Transport Layer Security

Security protocol provides privacy and data integrity between computers that are connected through the Internet.

Transport Layer Security (TLS) is a cryptographic protocol that provides communication security over a computer network. It is used to securely connect clients' browsers and applications to the development and server components in Operational Decision Manager on Cloud. When you connect to the components, you use TSL to safeguard your data.

Operational Decision Manager on Cloud currently uses TLS 1.2 or later. It supports ciphers such as ECDHE_RSA and GCM. For additional information, including supported ciphers, see IBM Operational Decision Manager on Cloud support for Transport Layer Security External link opens a new window or tab.

Requirements

  • Clients must use encryption levels that are compatible with TLS 1.2 or later. Older TLS encryption levels are not supported. Current versions of popular browsers support TLS 1.2 or later, including Chrome, Edge, and Firefox.
  • For Java, you should use the version that is required for your installation of Operational Decision Manager on Cloud. See Detailed System Requirements.
  • Client applications must allow the usage of TLS 1.2 or later. Applications can be programmed to restrict the usage of TLS versions or ciphers. However, if no such constraint is specified, an application uses the TLS versions and ciphers that are enabled by the underlying version of Java™.

Runtime errors

If you have code or services that do not support TLS 1.2 or later, you must upgrade them to the security protocol to use Operational Decision Manager on Cloud. If you do not upgrade them, you get connection errors that might indicate a transport error or contain a message such as SSLV3_ALERT_HANDSHAKE_FAILURE. You must upgrade any affected application to support TLS 1.2 or later before it can work with Operational Decision Manager on Cloud again.