Configuring Security For The Administrative Domain; Providing Certificates For Hosts In The Administrative Domain; Configuring The Administrative Server - Oracle Secure Backup Installation And Configuration Manual

Configuring Security for the Administrative Domain

Disable SSL for inter-host authentication and communication by setting the
■
securecomms security policy
Transmit identity certificates in
■
Set the key size for a host to a value greater or less than the default of 1024 bits
■
Enable encryption for backup data in transit by setting the
■
encryptdataintransit security policy
Configuring Security for the Administrative Domain
This section describes how to configure security for the
This section contains these topics:

Providing Certificates for Hosts in the Administrative Domain

■
Setting the Size for Public and Private Keys
■
Enabling and Disabling SSL for Host Authentication and Communication
■
Providing Certificates for Hosts in the Administrative Domain
Providing a
domain
each media server

Configuring the Administrative Server

If you install Oracle Secure Backup on a host and specify this host as the
administrative
Oracle Secure Backup
host as the CA automatically as part of the standard installation. You are not required
to take additional steps to provide a signing
Oracle Secure Backup automatically creates the following items:
A host object corresponding to the administrative server in the object repository
■
on the administrative server.
A wallet
■
the directory tree of the
the host ID as the wallet password.
A request for a signing certificate in the wallet.
■
A signed certificate in response to the request and stores the certificate in the
■
wallet.
A request for an
■
A signed certificate in response to the request and stores it in the wallet.
■
An
■
The administrative server now has the signing certificate, which it must have to sign
the identity certificates for other hosts, and its identity certificate, which it must have
to establish authenticated
the domain.
6-16 Oracle Secure Backup Installation and Configuration Guide
certificate for each host in the Oracle Secure Backup
requires that you first configure the
and client.
server, then this server is the
administrative
to contain the administrative server's certificates. The wallet resides in
Oracle Secure Backup
identity certificate
obfuscated wallet in the local wallet directory.
Secure Sockets Layer (SSL)
manual certificate provisioning mode
administrative
administrative server
Certification Authority (CA)
domain. Oracle Secure Backup configures the
certificate for this server.
home. Oracle Secure Backup uses
in the wallet.
connections with other hosts in
domain.
administrative
and then configure
for the