Active Administrator 8.6 - User Guide

Configuring certificate protection

Configuring certificate protection

Certificate protection validates that the certificate details stored by Active Administrator match the certificate details installed on the computer. When this feature is enabled, any differences found are reported as broken certificates and email notifications are sent to the recipients on the certificate email list. See Setting up certificate email notifications. Email notifications are also sent when broken certificates are repaired, fail repair, or are overriden. See Managing broken certificates.

To configure certificate protection

1	Select Configuration | Certificate Configuration.

2	Click Certificate Protection.

3	By default, certificate protection is enabled. If you want to disable the feature, clear the check box.

4	By default, all details are validated. To disable a validation, clear the check box.

5	By default, certificate protection checks for broken certificates every 15 minutes. To change the default, type a value in the box.

NOTE: You also can manually check for broken certificates by clicking Sync when viewing certificates. See Updating the list of certificates. Certificate Protection must be enabled.

6	By default, users can override broken certificates. To disable this capability, clear the check box.

IMPORTANT: By overriding a broken certificate, users are replacing the certificate details stored in Active Administrator with the details of the broken certificate, which does not match based on the validation you configured.

7	By default, automatic repair of broken certificates is disabled. If you want Active Administrator to attempt to repair the certificate automatically, select the check box.

NOTE: Broken certificates that are repaired automatically are reported in Broken Certificate History. See Managing broken certificates.

8	Click Save.

Setting security on the repository

Setting security on the repository

To make changes to certificates in the repository, users and groups must be granted the modify permission on the Certificate Repository folder. Active Administrator provides the tool to help you manage who has the modify permission to the certificate repository.

To set security on the repository

1	Select Configuration | Certificate Configuration.

2	Click Edit permissions.

The users and groups listed have the modify permission to the Certificate Repository folder.

▪	To add a user or group to the list, click Add and select an account.

▪	To remove a selected user or group from the list, click Remove.

3	Click Update.

4	Click Save.

5	Click Yes to acknowledge that permissions on the Certificate Repository folder will be updated.

Active Administrator runs a check on the Certificate Repository folder. You will see warnings if the:

▪	modify permission was granted using system-provided tools, but not from within Active Administrator

▪	modify permission was deleted using system-provided tools

▪	user/group was deleted using system-provided tools

Setting service monitoring policy

Setting service monitoring policy

The Service Monitoring feature monitors and reports on all core Active Administrator® services, and if a service stops, there is an attempt to restart it.

To set the service monitoring policy

1	Select Configuration | Service Monitoring Policy.

2

By default, the maintenance service monitors the selected services, and restarts the service if it stops. There is a check box for each service: Notification, Data Services, Audit Agent, and Advanced Agent. By default, all check boxes are checked. To stop monitoring of a service, clear the check box.

The bottom pane displays the status of the services.

3

By default, the audit agent monitor checks the database for the last time an event is written to verify that the audit agent has a valid connection to the database. If the auditing agent has not written a heartbeat flag to the database within the minutes specified, a notification is sent to the recipients listed on the Notification page.

▪	To stop audit agent monitoring, clear the check box.

▪	To change the number of minutes, type a value in the box.

4	Click Notification.

5	By default, details about the service configuration, such as the service startup account, the database server name, and the state of the service are included in the notification email. You may want to turn it off if you have security concerns.

6	To add email addresses to the list of recipients, click Add.

 

NOTE: You can also manage the Service Monitoring Policy email address list from the Settings menu. See Managing email addresses.

7	By default, only one notification is sent. If you want to send more notifications, select Notification frequency, and type the frequency notifications are sent. By default, notifications are sent every 4 hours until the problem is resolved.

8	Click Delivery Options.

9	For each service, type a new custom subject line or accept the default. Use the variables listed as needed. To reset the message to the default, click Reset.

 

Table 116. Variables for the custom subject line

Variable	Description
%ServerName%	Inserts the name of the server on which the service is running.
%ServiceName%	Inserts the name of the service that is either stopped or started.
%ServiceStatus%	Inserts the status of the service that is either stopped or started.

10	Select the priority of the email: Normal (default), High, or Low.

11	Click Save.

Managing archive databases

Managing archive databases

You can add or remove archive databases.

Topics 

•	Creating an archive database

•	Modifying archive database settings

To manage archive databases

1	Select Configuration | Archive Databases.

2	Use the tool bar options to manage the listed archive databases.

 

Table 117. Archive databases tool bar

Option	Description
Refresh	Refresh the selected archive databases.
New	Create a new archive database. See Creating an archive database.
Properties	Modify the selected archive database. See Modifying archive database settings.
Make Active	Set the selected database to Active status.
Remove	Remove the selected databases.