<div>
in the case of Tripwire, it requires the ssh credentials to be stored in it so that<br />
it could ssh login to network devices to take a config of the devices for <br />
hardening checks. <br />
<br />
Though ssh credential is encrypted, it's still deemed insecure as it's stored<br />
in Tripwire Enterprise manager. &nbsp;So we were told by the security consultant<br />
that for the highly sensitive systems, it has to have its own AD &amp;&nbsp;its own<br />
Tripwire &amp;&nbsp;possibly backup service (if media server contain credentials<br />
that could login to the payment service's servers.
</div>


<div>
<div class="content wysiwyg-content">
For some tools, they require to have ssh password in them to be able to login<br />
to the endpoints to extract configuration of the device that it's managing?<br />
<br />
Does NB media &amp;&nbsp;master servers require to contain the endpoints credentials for it <br />
to perform backups?<br />
<br />
We deem it a risk if media/master servers contain the credentials (domain AD credentials<br />
&nbsp;or even the local credentials) of the &nbsp;Win &amp;&nbsp;Unix servers that it's backing up
</div>
</div>


For some tools, they require to have ssh password in them to be able to login
to the endpoints to extract configuration of the device that it's managing?

Does NB media & master servers require to contain the endpoints credentials for it 
to perform backups?

We deem it a risk if media/master servers contain the credentials (domain AD credentials
 or even the local credentials) of the  Win & Unix servers that it's backing up

Does Netbackup media &amp; master servers contain the credentials of the endpoints that it backup

The term "Backup" means the methods and processes involved to copy computer data (system data as well as application data) to media other than the ones where the data originally live (disk, tape, optical, cloud). "Restore" in turn means the methods and processes involved in data recovery, i. e., bringing back copied computer data to their original location. Backup/Restore primarily serves as a means of protection against data loss, be it due to disaster, corruption or sabotage. It can also be used for recovering data from an earlier point in time and even for cloning machines or applications. There is a wide variety of backup/restore software available, from expensive commercial products to free or open source tools.

Storage Software

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.

Network Security

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Does Netbackup media &amp; master servers contain the credentials of the endpoints that it backup

Does Netbackup media & master servers contain the credentials of the endpoints that it backup