Part 4: Securing Communication; Deployment Agent Authentication; Key Authentication - Symantec ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0 Manual

Part 4: Securing Communication

Deployment Agent Authentication

Deployment Solution
This prevents you from manually granting this access to individual administrators as
they are added or removed from Deployment management responsibilities.
1. Open Enterprise Manager and connect to your SQL Server.
2. Browse to Security > Logins.
3. Add each user or group that will manage computers using Deployment Solution.
4. For each user or group, on the Database Access tab, grant the public role for the
eXpress database:
This section contains guidelines to secure Deployment Solution communication between
the Deployment Server and Deployment Agent, and discusses the following:
Deployment Agent Authentication
Additional Agent Security
Keyboard Locks in Automation
We recommend providing a Deployment Server hostname rather than using multicast,
and implementing key-based authentication if additional security is needed. Key-based
authentication prevents agents from connection to un-trusted Deployment Servers if
hostname resolution is somehow compromised.

Key Authentication

Key authentication is enabled on the Server Connection agent configuration page. After
you enable this option, you are prompted to provide the server.key file containing the
server public key for your trusted Deployment Server. This key is located on your
Deployment Share. After enabling this option the Agent connects only to the trusted
Deployment Server.
(page 210)
(page 212)
(page 212)
Securing Deployment Solution
210