server audit of 12.1 Web Viewer

Products

• Output Management Web Viewer

Issue/Introduction

Preparing to meet with auditors, can you say what data is stored on the servers for Web Viewer V12.1? We also utilize a separate SQL DB server to support Web Viewer.  

Environment

• Output Management Web Viewer 12.1
• View®
• Output Management View® for z/OS

Resolution

Report data is never stored on the Web Viewer server - it always remains in the mainframe-based repository.

Web Viewer 12.1 utilizes single signon and so the mainframe password is used to access both Web Viewer and the View repository. In most cases, 12.1 Web Viewer is configured to use mainframe security first and so it's going to Top Secret, ACF2, or RACF - whichever security package you use (otherwise, LDAP is used). Those user passwords are NOT stored within the Web Viewer. Any proprietary info (like all passwords for third-party DB access) are encrypted on the Web Viewer server.