How to implement security for data at rest and in transit?

[ranjank]

Please let me know the various levels of security which can be implemented in ThingWorx.

Thanks in advance.

[raluca_edu]

Hi,

Please check the Security chapter from Help Center: http://support.ptc.com/help/thingworx_hc/thingworx_8_hc/en/#page/ThingWorx%2FHelp%2FComposer%2FSecurity%2FSecurity.html%23

Hope it helps,

Raluca Edu

[PaiChung]

Adding a link

https://www.ptc.com/en/documents/security

[PaiChung]

I recommend you can start with our security white paper

https://www.ptc.com/en/resources/iiot/white-paper/securing-architecture-infrastructure-iot-ecosystem

We support several secure protocols for data in transit SSL/TLS, HTTPS/WSS. The agent also allows for a few different encryption libraries.

Access wise Thingworx has auth and encrypted/hashed password storage

but Thingworx also can work with AD and other IdM systems

At rest you can store your data in an encrypted database although there will be an impact on performance.

For data separation, you can use multiple persistence providers

Hope that helps

[ranjank]

Hi Pai,

Could you pls help me out with the elaborated way to achieve the solution you mentioned for Data at rest and also pls let me know how and at what extent it will impact the performance?

Thanks

[PaiChung · Accepted solution]

Easiest way would be to encrypt the drive itself, which is what I should've said vs. encrypt the database.

I am actually not certain if we support encrypted DB

I apologize but I'm not much of an expert on how to set it up, so I can't give you guidance with that.

[slangley]

Hi @ranjank.

If one of the previous responses answered your question, please mark the appropriate one as the Accepted Solution for the benefit of others with the same question.

Regards.

--Sharon