Setting the SoftLINK Student to Store Security Keys Using a Higher Level of Encryption

Download PDF:  KB0112

Summary
Starting with SoftLINK 7.5 there is a new client32.ini setting to activate a higher level of encryption for the client security key. This method uses DES encryption to protect the key and has been added due to the discovery of a security weakness within the client32 file.

The setting for the higher level of security is a manual setting and cannot be set using the SoftLINK Configurator. Once this new setting is added to the Client configuration, the Security Key needs to be reset before the Higher level of encryption is used.

This change only affects the SoftLINK Client and no changes are needed at the SoftLINK Tutor in order to connect to a SoftLINK Client using the higher level of encryption. The SoftLINK Tutor uses a difference algorithm to encrypt the security key and no update to this algorithm is required.

Details

To apply the higher level of encryption

1. Open the client32.ini file located in your SoftLINK installation folder and set the security key mode[Client]
   SKmode =1
2. Re-checksum the Client32.ini file by using CKSINI.exe from Editing the Client32.ini file
3. Open the SoftLINK Configurator and edit the existing security key or add a new key
4. In the client32.ini you will see the following:[Client]
   SecurityKey=dgAABuDwSi)Am(Kxt4RRXj(7)twA
   SecurityKey2=dgAABuDwSi)Am(Kxt4RRXj(7)twA
   skmode=1

To edit the security when using the higher level of encryption
Once the client has been set for the higher level of encryption the SoftLINK Configurator can be used to set or change the Client Security Key, and all values will be stored in the Client32.ini file using the DES encryption.

Resetting the client to use old encryption for the security key

1. Set skmode = 0 this means all keys entered in the Configurator use old encryption
2. Remove SecurityKey2=dgAABuDwSi)Am(Kxt4RRXj(7)twA
3. Re apply the checksum with CKSINI.exe
4. Set the security key within the configurator