Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility

1 Overview

• Product Overview
  • DIVAnet ClientAdapter Service
  • DIVAnet ManagerAdapter Service
  • DIVAnet DbSync Service
  • DIVAnet User Interface (DIVAnetUI)
• General Security Principles
  • Keep Software up to Date
  • Restrict Network Access to Critical Services
  • Use Principle of Least Privilege where Possible
  • Monitor System Activity
  • Keep Up To Date on Latest Security Information

2 Secure Installation

• Understand Your Environment
  • Which resources need to be protected?
    • DIVAnet Servers
    • Database
    • DIVArchive Sources, Destinations, and Archive Media
    • Configuration Files and Settings
  • From whom are the resources being protected?
  • What will happen if the protections on strategic resources fail?
• Recommended Deployment Technologies
  • DIVAnet Installation
  • Connecting to DIVArchive
  • Safeguard Disk Systems
• Postinstallation Configuration

3 Security Features

• The Security Model
• Authentication
• Access Control
• Configuring SSL/TLS
  • Private Keystore
  • Public Keystore

A Secure Deployment Checklist