User Guide

4 7signal Sapphire Connectivity 12
7signal Ltd, Panuntie 6, FI-00620 HELSINKI, FINLAND, [phone], [e-mail], www.7signal.com
7signal Sapphire Deployment Guide Release 3.0
• Eye - Carat
Eye server certificate and CA signature are in file called server.pem. The client
counterpart is stored in the Carat server in file carat.keystore (while effectively it is a
truststore).
• Carat – Carat GUI and Carat - Loupe
The server certificate resides in file called 7signal.keystore. The client counterpart
resides in file named 7signal.truststore. Loupe resides in the same host and most
probably in the same file system than Carat itself. In case of GUI the file is any
computer that has GUI installed.
• Loupe – browser
The web-app identifies itself with a file named loupe.keystore. The counterpart is not
provided by 7signal but because of commonplace browser infrastructure it is not
necessary.
Usage of encryption files
Every customer has individual set of certificates, it is not possible to use the delivered
certificates to decrypt traffic of other 7signal Sapphire systems.
Q: Where can I find my certificates? A: All the customer certificates are located in
the certificates CD and certificate passwords in password sheet.
It is neither necessary nor encouraged to handle the certificate container files. Install and
upgrade processes of 7signal Sapphire take care of all the typical cases. In untypical cases the
7signal staff shall be involved with all the help necessary.
4.3 Supportive connections
4.3.1 SSH for Eye
In the normal course of operation no ssh connection is required. However, during complex
deployments the analysis opportunities in Eye shall justify such a connection. Also, Eye
firmware and certificates may be managed with ssh. The ssh traffic is inherently secure.
4.4 Bandwith requirements
NOTE: the volume estimates are suggestive and vary based on the configuration.
4.4.1 Eye – Sonar
From
To
Medium
Traffic
motivator
Volume
estimate
Major factor
Eye
Sonar
Wlan
Automated
test engine
and
interactive
testing by
Low, each
request is a few
hundred bytes.
Eye acts as one
The test profile that the Eye
is running.
In case of MOS test VoFi
traffic is transmitted as long