Overview: Security Services

Security services for Management & Control Services (MCS) provides MCS with a secure port that implements Secure Sockets Layer (SSL) 3.0 security and Transport Layer Security (TLS) 1.0 support. Using security services, MCS can support both secured and unsecured connections, depending on the encryption settings you specify.

SSL can provide secured connections between MCS and client computers. These connections are used when users access the MCS console with an HTTPS connection to display the MCS console and access configurations or presentations stored on the MCS server. SSL via security services in MCS is not used when connecting to the host through a session or presentation, although a direct SSL connection to the host can be specified when the underlying application is created.

For information about using SSL connections in EXTRA! X-treme, see How to Connect to the Host using SSL and Express Logon.

Security Services Features

Security services provides the following features:

Security services provides authenticated and encrypted sessions between Management & Control (MCS) and its clients.

For hosts that do not support SSL, you can use security services to provide SSL connections to clients outside of your firewall. For example, you can use security services to pass secured host traffic to clients over the Internet, and forward the traffic unencrypted to the hosts inside the firewall. It can also be used to filter client requests, allowing access only to authorized hosts.

Alternatively, you can configure a client for a direct connection to a host, either secured or unsecured, depending on your host's security support. A configuration or presentation can be downloaded from MCS, after which MCS is bypassed and all client communications are directly with the host.

Related Topics
Bullet Setting Up Centralized Management, Overview
Bullet Authenticating MCS Users
Bullet Configuring Security Services
Bullet SSL Certificates, Overview
Bullet Obtaining and Installing a Server Certificate
Bullet Obtaining and Installing Client Certificates
Bullet How to Connect to the Host using SSL and Express Logon