Security

ActiveSpaces security provides the following features:

  • Authentication and Authorization
  • Transport Encryption

ActiveSpaces lets you:

  • Prevent unauthorized access to your data grid.
  • Secure data during transmission within the data grid .

ActiveSpaces allows you to authenticate the users of the data grid. This feature uses username and password authentication. Each ActiveSpaces process authenticates itself to the secure realm server using credentials contained in a password file. Additionally, the ActiveSpaces processes use a trust file to trust a secure realm server. For more information, see Enabling Authentication.

Network communication between processes in a data grid can be encrypted to further protect your data from packet sniffing by unauthorized processes. For more information, see Enabling Encryption.

  • Enabling Authentication
    Follow these steps to enable authentication and authorization in ActiveSpaces.
  • Enabling Encryption
  • Password File
    If the realm server enables authentication and authorization, then you must configure credentials for ActiveSpaces processes such as tibdgnode, tibdgkeeper, tibdgproxy, and tibdgadmind.
  • Trust File
    A secure realm server automatically generates a trust file. The content of the trust file instructs clients to trust the realm server's certificate. Administrators and developers coordinate to supply the trust file to application programs.