IBM Endpoint Manager, Version 9.1

Security Configuration Scenarios

To improve the computer security, Endpoint Manager V9.1 provides the capability to follow the NIST security standards by configuring an enhanced security option. This setting enables SHA-256 as the hashing algorithm for digital signatures as well as content verification. It also enables the TLS 1.2 communication among the Endpoint Manager components.

You can set the enhanced security option only after the Endpoint Manager V9.1 installation or the upgrade of all components to Endpoint Manager V9.1. If you have a mixed environment, to keep the product compatibility with earlier versions of the Endpoint Manager components, do not set the enhanced security option or, before setting it, upgrade the Endpoint Manager components to V9.1.

Note: When you set this option you configure a very restricted security environment and the product performance might get worse. You can enable or disable this security setting at any time by editing the masthead file. For additional information see Editing the Masthead on Windows systems and Editing the Masthead on Linux systems.

In addition to the enhanced security setting, you can now set a check for verifying the file download integrity using the SHA-256 algorithm. If you do not set this option, the file download integrity check is run using the SHA-1 algorithm. This new option does not break the compatibility with Endpoint Manager V9.0 components and can be set only if you set the enhanced security option.

In a complex environment, you can enable the enhanced security option, only after all the DSA servers are upgraded to Endpoint Manager V9.1 and have got a new license.

Important: After you turn on the enhanced security option, you cannot roll back to a previous version of Endpoint Manager, even if you turn the option off. However, when needed, you can run a disaster recovery restore from Endpoint Manager V9.1 to V9.1 regardless of the enhanced security option setting. For additional information see Running backup and restore.

Feedback