Lotus Sametime. FIPS Support for IBM Lotus Sametime 8.0. Version 8.0 SC

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Lotus Sametime. FIPS Support for IBM Lotus Sametime 8.0. Version 8.0 SC23-8760-00"

Transcription

1 Lotus Sametime Version 8.0 FIPS Support for IBM Lotus Sametime 8.0 SC

2 Disclaimer THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. WHILE EFFORTS WERE MADE TO VERIFY THE COMPLETENESS AND ACCURACY OF THE INFORMATION CONTAINED IN THIS DOCUMENTATION, IT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. IN ADDITION, THIS INFORMATION IS BASED ON IBM'S CURRENT PRODUCT PLANS AND STRATEGY, WHICH ARE SUBJECT TO CHANGE BY IBM WITHOUT NOTICE. IBM SHALL NOT BE RESPONSIBLE FOR ANY DAMAGES ARISING OUT OF THE USE OF, OR OTHERWISE RELATED TO, THIS DOCUMENTATION OR ANY OTHER DOCUMENTATION. NOTHING CONTAINED IN THIS DOCUMENTATION IS INTENDED TO, NOR SHALL HAVE THE EFFECT OF, CREATING ANY WARRANTIES OR REPRESENTATIONS FROM IBM (OR ITS SUPPLIERS OR LICENSORS), OR ALTERING THE TERMS AND CONDITIONS OF THE APPLICABLE LICENSE AGREEMENT GOVERNING THE USE OF IBM SOFTWARE. Licensed Materials - Property of IBM Copyright IBM Corporation 2007 All rights reserved. US Government Users Restricted Rights - Use, duplication or disclosure restricted by GS ADP Schedule Contract with IBM Corp. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact IBM Software Group. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. IBM Corporation IBM Software Group One Rogers Street Cambridge, MA List of Trademarks IBM, the IBM logo, DB2, Domino, Lotus, Notes, Sametime, and WebSphere are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation in the United Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others.

3 Contents FIPS Support for IBM LOTUS Sametime Disclaimer... 2 Licensed Materials - Property of IBM... 2 List of Trademarks... 2 Introduction... 5 Known issues and limitations... 5 Installing and configuring a stand-alone Sametime server and FIPS Proxy.5 Installing and configuring the FIPS Proxy... 6 Setting up IHS as a reverse proxy for Sametime... 8 Configuring the Sametime server for FIPS Configuring STLinks for FIPS proxy Configuring FIPS Proxy for multiple Sametime servers Configuring Enterprise Meeting Server (EMS) for FIPS Configuring the Sametime room servers for FIPS Installing the FIPS Proxy on WebSphere Application Server Relocating applets to IHS and modifying EMS to use IHS for applet download Setting FIPS-specific configuration for Instant Meetings feature and materials management SSL Certificates Support STLinks FIPS Support iii

4

5 Introduction This document describes the configuration of IBM Lotus Sametime 8.0 to enable support for the U.S. government-defined security requirements for cryptographic modules known as FIPS (Federal Information Processing Standard 140-2). The installation and configuration steps are documented along with known issues and limitations for the feature. Known issues and limitations The following Sametime 8.0 features are not currently supported in a FIPS 140- compliant configuration: For the Sametime servers and clients to function properly, all servers and clients in a deployment must be running the updated FIPS 140-compliant code. This release does not include FIPS 140-compliance for Sametime Mobile clients. Client-to-client file transfer from the Sametime Connect client is not FIPS 140-compliant (and therefore should be disabled via server policy settings for a fully FIPS 140-compliant server configuration - see configuration instructions below) Client and server platform support This release supports only Microsoft Windows 2003 Server as the server operating system. This release supports the same client operating system, browser, and Java virtual machine combinations supported by the "base" Sametime, with the following exceptions: o Version JVMs are not supported. This includes both the Sun and IBM JVMs. Apple Macintosh clients function properly using the Safari browser and the Firefox browser version Firefox version 1.5 and may crash when running in a FIPS 140-compliant environment. Installing and configuring a stand-alone Sametime server and FIPS Proxy To maintain FIPS 140-compliance for all data exchanged between clients and the Sametime server, a "FIPS Proxy" device must be installed on WebSphere Application Server to accept data on behalf of the Sametime server. Also, because the IBM Lotus Domino HTTP server is not FIPS 140-compliant, an IBM HTTP Server (IHS) must be deployed as a proxy for the HTTP data to the Sametime server. The following instructions explain how to install a stand-alone Sametime server (Sametime Enterprise Meeting Server (EMS) configuration instructions are covered separately) along with the FIPS Proxy, and how to configure the IHS server. 5

6 Installing and configuring the FIPS Proxy on Websphere Application Server 1. Install WebSphere Application Server (versions is supported) and enable it for FIPS mode. For more information, go to ibm.websphere.base.doc/info/aes/ae/tsec_fips.html 2. On WebSphere Application Server, install the FIPS Proxy.war file from the Sametime build: a. Copy the stfipsproxy.war file to WebSphere/installableApps directory. b. Open the WebSphere Application Server admin console (start server1 and go to and log in. c. Go to Applications, Install New Application. d. Select Local File System and browse to the stfipsproxy.war file in the installableapps directory. e. Accept the defaults on each screen. You can use any context root for the.war file, for example, fipsproxy. 3. After you install the.war file, update the sametimeproxy.xml file. The sametimeproxy.xml file contains the configuration for the proxy. It defines the port routing so the TLS connections can use the proxy to access the Sametime server. Use the comments in the file to set up the host names of the Sametime server and update the location of the keystore and keystoretrust files. The sametimeproxy.xml file is located in the \WebSphere\AppServer\profiles\default\installedApps\[cell]\stfipsproxy_war. ear\stfipsproxy.war directory. 4. Edit the sametimeproxy.xml file and replace the serveraddress entries with entries for your Sametime server. Example: In the following entries, replace "temp.sametimeserver.com" with your Sametime server name, for example, "yourserver.yourdomain.com". <channel name="sametimeproxychannel" factory="com.ibm.sametime.proxy.channel.impl.sametimeproxychannelfactory" sequence="2" weight="1"> <property name="numberofclientports" value="3" /> <property name="clientaddress1" value="*:8081" /> <property name="serveraddress1" value="temp.sametimeserver.com:8081" /> <property name="clientaddress2" value="*:1533" /> <property name="serveraddress2" value="temp.sametimeserver.com:1533" /> <property name="clientaddress3" value="*:554" /> <property name="serveraddress3" value="temp.sametimeserver.com:554" /> <property name="outboundchain" value="proxytcpoutboundconnector" /> <property name="displayperformancestatisticsinterval" value="5" /> 6

7 </channel> 5. Edit the TLSChannel properties in the sametimeproxy.xml file and change the wccmdefault values for the keyfilename and trustfilename so that they point to the appropriate WebSphere Application Server keystores. Example: <channel name="tlsinboundchannel" factory="com.ibm.ws.ssl.channel.impl.sslchannelfactory" sequence="2" weight="1"> <wccmproperty name="com.ibm.ssl.keymanager" wccmpropertyname="keymanager" wccmpropertygroup="securitypropertygroup" wccmdefault="ibmx509" /> <wccmproperty name="com.ibm.ssl.trustmanager" wccmpropertyname="trustmanager" wccmpropertygroup="securitypropertygroup" wccmdefault="ibmx509" /> <wccmproperty name="com.ibm.ssl.protocol" wccmpropertyname="com.ibm.ssl.protocol" wccmpropertygroup="securitypropertygroup" wccmdefault="sslv3" /> <wccmproperty name="com.ibm.ssl.keystore" wccmpropertyname="keyfilename" wccmpropertygroup="securitypropertygroup" wccmdefault="c:/websphere/appserver/profiles/default/etc/dummyse rverkeyfile.jks" /> <wccmproperty name="com.ibm.ssl.truststore" wccmpropertyname="trustfilename" wccmpropertygroup="securitypropertygroup" wccmdefault=""c:/websphere/appserver/profiles/default/etc/dummys ervertrustfile.jks" /> <wccmproperty name="com.ibm.ssl.keystorepassword" wccmpropertyname="keyfilepassword" wccmpropertygroup="securitypropertygroup" wccmdefault="webas" /> <wccmproperty name="com.ibm.ssl.truststorepassword" wccmpropertyname="trustfilepassword" wccmpropertygroup="securitypropertygroup" wccmdefault="webas" /> <wccmproperty name="com.ibm.ssl.keystoretype" wccmpropertyname="keyfileformat" wccmpropertygroup="securitypropertygroup" wccmdefault="jks" /> <wccmproperty name="com.ibm.ssl.truststoretype" wccmpropertyname="trustfileformat" wccmpropertygroup="securitypropertygroup" wccmdefault="jks" /> 7

8 <wccmproperty name="com.ibm.ssl.clientauthentication" wccmpropertyname="clientauthentication" wccmpropertygroup="securitypropertygroup" wccmdefault="false" /> <wccmproperty name="com.ibm.ssl.securitylevel" wccmpropertyname="securitylevel" wccmpropertygroup="securitypropertygroup" wccmdefault="high" /> </channel> 6. Restart WebSphere Application Server, and make sure that the fipsproxy application starts. 7. Checkpoint: After restarting WebSphere Application Server, use the "netstat" command to make sure that the server is listening on the ports listed in Step 4. For example, enter "netstat -a". Setting up IBM HTTP Server (IHS) as a reverse proxy for Sametime Enable IHS for SSL and configure IHS to function as a reverse proxy for Sametime. 1. Run the IBM Key Management Utility (located in the IHS_INSTALL_ROOT/bin directory). For example, C:\Program Files\IBM HTTP Server\bin\ikeyman.bat. 8

9 2. Create the key database file. Select Key Database File -> New. Make sure that you select a CMS key because IHS only works with CMS key databases. 9

10 3. Create the password on the keystore database. 10

11 4. Create a new self-signed certificate. From the Create menu, select New Self- Signed Certificate. 11

12 5. Complete the Create New Key and Certificate Request dialog box fields with information that is relevant to your system. 6. Enable SSL and the reverse proxy on IHS by copying the proxy.conf and rules.conf files from the IHS build folder to the <IHS_INSTALL_ROOT>/conf directory. (These files contain the directives to enable SSL and the reverse proxy.) 7. Edit the proxy.conf file by modifying the following section to match the keydatabase and stash file that you generated in the previous step. <ifmodule mod_ibm_ssl.c> SSLDisable SSLClientAuth none # For some reason this requires the full path: Keyfile "c:/ibm/ihs6/ssl/key.kdb" SSLStashfile "c:/ibm/ihs6/ssl/key.sth" </ifmodule> Note: This file defaults to enabling FIPS on the SSL server, which forces all connections to use FIPS-compliant TLS (SSLv3). To disable FIPS on the SSL server, comment out the SSLFIPSEnable directive. 8. Edit the rules.conf file and change the Sametime server name to your server name: Example: In the following entries, replace "temp.sametimeserver.com" with your Sametime server name, for example, "yourserver.yourdomain.com". 12

13 ProxyPass /st/communitycbr ProxyPass /st/communitycbr ProxyPass /st/meetingcbr ProxyPass /st/broadcastcbr ProxyPass /st/ ProxyPassReverse /st/ This allows the IHS server to reverse proxy for the Sametime server. Note that these rules are not needed for an EMS environment. 9. Include the proxy.conf file in the httpd.conf configuration file: a. Edit IHS_INSTALL_ROOT/conf/httpd.conf and add the following line at the end of the file: include conf/proxy.conf b. Search for the Listen 80 statement and comment it out by placing a # at the beginning of the line. The proxy.conf file contains a listen and it will cause a port conflict to have two listen statements on the same port. 10. If your system is running on Linux, and the kernel firewall is enabled, make sure that you open the SSL port so that data can reach the server. Copy the ACCEPT line and change the port to allow 443 traffic. Here is an iptables file example: -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT Then restart the iptables service: /sbin/service iptables restart. 11. Start or restart IHS. 12. Checkpoint: Go to to verify that you can see the IHS default screen. Enter to access the Sametime Meeting Center. 13

14 Configuring the Sametime server for FIPS 1. Log in to the Sametime server as admin, Administer the server. Navigate to the connectivity options and select Reverse Proxy Support. 2. In the Server Alias field, enter the alias defined in the rules.conf file. Note that this is not needed for an EMS environment. 3. Run the Lotus Notes client (nlnotes.exe) to update the FIPS configuration: a. Open the stconfig.nsf database. b. Open the MeetingServices document in the database. c. Set the FIPSEnabled parameter to True. d. Enter the host names and ports for the FIPS Proxy in the document. The ports should match the ports used in Step 4 in the "Installing and configuring a stand-alone Sametime server" topic. On a default Sametime server, Sametime Community uses port 1533, Sametime Meetings use port 8081, and Sametime Broadcast uses port (Optional) If you use self-signed certificates and followed the procedures in the topic "Setting up IHS as a reverse proxy for Sametime to set up IHS with a self-signed certificate, complete the following steps to allow the Web client applets and installed client to accept connections from the server. (These steps are not necessary if you are using a certificate from a valid Certificate Authority.): a. Enable the use of self-signed certificates for Meeting Room Client and meeting recording by editing the FIPS configuration settings outlined in Step 3. Change FIPS Allow Self-Signed Certificates to "true" to permit the use of certificates from an unknown Certificate Authority or a self-signed certificate. b. Enable the use of self-signed certificates for the installed Sametime Connect client by opening the sametime.ini file in your client installation directory and adding the following line: -DallowPeerCerts=true c. STLinks: See the instructions below for using the STLinks toolkit with a FIPS 140-enabled server. There is also a setting necessary there for use with a server utilizing self-signed certificates. 14

15 5. (Optional) You may chose to use a different certificate keystore file other than the default file (stkeystore.p12) provided with Sametime. The following steps outline changing the default keystore file and password. a. If you do not already have a keystore file you can use the IBM Key Manager program (<domino root>/jvm/bin/ikeyman.exe) to create a new file or edit an existing one. The keystore file must be PKCS12 file format. The default Sametime keystore file (stkeystore.p12) is found in several of the applet JARS and can be extracted then renamed to be used as a replacement keystore file. The default keystore file can be found in <domino root>/data/domino/html/sametime/stmeetingroomclient/ stmeetingroomclient.jar. The password for the stkeystore.p12 file is 'sametime' and that password only applies to managing the certificates in the keystore file. Individual certificates have their own passwords and those passwords should never be published. b. Once a replacement certificate keystore file has been created it must be copied to the individual applet directories so that it can be found when loading the Sametime applets. The replacement keystore file must be copied to the following directories: <domino root>/data/domino/html/sametime/stbroadcastclient <domino root>/data/domino/html/sametime/stdirectoryapplet <domino root>/data/domino/html/sametime/stmeetingroomclient c. The keystore filename and password must be set by editing the FIPS configuration as outlined in Step 3. Set the FIPS Keystore Filename to the name of the replacement keystore file that was copied to the applet directories. Set the FIPS Keystore Password to the password used to manage the keystore file. The replacement keystore file and password will be used by the client applets when FIPS is enabled to create secure connections based on the certificates contained in the keystore file. 6. Configure the Sametime server to support Instant Meetings: a. From the Lotus Notes client, open stconfig.nsf. b. Open the MeetingCenter document. c. Double-click to edit the document. d. In the "Alternate HTTP Server URL" enter: e. Save your changes. f. Exit the Notes client. This step allows the Sametime Connect client to send users to the appropriate server for Instant Meetings, for Test A/V Meetings, to schedule meetings, or to attend scheduled meetings. 7. Restart the Domino Server. 8. Checkpoint: Open the SametimeCommunity2.xml file (in the C:\Lotus\Domino directory) and make sure that you can find an entry for <FIPSServices> that contains the host names and ports that you defined in Step 4 in the "Installing and configuring a stand-alone Sametime server" topic: - <FIPSServices> 15

16 <Enabled>1</Enabled> <CommunityPort>1533</CommunityPort> <CommunityAddress>fips_proxy_server.acme.com</CommunityAddress> <MeetingPort>8081</MeetingPort> <MeetingAddress>fips_proxy_server.acme.com</MeetingAddress> <BroadcastPort>554</BroadcastPort> <BroadcastAddress>fips_proxy_server.acme.com</BroadcastAddress> <KeystoreFilename>stkeystore.p12</KeystoreFilename> <KeystorePassword>sametime</KeystorePassword> <SelfSignedCert>1</SelfSignedCert> </FIPSServices> 9. Disable client-to-client file transfers from the Sametime Connect client: By default, file transfers between Sametime Connect clients that bypass the Sametime server, are allowed. Because these connections are not FIPS 140- compliant, disable this capability via the policy setting from the server Admin: Clear the "Allow client-to-client" file transfer check box in the Community Services Admin section: Configuring STLinks for FIPS If a FIPS Proxy is used with the Sametime server as part of a FIPS 140-compliant deployment, configure STLinks for proxy (as described in the STLinks documentation): 1. Uncomment and edit the following stlinks.js variables accordingly: //var ll_rproxyname=" //var ll_affinityid="st1"; 2. Configure STLinks for a FIPS environment. Change the following parameters in the stlinks.js file as needed, for example, set isfips_env to true, and correctly update the keystore and keystore password: var isfips_env = false; var stfipskeystore = "stkeystore.p12"; var stkeystorepwd = "sametime"; var allowselfsignedcerts = false; Note: If the server is configured to run using self-signed certificates, change the "allowselfsignedcerts" value to true: var allowselfsignedcerts = true; 16

17 3. Replace the stlinks.jar file (<domino_data>\domino\html\sametime\stlinks) with the signed stlinks.jar file (<domino_data>\domino\html\sametime\stlinks\signed). 4. Verify that copies of the SSLite library (sslite140-v3.16.zip) and the Keystore file (stkeystore.p12) are in the <domino_data>\domino\html\sametime\stlinks directory. If they are not, copy those files in to that directory. Configuring FIPS Proxy for multiple Sametime servers These instructions explain how to add support for additional IP addresses and ports. This step is required if you want a FIPS Proxy to support multiple Sametime servers or Room Servers. Description of SametimeProxy.xml file sections <factories/> This section defines channel factories. <channels/> The channel section defines which inbound channels are available to be loaded. This entry also contains a number of properties that are passed to the channel on initialization. The host name and port property are used to determine which ports to listen on. <chains> The chains section defines the "stack." The channel framework allows different channels to be layered. As long as the channel chains are compatible, the channelframework will allow a given chain to be constructed. The chains section defines the multiple channel chains to be loaded. <groups/> The groups section allows the user to define which chains to load. The proxy application loads the chains listed in the "AllChains" group. To add additional inbound chains and routing rules, perform the following steps: 1. Add an additional ProxyTCPChannel entry to the XML file: <channel name="proxytcpchannel#" factory="com.ibm.ws.tcp.channel.impl.tcpchannelfactory" sequence="1" weight="1"> <property name="hostname" value="*" /> <property name="port" value="8081" /> <property name="maxopenconnections" value="20000" /> <property name="tcpnodelay" value="1" /> </channel> 2. Make sure to increment the number of the ProxyTCPChannel entry so that it is unique. Set the host name and port values to the desired port. 17

18 3. Include an additional SametimeProxyInbound chain entry. Make sure to use a unique #: <chain name="sametimeproxyinboundchain#" type="0"> <channel name="proxytcpchannel#" /> <channel name="tlsinboundchannel" /> <channel name="sametimeproxychannel" /> </chain> 4. Make sure that the ProxyTCPChannel entry number matches the entry from the previous step. 5. Add the new chain to the groups element: <chain name="sametimeproxyinboundchain" type="0"> <property name="enabled" value="true" /> <property name="enabledtransport" value="true" /> </chain> 6. Make sure that the SametimeProxyInboundChain matches the one added in the previous step. 7. Define the routing rules for this new connection by editing the SametimeProxyChannel properties: <channel name="sametimeproxychannel" factory="com.ibm.sametime.proxy.channel.impl.sametimeproxychannelfactory " sequence="2" weight="1"> <property name="numberofclientports" value="3" /> <property name="clientport1" value="*:8081" /> <property name="serveraddress1" value=" temp.sametimeserver.com:8081" /> <property name="clientport2" value="*:1533" /> <property name="serveraddress2" value=" temp.sametimeserver.com:1533" /> <property name="clientport3" value="*:554" /> <property name="serveraddress3" value=" temp.sametimeserver.com:554" /> <property name="outboundchain" value="proxytcpoutboundconnector" /> <property name="displayperformancestatisticsinterval" value="5" /> </channel> 8. Add clientport and serveraddress entries for the additional channels listed in the previous steps. Note that the host names for the clientport must match the values defined on the ProxyTCPChannel entry. Increase the 18

19 numberofclientports to match the number of client and server addresses in the property list. 9. Save the XML file. 10. Open the XML file with Internet Explorer or Firefox to make sure that it is properly formed and looks correct. 11. Restart the server to make the changes take effect. 19

20 Configuring Enterprise Meeting Server (EMS) for FIPS These instructions assume that you have an installed and fully functional Sametime 8.0 EMS environment (DB2, WebSphere Application Server, IHS, EMS, and Room Servers). Refer to existing EMS documentation for instructions on installing and configuring the EMS environment. For instructions on enabling SSL for WebSphere Application Server, go to ibm.websphere.base.doc/info/aes/ae/csec_sslsecurecom.html For instructions on enabling SSL on IHS and the WebSphere Application Server plug-in, go to here.base.doc/info/aes/ae/tsec_httpserv2.html Configuring the Sametime room servers for FIPS 1. Run the Lotus Notes client (nlnotes.exe) to update the FIPS configuration: a. Open the stconfig.nsf database. b. Open the MeetingServices document in the database. c. Set the FIPSEnabled parameter to True. d. Enter the host names and ports for the FIPS Proxy in the document. The ports should match the ports used in Step 4 in the "Installing and configuring a stand-alone Sametime server" topic. On a default Sametime server, Sametime Community uses port 1533, Sametime Meetings use port 8081, and Sametime Broadcast uses port (Optional) If you use self-signed certificates and followed the procedures in the topic "Setting up IHS as a reverse proxy for Sametime to set up IHS with a self-signed certificate, complete the following steps to allow the Web client applets and installed client to accept connections from the server. (These steps are not necessary if you are using a certificate from a valid Certificate Authority.): a. Enable the use of self-signed certificates for Meeting Room Client and meeting recording by editing the FIPS configuration settings outlined in Step 3. Change FIPS Allow Self-Signed Certificates to "true" to permit the use of certificates from an unknown Certificate Authority or a self-signed certificate. b. Enable the use of self-signed certificates for the installed Sametime Connect client by opening the sametime.ini file in your client installation directory and adding the following line: -DallowPeerCerts=true 20

21 Installing the FIPS Proxy on WebSphere Application Server 1. Install WebSphere Application Server (versions is supported) and enable it for FIPS mode. For more information, go to ibm.websphere.base.doc/info/aes/ae/tsec_fips.html Note: This step should be applied only on the WebSphere Application Server where the FIPS Proxy will be deployed. The FIPS-enable setting for WebSphere Application Server cannot be applied on the WebSphere Application Server where EMS is deployed because of incompatibilities with single sign-on (SSO). The HTTP traffic to the EMS server is protected by IHS, which will be enabled for FIPS compliance. 2. Refer to the FIPS Proxy installation instructions above in the Installing and configuring the FIPS Proxy section. Those instructions provide details for installing the FIPS Proxy.war file, configuring the FIPS Proxy, and verifying that the FIPS Proxy is listening on the appropriate ports. Relocating applets to IHS and modifying EMS to use IHS for applet download. Relocating the applets to IHS server reduces the network traffic between the Room Server and the IHS server. 1. Copy the lotus/domino/data/domino/html/sametime folder to the docroot directory on your IHS server or servers. If you are using an IHS cluster, copy it to each server. 2. Confirm that you can access and then update the APPLETDOWNLOADURL column in the STCONFIG.ROOMSERVER table in DB2 to reflect the host name of your IHS (cluster): Access and enter the following command: UPDATE STCONFIG.ROOMSERVER SET APPLETDOWNLOADURL = ' 3. Refresh the configuration by restarting the EMS application servers. After the restart is complete, you should see the applets and other related files being served by your IHS cluster, and not the Room Servers. Note: If any patch is made to the Room Servers you must re-copy the Sametime folder to your IHS environment, and remove and re-add the affected servers to your EMS environment. Setting FIPS-specific configuration for Instant Meetings feature and materials management 21

22 1. On the Room Server, set URLBASE= in the sametime.ini [config] section, and restart the Room Server to enable the Instant Meeting feature from the Sametime Connect client. 2. On the EMS server, make sure that the following configuration parameters are correct: From enter the following command in the box: select * from stconfig.organization and click the Execute SQL button. 3. In the results, ensure that the column marked MTGCNTRCONNECTIONURL contains It should match the URLBASE as set in the Room Servers.ini file. If it is not correct, enter the following command in the entry box to update it: update stconfig.organization set MTGCNTRCONNECTIONURL = ' and click the Execute SQL button. The result is a "1 record modified" statement. The second parameter is for enabling the dynamic attachment feature. In the SQL box, enter the command: select * from stconfig.roomserver 4. Click the Execute SQL button. In the results, look at the column marked MATERIALSREFRESHURL and update that column for all Room Servers to use the IHS Proxy to access the Room Servers by entering the following command: update stconfig.roomserver set MATERIALSREFRESHURL = ' where servername = '<servername>' The <servlet> part above must be unique for each Room Server. If you have two Room Servers, enter the command twice, like this: update stconfig.roomserver set MATERIALSREFRESHURL = ' where servername = 'CN=roomserver1/o=org' update stconfig.roomserver set MATERIALSREFRESHURL = ' where servername = 'CN=roomserver2/o=org' Note: The <servername> must match exactly the servernames in the SERVERNAME column of the results. Servernames are case-sensitive. 5. Refresh the EMS configuration. You can do this by hitting the iwc-admin section and changing any configuration value (and then changing it back). Alternatively, you can restart EMS and the Room Servers to refresh the configuration. Note: 'fips-host' in this case represents the IHS server for which you have followed the configuration steps for the FIPS proxy. 6. On the IHS server, we will be adding a couple of proxy rules for this to work. Use Notepad to edit the IBM HTTP Server\conf\rules.conf file, and add 22

23 the following: ProxyPass /stsrc.nsf/ ProxyPassReverse /stsrc.nsf/ where " is the address of one of your Room Servers. You need to add this section only once. 7. Add the following for each of the Room Servers. Using the example above for two Room Servers, add: ProxyPass /servlet1/ ProxyPassReverse /servlet1/ ProxyPass /servlet2/ ProxyPassReverse /servlet2/ 8. Restart the IHS server for the changes to take effect. Why this works: This works simply because the requests that are usually handled by the Room Server are handled through the IHS proxy instead. The IHS proxy sends the request to the Room Server, which then redirects the request back to EMS like it does in a normal environment where the Room Server is available to end users. SSL Certificates Support (Optional) If you use self-signed certificates and followed the procedures in the topic "Setting up IHS as a reverse proxy for Sametime to set up IHS with a selfsigned certificate, complete the following steps to allow the Web client applets and installed client to accept connections from the server. (These steps are not necessary if you are using a certificate from a valid Certificate Authority.): a. Enable the use of self-signed certificates for Meeting Room Client and meeting recording by editing the FIPS configuration settings outlined in Step 3. Change FIPS Allow Self-Signed Certificates to "true" to permit the use of certificates from an unknown Certificate Authority or a self-signed certificate. b. Enable the use of self-signed certificates for the installed Sametime Connect client by opening the sametime.ini file in your client installation directory and adding the following line: -DallowPeerCerts=true c. STLinks: See the instructions below for using the STLinks toolkit with a FIPS 140-enabled server. There is also a setting necessary there for use with a server utilizing self-signed certificates. (Optional) You may chose to use a different certificate keystore file other than the default file (stkeystore.p12) provided with Sametime. The following steps outline changing the default keystore file and password. a. If you do not already have a keystore file you can use the IBM Key Manager program (<domino root>/jvm/bin/ikeyman.exe) to create a new file or edit an existing one. The keystore file must be PKCS12 file format. 23

24 The default Sametime keystore file (stkeystore.p12) is found in several of the applet JARS and can be extracted then renamed to be used as a replacement keystore file. The default keystore file can be found in <domino root>/data/domino/html/sametime/stmeetingroomclient/ stmeetingroomclient.jar. The password for the stkeystore.p12 file is 'sametime' and that password only applies to managing the certificates in the keystore file. Individual certificates have their own passwords and those passwords should never be published. b. Once a replacement certificate keystore file has been created it must be copied to the individual applet directories so that it can be found when loading the Sametime applets. The replacement keystore file must be copied to the following directories: <domino root>/data/domino/html/sametime/stbroadcastclient <domino root>/data/domino/html/sametime/stdirectoryapplet <domino root>/data/domino/html/sametime/stmeetingroomclient c. The keystore filename and password must be set by editing the FIPS configuration as outlined in Step 3. Set the FIPS Keystore Filename to the name of the replacement keystore file that was copied to the applet directories. Set the FIPS Keystore Password to the password used to manage the keystore file. The replacement keystore file and password will be used by the client applets when FIPS is enabled to create secure connections based on the certificates contained in the keystore file. a. STLinks FIPS Support Refer to the topic Configuring STLinks for FIPS for instructions on using the STLinks toolkit with a FIPS140-enabled server. There is also a setting necessary there for use with a server that utilizes self-signed certificates. 24

Web servers and WebSphere Portal

Web servers and WebSphere Portal Web servers and WebSphere Portal By default IBM WebSphere Portal uses the internal HTTP transport within IBM WebSphere Application Server to handle requests. However, because WebSphere Application Server

More information

RLP Citrix Setup Guide

RLP Citrix Setup Guide RLP Citrix Setup Guide M Version 2.1 Trademarks IBM is a registered trademark of International Business Machines Corporation. The following are trademarks of International Business Machines Corporation

More information

Sametime Gateway Version 9. Deploying DMZ Secure Proxy Server

Sametime Gateway Version 9. Deploying DMZ Secure Proxy Server Sametime Gateway Version 9 Deploying DMZ Secure Proxy Server November 2013 Edition Notice Note: Before using this information and the product it supports, read the information in "Notices." This edition

More information

Forward proxy server vs reverse proxy server

Forward proxy server vs reverse proxy server Using a reverse proxy server for TAD4D/LMT Intended audience The intended recipient of this document is a TAD4D/LMT administrator and the staff responsible for the configuration of TAD4D/LMT agents. Purpose

More information

Preface. Limitations. Disclaimers. Technical Support. Luna SA and IBM HTTP Server/IBM Web Sphere Application Server Integration Guide

Preface. Limitations. Disclaimers. Technical Support. Luna SA and IBM HTTP Server/IBM Web Sphere Application Server Integration Guide Luna SA and IBM HTTP Server/IBM Web Sphere Application Server Integration Guide Preface Preface 2012 SafeNet, Inc. All rights reserved. Part Number: 007-012077-001 (Rev B, 06/2012) All intellectual property

More information

IBM Remote Lab Platform Citrix Setup Guide

IBM Remote Lab Platform Citrix Setup Guide Citrix Setup Guide Version 1.8.2 Trademarks IBM is a registered trademark of International Business Machines Corporation. The following are trademarks of International Business Machines Corporation in

More information

Sametime Version 9. Integration Guide. Integrating Sametime 9 with Domino 9, inotes 9, Connections 4.5, and WebSphere Portal 8.0.0.

Sametime Version 9. Integration Guide. Integrating Sametime 9 with Domino 9, inotes 9, Connections 4.5, and WebSphere Portal 8.0.0. Sametime Version 9 Integration Guide Integrating Sametime 9 with Domino 9, inotes 9, Connections 4.5, and WebSphere Portal 8.0.0.1 Edition Notice Note: Before using this information and the product it

More information

SSL CONFIGURATION GUIDE

SSL CONFIGURATION GUIDE HYPERION RELEASE 9.3.1 SSL CONFIGURATION GUIDE CONTENTS IN BRIEF About This Document... 2 Assumptions... 2 Information Sources... 2 Identifying SSL Points for Hyperion Products... 4 Common Activities...

More information

Installing and Configuring DB2 10, WebSphere Application Server v8 & Maximo Asset Management

Installing and Configuring DB2 10, WebSphere Application Server v8 & Maximo Asset Management IBM Tivoli Software Maximo Asset Management Installing and Configuring DB2 10, WebSphere Application Server v8 & Maximo Asset Management Document version 1.0 Rick McGovern Staff Software Engineer IBM Maximo

More information

DEPLOYING EMC DOCUMENTUM BUSINESS ACTIVITY MONITOR SERVER ON IBM WEBSPHERE APPLICATION SERVER CLUSTER

DEPLOYING EMC DOCUMENTUM BUSINESS ACTIVITY MONITOR SERVER ON IBM WEBSPHERE APPLICATION SERVER CLUSTER White Paper DEPLOYING EMC DOCUMENTUM BUSINESS ACTIVITY MONITOR SERVER ON IBM WEBSPHERE APPLICATION SERVER CLUSTER Abstract This white paper describes the process of deploying EMC Documentum Business Activity

More information

IBM WEBSPHERE LOAD BALANCING SUPPORT FOR EMC DOCUMENTUM WDK/WEBTOP IN A CLUSTERED ENVIRONMENT

IBM WEBSPHERE LOAD BALANCING SUPPORT FOR EMC DOCUMENTUM WDK/WEBTOP IN A CLUSTERED ENVIRONMENT White Paper IBM WEBSPHERE LOAD BALANCING SUPPORT FOR EMC DOCUMENTUM WDK/WEBTOP IN A CLUSTERED ENVIRONMENT Abstract This guide outlines the ideal way to successfully install and configure an IBM WebSphere

More information

1. If there is a temporary SSL certificate in your /ServerRoot/ssl/certs/ directory, move or delete it. 2. Run the following command:

1. If there is a temporary SSL certificate in your /ServerRoot/ssl/certs/ directory, move or delete it. 2. Run the following command: C2Net Stronghold Cisco Adaptive Security Appliance (ASA) 5500 Cobalt RaQ4/XTR F5 BIG IP (version 9) F5 BIG IP (pre-version 9) F5 FirePass VPS HSphere Web Server IBM HTTP Server Java-based web server (generic)

More information

Deploying EMC Documentum WDK Applications with IBM WebSEAL as a Reverse Proxy

Deploying EMC Documentum WDK Applications with IBM WebSEAL as a Reverse Proxy Deploying EMC Documentum WDK Applications with IBM WebSEAL as a Reverse Proxy Applied Technology Abstract This white paper serves as a detailed solutions guide for installing and configuring IBM WebSEAL

More information

New Single Sign-on Options for IBM Lotus Notes & Domino. 2012 IBM Corporation

New Single Sign-on Options for IBM Lotus Notes & Domino. 2012 IBM Corporation New Single Sign-on Options for IBM Lotus Notes & Domino 2012 IBM Corporation IBM s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM s sole

More information

Configuring Secure Socket Layer (SSL) for use with BPM 7.5.x

Configuring Secure Socket Layer (SSL) for use with BPM 7.5.x Configuring Secure Socket Layer (SSL) for use with BPM 7.5.x Configuring Secure Socket Layer (SSL) communication for a standalone environment... 2 Import the Process Server WAS root SSL certificate into

More information

White Paper DEPLOYING WDK APPLICATIONS ON WEBLOGIC AND APACHE WEBSERVER CLUSTER CONFIGURED FOR HIGH AVAILABILITY AND LOAD BALANCE

White Paper DEPLOYING WDK APPLICATIONS ON WEBLOGIC AND APACHE WEBSERVER CLUSTER CONFIGURED FOR HIGH AVAILABILITY AND LOAD BALANCE White Paper DEPLOYING WDK APPLICATIONS ON WEBLOGIC AND APACHE WEBSERVER CLUSTER CONFIGURED FOR HIGH AVAILABILITY AND LOAD BALANCE Abstract This White Paper provides information to deploy WDK based applications

More information

Setting Up SSL From Client to Web Server and Plugin to WAS

Setting Up SSL From Client to Web Server and Plugin to WAS IBM Software Group Setting Up SSL From Client to Web Server and Plugin to WAS Harold Fanning (hfanning@us.ibm.com) WebSphere L2 Support 12 December 2012 Agenda Secure Socket Layer (SSL) from a Client to

More information

IBM WebSphere Partner Gateway V6.2.1 Advanced and Enterprise Editions

IBM WebSphere Partner Gateway V6.2.1 Advanced and Enterprise Editions IBM WebSphere Partner Gateway V6.2.1 Advanced and Enterprise Editions Integrated SFTP server 2011 IBM Corporation The presentation gives an overview of integrated SFTP server feature IntegratedSFTPServer.ppt

More information

IBM WebSphere Application Server Communications Enabled Applications

IBM WebSphere Application Server Communications Enabled Applications IBM WebSphere Application Server Communications Enabled Applications Configuring a CEA environment 2011 IBM Corporation This presentation describes how to configure a WebSphere Application Server environment

More information

Sophos Mobile Control Installation guide. Product version: 3

Sophos Mobile Control Installation guide. Product version: 3 Sophos Mobile Control Installation guide Product version: 3 Document date: January 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...16 4 External

More information

IBM. IBM i2 Analyze: Configuring Secure Sockets Layer (SSL) Version 4 Release 0 SC

IBM. IBM i2 Analyze: Configuring Secure Sockets Layer (SSL) Version 4 Release 0 SC IBM i2 Analyze: Configuring Secure Sockets Layer (SSL) Version 4 Release 0 IBM SC27-5091-00 Note Before using this information and the product it supports, read the information in Notices on page 15. This

More information

XenClient Enterprise Synchronizer Installation Guide

XenClient Enterprise Synchronizer Installation Guide XenClient Enterprise Synchronizer Installation Guide Version 5.1.0 March 26, 2014 Table of Contents About this Guide...3 Hardware, Software and Browser Requirements...3 BIOS Settings...4 Adding Hyper-V

More information

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide BlackBerry Enterprise Service 10 Version: 10.2 Configuration Guide Published: 2015-02-27 SWD-20150227164548686 Contents 1 Introduction...7 About this guide...8 What is BlackBerry Enterprise Service 10?...9

More information

Universal Content Management Version 10gR3. Security Providers Component Administration Guide

Universal Content Management Version 10gR3. Security Providers Component Administration Guide Universal Content Management Version 10gR3 Security Providers Component Administration Guide Copyright 2008 Oracle. All rights reserved. The Programs (which include both the software and documentation)

More information

Active Directory Synchronization with Lotus ADSync

Active Directory Synchronization with Lotus ADSync Redbooks Paper Active Directory Synchronization with Lotus ADSync Billy Boykin Tommi Tulisalo The Active Directory Synchronization tool, or ADSync, allows Active Directory administrators to manage (register,

More information

Tivoli Endpoint Manager for Security and Compliance Analytics. Setup Guide

Tivoli Endpoint Manager for Security and Compliance Analytics. Setup Guide Tivoli Endpoint Manager for Security and Compliance Analytics Setup Guide Setup Guide i Note: Before using this information and the product it supports, read the information in Notices. Copyright IBM Corporation

More information

Sophos Mobile Control Installation guide. Product version: 3.5

Sophos Mobile Control Installation guide. Product version: 3.5 Sophos Mobile Control Installation guide Product version: 3.5 Document date: July 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...10 4 External

More information

Application Servers - BEA WebLogic. Installing the Application Server

Application Servers - BEA WebLogic. Installing the Application Server Proven Practice Application Servers - BEA WebLogic. Installing the Application Server Product(s): IBM Cognos 8.4, BEA WebLogic Server Area of Interest: Infrastructure DOC ID: AS01 Version 8.4.0.0 Application

More information

IBM VisualAge for Java,Version3.5. Remote Access to Tool API

IBM VisualAge for Java,Version3.5. Remote Access to Tool API IBM VisualAge for Java,Version3.5 Remote Access to Tool API Note! Before using this information and the product it supports, be sure to read the general information under Notices. Edition notice This edition

More information

Process Integrator Deployment on IBM Webspher Application Server Cluster

Process Integrator Deployment on IBM Webspher Application Server Cluster White Paper Process Integrator Deployment on IBM Webspher Application Server Cluster A user guide for deploying Process integrator on websphere application server 7.0.0.9 cluster Abstract This paper describes

More information

Lepide Active Directory Self Service. Installation Guide. Lepide Active Directory Self Service Tool. Lepide Software Private Limited Page 1

Lepide Active Directory Self Service. Installation Guide. Lepide Active Directory Self Service Tool. Lepide Software Private Limited Page 1 Installation Guide Lepide Active Directory Self Service Tool Lepide Software Private Limited Page 1 Lepide Software Private Limited, All Rights Reserved This User Guide and documentation is copyright of

More information

Tivoli Endpoint Manager for Security and Compliance Analytics

Tivoli Endpoint Manager for Security and Compliance Analytics Tivoli Endpoint Manager for Security and Compliance Analytics User s Guide User s Guide i Note: Before using this information and the product it supports, read the information in Notices. Copyright IBM

More information

IBM WebSphere Application Server

IBM WebSphere Application Server IBM WebSphere Application Server Multihomed hosting 2011 IBM Corporation Multihoming allows you to have a single application communicate with different user agent clients and user agent servers on different

More information

Sophos Mobile Control Installation guide

Sophos Mobile Control Installation guide Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running

More information

IBM WebSphere Application Server Communications Enabled Applications Setup guide

IBM WebSphere Application Server Communications Enabled Applications Setup guide Copyright IBM Corporation 2009, 2011 All rights reserved IBM WebSphere Application Server Communications Enabled Applications Setup guide What this exercise is about... 1 Lab requirements... 2 What you

More information

www.novell.com/documentation Installation Guide Novell Storage Manager 4.1 for Active Directory September 10, 2015

www.novell.com/documentation Installation Guide Novell Storage Manager 4.1 for Active Directory September 10, 2015 www.novell.com/documentation Installation Guide Novell Storage Manager 4.1 for Active Directory September 10, 2015 Legal Notices Condrey Corporation makes no representations or warranties with respect

More information

IBM Security QRadar Version 7.1.0 (MR1) Replacing the SSL Certificate Technical Note

IBM Security QRadar Version 7.1.0 (MR1) Replacing the SSL Certificate Technical Note IBM Security QRadar Version 7.1.0 (MR1) Technical Note Note: Before using this information and the product that it supports, read the information in Notices and Trademarks on page 5 Copyright IBM Corp.

More information

DameWare Server. Administrator Guide

DameWare Server. Administrator Guide DameWare Server Administrator Guide About DameWare Contact Information Team Contact Information Sales 1.866.270.1449 General Support Technical Support Customer Service User Forums http://www.dameware.com/customers.aspx

More information

IBM TRIRIGA Anywhere Version 10 Release 4. Installing a development environment

IBM TRIRIGA Anywhere Version 10 Release 4. Installing a development environment IBM TRIRIGA Anywhere Version 10 Release 4 Installing a development environment Note Before using this information and the product it supports, read the information in Notices on page 9. This edition applies

More information

Sage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and 2012. October 2013

Sage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and 2012. October 2013 Sage HRMS 2014 Sage Employee Self Service Tech Installation Guide for Windows 2003, 2008, and 2012 October 2013 This is a publication of Sage Software, Inc. Document version: October 17, 2013 Copyright

More information

EMC Data Protection Search

EMC Data Protection Search EMC Data Protection Search Version 1.0 Security Configuration Guide 302-001-611 REV 01 Copyright 2014-2015 EMC Corporation. All rights reserved. Published in USA. Published April 20, 2015 EMC believes

More information

IBM Security Identity Manager Version 6.0. Security Guide SC14-7699-02

IBM Security Identity Manager Version 6.0. Security Guide SC14-7699-02 IBM Security Identity Manager Version 6.0 Security Guide SC14-7699-02 IBM Security Identity Manager Version 6.0 Security Guide SC14-7699-02 Note Before using this information and the product it supports,

More information

IBM Security QRadar Version 7.2.0. Installing QRadar with a Bootable USB Flash-drive Technical Note

IBM Security QRadar Version 7.2.0. Installing QRadar with a Bootable USB Flash-drive Technical Note IBM Security QRadar Version 7.2.0 Installing QRadar with a Bootable USB Flash-drive Technical Note Note: Before using this information and the product that it supports, read the information in Notices

More information

Consolidated Monitoring, Analysis and Automated Remediation For Hybrid IT Infrastructures. Goliath Performance Monitor Installation Guide v11.

Consolidated Monitoring, Analysis and Automated Remediation For Hybrid IT Infrastructures. Goliath Performance Monitor Installation Guide v11. Consolidated Monitoring, Analysis and Automated Remediation For Hybrid IT Infrastructures Goliath Performance Monitor Installation Guide v11.5 (v11.5) Document Date: March 2015 www.goliathtechnologies.com

More information

Patch Management for Red Hat Enterprise Linux. User s Guide

Patch Management for Red Hat Enterprise Linux. User s Guide Patch Management for Red Hat Enterprise Linux User s Guide User s Guide i Note: Before using this information and the product it supports, read the information in Notices. Copyright IBM Corporation 2003,

More information

Business Process Management IBM Business Process Manager V7.5

Business Process Management IBM Business Process Manager V7.5 Business Process Management IBM Business Process Manager V7.5 Federated task management for BPEL processes and human tasks This presentation introduces the federated task management feature for BPEL processes

More information

WebSphere Business Monitor V7.0 Configuring a remote CEI server

WebSphere Business Monitor V7.0 Configuring a remote CEI server Copyright IBM Corporation 2010 All rights reserved WebSphere Business Monitor V7.0 What this exercise is about... 2 Lab requirements... 2 What you should be able to do... 2 Introduction... 3 Part 1: Install

More information

IBM WebSphere Message Broker - Integrating Tivoli Federated Identity Manager

IBM WebSphere Message Broker - Integrating Tivoli Federated Identity Manager IBM WebSphere Message Broker - Integrating Tivoli Federated Identity Manager Version 1.1 Property of IBM Page 1 of 18 Version 1.1, March 2008 This version applies to Version 6.0.0.3 of IBM WebSphere Message

More information

Sophos Mobile Control Installation guide. Product version: 3.6

Sophos Mobile Control Installation guide. Product version: 3.6 Sophos Mobile Control Installation guide Product version: 3.6 Document date: November 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...5 3 Set up Sophos Mobile Control...11 4 External

More information

HOW TO CONFIGURE PASS-THRU PROXY FOR ORACLE APPLICATIONS

HOW TO CONFIGURE PASS-THRU PROXY FOR ORACLE APPLICATIONS HOW TO CONFIGURE PASS-THRU PROXY FOR ORACLE APPLICATIONS Overview of Oracle JInitiator Oracle JInitiator enables users to run Oracle Forms applications using Netscape Navigator or Internet Explorer. It

More information

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise Upgrade paths Enhancements to the setup application Administrators can upgrade to BlackBerry Enterprise Server 5.0 SP4 for Novell

More information

IBM Lotus Enterprise Integrator (LEI) for Domino. Version 8.5.2. August 17, 2010

IBM Lotus Enterprise Integrator (LEI) for Domino. Version 8.5.2. August 17, 2010 IBM Lotus Enterprise Integrator (LEI) for Domino Version 8.5.2 August 17, 2010 A) What's new in LEI V8.5.2 B) System requirements C) Installation considerations D) Operational considerations E) What's

More information

IBM Systems Director Navigator for i5/os New Web console for i5, Fast, Easy, Ready

IBM Systems Director Navigator for i5/os New Web console for i5, Fast, Easy, Ready Agenda Key: Session Number: 35CA 540195 IBM Systems Director Navigator for i5/os New Web console for i5, Fast, Easy, Ready 8 Copyright IBM Corporation, 2008. All Rights Reserved. This publication may refer

More information

Release Notes. IBM Tivoli Identity Manager Oracle Database Adapter. Version 5.0.1. First Edition (December 7, 2007)

Release Notes. IBM Tivoli Identity Manager Oracle Database Adapter. Version 5.0.1. First Edition (December 7, 2007) IBM Tivoli Identity Manager Version 5.0.1 First Edition (December 7, 2007) This edition applies to version 5.0 of Tivoli Identity Manager and to all subsequent releases and modifications until otherwise

More information

PROXY SETUP WITH IIS USING URL REWRITE, APPLICATION REQUEST ROUTING AND WEB FARM FRAMEWORK OR APACHE HTTP SERVER FOR EMC DOCUMENTUM EROOM

PROXY SETUP WITH IIS USING URL REWRITE, APPLICATION REQUEST ROUTING AND WEB FARM FRAMEWORK OR APACHE HTTP SERVER FOR EMC DOCUMENTUM EROOM White Paper PROXY SETUP WITH IIS USING URL REWRITE, APPLICATION REQUEST ROUTING AND WEB FARM FRAMEWORK OR APACHE HTTP SERVER FOR EMC DOCUMENTUM EROOM Abstract This white paper explains how to setup Proxy

More information

EMC Documentum Connector for Microsoft SharePoint

EMC Documentum Connector for Microsoft SharePoint EMC Documentum Connector for Microsoft SharePoint Version 7.1 Installation Guide EMC Corporation Corporate Headquarters Hopkinton, MA 01748-9103 1-508-435-1000 www.emc.com Legal Notice Copyright 2013-2014

More information

AIMS Installation and Licensing Guide

AIMS Installation and Licensing Guide AIMS Installation and Licensing Guide Version 9 2603 Camino Ramon Suite 110 San Ramon, CA 94583 Toll Free: 800-609-8610 Direct: 925-217-5170 FAX: 925-217-0853 Email: support@avatier.com Limited Warranty

More information

IBM TRIRIGA Application Platform Version 3 Release 4.1. Single Sign-On Setup User Guide

IBM TRIRIGA Application Platform Version 3 Release 4.1. Single Sign-On Setup User Guide IBM TRIRIGA Application Platform Version 3 Release 4.1 Single Sign-On Setup User Guide Note Before using this information and the product it supports, read the information in Notices on page 19. This edition

More information

Apache Server Implementation Guide

Apache Server Implementation Guide Apache Server Implementation Guide 340 March Road Suite 600 Kanata, Ontario, Canada K2K 2E4 Tel: +1-613-599-2441 Fax: +1-613-599-2442 International Voice: +1-613-599-2441 North America Toll Free: 1-800-307-7042

More information

Ahsay Replication Server v5.5. Administrator s Guide. Ahsay TM Online Backup - Development Department

Ahsay Replication Server v5.5. Administrator s Guide. Ahsay TM Online Backup - Development Department Ahsay Replication Server v5.5 Administrator s Guide Ahsay TM Online Backup - Development Department October 9, 2009 Copyright Notice Ahsay Systems Corporation Limited 2008. All rights reserved. Author:

More information

Avaya one X Portal 1.1.3 Lightweight Directory Access Protocol (LDAP) over Secure Socket Layer (SSL) Configuration

Avaya one X Portal 1.1.3 Lightweight Directory Access Protocol (LDAP) over Secure Socket Layer (SSL) Configuration Avaya one X Portal 1.1.3 Lightweight Directory Access Protocol (LDAP) over Secure Socket Layer (SSL) Configuration This document provides configuration steps for Avaya one X Portal s 1.1.3 communication

More information

Release Notes for Version 1.5.207

Release Notes for Version 1.5.207 Release Notes for Version 1.5.207 Created: March 9, 2015 Table of Contents What s New... 3 Fixes... 3 System Requirements... 3 Stonesoft Appliances... 3 Build Version... 4 Product Binary Checksums... 4

More information

Configuring Single Sign-On for Documentum Applications with RSA Access Manager Product Suite. Abstract

Configuring Single Sign-On for Documentum Applications with RSA Access Manager Product Suite. Abstract Configuring Single Sign-On for Documentum Applications with RSA Access Manager Product Suite Abstract This white paper outlines the deployment and configuration of a Single Sign-On solution for EMC Documentum

More information

Remote Control 5.1.2. Tivoli Endpoint Manager - TRC User's Guide

Remote Control 5.1.2. Tivoli Endpoint Manager - TRC User's Guide Tivoli Remote Control 5.1.2 Tivoli Endpoint Manager - TRC User's Guide Tivoli Remote Control 5.1.2 Tivoli Endpoint Manager - TRC User's Guide Note Before using this information and the product it supports,

More information

SAS 9.3 Foundation for Microsoft Windows

SAS 9.3 Foundation for Microsoft Windows Software License Renewal Instructions SAS 9.3 Foundation for Microsoft Windows Note: In this document, references to Microsoft Windows or Windows include Microsoft Windows for x64. SAS software is licensed

More information

Disaster Recovery. Websense Web Security Web Security Gateway. v7.6

Disaster Recovery. Websense Web Security Web Security Gateway. v7.6 Disaster Recovery Websense Web Security Web Security Gateway v7.6 1996 2011, Websense, Inc. All rights reserved. 10240 Sorrento Valley Rd., San Diego, CA 92121, USA Published 2011 The products and/or methods

More information

IBM. Implementing SMTP and POP3 Scenarios with WebSphere Business Integration Connect. Author: Ronan Dalton

IBM. Implementing SMTP and POP3 Scenarios with WebSphere Business Integration Connect. Author: Ronan Dalton IBM Implementing SMTP and POP3 Scenarios with WebSphere Business Integration Connect Author: Ronan Dalton Table of Contents Section 1. Introduction... 2 Section 2. Download, Install and Configure ArGoSoft

More information

IBM WebSphere Application Server Version 7.0

IBM WebSphere Application Server Version 7.0 IBM WebSphere Application Server Version 7.0 Centralized Installation Manager for IBM WebSphere Application Server Network Deployment Version 7.0 Note: Before using this information, be sure to read the

More information

Tivoli IBM Tivoli Monitoring for Transaction Performance

Tivoli IBM Tivoli Monitoring for Transaction Performance Tivoli IBM Tivoli Monitoring for Transaction Performance Version 5.3.0 Evaluation Guide GC32-9190-00 Tivoli IBM Tivoli Monitoring for Transaction Performance Version 5.3.0 Evaluation Guide GC32-9190-00

More information

Red Hat JBoss Core Services Apache HTTP Server 2.4 Apache HTTP Server Installation Guide

Red Hat JBoss Core Services Apache HTTP Server 2.4 Apache HTTP Server Installation Guide Red Hat JBoss Core Services Apache HTTP Server 2.4 Apache HTTP Server Installation Guide For use with Red Hat JBoss middleware products. Red Hat Customer Content Services Red Hat JBoss Core Services Apache

More information

IBM Lotus Protector for Mail Encryption. User's Guide

IBM Lotus Protector for Mail Encryption. User's Guide IBM Lotus Protector for Mail Encryption User's Guide Version Information Lotus Protector for Mail Encryption User's Guide. Lotus Protector for Mail Encryption Version 2.1.0. Released December 2010. This

More information

IBM Configuring Rational Insight 1.0.1.1 and later for Rational Asset Manager

IBM Configuring Rational Insight 1.0.1.1 and later for Rational Asset Manager IBM Configuring Rational Insight 1.0.1.1 and later for Rational Asset Manager Rational Insight and Rational Asset Manager...4 Prerequisites...5 Configuring the XML data configuration for Rational Asset

More information

FileMaker Server 14. FileMaker Server Help

FileMaker Server 14. FileMaker Server Help FileMaker Server 14 FileMaker Server Help 2007 2015 FileMaker, Inc. All Rights Reserved. FileMaker, Inc. 5201 Patrick Henry Drive Santa Clara, California 95054 FileMaker and FileMaker Go are trademarks

More information

Setting Up SSL on IIS6 for MEGA Advisor

Setting Up SSL on IIS6 for MEGA Advisor Setting Up SSL on IIS6 for MEGA Advisor Revised: July 5, 2012 Created: February 1, 2008 Author: Melinda BODROGI CONTENTS Contents... 2 Principle... 3 Requirements... 4 Install the certification authority

More information

IBM Tivoli Provisioning Manager V 7.1

IBM Tivoli Provisioning Manager V 7.1 IBM Tivoli Provisioning Manager V 7.1 Preparing for patch management in a small environment 2011 IBM Corporation Welcome to the training module for Tivoli Provisioning Manager version 7.1, preparing for

More information

Enabling Kerberos SSO in IBM Cognos Express on Windows Server 2008

Enabling Kerberos SSO in IBM Cognos Express on Windows Server 2008 Enabling Kerberos SSO in IBM Cognos Express on Windows Server 2008 Nature of Document: Guideline Product(s): IBM Cognos Express Area of Interest: Infrastructure 2 Copyright and Trademarks Licensed Materials

More information

CERTIFICATE-BASED SINGLE SIGN-ON FOR EMC MY DOCUMENTUM FOR MICROSOFT OUTLOOK USING CA SITEMINDER

CERTIFICATE-BASED SINGLE SIGN-ON FOR EMC MY DOCUMENTUM FOR MICROSOFT OUTLOOK USING CA SITEMINDER White Paper CERTIFICATE-BASED SINGLE SIGN-ON FOR EMC MY DOCUMENTUM FOR MICROSOFT OUTLOOK USING CA SITEMINDER Abstract This white paper explains the process of integrating CA SiteMinder with My Documentum

More information

Enterprise Manager. Version 6.2. Installation Guide

Enterprise Manager. Version 6.2. Installation Guide Enterprise Manager Version 6.2 Installation Guide Enterprise Manager 6.2 Installation Guide Document Number 680-028-014 Revision Date Description A August 2012 Initial release to support version 6.2.1

More information

Steps to import MCS SSL certificates on a Sametime Server. Securing LDAP connections to and from Sametime server using SSL

Steps to import MCS SSL certificates on a Sametime Server. Securing LDAP connections to and from Sametime server using SSL Steps to import MCS SSL certificates on a Sametime Server Securing LDAP connections to and from Sametime server using SSL Author: Madhu S Dutta / Manoj Palaniswamy, IT Specialist 1 P a g e Configuring

More information

EVALUATION ONLY. WA2088 WebSphere Application Server 8.5 Administration on Windows. Student Labs. Web Age Solutions Inc.

EVALUATION ONLY. WA2088 WebSphere Application Server 8.5 Administration on Windows. Student Labs. Web Age Solutions Inc. WA2088 WebSphere Application Server 8.5 Administration on Windows Student Labs Web Age Solutions Inc. Copyright 2013 Web Age Solutions Inc. 1 Table of Contents Directory Paths Used in Labs...3 Lab Notes...4

More information

etoken Enterprise For: SSL SSL with etoken

etoken Enterprise For: SSL SSL with etoken etoken Enterprise For: SSL SSL with etoken System Requirements Windows 2000 Internet Explorer 5.0 and above Netscape 4.6 and above etoken R2 or Pro key Install etoken RTE Certificates from: (click on the

More information

BlackBerry Enterprise Server for Microsoft Office 365 preinstallation checklist

BlackBerry Enterprise Server for Microsoft Office 365 preinstallation checklist BlackBerry Enterprise Server for Microsoft Office 365 preinstallation checklist This document lists the preinstallation requirements that must be met before you install the BlackBerry Enterprise Server

More information

Kaseya Server Instal ation User Guide June 6, 2008

Kaseya Server Instal ation User Guide June 6, 2008 Kaseya Server Installation User Guide June 6, 2008 About Kaseya Kaseya is a global provider of IT automation software for IT Solution Providers and Public and Private Sector IT organizations. Kaseya's

More information

Oracle Enterprise Manager

Oracle Enterprise Manager Oracle Enterprise Manager System Monitoring Plug-in Installation Guide for Microsoft Active Directory Release 12.1.0.1.0 E28548-04 February 2014 Microsoft Active Directory, which is included with Microsoft

More information

Crystal Reports Installation Guide

Crystal Reports Installation Guide Crystal Reports Installation Guide Version XI Infor Global Solutions, Inc. Copyright 2006 Infor IP Holdings C.V. and/or its affiliates or licensors. All rights reserved. The Infor word and design marks

More information

RHEV 2.2: REST API INSTALLATION

RHEV 2.2: REST API INSTALLATION RHEV 2.2: REST API INSTALLATION BY JAMES RANKIN REVISED 02/14/11 RHEV 2.2: REST API INSTALLATION 1 TABLE OF CONTENTS OVERVIEW PAGE 3 JAVA AND ENVIRONMENT VARIABLES PAGE 3 JBOSS INSTALLATION PAGE 5 REST

More information

MobileStatus Server Installation and Configuration Guide

MobileStatus Server Installation and Configuration Guide MobileStatus Server Installation and Configuration Guide Guide to installing and configuring the MobileStatus Server for Ventelo Mobilstatus Version 1.2 June 2010 www.blueposition.com All company names,

More information

Enabling secure communication for a Tivoli Access Manager Session Management Server environment

Enabling secure communication for a Tivoli Access Manager Session Management Server environment Enabling secure communication for a Tivoli Access Manager Session Management Server environment Skill Level: Advanced Authors: Jenny Wong (jenwong@au1.ibm.com) Software Engineer IBM Tivoli Software Simon

More information

Thales ncipher modules. Version: 1.2. Date: 22 December 2009. Copyright 2009 ncipher Corporation Ltd. All rights reserved.

Thales ncipher modules. Version: 1.2. Date: 22 December 2009. Copyright 2009 ncipher Corporation Ltd. All rights reserved. ncipher modules Integration Guide for IBM Tivoli Access Manager for e-business 6.1 Windows Server 2003 32-bit and 64-bit Windows Server 2008 32-bit and 64-bit Version: 1.2 Date: 22 December 2009 Copyright

More information

WebSphere Business Monitor

WebSphere Business Monitor WebSphere Business Monitor Debugger 2010 IBM Corporation This presentation provides an overview of the monitor model debugger in WebSphere Business Monitor. WBPM_Monitor_Debugger.ppt Page 1 of 23 Goals

More information

Bentley CONNECT Dynamic Rights Management Service

Bentley CONNECT Dynamic Rights Management Service v1.0 Implementation Guide Last Updated: March 20, 2013 Table of Contents Notices...5 Chapter 1: Introduction to Management Service...7 Chapter 2: Configuring Bentley Dynamic Rights...9 Adding Role Services

More information

Configure IHS 6.1 with SSL and WebSphere Application Server 6.1

Configure IHS 6.1 with SSL and WebSphere Application Server 6.1 Configure IHS 6.1 with SSL and WebSphere Application Server 6.1 1) Create a new directory to hold the key ring. a) Create the directory \ssl. 2) Open ikeyman in \bin a) Bring up IHS

More information

Laptop Backup - Administrator Guide (Windows)

Laptop Backup - Administrator Guide (Windows) Laptop Backup - Administrator Guide (Windows) Page 1 of 86 Page 2 of 86 Laptop Backup - Administrator Guide (Windows) TABLE OF CONTENTS OVERVIEW PREPARE COMMCELL SETUP FIREWALL USING PROXY SETUP FIREWALL

More information

Secure IIS Web Server with SSL

Secure IIS Web Server with SSL Secure IIS Web Server with SSL EventTracker v7.x Publication Date: Sep 30, 2014 EventTracker 8815 Centre Park Drive Columbia MD 21045 www.eventtracker.com Abstract The purpose of this document is to help

More information

www.novell.com/documentation Server Installation ZENworks Mobile Management 2.7.x August 2013

www.novell.com/documentation Server Installation ZENworks Mobile Management 2.7.x August 2013 www.novell.com/documentation Server Installation ZENworks Mobile Management 2.7.x August 2013 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of this

More information

TIBCO Hawk SNMP Adapter Installation

TIBCO Hawk SNMP Adapter Installation TIBCO Hawk SNMP Adapter Installation Software Release 4.9.0 November 2012 Two-Second Advantage Important Information SOME TIBCO SOFTWARE EMBEDS OR BUNDLES OTHER TIBCO SOFTWARE. USE OF SUCH EMBEDDED OR

More information

Instant Chime for IBM Sametime High Availability Server Guide

Instant Chime for IBM Sametime High Availability Server Guide Instant Chime for IBM Sametime High Availability Server Guide Fall 2014 Page 1 Copyright and Disclaimer This document, as well as the software described in it, is furnished under license of the Instant

More information

FTP Server Configuration

FTP Server Configuration FTP Server Configuration For HP customers who need to configure an IIS or FileZilla FTP server before using HP Device Manager Technical white paper 2 Copyright 2012 Hewlett-Packard Development Company,

More information

Memory-to-memory session replication

Memory-to-memory session replication Memory-to-memory session replication IBM WebSphere Application Server V7 This presentation will cover memory-to-memory session replication in WebSphere Application Server V7. WASv7_MemorytoMemoryReplication.ppt

More information

IBM Proventia Management SiteProtector. Configuring Firewalls for SiteProtector Traffic Version 2.0, Service Pack 8.1

IBM Proventia Management SiteProtector. Configuring Firewalls for SiteProtector Traffic Version 2.0, Service Pack 8.1 IBM Proventia Management SiteProtector Configuring Firewalls for SiteProtector Traffic Version 2.0, Service Pack 8.1 Copyright Statement Copyright IBM Corporation 1994, 2010. IBM Global Services Route

More information