topic Re: VCRM Repository automatic update security in Server Management - Systems Insight Manager

VCRM Repository automatic update security

Pagnotta — Tue, 30 May 2006 09:17:08 GMT

Hi everybody,

Can anyone explain me the security that encompasses the automatic download of HP compoenets within VCRM service ?

Is the connexion a ssl one ? Is the remote hp server authenticated by the client using an electronic certificate ? Or this connexion poorly secured meaning that a spoof of the remote server IP could allow somone upload stuff to the VCRM repository '

Thanks in advance

Angelo

Re: VCRM Repository automatic update security

TechGuru — Thu, 01 Jun 2006 23:20:33 GMT

VCRM use normal ftp download for automatic download, it connects to ftp.hp.com & ftp.compaq.com and downloads the components needed

Re: VCRM Repository automatic update security

Pagnotta — Fri, 02 Jun 2006 06:28:50 GMT

It would be good to implement a server authentication (like in ssl protocol) in order to ensure the repository is trusted...

Do you know, maybe, if a catalog file is downloaded from a trusted source and then files hashes compared to make sure files are genuine ?

Regards

Angelo