TSS

IT&Operations > Security > Securing Device Session

TSS Configuration

This section explains how device session creation requests can be secured.

TSS devices session requests are secured when:

•HTTPS is being used.

•A secret is configured in TSS's Credentials Manager.

•"Enable device session authorization" is set to "true"

Location: TSS Settings

General

Enable device session authorization	truefalse
Key: tss.boot.authorization.enable Description: This setting controls if TSS would serve unauthorized device session request or not. If set to "true", the device session creation request to the TSS must provide authorization token. If the request does not contain authorization token, the TSS will return a 401 unauthorized. If set to "false", no authorization token is required for POST /device/session requests. The authorization token is created using credentials stored in windows credential manager. See: Solution Documentation > IT & Operations > Security > Securing Device Session Constraint: true\|false

On TSS VM:

1.Create a script at location "C:\Users\Public\batch\sc.bat" on TSS machine and copy the below lines into it

Make sure to change "username" and "password" to your preferred details. (Matching the values set in the TPO's and Turret's)

cmdkey /genric:BTTRADE_TSS_BOOT_CREDENTIALS /user:username /pass:password

2.Restart the IIS via "TSS > System > Settings > TSS Settings", Click on "Reload Application"

•Verify that HTTPS is enabled.

•Verify that the "username" and "password" match for the credentials manager settings in TSS's, TPO's and Turret's.

•Ensure that "Reload application" is done after configuring TSS settings in TSS console.

•If there is a change in "username" and "password", make sure to update "BTTRADE_TSS_BOOT_CREDENTIALS" in all locations.

•If you wish to remove the credentials then set the cmdkey line to:

cmdkey /delete:BTTRADE_TSS_BOOT_CREDENTIALS