Deployment Guide

Post-Installation Configuration
Read the Security Management Server Technical Advisories for current workarounds or known issues related to Security
Management Server configuration.
Whether you are installing the Security Management Server for the first time or are upgrading an existing installation, some
components of your environment must be configured.
After installing the Security Management Server, the following defaults should be modified:
● Change the back end server password at the following location:
C:\Program Files\Dell\Enterprise Edition\Message Broker\conf\application.properties
● Change password for every front end server in your environment at the following location:
C:\Program Files\DELL\Enterprise Edition\Beac\conf\application.properties
The password displays as follows: proxy-server.password=ENC(<texthere>)
To change the password:
1. Select: ENC(<texthere>)
2. Change the selected text to: CLR(<newpasswordhere>)
After service restart, the modified line changes to ENC from CLR and the password is encrypted.
NOTE: The proxy-server.username may also be modified, but this must match within the Message Broker's
application.properties file and all active front end servers.
DMZ Mode Configuration
If the Security Server is deployed in a DMZ and a private network, and only the DMZ server has a domain certificate from a
trusted Certificate Authority (CA), some manual steps are needed to add the trusted certificate into the Java keystore of the
private network Security Server.
If a trusted certificate is being used, disregard this section.
NOTE:
Dell highly recommends the use of domain certificates from a trusted Certificate Authority for both DMZ and
private network servers.
For information about updating the certificate for Dell Encryption with an existing certificate in the Microsoft keystore, see
http://www.dell.com/support/article/us/en/19/sln297240/.
Server Configuration Tool
When configurations to your environment become necessary after you have completed your installation, use the Server
Configuration Tool to make the changes.
The Server Configuration Tool allows you to:
● Add New or Updated Certificates
● Import Dell Manager Certificate
● Import Identity Certificate
● Configure settings for Server SSL Certificate
● Configure SMTP settings for Email Services
● Change Database Name, Location, or Credentials
● Migrate the Database
5
74 Post-Installation Configuration