Implementing End-to-End Security for Device Clients

Use the createkey utility to create a key pair, then edit the configure-sup.xml file to implement end-to-end encryption on device clients with HTTPS.

  1. Create a key pair for use end-to-end encryption by running createkey.exe, located in Sybase\UnwiredPlatform-1_2\Servers\UnwiredServer\SQLAnywhere11\BIN32. For more information go to Sybase Product Manuals () SQL Anywhere 11.0.1 > SQL Anywhere Server - Database Administration > Administering Your Database > Database Administration Utilities > Key Pair Generator Utility (createkey)
  2. Use a text editor to modify configure-sup.xml, located in Sybase\UnwiredPlatform1_2\Servers\UnwiredServer: 
    <target name="mlserver.xoptions.https" if="is.https.protocol" depends="import_encrypted_supprops"> 
           <property name="mlserver.xoptions" value="${sup.sync.protocol}(port=${sup.sync.httpsport};identity=${sup.sync.certificate};
identity_password=${decrypted.sup.sync.certificate_password};e2ee_type=rsa;e2ee_private_key=<location_of_generated_private_key>;
e2ee_private_key_password=sybase)" />
  3. Use the ConnectionManager API to add the trusted certificate for the device client, for example: 
    Connection c = new Connection();
c.MobiLinkHost = "sup.sybase.com";
c.MobiLinkPort = 2440;
c.MobiLinkStreamType = MobiLinkStreamType.Https;
c.MobiLinkStreamParams=""trusted_certificates=full_path_to_Publiccert.crt;e2ee_type=rsa;e2ee_public_key=
<location of generated public key>";
c.Name = "supAdmin";
c.Package = "Customer_1.0.0";
c.UserName = "supAdmin";
c.Password = "supAdmin";
c.Save()

    See Sybase Unwired Platform 1.2 > Sybase Control Center 1.2 > Administer > Unwired Server > Manage > Server Configuration > Configuring Unwired Server Properties > Synchronization > Generating Certificates for HTTPS-Enabled Synchronization > Connection to Unwired Server Using Windows-based Mobile Device Clients.

  4. Synchronize the MBOs.
Parent topic: Documentation Updates