13.0

Chapter 6: Configuring and using the Roaming feature and Roaming User Profiles
Certificate Store
Thenameofthecertificatestorefortheclientcertificateonthelocalcomputer:
Thestoragelocationiscalledthecertificatestore.Acertificatestorewilloftenhave
numerouscertificates,possiblyissuedfromanumberofadifferentcertificationauthorities:
n MY:Acertificatestoreholdingpersonalcertificateswiththeirassociatedprivatekeys.
n CA:AcertificatestoreholdingCertifyingAuthority(CA)certificates.
n ROOT:AcertificatestoreholdingROOTcertificates.
n SPC:AcertificatestoreholdingSoftwarePublisherCertificate(SPC)certificates.
n Other:AnyotherCertificateStorenotlistedabove.
Notes:
n IfyouselectPFX file fortheCertificate Store Type,fortheCertificate Store
selectOther andenterthenameofthefileintheassociatedtextboxbelowit.
n IfyouselectPFX Blob fortheCertificate Store Type,fortheCertificate Store
selectOther andenterthebinarycontentsofaPFXfile(forexample,thePKCS12)in
theassociatedtextboxbelowit.
n IfyouareusingOpenSSL,fortheCertificate Store selectOther andenterthe
nameofthefilecontainingacertificateandaprivatekeyintheassociatedtextbox.
Certificate Store Password
ThepasswordfortheCertificate Store onthelocalcomputerifoneisrequired.
Open SSL
SelectUsing OpenSSL iftheHTTPSserverusesOpenSSL asaCertificateAuthority.
OpenSSLisafreenon-commercialimplementationofSSL.
WhenyouselectUsing OpenSSL,youmustprovide:
n Cipher List:AstringthatcontrolsthecipherstobeusedbySSL.Thecipherlist
consistsofoneormorecipherstringsseparatedbycolons.
n Certificate Authority File:Nameofthefilecontainingthelistofcertificate
authorities(CAs)trustedbyyourapplication.Thefilesetbythispropertyshould
containalistofCAcertificatesinPEMformat.
n CA Directory:PathtoadirectorycontainingCAcertificates.Thepathsetbythis
propertyshouldpointtoadirectorycontainingCAcertificatesinPEMformat.
General
Usethissectiontoenable/disablethesupportedsecurityprotocolsontheHTTPSserver.
n TLS1:Version1oftheTransportLayerSecurity(TLS)protocol.
n SSL3:Version3oftheSecureSocketsLayer(SSL)protocol.
n SSL2:Version2oftheSecureSocketsLayer(SSL)protocol.
n PCT1:Version1ofthePrivateCommunicationsTransport(PCT)protocol.
Notes:
n AlthoughanumberofsitesstillsupportSSL2,Nuancerecommendsthatyoudisable
itbecauseofpotentialsecurityvulnerabilities.
188