Determining Certificate Requirements Based on Security Profile Chosen

By default, Unwired Server includes two security profiles, which are used by secure management of Unwired Server from Sybase Control Center and Data Change Notification (DCN) listeners: default and default_mutual.

The security profile you use determines which certificate file you need, and where they need to be deployed. The most secure profile is default_mutual, whereby components are mutually authenticated.

For details about what cipher suites are supported for domestic and domestic_mutual authentication, see Creating an SSL Security Profile in Sybase Control Center in the Sybase Control Center for Sybase Unwired Platform.

  1. The default security profile uses domestic authentication. With this authentication type, Unwired Server sends its certificate to the client (that is, either Sybase Control Center or DCNs). However, it does not require a certificate in return from the client. If you choose this option then you need to:
    • Use the alias of "sample1".
    • Configure the Sybase Control Center to trust the Unwired Server certificate.
  2. The default_mutual security profile uses domestic_mutual authentication. If you use this option then you need to:
    • Use the alias of "sample2".
    • Ensure both Sybase Control Center and Unwired Server truststores each contain a copy of the other component's certificate.