Security

ActiveSpaces security is based on the security features of TIBCO FTL.

The following security features are provided:

  • Transport encryption
  • Authentication and authorization
Transport encryption can be used without authentication and authorization. Transport encryption is used to encrypt any network communication between the processes of your data grid to protect that communication from packet sniffing. For more information, see Enabling Transport Encryption on a Data Grid.

While you can use authentication and authorization without transport encryption, TIBCO recommends that you use transport encryption to securely use authentication and authorization. Authentication and authorization uses user names and passwords to authenticate the users of the data grid and prevent unwanted users from accessing the data grid. When authentication and authorization is enabled, each ActiveSpaces process authenticates itself to a secure realm service using the credentials in the password file. For more information, see Authentication and Authorization.

  • Enabling Transport Encryption on a Data Grid
    ActiveSpaces transport encryption is based on the transport encryption of TIBCO FTL.
  • Trust File
    With TIBCO FTL 6.1 or later, a trust file is generated using the --init-security command line option of tibftlserver. The content of the trust file instructs clients to trust the realm service's certificate. Administrators and developers coordinate to supply the trust file to application programs.
  • Authentication and Authorization
    ActiveSpaces authentication is based on the authentication support of TIBCO FTL.