Deployment guidelines for security

Follow the deployment guidelines to ensure security of License Metric Tool.

Server security configuration

You can set up License Metric Tool to use TLS 1.2, or be in line with FIPS 140-2 or SP800-131 security standards. For more information, see: Security configuration scenarios.

Security hardening

To improve security of License Metric Tool, it is recommended to set up authentication of users with LDAP or through SSO. For more information, see the following links:

Authenticating users with LDAP
Configuring and enabling single sign-on

You can also set up a policy for user passwords and account lockouts. For more information, see the following links:

Configuring security policy for user passwords
Configuring user account lockout

You can also improve security of particular components of the License Metric Tool infrastructure, for example by encrypting their passwords or enabling encrypted connections. For more information, see the following links:

Database:
- Configuring database password encryption
- Enabling encrypted connection to the database
VM Manager Tool:
- Improving security of storing VM manager passwords
- Configuring VM Manager Tool to accept trusted VM manager certificates
REST API
- Configuring protection from the denial-of-service attacks
- Configuring protection from the host header injection
Other:
- Configuring License Metric Tool keystore password and encryption