PCI DSS requirement 8.4 states that you should encrypt all passwords during transmission and storage on all system components.
EFT Server provides the following password-encryption features:
Use a two-way TwoFish encryption cipher on passphrases that must be reversible.
Use a one-way hash for passphrases that do not need to be reversible.
Encrypt all passwords used in the following areas:
ClientFTP.dll client authentication
Authmanager.dll for AD, ODBC, and LDAP authentication
PGP private key passphrases
ARM connection string password
|
|
PCI DSS requirement 8.4 states that you should encrypt all passwords during transmission and storage on all system components. |