6. Security

6.1 Do you support SSL?

Yes. SSL was implemented in M-Business Client version 3.3. All current users of M-Business Client can connect securely to Web sites.

6.2 Really? How does that work?

For details on how a user sets this up, see Enabling a secure connection to a server.

6.3 You say that M-Business Client uses a Certicom Elliptical Encryption Algorithm. I do not think my Web server supports that.

No problem—that is just on the device itself. When M-Business Sync Server talk to your Web server, we use the normal RSA encryption that your server has been dealing with for years.

6.4 What do I do if I want pages on my M-Business channel to be secure?

You would create them the same way you would on your Web site. Keep in mind, however, that only users who have manually turned on Connect Securely in their M-Business Client preferences will be able to view secure pages.

6.5 How can I tell if a user is or is not connecting securely?

You can look at their HTTP headers for the presence or lack of an X-AvantGo-SecureSync header. See Using M-Business Client HTTP request headers to customize content for more information on how to do this.

6.6 I am creating a channel and I want to restrict it to only certain users. How can I do this?

Make sure that you create a group channel, not a public channel. Group channels are automatically restricted to members of the group for which they are created.

First of all, create a managed group for your channel subscribers. See Creating a group.

Then add to that group the users you want to have subscribed to your channel. See Managing users for a group.

As long as you do not make the channel available to other groups, it will be restricted to the members of the group for which it was defined.

6.7 Can I password protect my channel content in M-Business Client on users' devices?

Yes, but the client password protection must be enabled globally on the M-Business Server where your channel is based. For instructions on implementing client password protection, see Understanding channel settings.

Note

You can also password protect individual channels. This would be a good approach if there are only one or two channels which you want to be secure on your users' devices. To password protect an individual channel, you would use cookies. See Using cookies to support personal channels.

6.8 Can I use FIPS 140-2 to secure the connection between M-Business Client and M-Business Server?

Yes, as long as you are using M-Business Server version 7.0 or later, on Windows or Solaris, and your users are running M-Business Client version 7.0 or later on Microsoft OS devices. Under these conditions, synchronizations between M-Business Client and M-Business Server are automatically secured by a FIPS 140-2 compliant SSL library. For additional information, see FIPS 140-2 compliant SSL library support.