Hardening the Operating System

Skylight orchestrator appliances come with a minimal set of services and software that are required for operation. Several precautions have been taken to ensure the security of the system in its default configuration.

Some customers may want to further harden the underlying environment of their Skylight orchestrator appliances to conform to their organization’s security policies.

If this is the case, the following procedures may be of interest and can be executed on the appliance.

• Hardening the visionems user account (the account used to log in on the console)
• Change the administrator password
• Configure the password expiration policy
• Configure the password format policy
• Configure the account lockout policy.
• Deleting the support account The Skylight orchestrator appliance has an account that is meant to be used by Accedian Technical Support in emergency situations. Some security policies will require this account to be disabled.
• Changing the default console greeting message Configure the greeting message to display during a console login.

The procedures in the folllowing articles explain how to harden an appliance.