- 20 -
2.7
Security Settings
There are altogether nine (3 x 3) possible combinations of Viewer Security Password Policies that
are available for a flexible adaptation to your security needs. The administrator can choose an optimized
combination of user password policy and SSL/PKI Authentication according to his security and convenience
concerns.
User Password Policy
No
password
Global
Password
User-specific
Password
No SSL-No PKI N – N – N
G – N – N
U – N - N
SSL – No PKI N – S – N
G – S – N
U – S - N
SSL / PKI
Authentication
SSL - PKI N – S – P
G – S – P
U – S - P
G – Global Password U – User-specific Password
S – 256-bit SSL Encryption
P – 1024-bit PKI Authentication
N – Not available
Open the Security page of the PRIMA IP web management interface.
2.7.1 Select a User Password Policy
PRIMA IP offers three types of password policies.
1.
No Password
2.
Global Password
3.
User Password
No Password:
the viewer does not prompt you for any password. Anyone who has a viewer and passes the
security level check of the viewer can establish the connection.
Global Password:
the viewer prompts you for a global password, which is used by all who want to make
viewer connections to PRIMA IP.
User Password:
the viewer prompts you with user-specific password. With this setting, each login user is
checked against his or her corresponding password before allowing viewer connection.
Click Store Settings to validate your selection. Go to the Apply Setting page and click the Restart Server
button to apply your settings.
2.7.2 Select a Security Level for Viewer Connection
There are three security levels for choice:
•
Level 1: No encryption (No SSL)
•
Level 2: 256-bit encryption, no user certificate required for user authentication
•
Level 3: 256-bit encryption, user certificate required for authentication (PKI)
Security level 1:
provides no security and must be reserved for internal LAN connections.
Security level 2:
provides usual secure SSL connection with encryption for mouse, keyboard, and video, but
uses no PKI-authentication. The viewer identifies that PRIMA IP is a PRIMA IP device and everything is
encrypted with an ephemeral 256-bit key. The user authentication is based on a user name and password. It is
the recommended default security level. It is flexible because you can connect to PRIMA IP from any
computer, provided you know your user name and password.
