Previous Topic: Communication Protocol SecurityNext Topic: Agent to Manager Communication Security

Securing CA NSM › Communication Protocol Security › Encryption Levels

Encryption Levels

As data traverses the network, it is important to understand the encryption methodologies in place for security compliance so that you can be assured that data is protected appropriately.

Component

Encryption Level

Comments

CAICCI

SSL 80-bit (See Note 1)

Open SSL

Unicenter Notification Services

SSL (See Note 1)

Open SSL

ORB

48-bit

DES (See Note 2)

SNMPv3

48-bit

DES (See Note 2)

CAM

SSL

SSA 2.0 (See Note 3)

DIA

SSL

Open SSL

Note 1: CAICCI comes preconfigured to let you use the strongest encryption possible by downloading the algorithms from the external OpenSSL library. OpenSSL uses two forms of encryption: an asymmetric algorithm to establish a connection, and a symmetric algorithm for the duration of a connection after it has been established. The strongest asymmetric algorithm we recommend using is RSA with a 2048-bit key. The strongest symmetric algorithm we recommend using is AES with a 256-bit key.

Note 2: DES encryption is built into the code or product module.

Note 3: For more information about configuring CAM to use SSL encryption, see the CAM section in the chapter "Using Ports to Transfer Data."