Chapter 8. Device Management

Encryption

These flexible encryption alternatives for keyboard/mouse, video, and virtual media data let you choose any combination of DES; 3DES; AES; RC4; or a Random cycle of any or all of them. Enabling encryption will affect system performance – no encryption offers the best performance; the greater the encryption the greater the adverse effect. If you enable encryption, the performance considerations (going from best to worst) are as follows:

ŠRC4 offers the least impact on performance; DES is next; the 3DES or

AES

ŠThe RC4 + DES combination offers the least impact of any combination

Private Certificate

When logging in over a secure (SSL) connection, a signed certificate is used to verify that the user is logging in to the intended site. For enhanced security, the Private Certificate section allows you to use your own private encryption key and signed certificate, rather than the default ATEN certificate.

Generating a Self-Signed Certificate

If you wish to create your own self-signed certificate, a free utility – openssl.exe – is available for download over the web. See Self-Signed Private Certificates, page 223 for details about using OpenSSL to generate your own private key and SSL certificate.

Obtaining a CA Signed SSL Server Certificate

For the greatest security, we recommend using a third party certificate authority (CA) signed certificate. To obtain a third party signed certificate, go to a CA (Certificate Authority) website to apply for an SSL certificate. After the CA sends you the certificate, save it to a convenient location on your computer.

Importing the Private Certificate

To import the private certificate, do the following:

1.Click Browse to the right of Private Key; browse to where your private encryption key file is located; and select it.

2.Click Browse to the right of Certificate; browse to where your certificate file is located; and select it.

3.Click Upload to complete the procedure.

Note: Both the private encryption key and the signed certificate must be imported at the same time.

137