iTP Secure WebServer System Administrator's Guide (Version 7.0)

Planning the iTP Secure WebServer PATHMON

Environment

iTP Secure WebServer System Administrator’s Guide—523346-012

3-9

Protecting Core Dumps

Any server can fail and dump core, and core dumps of the iTP Secure WebServer can

contain keys and the server password.

You must protect core files as carefully as the key database file and server password

files. Consider who has physical access to them, whether the files can end up on a

backup tape, what their file protections are, and so on. If you transmit a core file for

analysis, physically or electronically, consider the safety of the transmission

mechanism.

Protecting Transmission of Key Database Files and Core Dumps

If you must transmit a key database file or a core dump over the public network—for

example, to HP support services for help with troubleshooting— make sure the

transmission mechanism is appropriate for your security requirements.

HP support requests that all key database files, core files, and configuration files that

contain passwords be sent encrypted in some form.