Knowledgebase / SPX/AG / SSL - Secure Sockets Layer / PKI server (CA or RA) is used for authentication. Can Array SP bypass login and talk to the PKI server for the authentication?


Add comment
Name:
Email:
Comment: *
(Use BBcode - No HTML)


PKI server (CA or RA) is used for authentication. Can Array SP bypass login and talk to the PKI server for the authentication?
The Array SP can do both login/password as well as PKI. It is possible to simply use client side certificates and disable the login/password process thus providing security exclusively through SSL certificates. My personal preference, however, is to suggest using a combination of both.
 
The Array SP does not directly interface with PKI systems through protocols such as OCSP; however the Array SP can be configured to periodically pull in a CRL via HTTP.




Array Networks, Inc.