RSA Authentication Manager 6.1 Administrator's Guide - The Ether ...

RSA Authentication Manager 6.1 Administrator’s GuideQuick Admin ArchitectureQuick Admin consists of:• Java servlets accessible through a web server. These servlets are powered by theApache Jakarta Tomcat 5.5.7 servlet engine.• A back-end process that runs on the RSA Authentication Manager PrimaryServer. This process, named RSA Authentication Manager Quick AdminDaemon, manages the encrypted communication between the servlets and thePrimary database.Do not install the web server on the same machine as the RSA AuthenticationManager. For complete installation and configuration information, see the InstallationGuide for your platform.Important: For security purposes, RSA Security strongly recommends that you followthe latest Apache Software Foundation guidelines and best practices. For moreinformation, go to http://jakarta.apache.org/tomcat.The following diagram illustrates the Quick Admin architecture.Secure InternetConnection(https)Secure networkconnectionHelp DeskAdministratorsWeb Serverwith Quick AdminsoftwareRSA AuthenticationManagerAdministrative Roles in Quick AdminQuick Admin 6.1 enforces the administrative roles defined in the RSA AuthenticationManager. An administrative role is a template defining a set of tasks that a user canperform on a specific realm, site, or group. By assigning administrative roles, youlimit administrators to specific kinds of actions and specific areas of theRSA Authentication Manager database.The two components of an administrative role are:Administrative scope. Specifies the sites and groups (and therefore users and theirtokens) that can be managed by administrators with the assigned role. You have theoption of disabling administrative scoping for Quick Admin. For instructions, see“Disabling Quick Admin Administrative Scoping” on page 48.Administrative task list. A named set of tasks that administrators, who are assigned aparticular role, can perform within their administrative scopes. In Quick Admin, tasksnot included in a Quick Admin administrator’s defined task list are unavailable. Forinformation, see “Setting Up Task Lists” on page 48.2: Using RSA Authentication Manager Administration Applications 47