OW5000 System Security Guidelines - NEC Corporation of America

4-14Securing the DatabaseChapter TopicsThe database is a vital component of the OW5000 System and to yourorganization. Sensitive data related to users, phones, and hardware isstored in a database. A hacker can use this data to launch a maliciousattack against your organization.Any database server that is not kept up-to-date with the latest securitypatches and critical updates can become infected with a worm.A worm attacks vulnerabilities in database applications, which cancripple your network and render your hardware useless. To avoid thistype of attack, check nightly for software updates and enforce strongpasswords for all system administrator accounts.The OW5000 supports the following SQL Servers:. Microsoft SQL Server 2005 Express Edition SP2 or later. Microsoft SQL Server 2005 Standard Edition SP2 or later. Microsoft SQL Server 2008 Express Edition SP1. Microsoft SQL Server 2008 Standard Edition SP1• SQL Installation and Settings• Backup and RecoverySQL Installation and SettingsSystem Administrator (sa) PasswordsSystem Administrator (sa) passwords are the main line of defenseagainst hackers and malicious software. Hackers can access freeprograms designed to guess a sa password. The program generates testpasswords using a combination of common words and numbers to gainaccess to the server.Complex passwords are much more secure. Never, under anycircumstance, use a blank sa password.IMPORTANTNever use example passwords found in installation manuals. For instance, do notuse the example sa password, Ow5000db1!, found in the OW5000 InstallationGuide.UCE Application Platform (UNIVERGE OW5000) System Security Guidelines - Revision 7