Log Collection: Step 3. Set Up a Lockbox

Document created by RSA Information Design and Development on Jun 25, 2017•Last modified by RSA Information Design and Development on Jul 28, 2017

Version 2Show Document

Like • Show 0 Likes0
Comment • 0
View in full screen mode

This topic tells you how to configure Lockbox Security Settings.

What Is a Lockbox

A lockbox is an encrypted file that you use to store confidential information about an application. The Security Analytics Lockbox stores an encryption key for the Log Collector.

The encryption key is used to encrypt all event source passwords and the event broker password.

When you create the Lockbox, you need to define a password for the Lockbox.

The Log Collector operates the Lockbox in a mode during data collection that does not require you to specify the password (the Log Collector uses the host system fingerprint instead).

These are the lockbox security settings.

Feature	Description
Old Lockbox Password	When you set up a Lockbox for the first time, this field is blank. Security Analytics populates this field after you enter a New Lockbox Password and click Apply.
New Lockbox Password	Initial or new lockbox password. To maximize lockbox security, specify a password that is eight or more characters in length with at least one numeric character, uppercase character, and non-alphanumeric character such as # or !
Apply	Click Apply to save the changes to the lockbox password.

Set Up a Lockbox

To set up a lockbox you need to set a password, as follows:

In the Security Analytics menu, select Administration > Services.
In Services, select a Log Collector service.
Click under Actions and select View > Config.
The Service Config view is displayed with the Log Collector General tab open.
Click the Settings tab.
In the options panel, select Lockbox to configure Lockbox settings.
Under Lockbox Security Settings, enter a password in the New Lockbox Password field and click Apply.