SSL (Secure Sockets Layer) is the standard security technology used to establish an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.
In PointCentral®, an encrypted link is established between the Point® client and the PointCentral Web Service that runs on the server where PointCentral is installed.
A wildcard SSL is another type of secure certificate that helps to enable the SSL encryption on several sub-domains with the use of one certificate.
The Calyx Resolver Service uses a wildcard certificate (*.calyxpds.com).
PointCentral does not dictate the security protocols used on the client and server devices.
PointCentral requires the use of an SSL Certificate. This certificate is used to validate that the connections from the client that runs Point are reaching the expected PointCentral server.
The authentication and encryption protocols used are negotiated by the client and server based on what is available.
If you disable the unwanted protocols on both ends, Point should continue to connect and communicate with the PointCentral server without any issues as long as the two systems have at least one mutually agreeable protocol (SSL 3.0, 3.1,TLS 1.2, etc.).
IIS web server using TLS 1.1 and 1.2 is also supported with the *.calyxpds.com certificate for the website only (PointCentral Administration).
There are some compatibility issues with Microsoft SQL server and TLS 1.2. Microsoft supports TLS 1.2 for their SQL server products. To ensure proper functionality, installation of subsequent service packs and cumulative patches is required.
To support TLS 1.2 on both Point and PointCentral, CalyxSoftware® will increase the .NET Framework minimum requirement to version 4.6.2.
Calyx Resolver is a free service provided by Calyx Software. It is set up by using the PointCentral Configuration Wizard. The only additional requirement is that your machine have a static private or public IP address.
If you already have a domain name and SSL Certificate, you can continue to use them rather than using the Calyx Resolver to set them up. You can switch to the Calyx Resolver at any time.
Optionally provide private feedback to help us improve this article...
Thank you for your feedback!