The McAfee ePO product guide will tell you available server setting to support your requirements, as it relates to authentication for example. Never seen anything specific on hardening.
I see, since ePO is on a server would you think that hardening a the server kind of covers that?
yes and you"d want to harden ePO server and SQL server.
Hardening implies a good understanding of the service but turning off services you don't use is a good basic example.
As far as maintaining currency, Mcafee releases its own tested updates to jre, apache, tomcat, etc...
Thanks for the info!