. Depending on the user rights, you can either use the GUI to
access the complete Application Recovery Manager functionality or to
access only specific contexts.
Application Recovery Manager Users
Consider the following important aspects when configuring Application
Recovery Manager users:
• Some user rights are very powerful. For example, the User
configuration and Clients configuration user rights enable the
user to change the security settings.
• Even less powerful user rights bear an inherent risk associated with
them. Application Recovery Manager can be configured to restrict
certain user rights to reduce these risks. These settings are described
later on in this chapter. See also “Start Backup Specification User
Right” on page 71.