VCRM Repository automatic update security

[Pagnotta]

Hi everybody,

Can anyone explain me the security that encompasses the automatic download of HP compoenets within VCRM service ?

Is the connexion a ssl one ? Is the remote hp server authenticated by the client using an electronic certificate ? Or this connexion poorly secured meaning that a spoof of the remote server IP could allow somone upload stuff to the VCRM repository '

Thanks in advance

Angelo

[TechGuru]

VCRM use normal ftp download for automatic download, it connects to ftp.hp.com & ftp.compaq.com and downloads the components needed

[Pagnotta]

It would be good to implement a server authentication (like in ssl protocol) in order to ensure the repository is trusted...

Do you know, maybe, if a catalog file is downloaded from a trusted source and then files hashes compared to make sure files are genuine ?

Regards

Angelo