Securing M-Business Server

To protect corporate networks, M-Business Server provides user name and password authentication using 56-bit or 128-bit secure sockets layer (SSL) encryption for end-to-end transactions. In addition, SSL encryption allows M-Business Server to connect securely to other Web servers. With SSL enabled, users can synchronize their mobile devices with M-Business Server using secure protocols.

To secure cradle synchronizations between M-Business Server and the desktop computer, M-Business Server uses either Microsoft Internet Explorer proxy settings and 128-bit RSA certificates or default proxy settings and Elliptical Curve Cryptography (ECC) certificates. M-Business Server authenticates users with their user name and password when they connect through either the desktop or the mobile device.

To enable security for use with mobile devices, request and install either an RSA certificate or an ECC certificate, or possibly both, depending upon your environment. Microsoft OS and Palm OS devices exclusively use default proxy settings to connect to M-Business Server for online page fetches or wireless modem synchronizations. Therefore, to ensure secure synchronizations when using those synchronization methods, install an ECC certificate on M-Business Server, even if an RSA certificate is used to ensure secure cradle synchronizations. Use the table below to determine which certificate may best suit your needs.

Table 3. Choosing a security certificate

Type of certificate

Synchronization methods

Devices

ECC

  • Cradle

  • Wireless modem

  • Online browsing

  • Palm OS

  • Microsoft OSes

RSA

  • Cradle

  • Palm OS

  • Microsoft OSes

RSA

  • Wireless modem

  • Online browsing

  • Palm OS

  • Microsoft OSes

For detailed instructions on how to set up security for M-Business Server, see Security.