Calyx Software Knowledgebase

3901 SSL Information



SSL (Secure Sockets Layer) is the standard security technology used to establish an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.

In PointCentral®, an encrypted link is established between the Point® client and the PointCentral Web Service that runs on the server where PointCentral is installed.


Wildcard Certificates:

A wildcard SSL is another type of secure certificate that helps to enable the SSL encryption on several sub-domains with the use of one certificate.

The Calyx Resolver Service uses a wildcard certificate (*


Encryption Protocols:

PointCentral does not dictate the security protocols used on the client and server devices.

PointCentral requires the use of an SSL Certificate. This certificate is used to validate that the connections from the client that runs Point are reaching the expected PointCentral server.

The authentication and encryption protocols used are negotiated by the client and server based on what is available.

If you disable the unwanted protocols on both ends, Point should continue to connect and communicate with the PointCentral server without any issues as long as the two systems have at least one mutually agreeable protocol (SSL 3.0, 3.1,TLS 1.2, etc.).


Supported Protocols:

IIS web server using TLS 1.1 and 1.2 is also supported with the * certificate for the website only (PointCentral Administration).

There are some compatibility issues with Microsoft SQL server and TLS 1.2. Microsoft supports TLS 1.2 for their SQL server products. To ensure proper functionality, installation of subsequent service packs and cumulative patches is required.

To support TLS 1.2 on both Point and PointCentral, CalyxSoftware® will increase the .NET Framework minimum requirement to version 4.6.2


Calyx Resolver:

Calyx Resolver is a free service  provided by Calyx Software. It is set up by using the PointCentral Configuration Wizard. The only additional requirement is that your machine have a static private or public IP address. 

If you already have a domain name and SSL Certificate, you can continue to use them rather than using the Calyx Resolver to set them up. You can switch to the Calyx Resolver at any time. 

Also In This Category

Did this article help answer your questions or resolve your problem?

Optionally provide private feedback to help us improve this article...

Thank you for your feedback!

Last Modified: 8 Months Ago
Last Modified By: cswms
Type: PointCentral
Article not rated yet.
Article has been viewed 3.3K times.
Find Similar