Overview of Components and Add-On Products
Management and Security Server (MSS) includes these components and add-on products:
Administrative Server
The Administrative Server is the central component of Host Access Management and Security Server that enables you to define terminal emulation sessions, and then configure and manage secure settings for those sessions.
The user interface for the Administrative Server is the MSS Administrative Console .
MSS Administrative Console
The MSS Administrative Console is the user interface for Management and Security Server’s Administrative Server. Use the MSS Administrative Console to manage sessions, assign access to sessions, configure security settings, configure metering and add-on functionality, and to run reports.
Metering Server
Use the Metering Server to monitor the use of terminal sessions, including the number of connections and total connection time per user. The Metering Server does not require a separate license and is automatically installed with the Management and Security Server.
Before you can meter the use of terminal sessions, you must set up the Metering Server and enable the clients to be metered.
See Setting Up Metering.
Configuration Utilities
While the automated installer handles most of the configuration, one or more utilities may be required after you complete the installation and configuration list items.
See Configuration Utilities for more information.
Activation Files
Activation files are used to enable product functionality. Each emulator client and add-on product that is managed by MSS has its own activation file , which enables communication with MSS. The activation file has this format:
activation.<product_name-version>.jaw
Notes about Activation Files
-
Compatibility. We recommend installing the latest activation files to ensure that all product features are correctly enabled.
-
Installation. The MSS automated installer typically installs the needed activation files, and the products are activated as part of the installation process. However, if activation was not part of the installation, you can complete the activation process in the MSS Administrative Console (Configure Settings - Product Activation).
-
Upgrading. After adding new activation files, be sure to remove the older ones.
-
Clustering. If you cluster servers for high availability, you must install or update the activation files on each clustered node. Activation files are not replicated.
-
Add-on products. Check the “Setting up" sections in this guide to be sure your add-on products are installed and activated.
Security Proxy Add-On
The Security Proxy Server acts as a proxy for terminal sessions and provides token-based access control, routing encrypted network traffic to and from user workstations. A separate license is required for the Security Proxy (as an add-on product). The Security Proxy can be installed by the automated installer.
Note
It is best to install the latest activation files to ensure that all product features are correctly enabled. For example, when you upgrade MSS to version 12.8.7, also upgrade the Security Proxy to 12.8.7.
After you install the Security Proxy, refer to Using the Security Proxy Server (in the MSS Administrator Guide) to set certificates and configure secure sessions.
Terminal ID Manager Add-On
The Terminal ID Manager lets you centrally manage and assign terminal and device IDs to emulator sessions. You can pool terminal IDs, track ID usage, and manage inactivity timeout values for specific users, thus conserving terminal ID resources and significantly reducing operating expenses.
A separate license is required for the Terminal ID Manager (as an add-on product). Terminal ID Manager can be installed by the automated installer.
See Setting Up Terminal ID Manager.
Automated Sign-On for Mainframe Add-On
Automated Sign-On for Mainframe enables an administrator to configure a connection to the Digital Certificate Access Server (DCAS) on an IBM z/OS mainframe, and then configure mainframe sessions to provide users with access to their assigned sessions using a single login, such as a smartcard.
To add Automated Sign-On for Mainframe, you need to install the activation file and configure settings using the MSS Administrative Console. Additional configuration is needed on the client emulator and the mainframe.
See Setting Up Automated Sign-On for Mainframe.
Automated Sign-On for Host Access Add-On
MSS Automated Sign-On for Host Access enables an administrator to provide users with access to their assigned sessions using a single login.
To add Automated Sign-On for Host Access, you need to install the activation file and configure settings using the MSS Administrative Console. Additional configuration is needed on the client emulator and the host.
See Setting Up MSS Automated Sign-On for Host Access.
Micro Focus Advanced Authentication Add-On
Advanced Authentication is a Micro Focus product that enables strong multi-factor authentication using a variety of authentication methods. This add-on product provides user authentication to Management and Security Server using the Micro Focus Advanced Authentication appliance.
To add Micro Focus Advanced Authentication, you need to install the activation file and configure settings using the MSS Administrative Console.