Wyse Management Suite Security Configuration Guide March 2021 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2021 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Preface........................................................................................................................ 4 Legal disclaimer.................................................................................................................................................................... 4 Scope of document.............................................................................................................................................................
1 Preface Topics: • • • • • • Legal disclaimer Scope of document Document references Security resources Getting help Reporting security vulnerabilities Legal disclaimer THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS-IS." DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Getting help The Dell support page provides access to licensing information, product documentation, advisories, software downloads, how-to videos, and troubleshooting information. Reporting security vulnerabilities Dell takes reports of potential security vulnerabilities in our products very seriously. If you discover a security vulnerability, you are encouraged to report it to Dell immediately.
2 Security quick reference Topics: • • • Deployment models Security hardening third-party components Security profiles Deployment models You can download Dell Wyse Management Suite from www.dell.com/support. Dell Wyse Management Suite can be installed using a local path or a network share folder as a package source for installation. For more information, see Dell Wyse Management Suite Installation Guide at www.dell.com/support/manuals.
3 Product and subsystem security Topics: • • • • • • • • Product overview Authentication Authorization Network security Data security Cryptography Auditing and logging Code or product integrity Product overview Dell Wyse Management Suite is the next generation management solution that enables you to centrally configure, monitor, manage, and optimize your Dell Hybrid Client powered endpoints and Dell thin clients.
○ Administrator ■ Global administrator who has access to all Wyse Management Suite features. ■ Group administrator who has access to all assets and functions for an assigned group. ■ Custom global administrator who has access to customized Wyse Management Suite features. ■ Viewer who has only read access to all the data and can be assigned permissions to send real-time commands such as shutdown and restart.
You can also enable or disable Device Enrollment Validation from Portal Administration page. Network security Default installation of Wyse Management Suite establishes HTTPS protocol communication. ● Network exposure—The following table lists the network ports that are supported on Wyse Management Suite. The ports are open by default when you install Wyse Management Suite. Table 1.
Cryptography AES-256 and AES-128 are used for encryption in Wyse Management Suite. TLS 1.1 and 1.2 are enabled by default with on-premise installation. It is recommended to use the TLS 1.2 protocol. Certificate management You can import your SSL certificate to secure communications with the Wyse Management Suite server. You can import the console by logging in to the Wyse Management Suite private cloud and importing from the Portal Administration page.
Management Suite. EULA must be accepted for all the packages of Wyse Management Suite. Wyse Management Suite does not accept the package if: ● The package does not have a valid signature. ● The package has fake signature. ● The package is altered.
4 Contacting Dell Prerequisites NOTE: If you do not have an active internet connection, you can find contact information on your purchase invoice, packing slip, bill, or Dell product catalog. About this task Dell provides several online and telephone-based support and service options. Availability varies by country and product, and some services may not be available in your area. To contact Dell sales, technical support, or customer service issues: Steps 1. Go to www.dell.com/support. 2.