This Variable (VARA) object allows you to specify particular encryption and authentication methods. It is supplied in the system client 0 and can only be changed within this client because it contains advanced security settings which are valid throughout the whole AE system.
Note: Make sure that only users with the skills needed can access this variable thus avoiding that a specified encryption and/or authorization method is modified by accident.
This variable includes the following keys:
AUTHENTICATION
-
Description: Authentication method
-
Allowed values: NO, LOCAL, and LOCAL_REMOTE
-
NO: no authentication
-
LOCAL: server authentication
-
LOCAL_REMOTE: server and agent authentication
-
-
Default value: NO
-
Note: Additional steps are required to change the authentication method. For more information, see Changing the Authentication Method.
-
Restart required: Server
For more information, see Starting and Ending Server Processes.
ENCRYPTION
-
Description: Encryption method
-
Allowed values: NO, AES-128, AES-192, and AES-256
-
NO: no encryption method
-
AES-128: 128-bit key length
-
AES-192: 192-bit key length
-
AES-256: 256-bit key length
-
-
Default value: AES-256
-
Restart required: Server
For more information, see Starting and Ending Server Processes.
GSS_COMPATIBILITY
-
Description: Allows you to grant or deny access to the system when (old) GSS agents authenticated with low entropy keys try to connect.
Note: This setting is only relevant when you use the LOCAL agent authentication method, see Authentication Methods. Keep in mind that changing the authentication method to LOCAL_REMOTE does not affect the entropy level of the authentication key.
-
Allowed values: YES and NO
-
YES: Agents authenticated with low or high entropy keys can access the system
-
NO: Only agents authenticated with high entropy keys can access the system
-
-
Default value: YES
-
Restart required: Server
For more information, see Starting and Ending Server Processes.
See also: