User manual AVIRA MANAGEMENT CONSOLE

[. . . ] Avira Management Console User Manual Table of Contents Table of Contents 1. About this manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 2 Structure of the manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3 Emphasis in text . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1. 4 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2. Product information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] You can use the Send test email button to check the notification settings. Note  The Simple Message Transfer Protocol (SMTP) is used to send emails. AUM Frontend Settings: Enabling SSL server authentication AMC supports signed SSL certificates for all server applications, including the AUM Server. As a client application, the AUM Frontend supports SSL server authentication (for further information on the SSL function, see below). 5. 7 SSL certificate administration SSL ensures secure communication by means of data encryption and server/client authentication. This means that before information is exchanged, the client must verify the true identity of the server and the server must verify the true identity of the client. When this has been done, the communication partners can exchange their encrypted information. Avira Management Console - User Manual (Status: 15 Dec 2011) 67 Configuration The AMC supports signed certificates for all server applications (Event Manager, AUM Server, AMC Server). The AMC Server contains a new tool that supports SSL certificate creation and provision. All AMC clients (AMC Agent, AUM Frontend, AMC Frontend) support SSL server authentication. If you want to create your own certificate for your AMC Server and want the clients to authenticate the server, perform the following steps: Create a certificate signing request (CSR) with the aid of the Certificate Creation Tool: 1. Double-click on the file SSLCertRequester. exe (in C:\Program Files\Avira\Avira Security Management Center Server\), and click Next. 2. Select the first option: Create SSL Certificate Request and Private Key. Avira Management Console - User Manual (Status: 15 Dec 2011) 68 Configuration 3. Fill out the data form and click Create Certificate. The Common Name has to correspond to the hostname of the AMC Server’s computer. The tool generates the CSR (YourNameReq. pem) and the private key (YourNameKey. pem) for the AMC Server. Save the private key in a secure location and send the CSR to a trusted certification agency for signing. If the signed certificate is returned by email, use the Certificate Creation Tool to update the certificate and the private key in the AMC. Double-click on the file SSLCertRequester. exe (in C:\Program Files\Avira\Avira Security Management Center Server\), and click Next. Avira Management Console - User Manual (Status: 15 Dec 2011) 69 Configuration 7. Select the second option Import signed Certificate and Private Key pair. 8. Click Browse and search for the Private Key and the Certificate on your system, specify the Password and click Import. Turn on the SSL server authentication function in the configuration for the AMC Agent (see "Changing the AMC Agent configuration" - page 51), AUM Frontend (see "AUM Frontend Settings:" - page 67) and AMC Frontend (see "Installing the AMC Frontend" page 18). Warning  If the certificate is not valid, the AMC Agents lose communication with the AMC. 5. 8 Updating the AMC For proper functioning, it is important that the software is always up-to-date and that the versions of the individual components are compatible with each other. The AMC components (AMC Frontend, AMC Server and all associated services, and the AMC Agents) can be updated quickly and easily. The AMC establishes an Internet connection to the servers for this purpose, downloads the available updates and installs them. Avira Management Console - User Manual (Status: 15 Dec 2011) 70 Configuration Internet access is required to update the AMC. [. . . ] A message will appear informing you that the backup may take several minutes. You can now navigate to the location for saving the backup archive in an Explorer window on the AMC Server, and enter a name for the resulting . zip file. On completion of the backup, an information window will appear describing how the archive can be restored: Avira Management Console - User Manual (Status: 15 Dec 2011) 130 Troubleshooting 8. 4 Error during installation of the AMC Agent Reason The Use simple file sharing (recommended) option in Windows is enabled (Control panel > Folder options > View > Advanced settings). Administrator access is no longer possible and the AMC Agent cannot be installed. [. . . ]