UCA Server 6 - 57
Directory Level Password Protection for Sensitive Web Services
Some of the methods/actions available through the UCA Optional API Web Services are worthy of additional
protection. This additional protection is provided by requiring a user name and password to execute the methods.
The virtual directory that contains these Web Services is protected by Windows Basic authentication. In order to
execute these methods from an external program, the user must supply a valid user name and password for the
UCA machine. Because Windows Basic authentication sends user name and password to the server in the clear, it
is recommended that SSL be enabled for the ServerManagement application, if it is to be used.
Encryption/Decryption of the UCA Server Configuration Files
To protect information found in the UCA server config files, sections within the files are encrypted during the install.
This encryption uses the RSAProtectedConfigurationProvider. This provider uses the RSA public key encryption to
encrypt and decrypt data. To ease in the decryption of the files for maintenance purposes, a few batch files are
provided. They are found in C:\Program Files\Motorola\UCA Server\Utilities. Decrypt.bat and Encrypt.bat encrypts
and decrypts the various config files associated with the UCA server. Decrypt.bat should not be deployed to a
production environment for obvious reasons. In addition, keep in mind that because of the way the files are
encrypted, they are tied to the machine on which they are encrypted. They cannot be unencrypted or used on
another machine.
Encryption of Passwords Stored in the UCA Database
To protect passwords found in the UCA server database, they are encrypted before they are stored. The
passwords are encrypted using Microsoft Cryptographic Service Provider.
Summary of Contents for CA50
Page 1: ...CA50 UCA Client Server Developer User Guide ...
Page 2: ......
Page 3: ...CA50 UCA Client Server Developer User Guide 72E 93914 02 Revision A November 2009 ...
Page 18: ...xvi CA50 UCA Client Server Developer User Guide ...
Page 24: ...xxii CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 30: ...1 6 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 34: ...2 4 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 48: ...3 14 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 106: ...4 58 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 109: ...UCA Client Application on the CA50 5 3 Page intentionally blank ...
Page 110: ...5 4 CA50 UCA Client Server Developer User Guide ...
Page 135: ...UCA Server 6 25 Figure 6 30 Installing Prerequisites Figure 6 31 SQL Server Setup ...
Page 200: ...7 32 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 284: ...9 56 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 302: ...10 18 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 350: ...11 48 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 358: ...12 8 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 418: ...A 6 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 436: ...B 18 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 478: ...E 12 CA50 UCA Client Server Developer User Guide 6 7 8 9 10 11 ...
Page 488: ...F 4 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 492: ...G 4 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 510: ...I 14 CA50 UCA Client Server Developer User Guide Page intentionally blank ...
Page 538: ...Index 12 CA50 UCA Client Server Developer User Guide ...
Page 540: ......
Page 541: ......