Performing Security Settings
Security settings must be performed, such as changing the user password, replacing the security certificate, and setting the user security policy.
Task |
Description |
Operation Reference |
|---|---|---|
Changing the user password |
The system provides default accounts and initial passwords as well as grants different operation rights to the default accounts. To ensure system and user security, regularly change passwords in accordance with password complexity requirements. |
"Security Maintenance > Password Change" in the eSight Maintenance Guide |
Replacing the security certificate |
During the eSight installation, a temporary security certificate is generated to ensure the normal running of eSight. After the eSight installation is complete, replace the temporary security certificate. |
"Security Maintenance > Security Certificates" in the eSight Maintenance Guide |
Setting the user security policy |
Configure user rights, password, account, and access control policies to facilitate network management and fortify eSight security. |
"Authentication > Overview" in the eSight Operation Guide |
Configuring Tomcat web HTTPS connection timeout duration |
The Apache Tomcat server is prone to denial of service (DoS) attacks (or called Slow HTTP Denial of Service Attacks). To reduce the risks of system attacks, users set connection timeout duration in Tomcat. Timeout duration refers to the waiting time (milliseconds) of connection requests. After a connection request is accepted, the uniform resource identifier (URI) request will be submitted. Generally, setting the connection timeout duration cannot eliminate DoS attacks but can remarkably reduce the possibility of DoS attacks. The major disadvantage is that when the network speed is very slow, data requests cannot be processed in the specified period of time. As a result, Tomcat disables the connection, and a connection timeout may occur when users use the web browser to access the system. For this reason, the connection timeout duration must be increased in Tomcat to resolve connection timeouts on a low-speed network. NOTE:
However, the possibility of DoS attacks increases as the connection timeout duration increases. Users must ensure that their networks are immune to such attacks. |
In Windows, log in to the server as an administrator. In Linux, log in to the server as the root user.
|
Configuring the listening service |
The listening service listens to messages sent during SimpleOS startup and operating system installation. You can change the network port for which the listening service needs to be enabled to ensure system security. |
On the Windows operating system, log in to the server as the Administrator user. On the Linux operating system, log in to the server as the root user. NOTE:
If eSight is used for server configuration deployment, firmware upgrades, and stateless computing, configuration must be implemented through a network. eSight will enable listening ports to listen to server configuration processes and results. By default, these ports listen to all network ports on the server where eSight resides. If only one network port needs to be listened to, specify the network port IP address in the serverPortBinding.conf file. If the listening service is enabled for only one network port, the following functions of eSight may be unavailable:
|