Caché Installation Guide - InterSystems Documentation

D
Preparing for Caché Advanced
Security
The material in this appendix is intended for those choosing to use the advanced security features of
Caché. Your authentication and authorization method choices determine what tasks you need to perform
to prepare the security environment before installing Caché. To help determine the level of security
for your site before installing Caché, review the “Introduction” to the Caché Security Administration
Guide for an overview of the authentication and authorization options available.
Important:
If you are not using the Kerberos authentication method in your environment, you
can bypass the “Preparing the Security Environment” sections. Review the information
in the Initial Caché Security Settings section, particularly if you are choosing to use
Normal or Locked Down Caché security.
All Caché supported platforms have versions of Kerberos supplied and supported by the vendor; see
the appropriate operating system documentation for details. If you choose to use Kerberos, you must
have a Kerberos KDC or a Windows domain controller available on your network. Microsoft Windows
implements the Kerberos authentication protocol by integrating the KDC with other security services
running on the domain controller.
If you are using Kerberos, see the instructions for the appropriate environment of the three outlined
in the Preparing the Security Environment section: Windows-only Environment, Mixed Environment
Using Windows Domain Controller, Non-Windows Environment.
Once you have defined the necessary service accounts on your Windows domain controller or tested
the KDC functionality on your non-Windows Kerberos server, see the Initial Caché Security Settings
section before you install Caché.
Caché Installation Guide 111