Administrator Guide

Security
This chapter discusses security issues pertaining to:
• User accounts
• Passwords
• Encryption keys
• Managing antivirus, antimalware, and certica
tes.
Topics:
• User accounts and groups that are added by default
• Resetting service account passwords
• Rotating Windows Azure Pack encryption keys
• Managing antivirus and antimalware
• Managing certicates
User accounts and groups that are added by default
Tables in this section identify and describe user accounts and security groups that are created by the Dell Hybrid Cloud System for
Microsoft deployment process.
All Active Directory objects for Dell Hybrid Cloud System for Microsoft are created in the Active Directory organizational unit (OU) that you
specied during deployment.
NOTE: Never log on to Dell Hybrid Cloud System for Microsoft, or sign in to the Windows Azure Pack website, by using service
accoun
ts. Do not use service accounts directly for administrative operations. Service accounts should only be used by Dell
Hybrid Cloud System for Microsoft services and processes to communicate internally.
User accounts
Because the Dell Hybrid Cloud System for Microsoft is integrated with your Active Directory domain, you can use existing domain user
accounts for management. Make sure you add accounts to the appropriate security groups. See the Groups table as well.
Table 33. User accounts
Type Accounts Privileges Usage Password Management
Delegated administrator Account is specied b
y
customer during
deployment.
Has Full Control
permissions to the parent
OU (and all child objects)
that was created for the
Dell Hybrid Cloud System
for Microsoft in Active
Used to deploy the Dell
Hybrid Cloud System for
Microsoft stamp.
Controlled via domain
policy.
4
114 Security