Securing Your Synchronizer Data; Securing Your Synchronizer System - Novell DATA SYNCHRONIZER - ADMINISTRATION GUIDE 07-2010 Administration Manual

5.2.1 Securing Your Synchronizer Data

"Limiting Physical Access to Synchronizer Servers" on page 47
"Securing File System Access" on page 47
Limiting Physical Access to Synchronizer Servers
Servers where Synchronizer data resides should be kept physically secure, where unauthorized
persons cannot gain access to the server consoles.
Securing File System Access
Encrypted file systems should be used on all Synchronizer servers. Only Synchronizer
administrators should have direct access to Synchronizer data.

5.2.2 Securing Your Synchronizer System

Setting Up SSL Connections
Secure SSL connections should be used between your Synchronizer system and the following
external components:
LDAP server
GroupWise Post Office Agent (POA)
Mobile devices
Browser connection for Synchronizer Web Admin
For instructions, see Section 5.1, "Security Administration," on page
Securing Synchronizer Web Admin
One Synchronizer administrator is established when you install the Data Synchronizer Mobility
Pack. Additional users can be granted Synchronizer administrator rights, as described in
Section 3.1.2, "Setting Up Multiple Synchronizer Administrator Users," on page
be done judiciously.
Protecting Synchronizer Configuration Files
The configuration files for all Synchronizer components should be protected from tampering.
Configuration files are found in the following default locations:
Synchronizer Component
Sync Engine
Web Admin
Config Engine
Connector Manager
Configuration File
/etc/datasync/syncengine/engine.xml
/etc/datasync/webadmin/server.xml
/etc/datasync/configengine/configengine.xml
/etc/datasync/syncengine/connectors.xml
43.
16, but this should
Securing Your Synchronizer System 47