You can enable post-quantum cryptography (PQC) for encrypted network tunnels, providing resistance against attacks from quantum computers.
Note
-
Post-quantum cryptography is supported only for all-in-one setups (that is, the CommServe server, the Web Server, and the Command Center must all reside on the same computer).
-
Post-quantum cryptography is supported for CommCell environments using CPR 2024E (11.36) or later.
Before You Begin
On Windows computers only, do the following:
-
Set the registries MaxRequestBytes and MaxFieldLength (DWORDS) at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters to a value of 30720 (30 KB).
-
Reboot the computer.
Procedure
-
On all computers in which PQC needs to be enabled, set the following registries under Session:
-
Keyname = sPostQuantumCerts Value = dilithium3
-
Keyname = sPostQuantumKEM Value = kyber1024
-
-
Restart services on the CommServer computer. This will auto-renew the certificate authority (CA) and generate a new CommServe server client certificate.
-
Restart client services, and then verify certificates are generated on the computer signed by the new CA.