Implementing ActiveSpaces Security

TIBCO ActiveSpaces® provides a comprehensive solution for security of the ActiveSpaces hardware and the data stored in the data grid.

  • Overview of ActiveSpaces Security
    TIBCO ActiveSpaces allows you to secure the information stored in the data grid by protecting both transport data and stored data. TIBCO ActiveSpaces security is provided for metaspaces that use TCP for discovery.
  • Security Domain Controllers
    A security domain controller is a TIBCO ActiveSpaces node that is dedicated to enforcing a security domain's defined security behavior for a metaspace associated with the security domain.
  • Security Policy Files
    A security policy file contains the security settings for one or more security domains. Security domain requestors use a security token file that you generate from a security policy file to connect to a metaspace contained in the Metaspace Access List for a security domain that is defined in the security policy file.
  • Security Domain Requestors
    A security domain requestor is a TIBCO ActiveSpaces node that requests security services from a security domain controller for a metaspace. Typically, a security domain requestor is just a normal TIBCO ActiveSpaces application that uses the security API when connecting to a metaspace associated with a security domain.
  • Security Token Files
    When a security domain requestor uses a security token file to connect to a metaspace, ActiveSpaces uses the contents of the security token to:
  • Transport Security
    TIBCO ActiveSpaces allows you to protect data being transported by preventing:
  • Restricting Transport Access
    TIBCO ActiveSpaces security allows you to restrict transport connections within a security domain to only “trusted” nodes.
  • Data Encryption
    The TIBCO ActiveSpaces security API allows you to define encrypted fields in a space.
  • Security Tracing and File Logging
    ActiveSpaces outputs security-related messages output as trace messages and to the TIBCO ActiveSpaces log file. You can control the level of the security messages, as with normal TIBCO ActiveSpaces tracing and logging. The following API methods control the level of security messages that are output to both the console and log file:
  • User Authentication
    TIBCO ActiveSpaces security allows you to authenticate the users of security domain requestors.
  • User Access Control
    TIBCO ActiveSpaces security provides user access control to the operations on a metaspace or space. User access control allows you to control the types of TIBCO ActiveSpaces functionality a user is allowed to perform. User access can be allowed or denied for the following permissions: