.Net framework dependency in Service Desk

Products

• CA Service Desk Manager
• CA Service Management - Service Desk Manager

Issue/Introduction

Microsoft .Net Framework 4.0 Security Technical Implementation Guide :: Version 2, Release: 1 Benchmark Date: 22 Jan 2021 requires the following be documented for each application that uses .Net 4.0 framework:

1. Each .Net 4.0 application they run on the system.
2. The .Net runtime host that invokes the application.
3. The security measures employed to control application access to system resources or user access to application.

This article discusses the above questions as related to Service Desk manager 17.3 using .Net 4.0 Framework

Environment

Release : 17.3

Component : SDM WEB SERVER

Resolution

1. Each .Net 4.0 application they run on the system.

The components that would be used by Service Desk would be SQL Server and IIS, assuming that the environment is configured to operate with this particular DB engine and web server.  An install running Oracle and Tomcat would not utilise .NET.

2. The .Net runtime host that invokes the application.

This is usually the name of the server that would be running SQL Server or IIS. 

3. The security measures employed to control application access to system resources or user access to application.

Please review with your admin team on the given IIS and SQL Server implementation.  SDM is a product which leverages these components and does not assume responsibility to administer for their security needs.