Configuring Link-Level Encryption

e-docs > Tuxedo > Using Security in CORBA Applications > Configuring Link-Level Encryption

Using Security in CORBA Applications

Configuring Link-Level Encryption

This topic includes the following sections

Understanding min and max Values

Before you can configure LLE for your CORBA application, you need to be familiar with the LLE notation: (min, max). The defaults for these parameters are:

For min: 0
For max: Number of bits that indicates the highest level of encryption possible for the installed LLE version

For example, the default min and max values for the Domestic LLE version are (0, 128). If you want to change the defaults, you can do so by assigning new values to min and max in the UBBCONFIG file for your application.

Verifying the Installed Version of LLE

Before setting the min and max values for your CORBA application, you need to verify what version of LLE is installed on your machine. You can verify the LLE version installed on a machine by running the tmadmin command in verbose mode as follows:

tmadmin -v

Key lines from the BEA Tuxedo license file (lic.txt) appear on your computer screen, similar to information in Listing 5-1. The entry 128-bit Encryption Package indicates that the Domestic version of LLE is installed.

Listing 5-1 LLE Licence Information

INFO:	BEA Engine, Version 2.4
INFO:	Serial: 212889588, Expiration 2000-3-15, Maxusers 10000
INFO:	Licensed to: ACME CORPORATION
INFO:	128-bit Encryption Package

BEA Tuxedo license files are located in the following directories:

Windows 2000

%TUXDIR%\udataobj\lic.txt

UNIX

$TUXDIR/udataobj/lic.txt

Configuring LLE on CORBA Application Links

To configure LLE in CORBA applications, you need to set the MINENCRYPTBITS and MAXENCRYPTBITS parameters in the UBBCONFIG file for each CORBA application participating in the network connection, as follows:

The MINENCRYPTBITS parameter specifies that at least the defined number of bits are meaningful.
The MAXENCRYPTBITS parameter specifies that encryption should be negotiated up to the defined level.

The possible values for the MINENCRYPTBITS and MAXENCRYPTBITS parameters are 0, 40, and 128. A value of zero means no encryption is used, while 40 and 128 specify the number of significant bits in the encryption key.

Load the configuration file by running tmloadcf. The tmloadcf command parses UBBCONFIG and loads the binary TUXCONFIG file to the location referenced by the TUXCONFIG variable.