Previous Topic: Using the encUtilCmd UtilityNext Topic: X.509 Certificates


Certificate Management

In the Extended Network Connectivity (ENC) infrastructure, all inter node communications are secured using the standard transport layer security (TLS) protocol. This protocol provides confidentiality, integrity, and mutual authentication.

The authentication portion of the TLS protocol is provided by the use of digital certificates and public-private key cryptography. The confidentiality is provided by symmetric key cryptography.

The following illustration shows the inter node connections between the ENC components in an ENC infrastructure:

Illustration showing the inter node connections in an ENC infrastructure

All of the inter node connections in the ENC infrastructure are protected by TLS authentication. Authentication is always mutual: the initiator of a connection authenticates to the responder, and the responder authenticates to the initiator. This allows the ENC infrastructure to validate computers connecting to it, and also the ENC Clients to feel secure to whom they are connecting.