Security; Authentication; Rights-Based Remote Management Authentication; Section 4.1.1, "Rights-Based Remote Management Authentication - Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - REMOTE MANAGEMENT REFERENCE 10.3 Management Manual

Security

4
The following sections provide security related information that you should be aware of while using
the Remote Management component of Novell
Section 4.1, "Authentication," on page 63
Section 4.2, "Password Strength," on page 64
Section 4.3, "Ports," on page 65
Section 4.4, "Audit," on page 65
Section 4.5, "Ask Permission from the User on the Managed Device," on page 66
Section 4.6, "Abnormal Termination," on page 66
Section 4.7, "Intruder Detection," on page 66
Section 4.8, "Remote Operator Identification," on page 67
Section 4.9, "Browser Configuration," on page 67
Section 4.10, "Session Security," on page 67

4.1 Authentication

The Remote Management service must be installed on a device for the remote operator to remotely
manage the device. The service automatically starts when the managed device boots up. When a
remote operator initiates a remote session on the managed device, the service starts the remote
session only if the remote operator is authorized to perform remote operations on the managed
device.
To prevent unauthorized access to the managed device, the Remote Management service on the
managed device uses the following modes of authentication:
Section 4.1.1, "Rights-Based Remote Management Authentication," on page 63
Section 4.1.2, "Password-Based Remote Management Authentication," on page 64

4.1.1 Rights-Based Remote Management Authentication

In rights-based authentication, rights are assigned to the remote operator to launch a remote session
on the managed device. By default, the ZENworks administrator and the super administrator have
rights to perform remote operations on all the managed devices regardless of whether the local user
or the ZENworks user is logged in to the device.
The remote operator does not need any exclusive rights to perform a remote session on the managed
device if no user has logged in to the managed device or if a user has logged in to the managed
device but not in to ZENworks. However, the remote operator needs exclusive Remote Management
rights to perform the remote operation on the managed device when a ZENworks user has logged in
to the device. We strongly recommend that you use the rights-based authentication because it is safe
and secure.
Using rights-based authentication requires the ZENworks Adaptive Agent to be installed on the
device. Installing only the Remote Management service on the device is not sufficient.
® ®
ZENworks 10 Configuration Management:
4
Security 63