SSL Visability Account Password Encryption

Article Id: 169131
Status: Published
Updated On: 13-05-2017 12:22
Legacy Id: TECH245957
Products:
SSL Visibility Appliance Software
Issue/Introduction:

The SSL Visibility user store is encrypted with a chain of AES 256-bit keys using tree data structure terminology:

  • the “leaf” of the chain encrypts the user store
  • each key in the chain is encrypted with its “parent”
  • the “root” of the chain is encrypted either with either
    • a password stored on the SSLV internal hard disk OR
    • a key stored on a remove USB memory stick.
The chain of keys is generated during the appliance bootstrap sequence at first power-up. At this time, the user chooses whether to protect the chain with an internal password, or a removable USB memory stick.