Contents      Dochome     
Sun Java(TM) System Administration Server Online Help



Encryption Tab of Administration Server Configuration

Use this tab to configure the Secure Socket Layer (SSL) in the Administration Server.

Enable SSL for this server. Select this checkbox to enable SSL communications for the directory. Clear the checkbox to disable SSL. When SSL is enabled, other servers may establish secure communications with the Administration Server.

Use this cipher family. When you have enabled SSL, select the checkbox next to the cipher family or families you want the server to use for SSL communications.

Sun Java System Server Console currently supports two cipher families: RSA and Fortezza. The internal security device supports only RSA. If you're using a Fortezza card, you'll also see the Fortezza cipher family listed here.

Cipher Family

You may set the following options for each cipher family.

Security Device. Select the device that will perform encryption computations. By default, data is encrypted internally in the software. Other choices in this list are available only if you are using an external hardware device.

Certificate. Select the certificate you want the server to use from the list of installed certificates. You must have a certificate installed on your system to use SSL. See "Obtaining and Installing Server Certificates" in Chapter 11 of the Directory Server Administration Guide.

Settings. Click this button to open the Encryption Preferences dialog, where you can select which ciphers you want the server to use.

Client Authentication

The options under this heading determine whether or not clients must authenticate with a certificate over SSL.

Disable Client Authentication. Select this option if you do not want the Administration Server to perform client authentication.

Require Client Authentication. Select this option if you want the Administration Server to require client authentication with a certificate over SSL.

This is the most secure option because each Sun Java System Server Console administrator will be prompted for a certificate when logging in. Therefore, all administrators must present trusted certificates before they can perform management tasks. Even if an intruder obtains an administrator name and password, they will not have a valid certificate (one issued by a trusted CA) to gain access to your server topology.


Contents      Dochome     
Copyright 2005 Sun Microsystems, Inc. All rights reserved.