To enable the options on the TLS/SSL window, you must select FTP - TLS or FTP - SSL only as the protocol on the Connection window.
Transport Layer Security (TLS) and Secure Sockets Layer (SSL) are two different communication protocols that allow applications to communicate securely over the Internet using data encryption. TLS is based on SSL, but has a different initial handshake protocol and is more extensible. TLS and SSL are not interoperable. That is, an application using TLS cannot communicate with an application running SSL. Both protocols are widely used.
Server AuthenticationServer Authentication
Ensures that a secure session is established only if the internet name of the server
matches the common name in the server's certificate. This is effective only on a
locally-installed client or a client downloaded via HTTPS.
Add MSIE browser's keyring
If you click Yes, the Host On-Demand client accepts Certificate Authorities trusted
by the Microsoft Internet Explorer browser.
The following options are used to specify the handling of client authentication.
Send a Certificate
Enables Client Authentication. If you click No and the server requests
a client certificate, the server is told that no client certificate is available, and
the user is not prompted.
Certificate Source
The certificate can be kept in the client's browser or a dedicated security device such as
a smart card.
Alternatively, it can be kept in a local or network-accessed file, in PKCS12 or PFX format, protected by a password.
URL or Path and Filename
Specifies the default location of the client certificate. The URL protocols you can use
depend on the capabilities of your browser. Most browsers support HTTP, HTTPS, FTP, and FTPS.
Select File
Click Select File to browse the local file system for the file containing the certificate.
Certificate Name
Select a certificate from the list. You can also accept any certificate trusted by the server.
Add Certificate Name
Click Add Name to specify the parameters for choosing a client certificate,
including the common name, e-mail address, organizational unit, and organization used to
define it. (This button is only available on the administrator's configuration
panel.)
How often to prompt
This drop-down box allows you to control the timing of prompts for client certificates.
You can choose to prompt each time a connection is made to the server, or only the first
time after starting Host On-Demand.
If your certificate is in a password-protected file and your client supports storing preferences locally, choosing "Prompt only once" causes HOD to prompt for the password the next time the connection is made, but never after that, unless the connection attempt fails.
If your certificate is accessed through the MSIE browser, "Prompt only once" can be chosen on any client, as well as "Do not prompt", which disables the prompt from Host On-Demand, but not from the browser or security device.
Retrieve certificate before connect
If you click Yes, the client accesses its certificate before connecting the
server, whether the server requests a certificate or not. If you click no,
the client only accesses the certificate after the server has requested it; depending
on other settings, this may force the client to abnormally terminate the connection to the
server, prompt the user, and then reconnect.
Lock (Host On-Demand administrator only)
Select Lock to prevent users from changing the associated startup value for a session.
Users can not change values for most fields because the fields are unavailable. However,
functions accessed from the session menu or toolbar can be changed.