Planning for a secure Collector Server
Collector Server controls the communication between SAP and the repositories. Therefore, you must ensure that specific files, passwords, and access data are secure.
Instances
For each installation of Collector Server, at least one instance must be created. If you need more than one instance, they must all run on the system where Collector Server is installed. Strictly control the access to the directory that contains the instance-related files (instance directory). It is good practice to place the instance directory in the UserHome directory of the user who installs the base package (Collector Server administrator) and to have it protected by the operating system.
- For information about how to create an instance directory, see Preparing your environment for Collector Server.
- For hints and tips if more than one instance is needed, see Creating several instances of Collector Server: Hints and tips.
- For more information about the users that you must set up and about the authorizations that they need, see Planning for users.
Temporary files
- The directory where a Collector Server instance is to store the temporary files that are needed for processing
- The exchange directories where your SAP applications should store the files that are to be archived and where the Collector Server instance and SAP can retrieve the archived files. Exchange directories are necessary only if the Collector Server instance communicates with SAP by using Remote Function Call (RFC).
- The directory that is to contain the job queues.
Ensure that the directories for the temporary files are used only by Content Collector for SAP and SAP. In addition, protect the temporary files so that only authorized users can access them.
You define the directories in the instance configuration. The directories must exist before you start a Collector Server instance. When you start a Collector Server instance from IBM Content Navigator, the directories for the temporary files and for the job queues are created by the daemon. The exchange directories, however, must always be created manually.