Secure network communication in Automation Point

Products

• Automation Point

Issue/Introduction

1. Does Automation Point use any cryptography functions such as Data Encryption / Decryption, Digital Signature, Certificates, Secrets, Keys, Hashing, RNG, Crypto modules, TLS, HTTPS, SFTP or any other form of network communication?
   
   
2. Broadcom Socket Adapter is configured to use the Anonymous Diffie-Hellman (ADH) key exchange. The base Diffie-Hellman algorithm for key exchange is used without authenticating the remote TN3270 or TN5250 server. Where and how are the Keys stored?

 

 

 

 

Environment

Automation Point R11.7 in Windows 22 server

Resolution

1. APViewer, (the remote view function) - uses an encoded cryptographic algorithm from OPEN SSL3 library, without need for DLS handshake.
   
   
2. Under Automation Point, Socket Adapter is configured to use the Anonymous Diffie-Hellman (ADH) key exchange. The base Diffie-Hellman algorithm for key exchange is used without authenticating the remote TN3270 or TN5250 server. Therefore, certificates are not required to establish a secure connection. Data exchange is still encrypted according to cipher specifications negotiated between remote server and Broadcom Socket Adapter.

 

 

Additional Information

For further information please refer - Configuring SSL for Automation Point