Set User Roles and Assign the Admin Password

User accounts should be limited to operator role level instead of granting all users the Admin role level. Proper use of the service user role should be practiced. Create, enable, or disable the service user role accounts as needed. Service roles have greater privilege than operator to the point of nearly the same authorization as the admin role.

At first power-on, a setup wizard automatically runs on the local operator panel to obtain basic configuration information. The installer uses a standard login account in the first step of the setup wizard routine. Initial setup includes administrator account username and password, network settings, and other basic settings. The library will not become operational until you complete the setup wizard and enter a new password for the admin account.

After completing the setup wizard powering on the library, you can make additional modifications to the library configuration through the browser user interface (BUI) for all library settings. Refer to the SL150 Library Guide for more information.

If a history of user activity is needed for investigative purposes, the "Activity Log" may be reviewed and exported for further analysis. The Activity Log on the user interface can show user logins, Host or UI initiated actions for traceability.

Configure the Firewall and Place the Library on a Secure Network

You should configure the firewall to allow traffic on ports used by the SL150 library (see SL150 Network Ports). Block any unused ports.

Although the library provides an internal firewall to protect itself, this should not be the only line of security to protect the library. It is recommended the library is in a physically secured data center on a secured network only allowing access from servers utilizing its functionality. These servers and applications running on them should also be secured.

All tape library products are designed and documented for use within a controlled server environment with no general network or user access. This provides the best functionality and protection from compromise, both from the internet in general and from the internal entity operating the library.

Enforce Password Management

Basic password management rules, such as password length, history, and complexity must be applied to all passwords. SL150 passwords must be between 8 to 128 characters and contain at least one numeric or special character. The default password must be changed during installation and may not be reused.