Advanced Security Installation

Advanced security provides data integrity, proof of origin, and confidentiality. To use advanced security features, you must install the KM server on your organization's Microsoft Certificate Server computer. You can select the KM server component during Microsoft Exchange Server Setup. If you have already installed the KM server, you can upgrade your existing installation.

The computer you select for the KM server should:

• Be in the domain where you plan to centralize administration.
• Be physically secure and backed up regularly.
• Use the Windows NT Server file system (NTFS) format.

For maximum security, configure your KM server as a dedicated server in a separate site. The load on the KM server is negligible because the server is primarily used for generating keys, which is done infrequently.

Note   When setting up the KM server, you should have two blank, formatted floppy disks. You should save the KM server passwords on these disks for maximum security.