Configuring SPD Server Clients to Perform Server Authentication

Configuring an SPD Server SAS client for secure sockets communication is a two-step process:
  1. The client computer must be made aware of the public certificate or trusted CA bundle. A SAS client that runs on a UNIX computer can specify the path to the public certificate or trusted CA bundle by setting the SSLCALISTLOC= system option in the SAS session. For more information about this system option, see Encryption in SAS. A Windows client must add the CA to the client computer’s Certificate Store.
  2. Secure sockets communication must be enabled for SPD Server in the SAS session. To enable secure sockets communication for SPD Server, set the SPDSRSSL= macro variable before assigning a SASSPDS LIBNAME statement. This macro variable has two settings: YES and NO. NO is the default value. YES enables a client to make a secure sockets connection to an SPD Server that is configured with SSLSECURE=YES or SSLSECURE=PREFERRED. Regardless of the setting of SPDSRSSL=, the client will successfully connect to an older server (SPD Server 5.2 or earlier) with non-secure sockets. For more information, see SPDSRSSL Macro Variable in SAS Scalable Performance Data Server: User’s Guide.
    A SAS Federation Server client sets the SPDSRSSL= environment variable to enable a secure connection to SPD Server. For more information about configuring secure sockets communication for SAS Federation Server, see the SAS Federation Server: Administrator’s Guide.
Last updated: February 3, 2017