Product Security

At TIBCO, security is our highest priority. You can be sure that TIBCO Messaging is secure based on our own high standards and the best practices of our infrastructure providers.

TIBCO® Messaging Quasar - Powered by Apache Pulsar™ offers logging, transport security, authentication and authorization, and compatibility with other products.

This section is useful to security officers, deployers, administrators, and purchasers.

Security Features

Apache Pulsar can be configured with the following security features and boundaries:

• Transport encryption using TLS:

  Apache Pulsar supports pluggable authentication mechanisms. TIBCO recommends to use TLS to encrypt the plain text traffic used by clients.

• Authentication and authorization:

  Apache Pulsar supports the following authentication providers:

  • TLS
  • JSON Web Token (JWT)
  • Athenz
  • Kerberos
  • OAuth 2.0
  • HTTP basic

  For more information about securing messages, see Pulsar security overview.

• Logging:

Apache Pulsar logs key activities. The security of log data requires an unbroken chain of secure connections. Your organization is responsible for protecting and reviewing logging files.

Product Connectivity

TIBCO® Messaging Quasar - Powered by Apache Pulsar™ supports several interconnecting components, and also connects with other TIBCO and third-party products. You can secure all connections within TIBCO Messaging. For more information about secure configurations, see the relevant TIBCO-supplied component's documentation.