Server Install Checklist



Server

Server Checklist

Step

√

To Do

Preparation

1

Install server image

2

Change default shell

3

Disable AppArmor and APPort

System Update

4

Update with the latest updates

5

Configure automatic updates

6

Configure network time protocol (NTP)

Process Hardening

7

Restrict core dumps

8

Enable randomized virtual memory region placement

OS Hardening

9

Remove legacy services (e.g., telnetserver, rsh, rlogin, rcp, ypserv, ypbind, tftp, tftp-server, talk, talkserver)

10

Disable or remove server services that are not going to be utilized (e.g., FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.)

Network Security and Firewall Configuration

11

Firewall configuration

Remote Administration Via SSH

12

Set SSH protocol to 2

13

Disable SSH root login

14

Set SSH permitemptypasswords to no

System Integrity and Intrusion Detection

14

Install and configure Fail2Ban

15

Install and configure AIDE

Anti-Virus Considerations

16

Install and enable anti-virus software

17

Configure daily scan