Previous Topic: Communicating with Midrange Host Using TN5250

Next Topic: Monitoring Connection Status


Configuring SSL for CA Automation Point

Secure Socket layer (SSL) is a protocol for securing data transfer by applying cryptographic techniques for data authentication and encryption. CA Automation Point installs and uses an internal CA product called CA Socket Adapter, an OpenSSL application, to implement support for SSL. Under CA Automation Point, CA Socket Adapter is configured to use the Anonymous Diffie-Hellman (ADH) key exchange. The base Diffie-Hellman algorithm for key exchange is used without authenticating the remote TN3270 or TN5250 server. Therefore, certificates are not required to establish a secure connection. Data exchange is still encrypted according to cipher specifications negotiated between remote server and CA Socket Adapter.

Automation Point Desktop sessions with 3270 or 5250 connections may be configured to run using SSL. To configure, use Configuration Manager to enable SSL when specifying connection options for a 3270 or 5250 session definition.