Use SSL

This section describes why SSL is a good choice for Health Record Locator.

Consider utilizing Application Server SSL service for the HRL application. The Health Record Locator application is a standard Java EE application and can utilize an industry standard security infrastructure and framework. There is no configuration required on the Health Record Locator application. The application Server (WebLogic) provides SSL service. For more information about configuring SSL to achieve SSL security for Health Record Locator, see the Application Server documentation.

When SSL or TLS is configured, use TLS_RSA_WITH_AES_128_CBC_SHA cipher instead of SSL_RSA_WITH_3DES_EDE_CBC_SHA for TLS authentication.