Grass Valley GV STRATUS Installation v.3.1 - Manual (Page 314)

The system also depends upon Microsoft Internet Information Services (IIS) and SQL services.
Related Topics
GV STRATUS devices and their roles, cab files, services, and licenses on page 185
Set firewall for application ports on page 49
Embedded Security modes and policies
The Embedded Security solution protects against viruses and other unauthorized programs on the
following Grass Valley systems:
• K2 Summit/Solo system
• K2 Media Server
• GV STRATUS server
• K2 Dyno S Replay Controller
• GV STRATUS server, shipped new from Grass Valley with GV STRATUS software version
2.7 and higher.
Embedded Security prevents any unauthorized programs from running on the system. It contains a
whitelist of programs that are authorized to run. Whenever a program attempts to run, it is checked
against the whitelist. If the program is not on the whitelist, Embedded Security blocks the program
from running. SiteConfig, and any software deployed by SiteConfig, is on the whitelist, so you do
not need to manage Embedded Security in any way when using SiteConfig to deploy software. All
versions of SiteConfig are compatible with Embedded Security.
When installing software manually (without SiteConfig) it might be necessary to manage Embedded
Security. When necessary, you can put Embedded Security in Update mode. This mode allows you
to manually install software that is not on the whitelist. Do not confuse Update mode with the idea
that Embedded Security is "disabled". When in Update mode, Embedded Security is still active.
While in Update mode, Embedded Security keeps track of any software you run or install and adds
it to the whitelist. When you are done installing software and any required restarts, you must take
Embedded Security out of Update mode so that it can protect the system. For software that requires
a restart after installation, such as K2 system software and SNFS media file system software,
Embedded Security must remain in Update mode until after the restart is complete.
No system restarts are required for entering or leaving Update mode, and a restart does not change
the Update mode status. If in Update mode before a restart, the system remains in Update mode
after a restart. You use the Embedded Security Manager to enter and leave Update mode.
The following policies apply to the Embedded Security:
• Use Update mode only as instructed by Grass Valley product documentation or as directed by
Grass Valley Support. Do not do any other operations with Embedded Security Manager, unless
under the direct supervision of Grass Valley Support.
• Do not keep Embedded Security in Update mode long-term, as Embedded Security does extra
processing while in Update mode and eventually problems arise when attempting to run software.
• Make sure that Embedded Security is not in Update mode when using SiteConfig to install
software. Update mode interferes with SiteConfig's automatic management of Embedded Security
and causes problems running the software installed.
314 GV STRATUS Installation and Service Manual 2013 12 19
Administering and maintaining the GV STRATUS system