Server Install Checklist



Server Checklist

Server Checklist

Step

√

To Do

Preparation

1

Install the server image

2

Add additional repositories

System Update

3

Update with the latest updates

4

Configure automatic updates

5

Configure network time protocol (NTP)

Process Hardening

6

Restrict core dumps

7

Enable randomized virtual memory region placement

OS Hardening

8

Remove legacy services (e.g., telnetserver; rsh, rlogin, rcp; ypserv, ypbind; tftp, tftp-server; talk, talkserver)

9

Disable or remove server services that are not going to be utilized (e.g. FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.)

Network Security and Firewall Configuration

10

Firewall Configuration

Remote Administration Via SSH

11

Set SSH protocol to 2

12

Disable SSH root login

13

Set SSH permitemptypasswords to no

System Integrity and Intrusion Detection

14

Install and configure Fail2Ban

15

Install and configure AIDE

Anti-Virus Considerations

16

Install and enable anti-virus software

17

Configure daily scan