Novell ZENworks Endpoint Security Management 3.5 Manuale Utente
ZENworks® ESM 3.5
Administrator’s Manual
71
Note:
To specify the uninstall password you can also pass this MSI Property: STUIP=\”password goes here\”
It is recommended any wireless card be ejected prior to uninstallation, the Wi-Fi radio be
switched-off, and all software with a network connection be closed (i.e.: VPN or FTP software).
switched-off, and all software with a network connection be closed (i.e.: VPN or FTP software).
Note:
It is recommended that prior to uninstalling the ZENworks Security Client, that a simple policy be
distributed to those clients. Policies which globally disable Wi-Fi functionality, disable any communication
hardware, and/or storage devices can leave that hardware disabled following uninstallation, requiring that
each device be manually re-enabled.
distributed to those clients. Policies which globally disable Wi-Fi functionality, disable any communication
hardware, and/or storage devices can leave that hardware disabled following uninstallation, requiring that
each device be manually re-enabled.
Client Self Defense
The ZSC is protected from being intentionally or unintentionally uninstalled, shutdown, disabled,
or tampered with in any way that would expose sensitive data to unauthorized users. Each
measure protects the client against a specific vulnerability:
or tampered with in any way that would expose sensitive data to unauthorized users. Each
measure protects the client against a specific vulnerability:
•
Normal uninstall is not allowed without an installation password (if implemented, see
ESM Installation and Quick-Start Guide), or an uninstall MSI is pushed down by the
administrator
ESM Installation and Quick-Start Guide), or an uninstall MSI is pushed down by the
administrator
•
Windows Task Manager requests to terminate STEngine.exe and STUser.exe pro-
cesses are disallowed
cesses are disallowed
•
Service Pause/Stop and client uninstall is controlled by password, defined in the policy
•
Critical files and registry entries are protected and monitored. If a change is made to
any of the keys or values that are not valid, the registry its immediately changed back
to valid values
any of the keys or values that are not valid, the registry its immediately changed back
to valid values
•
NDIS filter driver binding protection. If the NDIS driver is not bound to each adapter,
STEngine will rebind the NDIS filter driver.
STEngine will rebind the NDIS filter driver.
Upgrading the ZSC
The ZENworks Security Client may be upgraded in any of three ways:
•
By physically running the new install executable (default name is setup.exe) with the
the STUPGRADE=1 switch activated, on each client machine
the STUPGRADE=1 switch activated, on each client machine
•
By running an MSI uninstall of the current ZSC and running a new installation (MSI
CANNOT perform upgrades)
CANNOT perform upgrades)
•
By utilizing the ZSC Update option (RECOMMENDED, see “ZSC Update” on
page 100)
page 100)