Self Service Client Security Considerations

Question

Hello

Could you expand on the level on encryption used during the password reset between the self service client and Adaxes? Is it 128 or 256 AES or something proprietory?

Thank you

Answer 1

Hello,

During the Self-Service Password Reset from the Windows Logon Screen, the actual process of password reset is performed via Adaxes Web Interface. All security-sensitive information is encrypted using the RSA encryption mechanism with a 1024-bit key.

Since Adaxes Web Interface is an IIS web application, you can additionally enable SSL for the Web Interface in order to improve security. Since, Self Service Client and Direct Access, you are going to expose the Web Interface to computers located outside of your on-premises network, we would recommend enabling SSL for the Web Interface. This can be done the same as for any other IIS web application.

Comments

Thanks for the information. I tested through Direct Access yesterday and if works perfectly.

---

Hello,

Thanks for the update!

---

Thanks for the information. I tested through Direct Access yesterday and if works perfectly.

If you're using DirectAccess, that's already a VPN system, so any information between the client and your network is fully encrypted anyway... but it couldn't hurt to also use SSL/HTTPS for the self-service website. :)