The certificate profiles specify the access rights to enable the DSM components to perform their job out of the box. These access rights should not be modified in any case. If you modify it accidentally, you must restore the default access rights.
The following table lists the default class permissions for each certificate profile:
|
Security Profile |
Security Class |
Class Permissions |
|---|---|---|
|
DSM directory synchronization engine
x509cert://dsm r11/cn=dsm directory synchronisation,o=computer associates,c=us |
Configured Directory Asset Group Computer User Account |
Full Control Special Access (RW) Special Access (RW) Special Access (RW) No Access for all other classes |
|
DSM Registration
x509cert://dsm r11/cn=dsm common server registration,o=computer associates,c=us |
Class Permissions Computer User Account Scalability Server Group Scalability Server Manager Engine Task Engine Domain Group Domain Asset Job Asset Group
|
Special Access (CVR) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) Special Access (CVRWXD) No Access for all other classes. |
|
Authentication of the CSM agent controller
x509cert://dsm r11/cn=configuration and state management,o=computer associates,c=us
|
Computer Asset Group Policy - Configuration Computer OS Installation Image
|
Full Control Special Access (CVRW) Full Control Full Control No Access for all other classes. |
|
Domain database password access
x509cert://dsm r11/cn=domain access,o=computer associates,c=us |
Database Credentials |
Read (VR) |
|
Enterprise database password access
x509cert://dsm r11/cn=enterprise access,o=computer associates,c=us |
Database Credentials |
Read (VR) |
|
Reporter database password access
x509cert://dsm r11/cn=reporter access,o=computer associates,c=us |
Database Credentials |
Read (VR) |
|
DSM Agent Mover Certificate
x509cert://dsm r11/cn=dsm r11 agent mover,o=computer associates,c=us |
Software Job Container Software Job User Profile Computer Asset Group Software Package Software Group Procedure Group Procedure Domain |
Special Access (VRWD) Special Access (VRWD) Special Access (VRD) Special Access (VRD) Special Access (VRD) Read (VR) Read (VR) Read (VR) Read (VR) Read (VR) No Access for all other classes. |
|
DSM Software Delivery Catalog Certificate
x509cert://dsm r11/cn=dsm r11 software delivery catalog,o=computer associates,c=us |
Software Job Container Software Job User Profile Computer Asset Group Software Package Software Group Procedure Group Procedure Domain |
Special Access (CVRWXD) Special Access (CVRWXD) Manage (VRX) Manage (VRX) Manage (VRX) Read (VR) Read (VR) Read (VR) Manage (VRX) Read (VR) Full Control for all other classes |
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|