Difference: APPXClientEncryption (14 vs. 15)

Revision 152008-09-18 - SteveFrizzell

Line: 1 to 1
 
META TOPICPARENT name="APPX500Features"

APPX Desktop Client Encryption

Line: 10 to 10
 Release 5.0.0 or higher of the APPX Desktop Client allows SSL encryption to optionally be enabled for "Remote" APPX Desktop Client sessions when connecting to APPX Server 5.0.0 or higher.  The APPX Desktop Client SSL encryption feature encrypts all data transmitted between the APPX Desktop Client and the APPX server including login ID, password, all session data, all reports printed by the client, and all files transferred between the client and the server.  The APPX Desktop Client can only establish an encrypted SSL connection with an APPX Server that has an APPX Login Manager that supports and that has been properly configured to accept SSL connection requests from the various types of APPX clients.  The APPX Login Manager on the APPX Server may be configured to require that the APPX Desktop Client must use SSL encryption.  Furthermore, the APPX Login Manager may require that the APPX Desktop Client identify itself by providing an acceptable SSL certificate [Note: This feature is not yet implemented by the APPX Desktop Client].

APPX Desktop Client Handshake

Changed:
<
<		When an APPX Desktop Client connects with an APPX Login Manager to establish a client session with an APPX Server, the first step is to complete a "handshake".  The handshake determines whether or not the connection is able to use SSL.
>
>		When an APPX Desktop Client connects with an APPX Login Manager to establish a client session with an APPX Server, the first step is to complete a "handshake".  The handshake exchanges version and configuration information to determine whether or not the connection is able to use SSL and whether or not the connection should use SSL.
  APPX Desktop Client versions prior to 5.0 are not able to connect using SSL.  If you want to use SSL, you must upgrade your APPX Desktop Client to version 5.0 or higher.  You must also upgrade your server to APPX Server version 5.0 or higher.  The following chart shows the types of connections that are technically possible for the various combinations of versions of the APPX Desktop Client and APPX Server.  Please note that while it is technically possible for an APPX Desktop Client version prior to 5.0 to connect to an APPX Server version of 5.0 or higher, this combination is not recommended or supported since upward compatibility of old APPX Desktop Client versions with newer APPX Server versions is not assured.  The APPX Desktop Client version should always be the same or higher than the APPX Server version with which a session is to be established.
Line: 24 to 24
 

SSLMode

  1. Required - When this option is specified, the APPX Desktop Client will attempt to establish an SSL connection with the APPX Login Manager on the APPX server.  If the APPX Login Manager is an older version that does not support SSL connections or if the APPX Login Manager is configured to not allow SSL connections, the client will display an error dialog informing the user that an SSL connection with the requested APPX server is not available.  In this case, the user has the option of cancelling the connection request or allowing the connection to proceed without enabling SSL encryption.
  2. Optional - This option is similar to the Required option.  However, in the event that an SSL connection cannot be established, the client will automatically connect without enabling SSL and without notifying the user.
Changed:
<
<
  1. Disabled - No SSL connections allowed, therefore no datastream encryption. If you are connecting to a 4.2.a or earlier build of APPX, then you might experience a brief (<=3 second) handshake upon connection.
  2. Pre43 - Do not perform any SSL notification to the target server. This can speed up connections to older builds of APPX Connection managers, such as appxdsvc.exe, winappxd, and appxd that did not have SSL capabilities.
>
>
  1. Disabled - This option is used to specify that a "clear text" connection is desired.  allowed, therefore no datastream encryption. If you are connecting to a 4.2.a or earlier build of APPX, then you might experience a brief (<=3 second) handshake upon connection.
  2. Pre43 - This option is used to specify that the Pre-5.0 Handshake protocol is to be used to initiate a "clear text" APPX Desktop Client connection with an APPX Server.  If a "clear text" connection cannot be established within 5 seconds, the connection attempt will fail.  This option is compatible with all versions of the APPX Login Manager including older versions such as appxdsvc.exe, winappxd, and appxd that did not have SSL capabilities.
 

SSLAnonAllowed

This preference determines whether or not the APPX Desktop Client is allowed to connect to an APPX Server that does not have an SSL certificate signed by a trusted authority such as Verisign or Thawte.

Line: 33 to 33
 
  1. False - The connection is not allowed

SSLMismatchAllowed

Changed:
<
<		This preference determines whether or not the APPX Desktop Client
>
>		If set to False, the user will be presented with an Error Dialog Window in the event that the requested type of connection cannot be established.False, the user is given the option of continuing with a different type of connection or cancelling.  For example, if SSLMode is set to Required but the server does not allow
 
  1. True
  2. False

SSLSelfSignedAllowed

View topic | History: r27 < r26 < r25 < r24 | More topic actions...
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback