Configure/Enable Security Features Overview - Comtrol DeviceMaster LT User Manual

Configure/Enable Security Features Overview

Configure/Enable Security Features Overview
58 - DeviceMaster LT Security
You can enable DeviceMaster LT security features the web page (SocketServer or
the NS-Link version). Key and Certificate Management must be done using the
Security tab in the DeviceMaster LT web pages.
If you want secure COM ports, you must also Enable SSL Mode and enter any
applicable server or client certificates in the NS-Link device driver for Windows.
See Device Driver (NS-Link) Installation
The following illustration shows the Security Configuration area of the Security
tab and are discussed in the following table.
Security
Option
If Secure Data Mode is enabled TCP connections which carry data
to/from the serial ports will be encrypted using SSL or TLS
security protocols. This includes the following:
• TCP connections to the per-serial-port TCP ports (default is
8000, 8001, 8002, and so forth) are encrypted using SSL/
TLS.
• TCP connections to TCP Port 4606 on which the
DeviceMaster LT implements the Comtrol proprietary serial
driver protocol are encrypted using SSL/TLS.
Enable Secure
• Since SSL/TLS can not be used for either UDP data streams
Data Mode
or for the Comtrol proprietary MAC mode Ethernet driver
protocol, both UDP and MAC mode serial data transport
features are disabled.
• In order to minimize possible security problems, e-mail and
RFC1006 features are also disabled in Secure Data mode.
In addition to encrypting the data streams, it is possible to
configure the DeviceMaster LT so that only authorized client
applications can connect using SSL/TLS. See the
Authentication
on Page 29.
Description
discussion on Page 54 for details.
DeviceMaster LT User Guide: 2000586 Rev. B
Client