422 Tivoli Business Systems Manager Version 2.1: End-to-End Business Impact Management
13.1 Resource security
IBM Tivoli Business Systems Manager uses the Windows facility extensively. For
this reason, we must use Windows’ built-in security features to enforce controlled
access to IBM Tivoli Business Systems Manager resources. The following
subsection provides an overview of the resources and security models that we
used.
13.1.1 Protecting files and directories
In line with the aim to optimize Windows security features, we implemented the
NT file system (NTFS) for all servers that provide a more granular security and
protection capability compared to the FAT file system.
Windows has the ability to change access permissions to drives, files, and
directories and can audit activities on these as well. IBM Tivoli Business Systems
Manager codes reside on Windows and use Windows networking shares to
communicate. These files and shares on IBM Tivoli Business Systems Manager
servers have to be protected.
We modified the permission of files and directories under the TivoliManager path
where we installed the IBM Tivoli Business Systems Manager code in our IBM
Tivoli Business Systems Manager servers.