Enterprise Console cannot protect clients if the webserver accepts anonymous requests

If the primary server update location is a webserver and you have not entered a username and a password (i.e. the webserver is accepting anonymous requests), you cannot use Enterprise Console (SEC) to protect clients.