Secure StarTeam server
This topic provides details on how to configure a secure StarTeam server.
Configure and secure StarTeam server
Follow the steps below to configure and secure your StarTeam server:
-
Set security and timeout options. For details, see Setting security and timeout options.
-
Enable TLS secure sockets protocol. For details, see Enabling TLS secure sockets protocol in StarTeam Server .
Disable non TLS protocols if possible.
-
For LDAP users, you can also configure Single Sign-On or Multi-Factor authentication. For details, see Single Sign-on/Multi-factor authentication.
-
Secure certificate files.
- Set access rights for certificate key or limit access to the .. \Micro Focus\StarTeam Server 17.2\CACertificates folder.
- Use a dedicated user for StarTeam service (instead of local System) and define exact permissions for the user, allowing the user to perform only the necessary actions required by the StarTeam system/application.
Configure ActiveMQ MPX with secure protocols
Follow the steps below to configure ActiveMQ MPX with secure protocols:
-
Configure ActiveMQ MPX with secure protocols. For details, see Configuring ActiveMQ MPX with secure protocols SSL/TLS .
-
Secure certificate files by limiting access rights to the \Micro Focus\ActiveMQ Message Broker\conf folder.
Configure and secure StarTeam web server for Search and My Work
Follow the steps below to configure and secure the StarTeam web server for Search and My Work:
-
Configure HTTPS for the web server. For details, see Enabling SSL using a certificate.
-
Make sure TLS 1.0 is disabled in the server.xml file of the web server.
-
Secure Search configuration in the ..\Micro Focus\StarTeam Server 17.2\Search\config\starteam-search-configs.xml file.
Use a dedicated user for StarTeam web service (instead of local System) and define exact permissions for the user, allowing the user to perform only the necessary actions required by the StarTeam system/application.
Configure secure ServerREST API
Follow the steps below to configure secure ServerREST API:
-
Configure use of HTTPS. For details, see Configure certificates for a secure protocol.
-
Set up certificate. For details, see Start the REST service.
Configure database level encryption
Follow the steps below to configure database level encryption:
-
For SQL server.
-
For Oracle.
StarTeam Server 17.3 supports Oracle Data Network Encryption and Integrity. The encryption must be configured on the database server.