Caché Installation Guide - InterSystems Documentation

Preparing for Caché Advanced Security
† Service exists on non-Windows servers only
After installation, you can view and maintain these services at the [Home] > [Security Management]
> [Services] page of the System Management Portal.
C.2.3 User Account Configuration
If you select Normal or Locked Down for your initial security setting, you must provide
additional information to the installation procedure:
1. User Credentials for Windows server installations only — Choose an existing Windows
user account under which to run the Caché service. You can choose the default system
account, which runs Caché as the Windows Local System account, or enter a defined
Windows user account.
Important:
If you are using Kerberos, you must enter a defined account that you have
set up to run the Caché service. InterSystems recommends you use a separate
account specifically set up for this purpose as described in the Create
Service Accounts for Windows Caché Servers section.
The installation verifies the following if you enter a defined user account:
• The account exists on the domain.
• You have supplied the correct password.
• The account has local administrative privileges on the server machine.
2. Caché Users Configuration for Windows installations — The installation creates a Caché
account with the %All role for the user that is installing Caché to grant that user access
to services necessary to administer Caché.
Owner of the instance for non-Windows installations — Enter a user name under which
to run Caché. Caché creates an account for this user with the %All role.
Enter and confirm the password for this account. The password must meet the criteria
described in the Initial User Security Settings table.
Setup creates the following Caché accounts for you: _SYSTEM, Admin, SuperUser,
CSPSystem, and the user account you enter in this step. See the Initial Password Settings
for Predefined Users table for more information about these accounts.
96 Caché Installation Guide