Using Enhanced Security Features

To enable CAC Authentication on the ETEP:

1Verify that strict authentication is enabled on the ETEP. If strict authentication is not enabled when you enable Common Access Card Authentication, you can lose the ability to communicate with the ETEP.

2In the Appliance Manager, right-click on the ETEP and select Configuration from the shortcut menu.

3Click the Advanced tab.

4Click XML-RPC Certificate Authentication.

5Click OK.

6Push the configuration to the ETEP.

To enable CAC Authentication on the ETKMS:

1Log in directly on the ETKMS as root, or open an SSH session and su to root.

2Edit the kdist.properties file and add or edit the following lines: enableCNAuthCheck=true cnAuthFilePath=../keys/cnAuth.cfg

3Save and close the file.

4Repeat steps 1 to 3 on the backup ETKMS.

NOTE

If you use a backup ETKMS, you also need to add the common name for the certificate used by the backup ETKMS to the list on the primary ETKMS and vice-versa.

You must also enable strict authentication by including the line strictCertificateAuth=true.

To enable CAC Authentication in EncrypTight:

1In the EncrypTight software, choose Edit > Preferences.

2In the tree, expand the ETEMS item.

3In the tree, click Login.

4Click Enable Common Access Card Authentication.

5Click OK.

When Common Access Card Authentication is enabled, you must insert a valid CAC into the reader before starting the EncrypTight software. When you start the EncrypTight software:

When you open the EncrypTight software, you are prompted for your EncrypTight user name.

The software for the reader will prompt you for your PIN.

If user authentication is enabled, EncrypTight prompts you for your password.

If your EncrypTight deployment includes ETEPs running software version 1.6 or later, entering a password is optional.

If your deployment includes ETEPs with software previous to 1.6, or other models of PEPs, you must enter a valid password.

If user authentication is not enabled, you are logged into the system immediately. For more information about working with EncrypTight user accounts, see “Managing EncrypTight Users” on page 61.

296

EncrypTight User Guide

Page 295
Image 295
Black Box ET0100A, ET1000A, ET0010A manual To enable CAC Authentication on the Etep, Click XML-RPC Certificate Authentication

EncrypTight, ET0100A, ET0010A, ET1000A specifications

The Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are advanced solutions designed for secure data transmission and network management, catering to modern enterprise needs. These tools integrate cutting-edge technologies to enhance connectivity, security, and efficiency within various environments.

The Black Box ET1000A is primarily a high-performance Ethernet over Twisted Pair (EoTP) solution. It enables users to extend Ethernet signals over long distances using existing twisted-pair cabling without sacrificing speed or reliability. With support for speeds up to 100 Mbps, this device is ideal for organizations looking to upgrade their existing infrastructure without extensive rewiring. Key features include plug-and-play installation, which simplifies deployment, and versatile compatibility with both legacy and modern ethernet networks.

The ET0010A model takes connectivity a step further by providing seamless integration with fiber optics. This device supports transmission distances that far exceed traditional copper solutions, making it a perfect fit for larger facilities or multi-building campuses. Its built-in Ethernet switch enhances network efficiency by providing multiple ports for device connectivity, thus facilitating greater data flow.

EncrypTight technology is a notable feature across these Black Box models, offering advanced encryption capabilities to safeguard sensitive data during transmission. With military-grade encryption protocols, EncrypTight ensures that corporate information remains secure from potential eavesdroppers. This technology is essential for businesses operating in regulated industries or that handle confidential customer information.

The ET0100A model combines intelligence with monitoring features to provide users with comprehensive network insights. It boasts built-in diagnostic tools that enable IT professionals to troubleshoot issues quickly and efficiently. Additionally, it features real-time performance monitoring, allowing users to analyze bandwidth usage and optimize network performance accordingly.

In conclusion, the Black Box ET1000A, ET0010A, EncrypTight, and ET0100A are powerful tools that embody the latest in data transmission and network management technologies. With their unique features—including extended connectivity capabilities, robust encryption technologies, and real-time monitoring solutions—these devices cater to the growing demands of businesses seeking to enhance their network infrastructure while ensuring robust security and efficiency. Integrating these tools into any organization’s operations can fundamentally improve both performance and data protection, making them indispensable in today’s digital landscape.