Server Encryption :: SAS® Federation Server 4.2: Administrator's Guide, Second Edition

Introduction

SAS Federation Server supports two methods of encryption strength: SAS Proprietary Encryption and encryption using DataFlux Secure. SAS Federation Server Manager uses SAS/SECURE for encryption.

SAS Proprietary Encryption

SAS Proprietary Encryption is a fixed encoding algorithm that is included with SAS Federation Server. It requires no additional product licenses and is the default encryption method if DataFlux Secure is not installed. The SAS Proprietary Encryption algorithm is strong enough to protect your data from casual viewing. SAS Proprietary Encryption provides a medium level of security. SAS/SECURE and SSL provide a high level of security. See Encryption in SAS for additional information.

DataFlux Secure

Overview

DataFlux Secure is an add-on product that provides industry encryption capabilities in addition to the SAS Proprietary Encryption algorithm. DataFlux Secure requires additional licensing and it must be installed on each server that will use encryption. DataFlux Secure provides encryption of data in transit. It does not provide authentication or authorization capabilities.

Specifying the Encryption Method

SAS Proprietary Encryption (SASProprietary) is the default encryption for SAS Federation Server. You can also decide how much data is encrypted in communication between a client and SAS Federation Server. Encryption is specified on the federation server object located in SAS Metadata Server. Follow these steps to change the encryption level using SAS Management Console. Use the following procedure to specify or change the encryption level for SAS Federation Server.

Using SAS Management Console, locate your federation server object by expanding Environment ManagementServer ManagerFederation Server - hostname - logical server.
Expand the logical server entry and select the server definition that you wish to change encryption for. The Connections tab displays the current connections defined for the selected server.
On the Connections tab, select Bridge connection and right-click. Select Properties from the drop-down menu.
Select the Options tab and select Advanced Options.
Select the Encryption tab and select an option from the Server encryption algorithm list menu.
Click OK to exit the Advanced Options dialog box, and click OK to close connection properties.
Restart SAS Federation Server to update the server encryption algorithm.