1.2.1 Framework Manager

The Framework Manager is the server component of the Framework. It provides a centralized registry, enabling services and administration of the entire Framework from any single point on the enterprise network. The Framework Manager is administered through the Framework Manager console.

The manager modules are installed on the Framework Manager by default. The modules can also be distributed to other Framework hosts to provide load balancing and failover for the Framework. If there are multiple occurrences of the same type of manager installed on the Framework, they operate in primary and backup roles. Updates to the data controlled by each group of like managers are only updated at the primary manager.

The default manager modules are:

  • Administration Manager (admin): Provides the functionality for the Web-based user interface. Framework consoles can be installed on the Administration Manager and are used to control product features.

  • Access Manager (auth): Maintains a list of Framework user accounts and provides authentication services for the Framework. It needs to be installed with a local Registry Manager in order to create a secure user authentication token.

  • Audit Manager (audit): Maintains the repository for all auditing information collected by the Framework.

    NOTE:NetIQ recommends to deploy only two Audit Managers, even in large environments.

  • Command Control Manager (cmdctrl): Maintains the rule configurations and is responsible for validating user command requests.

  • Compliance Auditor (secaudit): Collects, filters, and generates reports of audit data for analysis and signoff by authorized personnel

  • Messaging Component (msgagnt): Provides the transport mechanism and interacts with e-mail servers to provide reporting functionality.

  • Package Manager (pkgman): Manages a repository for Framework packages.

  • Registry Manager (registry): Maintains a database of all Framework hosts and modules. Provides certificate-based registration features for the hosts.

  • Syslog Emitter (syslogemit): Provides logging of audit information to a syslog server.

  • User Request Dashboard (userreqdashboard): Helps you in viewing and updating emergency access and credential checkout requests.

  • Auditing (audit): Helps you control access to Reports console.

  • Credential Vault (prvcrdvlt): Helps you control access to Credential Vault console.

  • Distribution (distrib): Helps you restrict installation and deployment of certain packages.

  • User Info (unifi): Helps you control access to Hosts console.