# Security management

The WEKA system is a secure environment. It deploys a combination of security controls to ensure secured communication and user data.

The security controls include the following:

* **HTTPS access:** To access the WEKA GUI, you connect only to one of the system servers using HTTPS through port 14000.  If insecure connections are required, contact the Customer Success Team.
* **Authentication tokens:** The authentication tokens are used for accessing the WEKA system API and to allow the mounting of secure filesystems.
* **KMS:** When creating an encrypted filesystem, a KMS must be used to properly secure the encryption keys. The KMS encrypts and decrypts filesystem keys.
* **TLS certificates:** By default, the system deploys a self-signed certificate to access the GUI, CLI, and API through HTTPS. You can deploy your certificate with an unencrypted private key and certificate PEM files.
* **CA certificates:** The system uses well-known CA certificates to establish trust with external services. For example, when using a KMS.
* **Account lockout:** To prevent brute force attacks, if several login attempts fail (default: 5), the user account is locked for several minutes (default: 2 minutes).
* **Login banner:** The login banner provides a security statement or a legal message on the sign-in page.
* **GUI session automatic termination:** The user is signed out after 30 minutes of inactivity.

**Related topics**

[obtain-authentication-tokens](https://docs.weka.io/4.3/operation-guide/security/obtain-authentication-tokens "mention")

[kms-management](https://docs.weka.io/4.3/operation-guide/security/kms-management "mention")

[tls-certificate-management](https://docs.weka.io/4.3/operation-guide/security/tls-certificate-management "mention")

[ca-certificate-management](https://docs.weka.io/4.3/operation-guide/security/ca-certificate-management "mention")

[organizations](https://docs.weka.io/4.3/operation-guide/organizations "mention")\
    (security topics related to mounting and separation of organizations)

[user-management](https://docs.weka.io/4.3/operation-guide/user-management "mention")\
    (authentication of different user roles and AD/LDAP)