Software components communicate over TCP connections by using the Remote API. Clients who are using Remote API connections, authenticate themselves to servers by sending credentials, normally a username and password. When the credentials are passed as cleartext, they can be snooped from the network or accessed by using man-in-the-middle configurations.
You can encrypt certain connections by using different keys for the Advanced Encryption Standard based on a combination of the Diffie Helman standard and the site secret associated with the installation.
Encrypted connections do not work with the following products:
- Perl API
- Adapter for NetIQ AppManager