User manual AVIRA MANAGEMENT CONSOLE

[. . . ] Avira Management Console User Manual Table of Contents Table of Contents 1. About this manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 2 Structure of the manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3 Emphasis in text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1. 4 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2. Product information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] As a client application, the AUM Frontend supports SSL server authentication (for further information on the SSL function, see below). 5. 7 SSL certificate administration SSL ensures secure communication by means of data encryption and server/client authentication. This means that before information is exchanged, the client must verify the true identity of the server and the server must verify the true identity of the client. When this has been done, the communication partners can exchange their encrypted information. Avira Management Console - User Manual (Status: 15 Dec 2011) 67 Configuration The AMC supports signed certificates for all server applications (Event Manager, AUM Server, AMC Server). The AMC Server contains a new tool that supports SSL certificate creation and provision. All AMC clients (AMC Agent, AUM Frontend, AMC Frontend) support SSL server authentication. If you want to create your own certificate for your AMC Server and want the clients to authenticate the server, perform the following steps: Create a certificate signing request (CSR) with the aid of the Certificate Creation Tool: 1. Double-click on the file SSLCertRequester. exe (in C:\Program Files\Avira\Avira Security Management Center Server\), and click Next. 2. Select the first option: Create SSL Certificate Request and Private Key. Avira Management Console - User Manual (Status: 15 Dec 2011) 68 Configuration 3. Fill out the data form and click Create Certificate. The Common Name has to correspond to the hostname of the AMC Server’s computer. The tool generates the CSR (YourNameReq. pem) and the private key (YourNameKey. pem) for the AMC Server. Save the private key in a secure location and send the CSR to a trusted certification agency for signing. If the signed certificate is returned by email, use the Certificate Creation Tool to update the certificate and the private key in the AMC. Double-click on the file SSLCertRequester. exe (in C:\Program Files\Avira\Avira Security Management Center Server\), and click Next. Avira Management Console - User Manual (Status: 15 Dec 2011) 69 Configuration 7. Select the second option Import signed Certificate and Private Key pair. 8. Click Browse and search for the Private Key and the Certificate on your system, specify the Password and click Import. Turn on the SSL server authentication function in the configuration for the AMC Agent (see "Changing the AMC Agent configuration" - page 51), AUM Frontend (see "AUM Frontend Settings:" - page 67) and AMC Frontend (see "Installing the AMC Frontend" page 18). Warning  If the certificate is not valid, the AMC Agents lose communication with the AMC. 5. 8 Updating the AMC For proper functioning, it is important that the software is always up-to-date and that the versions of the individual components are compatible with each other. The AMC components (AMC Frontend, AMC Server and all associated services, and the AMC Agents) can be updated quickly and easily. The AMC establishes an Internet connection to the servers for this purpose, downloads the available updates and installs them. Avira Management Console - User Manual (Status: 15 Dec 2011) 70 Configuration Internet access is required to update the AMC. Where necessary, you also have to open the necessary ports in your network’s firewall. The firewall integrated into Windows Server 2003 and Windows Server 2008 is automatically appropriately configured by the AMC Server, Avira Update Manager and Event Manager. Note  During installation of the updates, the connection to the AMC Server is interrupted and the AMC Frontend must be closed. [. . . ] If you add further AUM servers to your AMC, they will not be able to update AMC components from the integrated AUM, because they attempt to run an "all languages" update. Disable the repositories’ synchronization option: Configuration > Update > Automatically synchronize software repositories between AMC and AUM servers. Remove any language-dependent files from the integrated AUM’s repository. Re-activate the repositories’ synchronization option. Avira Management Console - User Manual (Status: 15 Dec 2011) 131 Products supported by AMC 9. [. . . ]