Picture Perfect 4.6 User Manual - UTCFS Global Security Products

Chapter 4
Setup
57
Setting up SSL encryption
Note:
This section describes how to set up SSL encryption on Picture Perfect systems (stand-alone, redundant, and
Enterprise configurations).
Refer to Chapter 6 of the Picture Perfect 4.6 Installation Manual for the following procedures:
-- SSL configuration for Facility Commander 2.2.3 and Picture Perfect 4.5.1 & 4.6 (stand-alone)
-- Using a CA certificate on Picture Perfect 4.6 for SSL)
Disabling IPv6 on Linux
IPv6 should be disabled on Linux for client login with SSL enabled.
1. Disable IPv6 through the network configuration GUI.
2. Make sure the following settings are applied:
• The /etc/sysconfig/network file contains the following entry:
NETWORKING_IPV6=no
• The /etc/modprobe.conf file contains the following entry:
alias net-pf-10 off
options ipv6 disable=1
3. Reboot the system.
4. When the system is back up, run ifconfig and verify that there are no IPv6 entries.
Client SSL encryption
The activation and deactivation of SSL encryption for events and requests transmitted between the
Picture Perfect host and its clients is controlled by the EnableSSL script. This script can be run
anytime after Picture Perfect has been installed.
Note:
Turning on Client SSL Encryption has a negative impact on client performance.
To activate client SSL encryption:
1. Log on to the system as ppadmin.
2. At the command prompt, stop Picture Perfect by typing:
rc.pperf -k
If this is a redundant configuration, stop Picture Perfect by typing:
pprscmd stop
3. Log on to the system as root by typing:
su - root
4. Type the following command to enable SSL:
EnableSSL 1
Enter
Enter
5. Log on to the system as ppadmin.