i5/OS and OS/400 (5722-SS1): Architecture 519
Draft Document for Review October 18, 2004 5486OpS.fm
See Tips and Tools for Securing Your iSeries, SC41-5300, for information about
iSeries security implementation.
Network Security
i5/OS and OS/400 includes many ways to secure network connections and
transactions between other servers and clients. The strategic methods include:
Secure Sockets Layer
SSL has become the industry standard for enabling applications for secure
communication sessions over an unprotected network such as the Internet.
SSL involves two protocols:
–
Record protocol: This protocol controls the flow of the data between the
two endpoints of an SSL session.
–
Handshake protocol: This protocol authenticates one or both endpoints of
the SSL session and establishes a unique symmetric key, which is used to
generate keys to encrypt and decrypt data for that SSL session.
Digital Certificate Management
A digital certificate is an electronic credential to establish proof of identity in
an electronic transaction. Digital certificates are increasingly used to provide
enhanced network security measures. They are essential to configure and
use the SSL to secure connections between users and server applications
across an untrusted network, such as the Internet, by protecting such key
data as user names and passwords. Many iSeries services and applications
(including FTP, Telnet, and HTTP Server for iSeries) provide SSL support to
ensure data privacy.
i5/OS and OS/400 provide extensive digital certificate support to use digital
certificates as credentials with SSL or for client authentication in both SSL
and virtual private network (VPN) transactions. Digital certificates can also
sign objects, making it possible to detect changes or possible tampering to
object contents.
The Digital Certificate Manager (DCM) allows the creation and management
of certificates on the iSeries and those obtained from another Certificate
Authority (CA).
Enterprise Identity Mapping (EIM)
EIM for iSeries is the i5/OS and OS/400 implementation of an IBM
infrastructure intended to solve the problem of managing multiple user
registries across an enterprise. The need for multiple user registries evolves
into a large administrative problem that affects users, administrators, and
application developers. EIM enables inexpensive solutions for easier
management of multiple user registries and user identities in your enterprise.
To Next Page
Loading...
Need help?
General