Specifications

6
SolutionArchitecture
DesignPhilosophy
McAfeeEndpointEncryptionisaclient/serverapplicationdesignedtobeimplementedwithasimple,single
serverarchitecture.ThissingleserverhostsanencrypteddatabaseknownastheObjectDirectory,andruns
servicestoallowconnectionstothedatabasefromboththeEncryptedEndpointsandtheManagementCenter
applications.Communicationwiththeda
tabaseoccursinasecureway(detaileddescriptionsareprovidedin
theManagementCenterAdministrationGuide).Thissingleservercanhostallcomponentsofthe
ManagementCenter,eveninenterpriseenvironments.
Whileitismostcommontoimplementtheproductwithasingleserver,therearealsootheroptions.The
compon
entsaremodularandareinstalledinadistributedway.Forexample,theWebHelpdeskcomponent
canbeinstalledonadedicatedwebserverwhiletherestofthecomponentsareonaseparateEndpoint
EncryptionServer.However,themajorityofourimplementationsaredonewithasingleserverbecausethisis
usuallyth
ebestapproach.
NOTE:Thisguidehasallrecommendations,assumingasingleserverapproach.
Whenreadingthefollowingsections‐eventhoughourrecommendationmaybetouseasingleserverwith
DirectAttachedStorage(DAS),avirtualserverwithNASbasedstorageisusableandwillhavesome
advanta
gesinyourenvironmentforsmallnumbersofendpointsorwithlimitedsynceventsandlimitedusers
perclient.However,weadviseagainstusingsuchimplementationsandrecommendyoudiscussyour
requirementswithMcAfeebeforeimplementation.
IftheperformanceoftheMcAfeesolutionisbelowtheacceptablelimits,migratingtowa
rdsour
recommendationsissuretolendimprovement.