SSL, certificates, certificate authorities, and public-key cryptography

Review this information to understand the technology involved in creating an SSL connection between a server and a client.

Overview of the SSL handshake
Digital certificates and certificate authorities
Trusted parties, called certificate authorities (CA), issue digital certificates to verify the identity of an entity, such as a client or a server.
Public-key cryptography
SSL uses public-key algorithms to exchange encryption key information and digital certificate information for authentication. Public-key cryptography (also known as asymmetric cryptography) uses two different encryption keys: a public key to encrypt data and an associated private key to decrypt it.
Supported cipher suites
During an SSL handshake, the client and server negotiate which cipher suite to use to exchange data. A cipher suite is a set of algorithms that are used to provide authentication, encryption, and data integrity.
Default IBM Global Security Kit (GSKit) trusted root certificates
Below is a list of trusted root certificates.
Setting up SSL for the Content Manager OnDemand clients
Review the following topics to use SSL with the Content Manager OnDemand Windows clients, the Content Manager OnDemand Web Enablement Kit (ODWEK), or the Content Manager OnDemand server-based clients, such as ARSDOC, ARSMAINT, ARSLOAD, and so on.
Setting up SSL for external storage managers
The following topics include information related to creating configuration files for external storage managers.