The SE Manager of the system concerned is protected against unauthorized access both by authentication and by session management.
Following the login, one session whose validity is constantly monitored is set up for each client (browser instance of the calling web browser) and system.
In the Authorizations -> Users menu the Sessions tab informs the administrator about all sessions of users which are currently logged in on the SE Manager. In addition to the information on the user and IP address of the PC, the current individual setting for the session is also displayed.
A session ends in the following cases:
Explicitly because of Log out in the header area of the main window
Because of a session timeout (default: after 20 minutes of inactivity on the SE Manager)
In both cases you are shown the login page to permit you to log in again, immediately in the case of Log out and, if the session timed out, with the first action that occurs after the session timeout.
Windows in which terminals are opened are not subject to session management. This guarantees interrupt-free usage of the following additional functions:
Accesses to the BS2000 console and BS2000 dialog
Access to the XenVM console
Access to the CLI (shell)
Access to the shadow terminal (Remote Service)
Access to the SVP console of the SU /390
Security-relevant actions
Each user can change the setting for the session timeout for himself/herself personally:
>
Click in the login information in the header area. A list containing the menu item Individual settings opens.
>
Click Individual settings. The "Change update cycle and session timeout" dialog box opens in which you can enable/disable the session timeout and set the timeout in the range from 5 to 60 minutes.
The individual setting is stored on a browser-specific basis.
In addition to the lock for the administration PC, the following protective measures are also recommended when you leave your workstation:
Explicit logout from the SE Manager.
Close all windows which have a terminal loaded.
If the application has its own lock mechanism (e.g. the console monitors), the window can stay open and the lock mechanism provided can be used.