When SMA runs a script task against a resource is the script data saved locally and encrypted?
Article ID: 231346
Updated On:
Products
Issue/Introduction
Questions:
- When Symantec Management Agent (SMA) runs a script task against a resource is the script data saved locally?
- Is the data within the script transmitted securely (ie. Is it encrypted)?
So, when we create a task to run a script on a resource, is the script itself saved locally on the target resource? If it's saved there, is it encrypted on the drive?
Environment
ITMS 8.5, 8.6, 8.7
Resolution
The script is saved as part of the task in SMA secure storage, so it is encrypted on the disk.
The task associated with the script is encrypted during transmission from the server to the client.
Note:
The only time the script can be intercepted is during the task execution:
the local batch file is created, executed, and then removed. That local batch file contains the original script.
The temporary script file is created in a folder configured in Folder for executable files (under SMP Console>Settings menu>All Settings>Agents/Plug-ins>Symantec Management Agent>Settings>Targeted Agent Settings>select desired client policy>Advanced tab)
The file is given proper permission so only our agent service and the user account whose identity is used to run the script get access to the file.
Additional Information
Feedback
