Securing ITM On-Prem (ObserveIT) Installations

Installing ITM On-Prem (ObserveIT) Agents can be performed by any user with local administrative permissions on a computer, and with sufficient knowledge about the name or IP address of the ITM On-Prem (ObserveIT) Application Server. However, in some cases, you may want to enable an additional layer of security that will prevent unauthorized installations or uninstallations of the ITM On-Prem (ObserveIT) Agent software.

By enabling Installation Security, only users with knowledge of the installation security password can proceed with the Agent installation (or uninstallation). The ITM On-Prem (ObserveIT) Agent installation (or uninstallation) UI will prompt the user to enter the installation security password.

To enable installation security

  1. Navigate to Configuration > Security & Privacy > Security & Privacy.

    In the Security tab, if required, select the Enable Session Data Integrity check box.

    By default, the Enable Session Data Integrity check box is disabled. When this check box is enabled, a security check is run on all sessions in the database. If the security check finds any sessions that may have been modified, a warning icon will appear next to the relevant sessions in the Endpoint/User Diary.

  2. Under Installation Security, click the Off link.

    The Application Server - Installation Security Password dialog box opens.

  3. Select one or both check boxes to require a password on installation and/or uninstallation of the Agent.

  4. Enter the installation password twice to confirm.

  5. Click Update.

  6. Acknowledge the message to confirm the change.

  7. After the configuration changes are made, the Installation Security status changes to:

    • On if passwords are required on both install and uninstall options.

    • On (Install only) if a password is required only on Agent installation.

    • On (Uninstall only) if a password is required only on Agent uninstallation.

    You can always change the installation password, or cancel it entirely, by clicking the On link, and making the required changes.