Implementation Guide › Changing Communication Encryption Methods › SSL, Authentication, and Certificates › Enable SSL Encryption

Enable SSL Encryption

You configure encryption settings when you install CA Access Control. After installation, you can use the sechkey utility to change SSL encryption. You may also need to change the value of configuration settings.

Important! To avoid communication problems, use the same encryption method on all computers that run CA Access Control components.

To enable SSL encryption

1. Stop CA Access Control.

   If you are changing the encryption settings on a CA Access Control Enterprise Management Server, also stop the CA Access Control Web Service.

2. Change the value of the communication_mode configuration setting in the crypto section to one of the following:

   all_modes

   Specify this value if you want to enable both symmetric and SSL encryption. This value lets the computer communicate with all CA Access Control components.

   Note: If you specify this value, CA Access Control uses SSL encryption each time that it tries to communicate with another CA Access Control component. If SSL fails, it then uses symmetric encryption. This value lets you migrate your CA Access Control deployment from a symmetric encryption environment to an SSL encryption environment.

   use_ssl

   Specify this value to enable SSL encryption only. This value lets the computer communicate with only the CA Access Control components that use SSL encryption.

   Note: (Windows) If you are working with a third-party program that uses the CA Access Control SDK, the crypto section is located at the CA Access Control SDK registry path that you defined during installation.

3. (Recommended) Configure SSL communication to do one of the following:
   • Use third-party root and server certificates.
   • Use a server certificate you generate from a third-party root certificate.

   Note: If you do not configure SSL encryption further, you can use the default CA Access Control X.509 certificates to encrypt and authenticate communication between CA Access Control components. However, we recommend that you change the default certificates instead.

4. Start CA Access Control:
   • If you are changing the encryption settings on a CA Access Control Enterprise Management Server, also start the CA Access Control Web Service.
   • If you are working with a third-party program that uses the CA Access Control SDK, restart the process that uses the CA Access Control SDK.

   SSL encryption is enabled.

More information:

crypto

crypto