Secure the Database Agent Truststore

Splunk AppDynamics recommends you take the following security measures to prevent tampering with the Database Agent truststore:

  • Secure the truststore file through file system permissions:

    • Make the Database Agent truststore readable by any user.
    • Make the truststore owned by a privileged user.
    • Make the truststore writable only by the specified privileged user.
  • Secure the Database Agent configuration files so that they are only readable by the agent runtime user and only writable by a privileged user:
    • Global configuration file: <db_agent_home>/conf/controller-info.xml