Overview of Security

Management & Control Services (MCS) provides the following security features, which allow you to specify (by user or group) who can access and use the MCS console.

• Directory Services — Manage MCS users and groups using the internal MCS directory service, or you can incorporate a user and group list maintained in an external directory service (LDAP, NIS, or NTDS).

  You can create virtual groups to manage users in MCS. You can assign access rights to virtual groups, but the groups exist only within MCS, they do not become part of your directory service.

• Rights Management — Specify which of the users and groups in the directory service can access and use specific features of MCS, and of MCS-managed products that implement rights management.

• User Authentication — Specify the level of user authentication required to access the MCS console, write product configurations to MCS, and access (read) those configurations from client applications. In addition, you can specify whether or not users can save their user name and password locally in a cookie (so that they don't need to log in each time they access MCS) and whether or not they are required to access MCS through a secure port.

• Security Services — Make use of a secure port that implements Secure Sockets Layer (SSL) 3.0 and Transport Layer Security (TLS) 1.0 support. Security Services provides authenticated and encrypted sessions between the MCS server and its clients.

	Overview of Management & Control Services
	Configuring the Directory Service
	Setting the User Authentication Type
	Managing Access to Administration Features
	Overview of Security Services