Specifications

18

ObjectDirectoryPhysicalLocation
ConsiderationshouldbemadetothelocationoftheObjectDirectory.

ThedefaultfinalfolderfortheEndpointEncryptionObjectDirectoryisinafoldercalledSBDATA.Ifpossible,
useaseparatefixeddriveorpartitiontotheOSforexample,OSandapplicationonC:databaseonD:.Thisis
usuallydecid
edatthetimeofinitialinstallationandcanbemodifiedatanothertime.

ObjectDirectoryAccess
CheckthateveryadministratorthatneedstologontotheObjectDirectorygoesthroughtheEndpoint
EncryptionDatabaseserver,notdirectthroughlocalconnection.Wherepossible,donotallowthedatabaseto
beshared.

SearchingforObjects
LimittheuseoftheFindfunctionin20K+databasesduringnormalworkinghoursasitcanslowaccessfor
othersystemsanduserobjects.AnotheralternativeistoworkonarecentcopyoftheObjectDirectoryto
performsearches,andoncethelocationisfound,theycanbenavigatedtodire
ctlyintheliveObjectDirectory.

ClearingDeletedObjects
ClearobjectsfromDeletedItemsregularlywhennotneeded.Deleteditemsarefolderscontainingolddeleted
users,systems,andotherobjectsandarefoundthroughtheSystemtabintheEndpointEncryptionManager.
Theseobjectscanslowsearchesdown.Iftheseobjectsareneededforauditing,theywillneedtobere
tained
byfirstbackingupthewholedatabase(SBDATAfolder)andthenstoring,dated,carefullyforthatpurpose.
Thenemptythedeleteditemsfromthecurrentlivedatabasetohelpspeedofaccess.Seethemoredetailed
ObjectDirectoryMaintenancesectionbelow.

SBSERVER.INI
ThisfileisfoundinthemaininstallationfolderforyourEndpointEncryptionManager.Itcanbeusedtoadjust
themaximumnumberofconnectionstheEndpointEncryptionserverwillacceptandthebehaviorwhenthe
maximumisreached.

SBServerinicontents:
[Connections]
Max=200
AcceptAtMax=No

Thedefaultsettingsareusuallyfineformostimplementati
onsbutMax=200canbesettoahighervalue
dependingonthenumberofincomingconnections.Thisshouldonlybechangediftheserverhasahigh
specificationandisrecommendedbyaMcAfeeEndpointEncryptionconsultant.Inaddition,thiswouldneed
tobetestedtodetermineifth
isimprovessynceventsandserverload.(PleaseseeEndpointEncryption
ManagerAdministrationGuidesuppliedwithEndpointEncryptionManagerforfurtherdetailsonSBServer.ini).
