SEH primos, Руководство пользователя

Страница: 47 / 78

primos User Manual Security
43
6.1 How to Define the Encryption Strength for SSL/TLS Connections
The following connections to and from primos can be encrypted via SSL/TLS:
• Web access to the primos Control Center: HTTPS (

45)
• print data transmission: IPPS and Secure AirPrint (

33)
Encryption
strength
The encryption strength and thus the safety of the connection is defined via the
encryption protocol and level.
Protocol The encryption protocols SSL (Secure Sockets Layer) and its successor TLS (Transport
Layer Security) are used to encrypt the connections.
Encryption
Level
Each encryption level is a collection of so-called cipher suites. A cipher suite is a
standardized sequence of four cryptographic algorithms that are used to establish a
secure connection. Depending on their cipher strength, cipher suites are grouped to form
an encryption level. Which cipher suites are supported by primos, i.e. are part of an
encryption level, depends on the SSL/TLS protocol used.
The following encryption levels can be selected:
• Any : The encryption is automatically negotiated by both communicating parties. The
strongest encryption supported by both parties will always be chosen.
• Regular
• High : Only cipher suites with an strong encryption are used. (Slow data transfer)
Establishing
Connections
When establishing a secure connection, the protocol to be used and a list of supported
cipher suites is sent to the communicating party. A cipher suite is agreed upon that will
be used later on. The strongest cipher suite that is supported by both parties will be used
by default. If the communication partner does not support the protocol selected and/or
if there is no cipher suite that is supported by both parties, no SSL/TLS connection will be
established.
Warning
The communicating partners of primos (e.g. browser) must support the protocol
selected and the cipher suites of the selected encryption level in order to
successfully establish a connection. If problems occur, select different settings or
reset the parameters of primos; see:

62.
Note
If you set 'Any' for encryption protocol and level, they will be negotiated automatically by
both communicating parties. With these settings, the chances that a secure connection