MA Encryption
Hi, Is the data exchanged by the MA's (between connected systems and FIM) encrypted in any way? Thanks
August 8th, 2010 7:38pm

This depends on what the connected system / the MA supports. For example, you can configure the ADMA to use SSL... Cheers, MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
August 8th, 2010 10:08pm

1) I see, is there a summary somewhere that lists what security methods the different MAs support? 2) Secondly, is the data in the actual FIM databases protected (encrypted) in any way?
August 8th, 2010 10:17pm

1) A complete overview for all MAs - not that I'm aware of. Might be something to think about. 2) No - we do only encrypt passwords by using AES 256 Cheers, Markus Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
August 8th, 2010 11:16pm

Adding to Markus' asnwer: 2) Yes - FIM Sync Setup makes you create a pair of keys. These are used to protect passwords in the sync engine (configured on MAs, or going through Password Sync). Also, XMA Configuration Parameters marked as 'Encryped' will be protected by these keys. This is to prevent somebody from walking away with the Sync database to get access to the passwords for all of your connected systems. mmmm, honeypot!CraigMartin Edgile, Inc. http://identitytrench.com
August 9th, 2010 7:14am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics