Configuration protection for providing security to configuration files

摘要

The embodiments include a method for providing security for a set of configuration files corresponding to a remote monitoring application. The method may include accessing a server configured to store the set of configuration files. The server is also configured to receive a connection request, over a network, from an agent having the remote monitoring application, generate an encryption key in response to receiving the connection request, transmit the encryption key, over the network, to the agent, encrypt the set of configuration files according to an encryption algorithm and the encryption key, and transmit the encrypted set of configuration files to the agent. According to one embodiment, the server may be accessed by performing one or more maintenance actions on the server.

主权项

1. A method for providing security for a set of configuration files, the method comprising:
periodically receiving, by a server, a connection request, over a network, from a host computer having an agent with a remote monitoring application configured to monitor performance of the host computer, the server storing one or more configuration files containing password information required by the agent to perform one or more tasks; generating, by the server, an encryption key in response to receiving the connection request; encrypting, by the server, the configuration files according to an encryption algorithm and the encryption key; transmitting, by the server, the encryption key and the encrypted configuration files, over the network, to the agent; deleting the encryption key after transmitting the encrypted configuration files, wherein the encryption key is re-generated, the configuration files are re-encrypted, and the re-generated encryption key and the re-encrypted configuration files are transmitted to the agent each time the connection request is received; and increasing, by the server, a level of security for the configuration files by increasing a frequency in which a connection request is generated such that a different encryption key is re-generated and the configuration file are re-encrypted and transmitted at a faster rate than before the level of security was increased.