TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Please see my replies below, preceded by A. - the questions are preceded by
Q.
Nick Connor
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
dave rockwell
Sent: Tuesday, November 16, 1999 4:54 PM
To: [EMAIL PROTECTED]
Subject: SS4 additional consoles
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Q. can I control an SS4 NT agent with another console?
A. YES - System Scanner 4 has 3 possible Consoles to manage an Agent, the
Primary, the Backup and Audit Console. The Agent has to be configured to
'talk' to each Console.
Q. What is the correct way to install same? The manual does not mention
backup or audit consoles, which the agent asks to be named at agent
installation time.
A. This is an error in the manual, this should be covered in the next
edition. The way to ensure that the agents can be managed from the Backup
Console would be to install the Primary Console, start the Primary Console
and complete the Certificate Generation and configure Agents as 'normal'.
Take a Backup copy of the following 3 folders in /program files/iss/system
scanner console/ca and 'ssl' and 'requests'.
Install the Backup Console as normal and before starting the Backup Console
replace the 'ca', 'ssl' and 'requests' folders. The Backup Console will
then share the Certificates with the Primary Console.
Q. What if later I would like to use another console, such as a carry in
laptop?
A. Use the process above to copy the 'ca','ssl' and 'requests' folders to
the laptop.
Q. Is there a registry setting or something that allows the new console to
participate?
A. NO - this can be done via the Console GUI. Go to the Administration
Interface, select the Agent on the tree and at the bottom of the screen you
will see 3 buttons - 'poll', 'config' and 'server config'. Select 'server
config', then select Backup Console and you can change or add the name of
the Backup Console. Similar process for the Audit Console. Each agent must
be done individually and you would normally configure Consoles at Agent
Install time.
Q. My assumption was that a backup console would need to have the cert keys
that the console had, and in fact when installing a backup console you
are reminded to copy the CA from the primary console machine to the
backup console machine. I deduced that this ment firing up the console
and generating console keys for all machines which could be consoles,
which it did happily. Whenever I launch a backup console it gives the
error "please copy the CA directory from the primary console", which I
took as a strong hint. Then I copied its CA folder to the backup console
machine. But no luck same error.....
can you shed any light?
A. Yes we need to improve the documentation here, it is in progress and will
be done, you also need to copy the 'ssl' and 'requests' folders.
Q. please address these features in the manual please.
A. Yes we are doing it.
Thank you for your comments.
Nick Connor
-----
Nick Connor '[EMAIL PROTECTED]'
System Scanner Product Manager
Tel: +44 118 959 3800
ISS Group Ltd Cell: +44 370 931 032
http://www.iss.net http://europe.iss.net
