IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.98 Secure installation of Novell Netware servers
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Administrators
To ensure a fault-free, secure installation of a Novell Netware server, the
following aspects should be observed before installation and set-up:
Installation documentation:
The installation of Novell Netware servers should be comprehensively
documented so that substitute supervisors, outsiders or newcomers can
understand this material after brief viewing.
In particular, the documentation should contain parameterisation of the server
(network connection, driver), additional NLMs (Netware Loadable modules,
e.g. for data backup) and their configuration, and installed patches.
Furthermore, the installation and integration of additional hardware (e.g.
network printers, tape drives) should be comprehensively documented.
The documentation should also contain a detailed description of the server
hardware and the installed peripheral equipment (e.g. network printer).
Depending on the complexity of the Novell network the deployment of
administration tools for documentation and revision purposes is desirable.
All the necessary software for installation and configuration of a Novell
Netware server should be stored in a secured area, so that unnecessary delays
can be avoided. Particular attention should be paid to the patches of the
operating system, additional NLMs and drivers.
When loading NLM-Utility SYS:SYSTEM\CONLOG.NLM all messages that
appear on the server monitor are simultaneously routed to the file
SYS:ETC\CONSOLE.LOG. This NLM should already be loaded in the start
file AUTOEXEC.NCF, so that problems reported in the start phase of the
server can be detected.
Hardware equipment
When determining the necessary memory capacity (RAM) for Novell Netware
servers along with the capacity of the hard drive and the installed operating
systems of Novell Netware clients, the RAM utilisation must be taken into
account, when loading additional NLMs.
Regarding the capacity of the hard disk when setting up individual volumes on
a Novell Netware server, in particular the SYS: volume must have sufficient
dimensions, since all Netware processes are carried out in this volume as
standard. If the dimensions of the SYS: volume are insufficient, temporary
processes such as print commands may, after certain operation time, exhaust
the capacity of the volume, thereby causing an avoidable ABEND (abnormal
end - server crash).
Hardware requirements:
To increase the availability of Novell Netware servers, i.e. of stored data,
Novell Netware 3.x provides three hierarchical System Fault Tolerance
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000