Rabi, You are mostly correct. However the setting that you need to set is this one:
Encrypt-Security-Policy:2 2 is the default = Encryption between the client and server is disabled. You need to set it to zero or one. 0: Encryption between the client and server is allowed, but not required. 1: Encryption between the client and server is required; unencrypted communication is not allowed. You may also want to set other related settings too. (including the one you indicated.) These are a few of the settings to consider. (And their default values based on v6.3 docs) Encrypt-Security-Policy: 2 Encrypt-Public-Key-Expire: 86400 Encrypt-Symmetric-Data-Key-Expire: 2700 Encrypt-Public-Key-Algorithm: 4 Encrypt-Data-Encryption-Algorithm: 0 HTH. -- Carey Matthew Black BMC Remedy AR System Skilled Professional (RSP) ARS = Action Request System(Remedy) Love, then teach Solution = People + Process + Tools Fast, Accurate, Cheap.... Pick two. On Wed, Sep 23, 2009 at 6:29 PM, Rabi Tripathi <[email protected]> wrote: > The release notes for Encryption product says that "standard" encryption for > communication between remedy client and server comes free with purchase of AR > Server, and that the encryption logic is built into the standard executables > for servers/clients. > > As opposed to "premium" and "performance" level of encryptions, which need to > be paid for, licensed and installed separately. > > On reading the doc, it appears that the free "standard" level of encryption > that everybody gets for free is NOT enabled by default, unless you take the > time to add this and other related lines in ar.conf: > Encrypt-Public-Key-Algorithm: 4 > > Did I get this right? > > If I did, has anybody enabled the "standard" encryption and found any > significant changes in performance of any client? > > Thanks. > --- > The guide I refer to above is: > BMC ® Remedy® Encryption Products 7.0 > Release Notes and Installation Guide > > http://documents.bmc.com/supportu/documents/16/76/61676/61676.pdf > > > > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > Platinum Sponsor:[email protected] ARSlist: "Where the Answers Are" > _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor:[email protected] ARSlist: "Where the Answers Are"
