ATEN Technology KN4140V Switch User Manual


 
Chapter 8. Device Management
137
Encryption
These flexible encryption alternatives for keyboard/mouse, video, and virtual
media data let you choose any combination of DES; 3DES; AES; RC4; or a
Random cycle of any or all of them. Enabling encryption will affect system
performance – no encryption offers the best performance; the greater the
encryption the greater the adverse effect. If you enable encryption, the
performance considerations (going from best to worst) are as follows:
RC4 offers the least impact on performance; DES is next; the 3DES or
AES
The RC4 + DES combination offers the least impact of any combination
Private Certificate
When logging in over a secure (SSL) connection, a signed certificate is used to
verify that the user is logging in to the intended site. For enhanced security, the
Private Certificate section allows you to use your own private encryption key
and signed certificate, rather than the default ATEN certificate.
Generating a Self-Signed Certificate
If you wish to create your own self-signed certificate, a free utility –
openssl.exe – is available for download over the web. See Self-Signed Private
Certificates, page 223 for details about using OpenSSL to generate your own
private key and SSL certificate.
Obtaining a CA Signed SSL Server Certificate
For the greatest security, we recommend using a third party certificate
authority (CA) signed certificate. To obtain a third party signed certificate, go
to a CA (Certificate Authority) website to apply for an SSL certificate. After
the CA sends you the certificate, save it to a convenient location on your
computer.
Importing the Private Certificate
To import the private certificate, do the following:
1. Click Browse to the right of Private Key; browse to where your private
encryption key file is located; and select it.
2. Click Browse to the right of Certificate; browse to where your certificate
file is located; and select it.
3. Click Upload to complete the procedure.
Note: Both the private encryption key and the signed certificate must be
imported at the same time.
kn2124v-4132.book Page 137 Tuesday, January 12, 2010 5:08 PM