PowerProtect Data Manager 19.10 Security Configuration Guide

Roadmap

For new deployments, the following steps describe a recommended course of security-related events. Some steps such as external identity providers may not apply to all environments.

1. Review the port requirements and configure environment connectivity, as required.
   Port usage provides more information.
2. Set up an email server.
   The PowerProtect Data Manager Administration and User Guide provides instructions. The email server is partly used for email related to password expiration and resetting passwords.
3. Update the contact information for the admin user to include a working email address for password-related notification.
   User and credential management provides instructions.
4. Change the self-signed security certificates.
   Security certificates and Certificate management provide instructions.
5. Configure an external identity provider.
   Authentication types and setup and Managing external identity providers provide instructions.
6. Review the PowerProtect Data Manager roles.
   Role-based access control (RBAC) provides more information.
7. Add local users and change the local user passwords. Assign local users to a PowerProtect Data Manager role.
   User and credential management provides instructions.
8. Map external identity provider users to a PowerProtect Data Manager role.
   External authorization associations provides instructions.