- Notes, cautions, and warnings
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall Using the Endpoint Security Suite ProMaster Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Commonly Used Scenarios
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Set GPO on Domain Controller to Enable Entitlements
- Extract the Child Installers from the Endpoint Security Suite ProMaster Installer
- Configure Key Server for Uninstallation of Encryption Client Activated Against Security Management Server
- Use the Administrative Download Utility (CMGAd)
- Configure Deferred Activation
- Troubleshooting
- Glossary
Bienvenue
Bienvenue dans l’univers Dell
Mon compte
- Passer des commandes rapidement et facilement
- Afficher les commandes et suivre l’état de votre expédition
- Profitez de récompenses et de remises réservées aux membres
- Créez et accédez à une liste de vos produits
- Gérer vos sites, vos produits et vos contacts au niveau des produits Dell EMC à l’aide de la rubrique Gestion des informations de l’entreprise.
Endpoint Security Suite Pro Advanced Installation Guide v1.8
Configure Key Server for Uninstallation of Encryption Client Activated Against Security Management Server
-
This section explains how to configure components for use with Kerberos Authentication/Authorization when using an Security Management Server. The Security Management Server Virtual does not use the Key Server.
The Key Server is a Service that listens for clients to connect on a socket. Once a client connects, a secure connection is negotiated, authenticated, and encrypted using Kerberos APIs (if a secure connection cannot be negotiated, the client is disconnected).
The Key Server then checks with the Security Server (formerly the Device Server) to see if the user running the client is allowed to access keys. This access is granted on the Remote Management Console via individual domains.
- If Kerberos Authentication/Authorization is to be used, then the server that contains the Key Server component will need to be part of the affected domain.
- Because the Security Management Server Virtual does not use the Key Server, typical uninstallation is affected. When an Encryption client that is activated against a Security Management Server Virtual is uninstalled, standard forensic key retrieval through the Security Server is used, instead of the Key Server's Kerberos method. See Command Line Uninstallation for more information.
Veuillez attribuer une note (1 à 5 étoiles).
Veuillez attribuer une note (1 à 5 étoiles).
Veuillez attribuer une note (1 à 5 étoiles).
Veuillez indiquer si l’article a été utile ou non.
Les commentaires ne doivent pas contenir les caractères spéciaux : <>()\