Previous Topic: URL Query String Logon MethodNext Topic: Enforcing a Logon Timestamp and Timeout

Platform Deployment Guide › iConsole Deployment › Post-deployment Tasks › Hide User Logon Credentials in the iConsole › Enforce Encrypted Logons

Enforce Encrypted Logons

In addition to SSL support, CA DataMinder also enables you to encrypt HTML POST form variables using Triple DES (Data Encryption Standard) or AES (Advanced Encryption Standard).

Use this additional encryption where SSL sessions can potentially be intercepted. For example, use this encryption to prevent ‘man-in-the-middle’ attacks where users are working remotely and creating traffic across the internet.

To enforce encrypted logons, edit this registry value in the Web registry key on the front-end Web server:

EnforceEncryptedLogon

Type: REG_DWORD

Data: Set this value to 1 to enforce encrypte logons.

Important! If you enforce logon encryption, the POST form variable supplied with the Web form logon method must be encrypted. If the POST form variable is not encrypted, the logon will fail.