Encryption Overview:

	Encrypted Data Stream
	Client parameters
	Server Settings Environment Variables Registry Settings
	Proper Operating System DLL's
	Strong 128 Bit Encryption

Georgia SoftWorks provides unmatched security when using our Telnet Sever for Windows NT. It is the only Telnet server that offers complete Data Stream Encryption. The Georgia SoftWorks Telnet server has been submitted to the United States Department of Commence and has obtained the proper license exceptions so it can be legally exported around the world.

Data Stream encryption can be enabled on a global or a per user basis with undetectable performance loss. This is useful if users are running accounting, banking, medical or other applications that contain sensitive data.

Logon only encryption may also be employed. This protects User Ids, Passwords and other logon data. 

Encrypted Data Stream

Encryption of the Data Stream for Telnet on NT/2000 is another feature pioneered by Georgia SoftWorks. Complete Data Stream encryption is available on a global or per user basis when using the Georgia SoftWorks Telnet Client. For encryption to work both the sending and receiving ends of the data must know to encrypt and decrypt the data. Since third party clients would not be aware of encryption or decryption, data stream encryption is only available with the Georgia SoftWorks Telnet Client.

The Setup for Data Stream Encryption requires:

1.       The encryption parameter must be passed when invoking the Georgia SoftWorks Telnet Client,

2.       The setting of an environment variable on the server in either a Global or User login script,

3.       The registry variable EnableEncryption be set to 1.

4.       The proper Microsoft Windows operating system DLLs and API’s are installed on both the client and server systems.

Data Stream Encryption Client Parameters

The parameter -c should be passed when invoking the Georgia SoftWorks Windows NT/2000 Telnet Client. This can be passed from the command line via the following command:

            gs_clnt.exe -c

The shortcut may be modified to pass Data Stream Encryption parameter.

Data Stream Encryption Server Environment variable.

An environment variable must be set on either a Global or Per User basis to activate Data Stream Encryption.

The environment variable for the complete data stream encryption is:

            gwtn_encrypt_session

in the Logon Script for a particular user (or the Global Logon Script for all users.).

NOTE: No spaces are allowed when setting environment variables.

For example: To Activate Data Stream Encryption the following line should be present in the logon script.

                        set gwtn_encrypt_session=1 is correct

                        set gwtn_encrypt_session = 1 is not correct

For example: To De-activate Data Stream Encryption the following line should be present in the logon script.

                        set gwtn_encrypt_session=0 is correct

 

Enable Encryption Server Registry variable

The variable EnableEncryption is a registry key value.  This Registry key enables or disables the ability to activate Encryption. If it is disabled then all encryption environment variables are ignored. Also the client command line parameter must not be used when the registry value is disabled. The key is:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ GS_Tnet\Parameters\EnableEncryption

The default value is 0(That is disabled.) The value 1 enables the ability to use Encryption. The value 0 disables the ability to use encryption.

This is how to change the registry key for Encryption.

Note: (you must be on the Windows NT/2000 system that the Georgia SoftWorks Windows NT/2000 Telnet Server is installed. However you may connect to the Windows NT/2000 Registry from a remote location).

1.       Click the Start button at the bottom left corner of your screen.

2.       Click RUN

3.       Type REGEDT32 

4.       Click OK

5.       Select Windows item HKEY_LOCAL_MACHINE

6.       Select the menu item Edit

7.       Move the mouse pointer and click Find

8.       Type EnableEncryption

9.       Click on Find Next

10.    Select the menu item Edit and then click on Modify

11.    Enter the new value for the EnableEncryption and click OK

The new EnableEncryption value will take effect for all new connections.

Proper Operating System DLL’s

Encryption requires specific operating system Dll’s (that are present on most systems) to exist to run the telnet client and server.

These files come with Windows NT/2000 4.0 and are included in Microsoft Internet Explorer Version 3.0 and above. If you do not have these system files encryption will not operate.

If you have Windows 95 then you must have Windows 95 OSR2 or later (or Windows 95 with IE 3.02 or later). Windows 98 has all the required files.

 

128-bit Strong Complete Data Stream Encryption. 

Some applications require extremely strong Complete Data Stream Encryption. For these customers, Georgia SoftWorks offers their Telnet Server in a Strong Encryption (SE) version. This utilizes a full 128-bit data stream RSA encryption algorithm.

NOTE: 128-Bit Complete Data Stream Encryption is NOW available World Wide Georgia SoftWorks has obtained the proper license exceptions from the Bureau of Exportation a part of the Department of Commerce so the 128 bit encryption can be legally exported.

The Georgia SoftWorks configuration needed to run the 128-bit encryption is the same as for the 40-bit encryption. The system requirements needed to run the encryption are slightly different. In order to run the 128-bit encryption the system requires either:

     Windows NT 4.0 with domestic version of SP 3 or domestic version of SP4 or

     Windows 95 with domestic version of Microsoft Internet Explorer 4.0. or

     Windows 98 with domestic version of Microsoft Internet Explorer 4.0.

 

If you have further questions about of ensuring that you compute systems can accommodate 128-bit encryption please see the Microsoft Web site:

http://www.microsoft.com/windows/ie/download/128bit.htm

Both the client and server must meet the system requirements for the SE version. Also both the Client and server must be of the SE version.