User's Manual

3 7signal Sapphire Connectivity 6
7signal Ltd, Panuntie 6, FI-00620 HELSINKI, FINLAND, [phone], [e-mail], www.7signal.com
7signal Sapphire Deployment Guide Release 3.1
3 7SIGNAL SAPPHIRE CONNECTIVITY
3.1 Communication security
All connections containing meaningful traffic are being encrypted. The used encryption
methods are TLS and SSL. The PKI infrastructure (certificates) is being used throughout the
solution.
Every customer has individual set of certificates, delivered within containers called certificate
packages. It is not possible to use the delivered certificates to decrypt traffic of other 7signal
Sapphire systems.
Q: Where can I find my certificates? All the customer certificates and certificate
packages are located in the Certificates CD.
It is neither necessary nor encouraged to handle the certificate container files. Install and
upgrade processes of 7signal Sapphire take care of all the typical cases. In untypical cases the
7signal staff shall be involved with all the help necessary.
3.2 Supportive connections
3.2.1 SSH for Eye
SSH connection is required in deployment phase: IP address configuration and management
traffic encryption certificate setup are done with 7config command line utility. Eye firmware
can be also managed with SSH.