|
Secure Web Access
|
Secure Web Access
SecureWeb™ enables you to connect securely to the Web-based
administration functions of a remote target system. Specifically,
you can manage your mainframe’s HMC (Hardware Maintenance Console)
remotely and securely. Unlike other products that encrypt the
connection to the target system but don’t provide adequate
authentication, SecureWeb not only ensures the security of the data
stream but also uses role-based authentication to give you
unparalleled control over who has access to a target system (or
systems) and what functions they can perform once connected.
SecureWeb authenticates a user with a user ID and password, using a
challenge-response method that never transmits the password from the
client system to the server. After establishing a connection, the
client sends the encrypted user ID to the server. The server
responds with a randomly generated challenge string. The client
encrypts the challenge string, using the client’s password as the
encryption key, and sends the encrypted string back to the server,
which decrypts it and compares the result to this user’s password.
If the comparison is successful, the server grants access to the
user. Since the password is never transmitted, sniffers or other
malware cannot compromise access to the target system.
|
|
