Configuring SPD Server Clients to Perform Server Authentication
Configuring an
SPD Server SAS client for secure sockets communication is a two-step process:
-
The client computer must be made aware of the public certificate or trusted CA bundle.
A SAS client that runs on a UNIX computer can specify the path to the public certificate
or trusted CA bundle by setting the SSLCALISTLOC= system option in the SAS
session. For more information about this system option, see
Encryption in SAS. A Windows client must add the CA to the client
computer’s Certificate Store.
-
Secure sockets communication must be enabled for SPD Server in the SAS session. To
enable secure sockets communication for SPD Server, set the SPDSRSSL=
macro variable before assigning a
SASSPDS LIBNAME statement. This macro variable has two settings: YES and NO. NO is the default
value. YES enables a client to make a secure sockets connection to an SPD Server that
is configured with SSLSECURE=YES or SSLSECURE=PREFERRED. Regardless of the setting
of SPDSRSSL=, the client will successfully connect to an older server (SPD Server
5.2 or earlier) with non-secure sockets.
For more information,
see SPDSRSSL Macro Variable in SAS Scalable Performance Data Server: User’s Guide.
A SAS Federation Server client sets the SPDSRSSL= environment variable to enable a
secure connection to SPD Server. For more information about configuring secure sockets
communication for SAS Federation
Server, see the SAS Federation Server: Administrator’s Guide.
Copyright © SAS Institute Inc. All Rights Reserved.
Last updated: February 3, 2017