SmartSetup Scripting Toolkit Deployment Guide for HP Integrity Servers with Windows Server 2003 and Windows Server 2008 for Itanium-based Systems

After the applyhwconf action executes, the HBA configuration file is loaded; the device must
be available for booting.
Increasing security in SSTK
You can increase security in the SSTK by performing the following tasks:
• Encrypting the repository password
• Setting permissions for repository access
Encrypting the repository password
The sstkencrypt utility encrypts the repository password. It is a 32-bit command-line tool
designed to run on the repository system. To set the repository_encrypted_pass variable,
run the following command:
y:\>utilities\win32\sstkencrypt.exe
Type the repository password:
sstkserver
Set the encrypted password in SSTKStart.cmd script to:
a89ea897a9aa9ea298
In this case, set the following variables in the SSTKStart script:
repository_name=192.168.0.220
share_name=sstk_repository
repository_user=Administrator
rem repository_password=
repository_encrypted_pass=a89ea897a9aa9ea298
repository_letter=y:
Setting permissions for repository access
To increase security, restrict write permission for some folders in the SSTK repository. This also
guarantees the integrity of files that must have read-only permission. The repository structure
allows users to have read-write permissions for the data_files folder only. Set all other folders
to read-only permission. Table 5-1 indicates the appropriate permissions for each SSTK repository
folder.
Table 5-1 SSTK Repository Permissions
PermissionsFolder
Read and execute
boot
Read and write
data_files
Read and execute
drivers
Read and execute
os
Read and execute
scripts
Read and execute
software
Read and execute
utilities
For additional information about sharing permissions and password configurations over a
Windows Network, see the following:
• How To Share Files and Folders over the Network in a Windows Server 2003 Domain Environment
at:
http://support.microsoft.com/kb/324267/EN-US
• How to Configure File Sharing in Windows XP at:
http://support.microsoft.com/kb/B304040
Increasing security in SSTK 39