Chapter 6. Security 151
Separate port number
In addition to the standard (non-SSL) port, a separate port number is identified on the 
Content Manager OnDemand server to support the secure connection. This separate port 
number allows both SSL and non-SSL connections to operate concurrently. When a client 
connects to the SSL port, it negotiates a connection through a handshake procedure during 
which the client and server agree on the session parameters to use to maintain a secure 
connection. Session keys are generated that allow the encryption and decryption of the data 
that is sent between the client and server.
Processor consumption
SSL improves security by encrypting and decrypting data across the network. The encryption 
and decryption occur at the application layer, which consumes the additional processing 
cycles for both the sending and receiving systems. Therefore, consider using SSL only for 
sessions where it is needed. Consider adding additional processor resources on the Content 
Manager OnDemand server or clients to manage the increased overhead processing.
Digital certificates
With SSL, the identities of the parties are verified by using digital certificates. Digital 
certificates have expiration dates. After a digital certificate expires, Content Manager 
OnDemand will not be able to establish connections through SSL. Therefore, always be 
aware and plan ahead to avoid expired certificates. 
ODWEK
The support of SSL and ODWEK refers specifically to the transfer of data between ODWEK 
and the Content Manager OnDemand servers and it does not imply a level of support from 
the browser to ODWEK. The use of SSL from the browser to ODWEK was always allowed 
and it does not require any support from ODWEK. It is the application and the web 
developer’s responsibility to enable such support.
arsload
GSKIT is initialized one time for each arsload invocation. When you load multiple documents, 
it is more effective to concatenate the documents (such as TIFF images) and generic index 
files and load multiple documents at a time. Also, when you load multiple documents, use 
arsload as the daemon.
6.7  Security exits
The Content Manager OnDemand security exits allow customers to implement their own 
customized security methods based on their internal requirements and needs. Y ou can use 
the security exit to customize and enhance the security functions within a Content Manager 
OnDemand system.