difference between secure, secure-ui and "base" version

Jonathan Brooks

unread,

Jun 30, 2021, 5:26:28 PM6/30/21

to dcm4che

Dear All,

I've seen some threads describing the differences between the versions, but they're not particularly informative...

What does a secure ui actually mean? E.g. does it mean that all communication between dcm4chee-arc-light and client browser is handled via https? Or does it mean that all DICOM traffic between a source and the archive is encrypted in transit? Or does it mean that the data as stored on the disk by dcm4chee-arc-light is encrypted. Or something completely different....?

I'm sorry if this is really obvious, and I've missed the discussion of this elsewhere, but I couldn't find it.

Hope someone can shed some light on this - this seems to have a big impact on install/deployment and I'd like to know what the pros/cons are for these different options.

Best wishes,

Jon

Shefki Esadi

unread,

Jul 1, 2021, 4:50:30 AM7/1/21

to dcm4che

Hi,

the "base" method means there is nether login requirement for the UI nor a need for an access token to access archive API, "secure-ui" means you need a login to access the UI but you don't need access token for the API (you could still use API services without any login credentials or access token), and the "secure" version means as well the UI as the API of the archive is through keycloak secured (The last method is recommended).

Best Regards
Shefki Esadi

Jonathan Brooks

unread,

Jul 1, 2021, 9:26:57 AM7/1/21

to dcm4che

Dear Shefki,

Thanks for taking the time to explain this. I've also had some conflicting advice about which version of dcm4chee to use - am I right in thinking that the 2.x version is no longer under active development, and arc-light is the recommended way forward? Apologies if I've misread the state of play for this...

Lastly, I wonder if you/anyone would care to offer a simple explanation of when to use a docker installation vs doing it all by hand? For example, at some point I'd like to connect our dicom server to use our University's authentication services - so I'm assuming that all the LDAP configuration will have to be tailored to our situation, so docker install might not be a good fit?

I'm really struggling to find a good guide for installation, so any recommendations would be greatly appreciated.

Best wishes,

Jon

Gunter Zeilinger

unread,

Jul 1, 2021, 11:04:44 AM7/1/21

to dcm4che

Right, 2.x version is no longer under active development.

Installing the dockerized version is faster/easier.

Jonathan Brooks

unread,

Jul 1, 2021, 3:56:19 PM7/1/21

to dcm4che

Thanks - I'll look into the dockerized version - are there any disadvantages to not "rolling your own"?