Suitable SSL certificates

Which SSL certificates are suitable for FileMaker Server?

Introduction

The security of data transfers over the Internet is critical, especially when sensitive information is exchanged. FileMaker Server, a platform for managing and hosting FileMaker databases, allows users to access databases over the network or the Internet. To ensure that these connections are secure and encrypted, the use of SSL certificates is essential. This article explains which SSL certificates are suitable for FileMaker Server, what types of certificates are available and where they can be obtained.

Why are SSL certificates important for FileMaker Server?

SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are protocols that ensure the security of data transmitted between a server and a client over the Internet. By using an SSL certificate on FileMaker Server, you can:

1. Ensure that the data is encrypted during transmissionThis prevents third parties from intercepting or modifying the transmitted information.
2. Verify the identity of the serverAn SSL certificate confirms that the server to which the users are connected is actually the server it claims to be.
3. Strengthening user confidenceUsers accessing your databases via WebDirect or other FileMaker interfaces will see that the connection is secure, giving them confidence in your application and its security.

Suitable SSL certificates for FileMaker Server

Not all SSL certificates are the same, and it's important to choose the right certificate for your specific needs. Here are the different types of SSL certificates that are suitable for FileMaker Server:

1. Domain Validated (DV) Certificates:
   • DescriptionDV certificates offer the simplest and quickest method of securing a domain. The certification authority (CA) only checks the ownership of the domain.
   • Suitable forSmall to medium sized organizations that want to secure their FileMaker Server installation and do not require complex verification.
   • Advantages: Quick issue, cost-effective.
   • DisadvantagesLow level of trust, as only the domain is validated.
2. Organization Validated (OV) Certificates:
   • DescriptionOV certificates offer a higher level of security, as the certification authority not only checks the domain, but also the identity of the company.
   • Suitable for: Companies that need a higher level of trust and security and want to ensure that their identity is visible to users.
   • AdvantagesHigher level of trust than DV certificates, as the company information is contained in the certificate.
   • DisadvantagesLonger issuing time and higher costs compared to DV certificates.
3. Extended Validation (EV) certificates:
   • DescriptionEV certificates offer the highest level of trust. The certification body conducts a thorough review of the company before issuing the certificate.
   • Suitable forLarge companies, banks, and organizations that need to ensure maximum security and trustworthiness.
   • AdvantagesHighest trust level, green address bar in browsers, clearly indicates corporate identity.
   • DisadvantagesHigher costs and longer exhibition time due to intensive inspection.
4. Wildcard SSL certificates:
   • DescriptionWildcard certificates secure a domain and all its subdomains with a single certificate.
   • Suitable forCompanies that want to secure multiple subdomains on the same FileMaker server.
   • Advantages: Cost-effective for securing multiple subdomains, easy to manage.
   • DisadvantagesNot suitable for companies that need or want an individual certificate for each subdomain.
5. Multi-Domain SSL Certificates (SAN/UCC):
   • DescriptionThese certificates can secure several domains and subdomains at the same time.
   • Suitable forCompanies that operate FileMaker servers across different domains and need a centralized solution to manage their SSL security.
   • AdvantagesFlexibility and cost efficiency when securing multiple domains.
   • DisadvantagesAdministration can be more complex when many domains are backed up.

Obtaining SSL certificates

SSL certificates can be purchased from various providers (Certificate Authorities, CA). Here are some of the leading providers and what they offer:

1. DigiCert:
   • DescriptionOne of the largest and best-known providers of SSL certificates, offering high security standards.
   • Certificates offeredDV, OV, EV, Wildcard, Multi-Domain.
   • Suitable for: Companies of all sizes that value high security standards and reliable support.
   • Special featuresFast issue, comprehensive support.
2. GlobalSign:
   • DescriptionGlobalSign offers SSL certificates with a high level of trust and is known for its enterprise solutions.
   • Certificates offeredDV, OV, EV, Wildcard, Multi-Domain.
   • Suitable forLarge companies and organizations looking for a reliable solution for securing their online communication.
   • Special featuresCertificates with extended validation options and comprehensive company verification.
3. Comodo SSL (Sectigo):
   • DescriptionComodo is known for its cost-effective SSL solutions and offers a wide range of certificates.
   • Certificates offeredDV, OV, EV, Wildcard, Multi-Domain.
   • Suitable forSmall to medium-sized companies looking for an affordable SSL solution.
   • Special featuresGood price-performance ratio, fast issue, comprehensive support.
4. Let's Encrypt:
   • DescriptionA free, automated and open certificate provider operated by the Internet Security Research Group (ISRG).
   • Certificates offeredDV certificates.
   • Suitable forSmall businesses and developers looking for a simple and free way to secure their websites.
   • Special featuresFree, quick and easy installation, but no OV or EV certificates.
5. Thawte:
   • DescriptionThawte has been providing SSL certificates for over 20 years and is known for its reliable and cost-effective solutions.
   • Certificates offeredDV, OV, EV, Wildcard.
   • Suitable forCompanies looking for a proven and trustworthy SSL certificate at an affordable price.
   • Special featuresStrong brand reputation, wide range of certificates.

Implementation of SSL certificates on FileMaker Server

After purchasing an SSL certificate, it must be installed on the FileMaker server. Here are the basic steps:

1. Upload SSL certificate to the server:
   • After you have received the certificate from the CA, upload the certificate files to your FileMaker server.
2. Install SSL certificate:
   • Use the FileMaker Server Admin Console to install the certificate. In the console, you can upload and configure the SSL certificate.
3. Restarting the FileMaker Server:
   • After installing the certificate, it is necessary to restart the FileMaker Server for the changes to take effect.
4. Checking the SSL installation:
   • Check the installation by accessing the FileMaker Server via a web browser. Make sure that the connection is displayed as secure and that the correct certificate is used.

Summary

SSL certificates are an essential part of FileMaker Server security. Choosing the right certificate depends on the specific requirements and level of trust your organization needs. From simple DV certificates to complex EV certificates, there are numerous options to ensure that the connection to your FileMaker Server is secure and encrypted. When choosing a provider, look at reputation, support and the types of certificates offered to find the best solution for your needs. With the right implementation of an SSL certificate, you can significantly increase the security of your FileMaker databases and strengthen the trust of your users.