Directory communications security

Use the information to secure the directory communications.

You can use these steps that are necessary for keeping the data in your directory secured.

Configuration of security settings
This feature enables you to configure the security settings.
Key database settings
Use this information to set the key database.
PKCS#11
PKCS#11 is an interface that enables an LDAP user to use crypto hardware. By using PKCS#11, an LDAP user can use the crypto hardware to securely store the key database file and accelerate cryptographic operations.
Encryption level setting for SSL and TLS communications
You can set the level of encryption for SSL and TLS communications.
Support for NIST SP 800-131A
For the transition to NIST SP 800-131A guidelines, you must identify the security requirements that the LDAP environment must conform.
Importing a certificate from a key database
Import a certificate of a key database that is created with an earlier version of GSKCapiCmd commands to another key database with a later version of GSKCapiCmd commands.
Exporting a certificate from a JKS key database
Export a certificate from a JKS (Java keystore format) key database of an earlier version to another JKS key database of a later version.
Certificate revocation verification
This feature enables you to verify the certificate revocation.

Parent topic: Server Administration