Does anyone have additional information regarding Windchill Mobile? Looking for IT security info...

[janis_king]

We are looking at setting up Windchill Mobile. Our IT Security is looking for additional documentation regarding encryption of data, etc.

[BineshKumar1 · Accepted solution]

Windchill Mobile uses HTTP/HTTPS connection to connect to server. So from a security perspective, all the measures you take to secure your Windchill for general use should still be applicable

1. Encrypted Traffic through HTTPS - Use SSL/TLS for all the traffic. If you are using a self signed certificate(even AD trusted) then, you need to install the the  certificate on all the iPads.
2. Hardening the server - Deploy Apache hardening techniques.- stop Apache from transmitting versions, disable server signature and directory browsing. Use LDAPs and FTPs
3. Update the server with latest SUPs/CPSs
4. Apart from this IOS offers a lot of security features for IT teams. You can also use MDM solutions to secure the data in rest.
5. Windchill has built in XSS and CSRF protection

The app works decent even with iOS 8.4 ...remember the latest update for the app was back in 2012. So not sure about the roadmap of this product.

Thanks

Binesh

Barry Wehmiller