Endpoint Administration Guide for Windows › General Security Features › Stack Overflow Protection › Configure STOP for Receiving Signature File Updates

Configure STOP for Receiving Signature File Updates

You can make sure that all computers in your environment have the latest STOP information required for preventing stack overflow. You can do this by updating the STOP signature file on a central computer and setting up your computers to regularly retrieve the file.

To configure STOP for receiving signature file updates

1. Enter the following command:

   secons -s
   

   CA Access Control shuts down.

2. Set the STOPSignatureBrokerName registry entry to the host name the computer you want to CA Access Control to retrieve the signature file from.

   The registry entry can be found in the following key:

   HKEY_LOCAL_MACHINE\Software\ComputerAssociates\AccessControl\STOP
   

   When you start CA Access Control (and then at a defined interval), it retrieves the STOP signature file from the specified computer.

3. Set the STOPUpdateInterval registry entry to the interval at which you want the signature file updated.

   CA Access Control retrieves the signature file from the specified computer at the specified interval.

4. (Optional) Adjust STOP configuration using registry entries in the following key:

   HKEY_LOCAL_MACHINE\Software\ComputerAssociates\AccessControl\STOP
   

   Note: For more information about STOP registry settings, see the Reference Guide.

5. the following command:

   seosd -start
   

   CA Access Control starts up.

Note: You can retrieve the signature file from any host using the eACSigUpdate utility. For more information about this utility, see the Reference Guide.