HiT SSL Server:
Flexible Encryption and Authentication
for SQL Network Traffic

HiT SSL Server is a standards-based encryption and authentication server to secure SQL data flows over TCP/IP networks. It prevents unauthorized access to data flows between external applications and DB2 servers. HiT SSL Server provides this security by transparently enabling the Secure Sockets Layer (SSL) v3.0 protocol between HiT SQL middleware products (JDBC, OLEDB, and ODBC) and the system where the SSL Server is installed. For example, to secure SQL data traffic between a web application server and a DB2 server, HiT SSL Server can be run at the DB2 server. The HiT JDBC/DB2, which includes necessary SSL client support, would be used on the web application server. Once configured, authentication and encryption services are enabled thereafter between the two machines.

The Secure Sockets Layer protocol (SSL) has emerged as the Internet standard for authentication/encryption and also uses the X.509 certification standard. HiT SSL Server uses the Digital Signature Standard (DSS), with the Digital Signature Algorithm (DSA) for data encryption. HiT SSL Server supports 3DES (128-bit encryption) and DES40 (4-bit encryption) security levels. Using a multi-threaded internal design, HiT SSL Server scales extremely well for high data traffic loads. Support for SSL version v3.0 ensures a mature, robust security mechanism.

Also included is the HiT SSL Toolbox, a set of easy-to-use graphical tools for certificate generation and encryption and decryption keys. Java command-line tools are also available. HiT SSL Toolbox can either be run on the SSL Server machine or from a separate system.

HiT SSL Server will run on any Java 1.2 or later platform.

Key Features			Benefits
Java architecture			Runs on heterogeneous hardware platforms
Industry SSL v3.x support			Latest generation encryption and authentication standard
Transparent to SQL middleware access			No modification required to application code
Data encryption using the Digital Signature Standard (DSS), with the Digital Signature Algorithm (DSA) and RSA algorithm			Standards-based, secure architecture
NIST FIPS 140-2 validated crypto and SSL functions			Approved US Government standards
Security for enterprise JDBC, OLE DB, and ODBC DB2 access			Supports secure, enterprise- wide application access
Graphical tools for certificate generation and management			Faster administration processing
Optional integration with certificates obtained from an external certificate authority			Flexible support for third- party security

System Requirements:

• Any Java 1.2 or later platform, including that running on Windows NT, Linux, Sun Solaris, IBM OS/390, IBM iSeries/AS400, and IBM RS/6000

For additional information, refer to the HiT SSL Server Guide included in the zip file of the doc directory in the HiT SSL Server download.