BioStar 2 - How to configure Secure Communication (TLS/SSL)
Concept
A transport layer security (TLS/SSL) feature for the communication between the server and device has been implemented in BioStar 2.4.
This feature would stop malicious users from connecting to the device by pretending to be the server with the same server IP.
This security is achieved by storing a digital certificate in the device.
When the device connects to the server, it will exchange an encryption key (session key) using the digital certificate to provide server identity verification.
BioStar 2 supports TLS version 1.1 and 1.2. For more generic security information refer to the FAQ article
A transport layer security (TLS/SSL) feature for the communication between the server and device has been implemented in BioStar 2.4.
This feature would stop malicious users from connecting to the device by pretending to be the server with the same server IP.
This security is achieved by storing a digital certificate in the device.
When the device connects to the server, it will exchange an encryption key (session key) using the digital certificate to provide server identity verification.
Configuration
It will take several minutes for the devices to reconnect to the server.
- BioEntry W2 FW 1.1.0 or later
- BioStation L2 FW 1.2.0 or later
- BioStation A2 FW 1.3.0 or later
- BioStation 2 FW 1.4.0 or later
- FaceStation 2 FW 1.1.0 or later (to be released in 2018)
- CoreStation FW 1.0.0 or later
- P2 FW 1.0.0 or later
Follow the steps below to configure the secure communication. It is not turned on by default.
1. Log in to BioStar 2.
2. Click Setting.
3. Click Server.
4. On the Secure Communication with Device tab, set Secure communication with device as Use
If you want to use a external certificate from a CA (certificate authority) such as VeriSign, Comodo, GoDaddy and etc, check Use external certificates and Upload the file.
Do not turn off the secure communication option if the device is physically disconnected from the network while using the secure communication feature.
If the feature is turned off, the certificate of BioStar 2 will be deleted and the device will not be able to connect to the server again.
To connect the device to the server again, the certificate saved in the device must be deleted or the device must be reset to factory default.
For devices without LCD such as W2 or P2 you can factory default the device with the reset buttons as shown in the device manual.
Refer to the FAQ article: Factory Default W2 / P2
Related Articles
EasySecure.cloud - Communication and Encryption
EasySecure International is committed to safety and security of your data. We therefore opt for the best security and work together with the best hosting parties and the latest technologies. EasySecure International is ISO 27001 certified The image ...BioStar 2 - How to backup and Restore the Database in BioStar 2
BioStar 2's database has gone through a few changes since it's release. The AC database started out with the SQLite Database and in version 2.2.1, the MariaDB T&A database was released. Starting version 2.3, both databases became Maria DB by ...BioStar 1 - Device wordt niet toegevoegd na Search and Add Device
Deze melding komt regelmatig voor bij het toevoegen van devices in de BioStar 1 software. Als u een device heeft toegevoegd in BioStar en hem vervolgens niet meer ziet in de software dan heeft u waarschijnlijk de volgende stap overgeslagen: De ...BioStar 2 - How to set up a self-signed certificate for the use of device security communication
When you set the SSL certificates between devices and servers to be used for Secure Communication. The relevant document is as follows. The method of setting a certificate in Secure Communication is described in detail. 1. Download xca Tool except ...BioStar 2 - How to add and configure a Secure I/O2