Skip to content

Run services as a dedicated user

From a security perspective, it is advantageous to run services as a dedicated user with a minimal set of privileges.

You must first install the product, and then adjust the MSS service as described below.

Note

You must repeat these steps after any product upgrades.

To run the Micro Focus MSS Server service as a dedicated user on Windows:

  1. Create a standard user.
  2. Stop the Micro Focus MSS Server service.
  3. Open the Properties of the Micro Focus MSS Server service.
  4. Go to the Log On tab.
  5. Select This account.
  6. Enter the username and password of the user who is going to run the service.
  7. Give the user full control to the following directories:
    • <install_dir>\server\conf
    • <install_dir>\server\etc
    • <install_dir>\server\logs
    • <install_dir>\server\tmp
    • <install_dir>\server\microservices\auth-service
    • <install_dir>\server\microservices\cassandra
    • <install_dir>\server\web\work
    • <install_dir>\server\webapps\mss\ex\modules
    • <install_dir>\server\webapps\mss\WEB-INF\lib\modules
    • MSSData directory (for example, C:\ProgramData\Micro Focus\MSS\MSSData)
    • <mssdata_dir>\db
    • <mssdata_dir>\deploy
  8. Change ownership and give full control to the user for following files:
    • <mssdata_dir>\keychain.bcfks
    • <mssdata_dir>\keychain.bcfks.bak
    • <mssdata_dir>\keychain.pwd
    • <mssdata_dir>\AccessDS.xml
    • <mssdata_dir>\PropertyDS.xml
    • <mssdata_dir>\SessionDS.xml
    • <mssdata_dir>\idm\IDManager.config
  9. Start the Micro Focus MSS Server service.

To give full control of a file or folder:

  1. Right click on the file or folder.
  2. Select Properties.
  3. Go to the Security tab.
  4. Click Edit.
  5. Click Add.
  6. Enter the user name and click OK.
  7. Check Full control under the Allow column and click Apply.

To change ownership of a file or folder:

  1. Right-click the file or folder.
  2. Select Properties.
  3. Go to the Security tab.
  4. Click Advanced.
  5. Click Change beside the current Owner.
  6. Enter the new owner name and click OK.
  7. Click Apply.

To run the Micro Focus MSS Server service as a dedicated user on UNIX / Linux:

Follow the steps above but adjust them accordingly for your environment and distribution.