13.8 Post Upgrade Configuration

Verify that the following settings are complete:

13.8.1 Updating the Keystore Password

The chg_keystore_pass.sh script allows you to change the keystore passwords. As a security best practice, change the keystore passwords immediately after upgrading Change Guardian.

NOTE:Do not perform this procedure if Change Guardian server is in FIPS mode.

To change the keystore passwords:

  1. Log in to the Change Guardian server as root.

  2. Switch user to novell.

  3. Go to the /opt/novell/sentinel/bin directory.

  4. Run the chg_keystore_pass.sh script and follow the on-screen prompts to change the keystore passwords.

13.8.2 Setting the Polling Interval in Agent Manager

The heartbeat of Change Guardian Agent for Windows (displayed as Polling Interval) and Security Agent for UNIX (displayed as Heartbeat) determines the frequency at which Change Guardian server checks health of agents. It is the interval at which any policy changes on the server is synced to agents. If you have less than 500 agents and configured up to 15 policies per agent, consider setting Polling Interval to 15 minutes. If you have more than 500 agents or configured more than 15 policies per agent, consider setting the interval to 60 minutes. This ensures that there is no congestion of network traffic due to exchange of policy and agent health data at frequent intervals.

In Agent Manager, click Manage Installation > Reconfigure, and set the desired Polling Interval.

NOTE:This interval is referred to as Heartbeat in Policy Editor.