Caché Installation Guide - InterSystems Documentation

C
Preparing for Caché Advanced
Security
The material in this appendix is intended for those choosing to use the advanced security
features of Caché 5.2. Your authentication and authorization method choices determine what
tasks you need to perform to prepare the security environment before installing Caché. To
help determine the level of security for your site before installing Caché, review the “Introduction”
to the Caché Security Administration Guide for an overview of the authentication
and authorization options available.
Important:
If you are not using the Kerberos authentication method in your environment,
you can bypass the “Preparing the Security Environment” sections. Review
the information in the Initial Caché Security Settings section, particularly if
you are choosing to use Normal or Locked Down Caché security.
All Caché supported platforms have versions of Kerberos supplied and supported by the
vendor; see the appropriate operating system documentation for details. If you choose to use
Kerberos, you must have a Kerberos KDC or a Windows domain controller available on your
network. Microsoft Windows implements the Kerberos authentication protocol by integrating
the KDC with other security services running on the domain controller.
If you are using Kerberos, see the instructions for the appropriate environment of the three
outlined in the Preparing the Security Environment section: Windows-only Environment,
Mixed Environment Using Windows Domain Controller, Non-Windows Environment.
Once you have defined the necessary service accounts on your Windows domain controller
or tested the KDC functionality on your non-Windows Kerberos server, see the Initial Caché
Security Settings section before you install Caché.
Caché Installation Guide 87