15Chapter 15 of 20
Admin Portal
Decide what this Mac is allowed to do with MSL — and say who decided, and why.
- 1The MSL Admin PortalWhat an administrator can restrict, and what MSL promises about it.
- 2Setting it upAn administrator password and a signing key, and what each one is actually for.
- 3What can be restrictedThe full list of switches, grouped, and the rule that keeps the list honest.
- 4How strong a policy isThree rungs, what each one actually guarantees, and why MSL tells you which you are on.
- 5Reading a refusalWhat a refusal message tells you, and what to do about it.
- 6Managing several MacsSign on one machine, deploy to many, and keep the key off them.
- 7Certifying and withdrawing an imageSign a statement that an image is yours, or that it is retired.