Using Enhanced Security Features

Table 81

OCSP Settings

 

 

 

 

Option

 

Description

Ignore Failure to Respond

Not receiving a response does not indicate that a certificate has

 

 

expired or that it has been revoked. This option allows the ETEP to

 

 

proceed when a response to an OCSP query is not received in a

 

 

timely manner. The default is to ignore the failure to respond.

Check Certificate Chain

When checked, this option instructs the ETEP to use OCSP to

 

 

check the validity of every certificate in the responder’s chain of

 

 

trust. The default is unchecked.

OCSP URL

 

Specifies the URL to use for the OCSP responder.

 

 

 

Enabling and Disabling Strict Authentication

After you have installed certificates on each EncrypTight component, you can enable strict authentication. Strict authentication is a setting that affects communications between all EncrypTight components. Once you enable strict authentication on a component, it begins to use certificates to authenticate communications from devices that attempt to communicate with it. To use strict authentication system- wide, you must specifically enable it in the EncrypTight software, the ETKMSs, and each PEP in use.

To enable strict authentication in the EncrypTight software:

1In EncrypTight, select Edit > Preferences.

2Click ETEMS to expand the tree, and then click Communications.

3Click Use Strict Certificate Authentication for XML/RPC.

4Click OK.

To enable strict authentication on the ETKMSs, you need to edit the ETKMS properties file. The ETKMS properties file kdist.properties is located in the /opt/etkms/conf directory.

To enable strict authentication on the ETKMS:

1Log in directly on the ETKMS as root, or open an SSH session and su to root.

2Edit the kdist.properties file and set the strictCertificateAuth property to true. For example:

strictCertificateAuth=true

3Save and close the file.

4At the command line type service etkms restart

To enable strict authentication on PEPs:

1For each PEP, in the Appliance Manager, right-click on the PEP and select Configuration.

2In the Configuration editor, click the Features tab.

3Click Enable Strict Client Authentication.

4Click OK to close the warning message.

5Click OK to save and close the editor.

6Select all of the PEPs that you changed.

7Click Put Configuration.

292

EncrypTight User Guide

Page 290 Page 292
Page 291
Image 291
Black Box ET0100A, ET1000A manual Enabling and Disabling Strict Authentication, To enable strict authentication on the Etkms
Page 290 Page 292

EncrypTight, ET0100A, ET0010A, ET1000A specifications

The Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are advanced solutions designed for secure data transmission and network management, catering to modern enterprise needs. These tools integrate cutting-edge technologies to enhance connectivity, security, and efficiency within various environments.

The Black Box ET1000A is primarily a high-performance Ethernet over Twisted Pair (EoTP) solution. It enables users to extend Ethernet signals over long distances using existing twisted-pair cabling without sacrificing speed or reliability. With support for speeds up to 100 Mbps, this device is ideal for organizations looking to upgrade their existing infrastructure without extensive rewiring. Key features include plug-and-play installation, which simplifies deployment, and versatile compatibility with both legacy and modern ethernet networks.

The ET0010A model takes connectivity a step further by providing seamless integration with fiber optics. This device supports transmission distances that far exceed traditional copper solutions, making it a perfect fit for larger facilities or multi-building campuses. Its built-in Ethernet switch enhances network efficiency by providing multiple ports for device connectivity, thus facilitating greater data flow.

EncrypTight technology is a notable feature across these Black Box models, offering advanced encryption capabilities to safeguard sensitive data during transmission. With military-grade encryption protocols, EncrypTight ensures that corporate information remains secure from potential eavesdroppers. This technology is essential for businesses operating in regulated industries or that handle confidential customer information.

The ET0100A model combines intelligence with monitoring features to provide users with comprehensive network insights. It boasts built-in diagnostic tools that enable IT professionals to troubleshoot issues quickly and efficiently. Additionally, it features real-time performance monitoring, allowing users to analyze bandwidth usage and optimize network performance accordingly.

In conclusion, the Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are powerful tools that embody the latest in data transmission and network management technologies. With their unique features—including extended connectivity capabilities, robust encryption technologies, and real-time monitoring solutions—these devices cater to the growing demands of businesses seeking to enhance their network infrastructure while ensuring robust security and efficiency. Integrating these tools into any organization’s operations can fundamentally improve both performance and data protection, making them indispensable in today’s digital landscape.
Top Page Image Contents