Encrypted communication

The different components within OneSpan Authentication Server environments exchange sensitive data via the network or via inter-process communication. OneSpan Authentication Server can use encryption to protect the data exchange against unauthorized access or disclosure. To achieve this, OneSpan Authentication Server can use commercial or self-signed SSL certificates, and even set up client verification.

OneSpan Authentication Server ships with a specific version of the OpenSSL utility. We recommend that you use this version for any procedures involving the openssl command.

By default, this specific version of OpenSSL is located in %PROGRAMFILES%\VASCO\IDENTIKEY Authentication Server\bin on Windows and in /opt/vasco/ias/bin on Linux, respectively.

When you copy, migrate, or back up encrypted database files, ensure that you also back up the encryption key (and/or the optional password key). Otherwise, you will not be able to read the data afterward, as it will be encrypted.