Secure Terminal Sessions

Logging on to MARC or CANDE through normal text-based emulators is not a secure logon process, because the password is transmitted in clear text across the network. Through WebEnabler, the Custom Connect Facility of COMS, and SSH terminals, secure connections can be offered directly from the MCP environment.

Terminal sessions can be secured to prevent sensitive data being transmitted over an unsecure network:

  • Web Enabler sessions can use SSL/TLS when connecting to an MCP host using the Custom Connect Facility (CCF). Web Enabler can also use Kerberos as an authentication method.

  • TELNET sessions can use SSL/TLS when the connection originates from an SSL/TLS-enabled client.

  • Any SSH terminal (such as PuTTY or Tectia SSH) can use SSL/TLS to connect to your MCP server over SSH.

  • Some Kerberos-enabled terminal emulation packages can be configured to use message encryption. Kerberos authentication protects the logon credentials.