IBM Tivoli Access Manager.. WebSEAL€¦ · Z 4 B + WebSEAL S V3.8}6A 4.1.....23 Z AIX O}6 WebSEAL .....23 Z HP-UX O}6 WebSEAL .....24 Z Solaris O}6 WebSEAL .....26

IBM Tivoli Access Manager

WebSEAL 208O

f> 4.1

S152-0454-01

��

IBM Tivoli Access Manager

WebSEAL 208O

f> 4.1

S152-0454-01

��

"b

Z9C>JO0d'VDz7.0,kDAZ 41 3D:yw;PDE"#

Zef:(2003 j 8 B)

>f>f; GB84-0407-01

© Copyright International Business Machines Corporation 1999, 2003. All rights reserved.

?<

0T . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v>8ODA_ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v>8ODZ] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vvfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

"PE" . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viBase E" . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viWebSEAL E" . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viWeb 2+TE" . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii*"_N< . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii<u9d . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii`Xvfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viiiZ_CJvfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x

(z!n . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x*5m~'V . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x>iP9CD<( . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x

Ve<( . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xYw53xp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Z 1 B 20Ev . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1'VD=( . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1ELMZf*s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120m~| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2X8m~ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

WebSEAL ~qwX8m~ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2WebSEAL ADK X8m~ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

20!n . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Z 2 B 9CrW20 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5WebSEAL rW20Lr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

9C WebSEAL rW20Lr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69C WebSEAL ADK rW20Lr. . . . . . . . . . . . . . . . . . . . . . . . . . . 7

9CrW20LrdC WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8;%q!dChC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Sl&D~q!dChC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

rW20V^ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Z 3 B 9C>z20 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Z UNIX O20MdC WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . 11

Z AIX O20 WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Z HP-UX O20 WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . . 13Z Linux on zSeries O20 WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . 13Z Solaris O20 WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . . 14Z UNIX OdC WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Z UNIX O20 WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Z AIX O20 WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Z HP-UX O20 WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . 18Z zSeries OD Linux O20 WebSEAL ADK. . . . . . . . . . . . . . . . . . . . . . . 19Z Solaris O20 WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Z Windows O20 WebSEAL ~qwM WebSEAL ADK . . . . . . . . . . . . . . . . . . . . 20Z Windows OdC WebSEAL ~qw . . . . . . . . . . . . . . . . . . . . . . . . . 21

© Copyright IBM Corp. 1999, 2003 iii

Z 4 B + WebSEAL S V3.8 }6A 4.1. . . . . . . . . . . . . . . . . . . . . 23Z AIX O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23Z HP-UX O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Z Solaris O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Z Windows O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Z 5 B + WebSEAL S V3.9 }6A 4.1. . . . . . . . . . . . . . . . . . . . . 29Z AIX O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29Z HP-UX O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Z Linux on zSeries O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . 32Z Solaris O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Z Windows O}6 WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Z 6 B !{dCM}% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . 35Z UNIX O!{dC WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Z Windows O!{dC WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . 36S AIX }% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37S HP-UX }% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37S Linux on zSeries }% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . 38S Solaris }% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38S Windows }% WebSEAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

}% WebSEAL M WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . 39v}% WebSEAL ADK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

=<. yw . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41Lj . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

w} . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

iv IBM Tivoli Access Manager: WebSEAL 208O

0T

IBM® Tivoli® Access Manager WebSEAL G*yZ Web DJ4a)D2+T\mw#

WebSEAL G_T\"`_LD Web ~qw,|+8#H2+_T&CZ\#$D Web

TsUd#WebSEAL \;a)%;"abv=8,"+sK Web &CLr~qwJ

4iO=2+_TP#

":IBM Tivoli Access Manager GH0"PDF* Tivoli SecureWay® Policy Director

m~DB{F#,y,TZl$ Tivoli SecureWay Policy Director m~MD5DC

',\m~qwVZF* policy server#

6IBM Tivoli Access Manager WebSEAL 208O75wgN20"dCM}6 Tivoli

Access Manager WebSEAL m~#

>8ODA_

>208OD?jA_|(:

v 2+\m1

v xg53\m1

v IT hFK1

v &CLr*"_

A_&l$TBZ]:

v rXx-i,|( HTTP"TCP/IP"D~+d-i(FTP)M Telnet

v Web ~qwD?pM\m

v 2+\m,|(O$MZ(

g{tC2+WSVc(SSL)(E,9&l$ SSL -i"\?;;(+CM(C)"

}V){"S\c(MO$PD#

>8ODZ]

>D5|,TBBZ:

v Z 1 3DZ 1 B, :20Ev;

Pv'VD=("hv IBM Tivoli Access Manager Base ODm~`XT#

v Z 5 3DZ 2 B, :9CrW20;

hvgN9CrW20Lr4SY WebSEAL ~qwr WebSEAL ADK 53D20

MdC#

v Z 11 3DZ 3 B, :9C>z20;

hvgN9C>zYw535CLr420MdC WebSEAL MX8m~#

v Z 23 3DZ 4 B, :+ WebSEAL S V3.8 }6A 4.1;

hvgN+ V3.8 WebSEAL ~qw}6= V4.1#

v Z 29 3DZ 5 B, :+ WebSEAL S V3.9 }6A 4.1;

© Copyright IBM Corp. 1999, 2003 v

hvgN+ V3.9 WebSEAL ~qw}6= V4.1#

v Z 35 3DZ 6 B, :!{dCM}% WebSEAL;

hvgN!{ WebSEAL DdC"+dS?vy'VDYw53=(P}%#

vfo

Tivoli Access Manager b;i/*TB`p:

v :"PE";

v :Base E";

v :WebSEAL E";

v Z vii 3D:Web 2+TE";

v Z vii 3D:*"_N<;

v Z vii 3D:<u9d;

"PE"

v 6IBM Tivoli Access Manager kHDA(7

G152-0007-00(am41_readme.pdf)

a)9C Tivoli Access Manager xP20"*<9CDE"#

v 6IBM Tivoli Access Manager "P5w7

S152-0031-00(am41_relnotes.pdf)

a)}gm~V^"d(=(MD5|BDnB;FE"#

Base E"

v 6IBM Tivoli Access Manager Base 208O7

S152-0349-01(am41_install.pdf)

5wgN20"dCM}6 Tivoli Access Manager m~,|( Web Portal Manager

gf#

v 6IBM Tivoli Access Manager Base \m18O7

S152-0519-01(am41_admin.pdf)

hv9C Tivoli Access Manager ~qDEnM}L#a)S Web Portal Manager g

fT0(}9C pdadmin |n4PNqD8>E"#

WebSEAL E"

v 6IBM Tivoli Access Manager WebSEAL 208O7

S152-0454-01(amweb41_install.pdf)

a) WebSEAL ~qwM WebSEAL &CLr*"_$_dD20"dCM}%D

8>E"#

v 6IBM Tivoli Access Manager WebSEAL \m18O7

S152-0455-01(amweb41_admin.pdf)

a)9C WebSEAL \m2+ Web rPJ4D30JO"\m}LM<uN<E

"#

vi IBM Tivoli Access Manager: WebSEAL 208O

Web 2+TE"

v 6IBM Tivoli Access Manager for WebSphere Application Server C'8O7

S152-0459-01(amwas41_user.pdf)

a) Tivoli Access Manager for IBM WebSphere® Application Server D20"}%

M\mD8>E"#

v 6IBM Tivoli Access Manager for WebLogic Server C'8O7

S152-0479-01(amwls41_user.pdf)

a) Tivoli Access Manager for BEA WebLogic Server D20"}%M\mD8>

E"#

v 6IBM Tivoli Access Manager Plug-in for Edge Server C'8O7

S152-0520-01(amedge41_user.pdf)

hvgN20"dCM\m Plug-in for IBM WebSphere Edge Server &CLr#

v 6IBM Tivoli Access Manager Plug-in for Web Servers C'8O7

S152-0490-01(amws41_user.pdf)

a)9C Plug-in for Web Servers #$ Web r2+D208>E""\m}LM

<uN<E"#

*"_N<

v IBM Tivoli Access Manager Authorization C API Developer’s Reference

SC32-1140-01(am41_authC_devref.pdf)

a)hvgN9C Tivoli Access Manager Z( C API k Access Manager ~qe

~gf+ Tivoli Access Manager 2+TmS=&CLrDN<JO#

v IBM Tivoli Access Manager Authorization Java Classes Developer’s Reference

SC32-1141-01(am41_authJ_devref.pdf)

a)9CZ( API D Java™ oT5V'V&CLr9C Tivoli Access Manager 2

+TDN<E"#

v IBM Tivoli Access Manager Administration C API Developer’s Reference

SC32-1142-01(am41_adminC_devref.pdf)

a)XZ9C\m API 'V&CLr4P Tivoli Access Manager \mNqDN<

E"#>D5hv\m API D C 5V#

v IBM Tivoli Access Manager Administration Java Classes Developer’s Reference

SC32-1143-01(am41_adminJ_devref.pdf)

a)9C\m API D Java oT5V'V&CLr4P Tivoli Access Manager \m

NqDN<E"#

v IBM Tivoli Access Manager WebSEAL Developer’s Reference

SC32-1135-01(amweb41_devref.pdf)

a)grO$~q(CDAS)D\mM`LE""gr3dr\(CDMF),T0\

kS?#i#

<u9d

v IBM Tivoli Access Manager Command Reference

GC32-1107-01(am41_cmdref.pdf)

a)XZ Tivoli Access Manager a)D|n/5CLrME>DE"#

0T vii

v 6IBM Tivoli Access Manager ms{"N<s+7

S152-0502-01(am41_error_ref.pdf)

a) Tivoli Access Manager yzz{"D5wMFvDYw#

v IBM Tivoli Access Manager Problem Determination Guide

GC32-1106-01(am41_pdg.pdf)

a) Tivoli Access Manager D7(JbDE"#

v 6IBM Tivoli Access Manager T\w{8O7

S152-0500-01(am41_perftune.pdf)

a)IxP IBM Directory Server((e*C'"am)D Tivoli Access Manager y

iID73DT\w{E"#

`Xvfo

>ZPvk Tivoli Access Manager b`XDvfo#

Tivoli Software Library a)`V Tivoli vfo,}gW$i"}]m"]>"Redbooks

Myw/#Tivoli Software Library ITSTB Web >cOq!:

http://www.ibm.com/software/tivoli/library/#

Tivoli Software Glossary |,m`k Tivoli m~`XD<uuoD(e# Tivoli Software

Glossary(v"of)IS(}TB Tivoli Software Library Web 3fOs_D Glossary4Sq!:http://www.ibm.com/software/tivoli/library/#

IBM Global Security KitTivoli Access Manager (}9C IBM Global Security Kit(GSKit)a)}]S\#GSKit

|,ZTX(=(D IBM Tivoli Access Manager Base CD O#

GSKit m~|+20 iKeyman \?\m5CLr"gsk5ikm,|G+9z\4(\?}

]b"+?\?T,T0$iks#TBD5IS Tivoli E"PD Web >cOk IBM

Tivoli Access Manager z7D5`,D?VPR=:

v Secure Sockets Layer Introduction and iKeyman User’s Guide

(gskikm5c.pdf)

a)KF.Zd Tivoli Access Manager 73PtC SSL (EDxgr532+\

m1DE"#

IBM DB2 (C}]b120 IBM Directory Server"z/OS™,T0 OS/390® LDAP ~qw1,h* IBM DB2®

Universal Databas™#TBYw53=(Dz7 CD Oa)K DB2:

v IBM AIX®

v Microsoft™ Windows™

v Sun Solaris Operating Environment

ISK&q! DB2 E":

http://www.ibm.com/software/data/db2/

viii IBM Tivoli Access Manager: WebSEAL 208O

http://www.ibm.com/software/tivoli/library/


http://www.ibm.com/software/data/db2/

IBM Directory Server}K Linux for zSeries™ TbDd|yP=(,IBM Directory Server,V4.1 y|(Z

IBM Tivoli Access Manager Base CD P#ISK&q!CZ Linux for S/390 D IBM

Directory Server m~:

http://www.ibm.com/software/network/directory/server/download/

g{F.+ IBM Directory Server w*C'"am9C,kNDK&ya)DE":

http://www.ibm.com/software/network/directory/library/

IBM WebSphere Application ServerIBM WebSphere Application Server,Advanced Single Server Edition 4.0.3,|,Z Web

Portal Manager CD O"9C Web Portal Manager gf20#XZ IBM WebSphere

Application Server DE",kND:

http://www.ibm.com/software/webservers/appserv/infocenter.html

IBM Tivoli Access Manager for Business IntegrationIBM Tivoli Access Manager for Business Integration,Iw*%@I):Dz7,* IBM

MQSeries®,V5.2 M V5.3 {"D IBM WebSphere® MQ a)K2+Tbv=8#IBM

Tivoli Access Manager for Business Integration 'V WebSphere MQSeries &CLr(

}9Ck"MMSU&CLrX*D\?=\X"Rj{X"M}]#Mq WebSEAL

M IBM Tivoli Access Manager for Operating Systems ;y,IBM Tivoli Access Manager

for Business Integration G9C IBM Tivoli Access Manager for e-business DZ(~q

D;vJ4\mw#

TBk IBM Tivoli Access Manager for Business Integration V4.1 X*DD5IS Tivoli

E"PD Web >cOR=:

v 6IBM Tivoli Access Manager for Business Integration \m18O7(S152-0085-00)

v 6IBM Tivoli Access Manager for Business Integration "P5w7(G152-0518-00)

v IBM Tivoli Access Manager for Business Integration Read Me First(GI11-0958-00)

IBM Tivoli Access Manager for Operating SystemsIBM Tivoli Access Manager for Operating Systems w*%@I):Dz7,a)}K

>zYw53ya)DZ(_T.b,Z UNIX 53Oa);cZ(_Tv?# IBM

Tivoli Access Manager for Operating Systems Mg, WebSEAL M IBM Tivoli Access

Manager for Business Integration ;y,G9C IBM Tivoli Access Manager for e-business

Z(~qDJ4\mw.;#

TBk IBM Tivoli Access Manager for Operating Systems V4.1 X*DD5IS Tivoli

E"PD Web >cOR=:

v 6IBM Tivoli Access Manager for Operating Systems 208O7(S152-0190-00)

v 6IBM Tivoli Access Manager for Operating Systems \m8O7(S152-0571-00)

v 6IBM Tivoli Access Manager for Operating Systems Jb7(8O7(S152-0179-00)

v 6IBM Tivoli Access Manager for Operating Systems "P5w7(G152-0185-00)

v 6IBM Tivoli Access Manager for Operating Systems kHDA7(G152-0186-00)

0T ix

http://www.ibm.com/software/network/directory/server/download/

http://www.ibm.com/software/network/directory/library/

http://www.ibm.com/software/webservers/appserv/infocenter.html

Z_CJvfo

>z7DvfoITTIF2D5q=(PDF)M/r,D>jGoT(HTML)q=

STB Tivoli Software Library PqC:http://www.ibm.com/software/tivoli/library

*ZbP(;z7vfo,k%wb3fs`D Product manuals 4S#;sZ Tivoli

Software Information Center 3fO(;"%wz7{F#

z7vfo|(6"P5w7"6208O7"6C'8O7"6\m18O7T0

6*"_N<s+7#

":*7#\}7r! PDF vfo,kZ Adobe Acrobat r!0Z(I(}%wD~

→ r!4T>C0Z)P!qJO3f4!r#

(z!n

(z!n&\ozPmeP2(}gP/;crS&O-)DC'I&9Cm~z

7#TZ>z7,zIT9C(z<uv}r/@gf#2I9C|L!zsj4Y

w<NC'gfDyP&\#

*5m~'V

Z*5 IBM Tivoli m~'VTbvCJb.0,kNDTB IBM Tivoli m~'V Web

>c: http://www.ibm.com/software/sysmgmt/products/support/

g{h*d|oz,rk(}9CTB Web >cD IBM Software Support Guide Py

hvD=(4*5m~'V: http://techsupport.services.ibm.com/guides/handbook.html

C8Oa)KTBE":

v S\'VyhD"aMJqhs

v g0EkMgSJ~X7(!vZzyZDzRrXx)

v *5M''V.0&U/D;5PE"

>iP9CD<(

>N<TX(uoMYwT0@5ZYw53D|nM769CKtI<(#

Ve<(

>N<P9CKTBVM<(:

Ve QTk\'D>"X|V"N}"!n"Java `{T0TsxVD!4|nr

s!4lO|nyTVeVT>#

1e d?"vfojbM&C?wDXb%JrLoyT1eVT>#

HmVM

QTk\'D>"53{""C'XkdkDD>T0Td?r|n!nD5

xPxVDzk>}"|nP"A;dvT0D~{M?<{yTHmVeT

>#

x IBM Tivoli Access Manager: WebSEAL 208O


http://www.ibm.com/software/sysmgmt/products/support/

http://techsupport.services.ibm.com/guides/handbook.html

Yw53xp

>iTZ8(73d?M?<{E9CK UNIX <(#9C Windows |nP1,TZ

73d?,k9C %variable% f; $variable,"+?<76PD?;v}1$/)C

41\($f;}4#g{Z Windows 53O9C bash bGLr,rIT9C UNIX

<(#

0T xi

xii IBM Tivoli Access Manager: WebSEAL 208O

Z 1 B 20Ev

Z*<20 Tivoli Access Manager WebSEAL r WebSEAL &CLr*"_$_d

(ADK).0,zXkHl$di~M20!n#>B|,BP?V:

v :'VD=(;

v :ELMZf*s;

v Z 2 3D:20m~|;

v Z 2 3D:X8m~;

v Z 3 3D:20!n;

"bBn

kND6IBM Tivoli Access Manager "P5w7PDnBE",|,K?vy'

VYw53=(yhD^)|M9!Lr#

'VD=(

BP=('V Tivoli Access Manager WebSEAL M Tivoli Access Manager WebSEAL

ADK:

v Sun Solaris Operating System 2.7 M 2.8

v AIX 4.3.3 M 5.1.0

v Red Hat Linux 7.1 M 7.2

v SuSE Linux Enterprise Server 7 for S/390 & zSeries(Kernel 2.4.7,31 ;,glibc

2.2.4-31,gcc 2.95.3-119)(0P Maintenance Patch-CD 1)

v SuSE Linux Enterprise Server 7 for IBM zSeries(Kernel 2.4.17,64 ;k 31 ;f

]T==,glibc 2.2.4-12,gcc 2.95.3-61)

v HP-UX 11.0 M 11i

v Windows NT 4.0(0P Service Pack 6a)

v Windows 2000 Advanced Server(0P Service Pack 2)

ELMZf*s

WebSEAL _PTB2~*s:

v ELUd:10 MB

1kHvu~ Tivoli Access Manager runtime(65 MB)aO9C1,yhDn!E

LUd* 75 MB#

(iz* WebSEAL U>D~nb#t 100 MB DELUd#

v Zf:n! 64 MB((i* 256 MB)

k"b,K 64 MB Dn!*s;|( Tivoli Access Manager runtime yhD 64 MB

Zf#\Zf* 256 MB r|s1\mVv|_DT\#

© Copyright IBM Corp. 1999, 2003 1

20m~|

IBM Tivoli Access Manager Web Security CD |,TB WebSEAL m~D20m~|:

v Tivoli Access Manager WebSEAL

Cm~||, WebSEAL ~qwMdCD~#

v Tivoli Access Manager WebSEAL ADK

Cm~||,CZ Tivoli Access Manager grO$~q(CDAS)"Tivoli Access

Manager gr3dy!=((CDMF)M Tivoli Access Manager \k?H#iD*

" API#

Web Security CD 2|,TBX8m~m~|:(a)b)m~|G*KCzZ;h*

CJ IBM Tivoli Access Manager Base CD Du~BM\jI WebSeal D20#)

v Tivoli Access Manager runtime

v IBM Directory client

v IBM Global Security Kit(GSKit)

v Tivoli Access Manager ADK

X8m~

TB?VPvK?v WebSEAL m~|yhDX8m~:

v Z 2 3D:WebSEAL ~qwX8m~;

v Z 3 3D:WebSEAL ADK X8m~;

":X8m~MNNd{XhDz79!GZ9CrW20E>(UNIX)Mz&mD

~(Windows)1T/20D#PXrW20D|`E",kNDZ 3 3D:2

0!n;#

WebSEAL ~qwX8m~

XkZ?(w\ WebSEAL ~qwDFczO20MdCTBX8m~:




Z20 WebSEAL r WebSEAL ADK .0,Xk(";v Tivoli Access Manager 2

+r#*("2+r,XkZw\ WebSEAL ~qwD,;FczOrZ6LFczO

20MdCTBm~:

v Tivoli Access Manager policy server

v y'VD LDAP ~qw,g IBM Directory server

rK,TZ WebSEAL ~qwP=v?p=8:

1. k Tivoli Access Manager policy server 20Z`,DFczO

2. k Tivoli Access Manager policy server 20Z;,DFczO

2 IBM Tivoli Access Manager: WebSEAL 208O

ZZ;v=8P,Z20MdC policy server ZdzcyPD WebSEAL Hvu~#

20 policy server h*20 Tivoli Access Manager runtime"IBM Directory client M

GSKit#ZCdCP?p WebSEAL 1,IT;20 WebSEAL x;20NN|`DX

8m~#

ZZ~V=8P,XkWH+FczdC=VPD2+rP,;sY20 WebSEAL ~

qw#*+FczdC=2+rP,Xk20MdCBPm~:




dCCK Tivoli Access Manager runtime .s,zM\20MdC WebSEAL ~qw

K#

":WebSEAL ~qwT Tivoli Access Manager authorization server ^`XT#

authorization server Gw*X(Yw53D IBM Tivoli Access Manager Base D;

?Vx"<D#

WebSEAL ADK X8m~

XkZk WebSEAL ADK `,DFczO20MdCTBm~:




v Tivoli Access Manager ADK

v Tivoli Access Manager WebSEAL ~qw

*20"9C WebSEAL ADK,XkH20"dC WebSEAL ~qw#Kb,Xk2

0 Tivoli Access Manager ADK#

20!n

m 1 a)IC20!nDlY**#!q;v20!n"4UZ>ByPD8>E"x

PYw#

m 1. 20!n

!n C> 5w

rW20 C4SlZ2+r(9CyZ LDAP D"a

m )P20MdC;vr`v Tivoli Access

Manager WebSEAL 53DYH#

g{z}Z+ Active Directory r Domino w

*"am9C,rGZ zSeries =(D Linux

P20K Tivoli Access Manager,G4z;\

9CrW20#

kNDZ 5 3DZ 2 B,

:9CrW20;#

Z 1 B 20Ev 3

m 1. 20!n (x)

!n C> 5w

>z20 CZ%=iz Tivo l i Access Manager

WebSEAL i~D20MdC,b)i~9C

DG>zYw535CLr#

krW20Py9CDT/E>;;y,z

Xk4UJ1D3rV/20?vi~MN

NX8m~#

kNDZ 11 3DZ 3 B,

:9C>z20;#

}6 CZS Tivoli SecureWay Policy Director,V3.8

r Tivoli Access Manager,V3.9 }6 WebSeal

~qw#

kNDZ 23 3DZ 4 B,

:+ WebSEAL S V3.8

}6A 4.1;#

kNDZ 29 3DZ 5 B,

:+ WebSEAL S V3.9

}6A 4.1;#


Z 2 B 9CrW20

Z*<.0

v k20yPDYw539!Lr"li6IBM Tivoli Access Manager "P5w7

PyPvD53hs#

v l$ZrW20}LPzh*4PDdCv(#PXrW20dC!nD5w

E",kNDZ 8 3Dm 3#

v g{*9C}"o(1!oT)TbDoTi44,M{",zXkZKPr

W20E>(UNIX)rz&mD~(Windows).020`&DoT'V

|#PX20oT'V|D8>E",kND6IBM Tivoli Access Manager Base

208O7#

(},1T/20X8m~,rW209z20 WebSEAL ~qwM WebSEAL *"

53DNqdCaI`K#zIT9CrW20Lrzf9Cg pkgadd"installp"

swinstall r InstallShield byDYw535CLr#1Q20Kyhz71,rW2

09aT/lb=,";a"TXB20b)z7#

rW20Lr+a>za)20MdC WebSEAL"WebSEAL ADK MX8m~DX*

E"#J11r,b)Lra)1!5#1za)KX*DdC5Ts,rW20L

r\20"dCz7DMm~DX8m~,x^hx;=DI$#

rW20Lr+C'a)DdCE"#f=F*l&D~D}]D~P#Zs4D2

0P,rW20LrITSCD~A!dChCx;a>C'a)|G#C&\IT

9rW20LrKPZG;%=r2,==P#

WebSEAL rW20LrZwV?p=8PG#PC#I+|Gk policy server DrW

20LraOp49C,Sx+ WebSEAL lYX20"dC= Tivoli Access Manager

2+rPD%v53P#TZ-M"&CLr*""bTr]>?j,bGG#PC

D#Z?p`v WebSEAL ~qw1,z,yIT9CrW20#ZKivB,IT9

Cl&D~TSY?p#mb,WebSEAL ADK rW20LrTZlYhC WebSEAL

*"732G#PC#

WebSEAL rW20Lr

Z 6 3Dm 2 PvKrW20Lr,b)20Lr|,ZX(=( IBM Tivoli Access

Manager Web Security CD Dy?<P#

":dP9|,K UNIX 53DE>D~M Windows 53Dz&mD~(.bat )9

{)#


m 2. rW20D~

E>{F hv

ezinstall_pdweb 9CBPm~|hC WebSEAL ~qw53:

v IBM Global Security Kit



v Tivoli Access Manager WebSEAL ~qw

ezinstall_pdwebadk 9CBPm~|hC WebSEAL *"5353:




v Tivoli Access Manager &CLr*"$_|

v Tivoli Access Manager WebSEAL

v Tivoli Access Manager WebSEAL &CLr*"$_|

ezinstall_pdauthadk 9CBPm~|hC Tivoli Access Manager *"53:




v Tivoli Access Manager &CLr*"$_|

install_pdrte 9CBPm~|hC Tivoli Access Manager runtime 53:




WebSEAL rW20E>ZTBZPhv:

v Z 6 3D:9C WebSEAL rW20Lr;

v Z 7 3D:9C WebSEAL ADK rW20Lr;

9C WebSEAL rW20Lr

ezinstall_pdweb Lr(#CZTB=8:

v 4(BD Tivoli Access Manager 2+r,Tc9C WebSEAL #$yZ Web DJ

4#

ZKivB,;(Fcz+,1w\ Tivoli Access Manager policy server M WebSEAL

~qw#policy server _P`&DrW20Lr,{* ezinstall_pdmgr#WH&9

C ezinstall_pdmgr 420MdC policy server#

ezinstall_pdmgr LrGZzYw53D IBM Tivoli Access Manager Base CD O

"<D#*9CKLr,kND6IBM Tivoli Access Manager Base 208O7PD

5wE"#

v + WebSEAL ~qwmS=Q20MdC policy server DFczO#

ZKivB,Tivoli Access Manager 2+rQ-(",zVZ}*)9r2+TTc

9C WebSEAL 4#$yZ Web DJ4#zvh*KP ezinstall_pdweb#rW2

0Lra>C'a) WebSEAL D20MdCE"#


v Z+BFczmS= Tivoli Access Manager 2+rP1,mS WebSEAL ~qw#

ZKivB,WebSEAL ~qw+Z;w\ policy server DFczOKP,+a(}

xgk6L policy server (E#KG+DFcz*s20MdC IBM Tivoli Access

Manager runtime,Tck6L policy server ("(E#bG20 WebSEAL DHv

u~#

WebSEAL rW20E> ezinstall_pdweb +lb runtime GqQ-20"QdC

C#

9C WebSEAL ADK rW20Lr

ezinstall_pdwebadk Lr(#CZTB=8.;:

v w*4(B Tivoli Access Manager 2+rD;?V420 WebSEAL *"73,T

c9C WebSEAL #$yZ Web DJ4#

ZKivB,;(Fcz+,1w\ Tivoli Access Manager policy server"WebSEAL

~qwM WebSEAL ADK#policy server _P`&DrW20Lr,{*

ezinstall_pdmgr#WH&9C ezinstall_pdmgr 420MdC policy server,;s

9C ezinstall_pdwebadk 420MdC WebSEAL M WebSEAL ADK#

":vTZ Windows NT,XkWHKP ezinstall_pdweb.bat 20 WebSEAL ~

qw,;sKP ezinstall_pdwebadk.bat 20 WebSEAL ADK#Z Windows

2000 MyP UNIX =(O,vh*KP ezinstall_pdwebadk.bat MI,12

0 WebSEAL M WebSEAL ADK#

WebSEAL ADK T Tivoli Access Manager ADK m~|_P`XT#Cm~|Z IBM

Tivoli Access Manager Web Security CD O"<,"_PdTmDrW20Lr

ezinstall_pdauthadk#g{P420 ADK,r ezinstall_pdwebadk Lr+T/

wC ezinstall_pdauthadk#

v + WebSEAL ~qwM*"73mS=Q20MdC policy server DFczO#

ZKivB,Tivoli Access Manager 2+rQ-(",z}*mS WebSEAL T#

$ y Z W e b D J 4 , " m S W e b S E A L * " 7 3 # z v h * K P

ezinstall_pdwebadk#g{PX*20Hvu~ ADK *"73,rrW20Lr+

wC ezinstall_pdauthadk,;sa>C'dk WebSEAL M WebSEAL ADK 2

0MdCDE"#

":vTZ Windows NT,XkWHKP ezinstall_pdweb 20 WebSEAL ~qw,

;sKP ezinstall_pdwebadk 20 WebSEAL ADK#Z Windows 2000 OM

yP UNIX =(O,vh*KP ezinstall_pdwebadk 20 WebSEAL M

WebSEAL ADK#

v Z+BFczmS= Tivoli Access Manager 2+rP1,mS WebSEAL ~qwM

WebSEAL *"73#

ZKivB,WebSEAL ~qwM WebSEAL ADK ;aZw\ policy server DF

czOKP,+a(}xgk6L policy server xP(E#KG+DFcz*s20

MdC IBM Tivoli Access Manager runtime,Tck6L policy server ("(E#

bG20 WebSEAL DHvu~#w*9C WebSEAL ADK DHvu~,b)Fc

z2Xk20 IBM Tivoli Access Manager ADK m~|#

ezinstall_pdwebadk LrT/Xli?vX8m~#g{9;PdCTB?vm~

|,rrW20Lr+a>C'a)XZm~|D20MdChC:

Z 2 B 9CrW20 7

– IBM Global Security Kit

– IBM Directory client

– Tivoli Access Manager runtime

– Tivoli Access Manager ADK

– Tivoli Access Manager WebSEAL

rW20Lr;s20MdC WebSEAL ADK#

":vTZ Windows NT,XkWHKP ezinstall_pdweb 20 WebSEAL ~qw,

;sKP ezinstall_pdwebadk 20 WebSEAL ADK#Z Windows 2000 My

P UNIX =(O,vh*KP ezinstall_pdwebadk MI,120 WebSEAL

M WebSEAL ADK#

9CrW20LrdC WebSEALrW20LrIT(}=V;,=(q!XhDdChC#LrZ;NKP1,aa

>C'a)yPXhDdChC#

120jI1,rW20Lr+QhC#f=F*l&D~D}]D~P#B;N

(T0Ts?NZ,;(FczOwCrW20Lr),Lr+rC'a)Sl&D

~9Cy#fD}]D!n,TfzZ|na>{BdkdCE"#

9CrW20LrD=V=(ZTBZPhv:

v Z 8 3D:;%q!dChC;

v Z 9 3D:Sl&D~q!dChC;

;%q!dChC

WebSEAL M WebSEAL ADK rW20Lra>yPXhDdCE"#1420NN

X8m~1,WebSEAL M WebSEAL ADK rW20Lra>XhDE"#

(;D}bMG WebSEAL TZZ2+rD;v53O20MdC Tivoli Access

Manager policy server 1y_PDHvu~#g{z}Z4(BD2+r,rXk(}

KP policy server TmDrW20Lr4zcK`XT#KLrZ IBM Tivoli Access

Manager Base CD O"<#

m 3 PvKZ20 WebSEAL r WebSEAL ADK 1I\h*a)DdCE"#k"

b,dCHvu~ runtime h*3)E"#Z20Zd,Z53a>z.0Hj6b)

5Gv;mDwb#

":WebSEAL rW20Lr9C3) WebSEAL dChCD1!5#z;\|Db)

hC#kNDZ 10 3D:rW20V^;#

m 3. rW20dC!n

dCN} hC

IBM Global Security Kit

;h*NNdCN}#

IBM Directory Client

;h*NNdCN}#k LDAP ~qw.dD(EGZ runtime dCZddCD#


m 3. rW20dC!n (x)

dCN} hC

Tivoli Access Manager runtime

"am`M 1!5:Ldap

LDAP ~qwwz{ ^1!5#9C+^(Dr{#

LDAP ~qwKZ 1!5:389

Tivoli Access Manager policy server wz{ ^1!5#9C+^(Dr{#

GSO }]bD LDAP DN ^1!5#

tCk LDAP ~qw.dD SSL 1!5*q#

LDAP SSL \?D~ \?}]b;CD+76#

LDAP SSL \?D~ DN \?}]bD~j)#

LDAP SSL \?D~\k \?}]bD~\k#

LDAP ~qw SSL KZ 1!5:636

20?< UNIX:

/opt/pdweb

Windows:

C:\Program Files\Tivoli\Policy Director

Access Manager Policy Server wz{ ^1!5#9C+^(Dr{#

SSL ~qwKZ 1!5:7135

Policy Server CA $iD~{ ^1!5#

Tivoli Access Manager ADK

;h*NNdCN}#

Tivoli Access Manager WebSEAL

2+Tw\k ^1!5#

tCk LDAP ~qw.dD SSL (E 1!5*q#

LDAP SSL M'z\?D~ \?}]bD~;C#^1!5#76{>

}:/var/ldap/keytabs/pd_ldapkey.kdb

SSL M'z$ij) ^1!5

SSL M'z\?D~\k ^1!5

LDAP ~qw SSL KZE 1!5:636

Tivoli Access Manager WebSEAL ADK

;h*NNdChC#

Sl&D~q!dChC

UNIX l&D~D{FM;C|(:

/var/tmp/ezinstall_pdweb.rsp/var/tmp/ezinstall_pdwebadk.rsp

Windows =(;9C;vl&D~:

%TEMP%\ezinstall.rsp

Z 2 B 9CrW20 9

ZKPrW20Lrs,IT9CQ#fDl&D~w*T/dk#C&\+tCG

;%=r2,20#Z3v2+rP?p;5P WebSEAL ~qw1,C&\G#P

C#IT`-l&D~ThCX(ZXb~qwD5,;s4PE>TjIG;%=

D20#

?NrW20LrKP1,+i4l&D~GqQ-fZ#g{R=l&D~,rr

W20Lr+/JGqk*9C|#g{!q9Cl&D~,rrW20Lr+a>

zdkXhD\k,;s(}Sl&D~PA!dChCTjI20#

r*ZwDPf"\k_P2+TgU,yTrW20Lr+;#f\k#zIT9

CD>`-wmSKE"=CD~#

zXk`-l&D~DTB5:

v \m1\k

v SSL \?D~\k(I!)

v1!qdC WebSEAL ~qwM LDAP ~qw.dD SSL (E1E9CC\k#

rW20V^

Z9CrW20Lr1,h"bTBV^:

v Z+ WebSEAL S V3.8 r V3.9 }6= V4.1 1,;\9CrW20Lr#

v Z#{dC WebSEAL Tc9CTB WebSEAL dChCDG1!51,;\9C

ezinstall_pdweb Lr:

N} 5

tC TCP HTTP G

TCP KZE 80

tC HTTPS G

HTTPS KZE 443

Web D5ycNa9 UNIX:/opt/pdweb/www/docs

Windows:

C:\Progam Files\Tivoli\PolicyDirector\PDWeb\www\docs


Z 3 B 9C>z20

>Ba)K9C>z205CLr20MdC Tivoli Access Manager WebSeal m~|

D8>E"#>B9a)K20XZwv WebSEAL m~|DX8m~D8>E"#

":g{GS0;f>D Tivoli Access Manager }6 WebSEAL,r;*9C>B#

kNDZ 29 3DZ 5 B, :+ WebSEAL S V3.9 }6A 4.1;rZ 23 3DZ

4 B, :+ WebSEAL S V3.8 }6A 4.1;#

WebSEAL z7I=vm~|iI:

v WebSEAL ~qw

v WebSEAL ADK

IT20 WebSEAL ~qwx;20 WebSEAL ADK#g{zk*20 WebSEAL

ADK,rXk20 WebSEAL ~qww*Hvu~#

WebSEAL ~qwM WebSEAL ADK <h*20MdC Tivoli Access Manager

runtime#mb,WebSEAL ADK 9h*20 Tivoli Access Manager ADK#

":PX Tivoli Access Manager runtime M Tivoli Access Manager ADK D205w

MdC!nDj{E",kND6IBM Tivoli Access Manager Base 208O7#

>B|,XZZ?vy'VD UNIX 53O20kdC WebSEAL ~qwM WebSEAL

ADK D@"BZ#Z9CXZ20 WebSEAL ADK D UNIX BZ.0,XkjIX

Z20 WebSEAL ~qwD UNIX BZ#

XZZ Windows O20kdC WebSEAL ~qwM WebSEAL ADK D8>E"|,

Z,;ZP#

":zIT9CrW20Lrfz>BPD8>E"#XZ|`E",kNDZ 5 3

DZ 2 B, :9CrW20;#

*20 WebSEAL,kNDBf`&ZPD8>E":

v Z 11 3D:Z UNIX O20MdC WebSEAL ~qw;

v Z 17 3D:Z UNIX O20 WebSEAL ADK;

v Z 20 3D:Z Windows O20 WebSEAL ~qwM WebSEAL ADK;

Z UNIX O20MdC WebSEAL ~qw

*Z UNIX 53O20 WebSEAL ~qw,kjI`&ZPD8>E":

v Z 12 3D:Z AIX O20 WebSEAL ~qw;

v Z 13 3D:Z HP-UX O20 WebSEAL ~qw;

v Z 13 3D:Z Linux on zSeries O20 WebSEAL ~qw;

v Z 14 3D:Z Solaris O20 WebSEAL ~qw;


Z20j WebSeal ~qwm~|.s,zXk9CTB?VPD8>E"4dC

WebSEAL ~qw:

v Z 15 3D:Z UNIX OdC WebSEAL ~qw;

Z AIX O20 WebSEAL ~qw

WebSEAL 20+D~i!Sm~|dCP@"Kv4#9C installp 5CLrIZ

AIX O20m~|#;s9C Tivoli Access Manager dC5CLr pdconfig 4dC

WebSEAL#

":g{Q-20MdC WebSEAL "h*XB20|,rXkWH!{dC"}%

WebSEAL m~|#`X8>E",kNDZ 35 3DZ 6 B, :!{dCM}%

WebSEAL;#

*Z AIX 53P20 WebSEAL ~qw,kjIBP8>E":

1. T root C'm]G<#

2. ZLx0,i$zyCf>D AIX Yw53DyPXh9!LrGq<Q-20#

PXj{DX8m~DE",kND6IBM Tivoli Access Manager "P5w7#

3. 7(CFczGqQ-dC Tivoli Access Manager runtime#g{CFczO20K

Tivoli Access Manager policy server,r_g{CFczH0QmS= Tivoli Access

Manager 2+r,r+dC runtime#

4. k4PBPYwPDdP;n:

v g{CFczQ-dC runtime,kxA=h 5#

v g{CFczP4dC Tivoli Access Manager runtime,k(}4U6IBM Tivoli

Access Manager Base 208O7PX(Z=(D8>E"420MdCX8m

~#

5. ek IBM Tivoli Access Manager Web Security for AIX CD,;sdkBP|n4

20 WebSEAL ~qwm~|:

installp -c -a -g -X -d /dev/cd0 PDWeb.Web

!n hv

–c a;yP10Q&CD+P4a;D8(|B#

–a &C;vr`vm~z7r|B#bG1!Yw#Kj>ITk –c j>;p9

C,Z201&CMa;m~z7|B#

–g 1C420ra;1,Kj>+VpT/X20ra;w*8(m~z7Hv

u~DyPm~z7r|B#

–X "T)9yP;_Pc;UdjI20DD~53#

–d 8(ITR=D20iJD;C#}g:

/dev/cd0

6. 20 WebSEAL D~#020**1mD0a{1?V+T?;vQI&20Dm

~|8>0I&1E"#

7. *KbgNdC WebSEAL ~qwDE",kNDZ 15 3D:Z UNIX OdC

WebSEAL ~qw;#


Z HP-UX O20 WebSEAL ~qw

WebSEAL 20+D~i!Sm~|dCP@"Kv4#9C swinstall IZ HP-UX

O20m~|#;s9C Tivoli Access Manager dC5CLr pdconfig 4dC

WebSEAL#


WebSEAL m~|#`XD8>E",kNDZ 35 3DZ 6 B, :!{dCM}

% WebSEAL;#

*+ WebSEAL ~qw20= HP-UX O,kjITB=h:

1. w* root C'G<#

2. ZLx0,i$zyCf>D HP-UX Yw53DyPXh9!LrGq<Q-2

0#PXj{DX8m~DE",kND6IBM Tivoli Access Manager "P5w7#

3. k+ IBM Tivoli Access Manager Web Security for HP-UX CD ek}/w#

4. Zs(Ht/ pfs_mountd,;sYt/ pfsd(g{|GP4KP)#9C

pfs_mount |n20 CD#}g,dkBP|n:

/usr/sbin/pfs_mount /dev/dsk/c0t0d0 /cdrom

dP /dev/dsk/c0t0d0 G CD h8x /cdrom G20c#


Tivoli Access Manager policy server,r_CFczH0QmS=2+rP,rmw

runtime QdC#

6. k4PBPYwPDdP;n:




~#

7. dkTB|n20 WebSEAL ~qwm~|:

swinstall -s /cdrom/hp PDWeb

dP /cdrom/hp G?<x PDWeb 8(DG WebSEAL ~qwm~|#

vV;u{",8vVvWNQI&#vVm;v{",8v4PWN}Z*<#

S CD Pb9uD~"20=2LO#vV;u{",8v4PWNQI&#

swinstall 5CLrKv#


WebSEAL ~qw;#

Z Linux on zSeries O20 WebSEAL ~qw

WebSEAL 20+D~i!Sm~|dCP@"Kv4#k9C rpm Z zSeries D

Linux 53P20m~|#;s9C Access Manager dC5CLr pdconfig 4dC

WebSEAL#

Z 3 B 9C>z20 13



% WebSEAL;#

*Z zSeries D Linux 53P20 WebSEAL ~qw,kjITBy8>DwnYw:

1. w* root C'G<#

2. ZLx0,i$zyCf>D Linux on zSeries Yw53DyPXh9!LrGq

<Q-20#PXj{DX8m~DE",kND6IBM Tivoli Access Manager "

P5w7#

3. q!T Access Manager WebSEAL for Linux on zSeries rpm D~DCJ(#k"

b:10 Linux on zSeries ;'V=S CD }/w#9CTB=(.;q!X*D

D~:

v + WebSEAL for Linux on zSeries D~0km;v$w>#9C ftp T+D~

*F= Linux for zSeries zwOD?<P#

v + IBM Tivoli Access Manager for Linux on zSeries CD 20=m;v$w>P#

;s9C NFS S zSeries zwOD Linux PCJ|#

b) WebSEAL D~;Z CD ODTB?<P:

/zSeries


Tivoli Access Manager policy server,r_CFczH0QmS= Tivoli Access

Manager 2+rP,rmwQdCK runtime#

5. k4PBPYwPDdP;n:


v g{Fcz4dC runtime,r(}4U6IBM Tivoli Access Manager Base 20

8O7PX(Z=(D8>E"420"dCXkDX8m~#


rpm -i PDWeb-PD-4.1.0-0.s390.rpm

S CD Pb9uD~"20=2LO#rpm 5CLrKv#


WebSEAL ~qw;#

Z Solaris O20 WebSEAL ~qw

WebSEAL 20+D~i!Sm~|dCP@"Kv4#9C pkgadd Z Solaris O2

0m~|#;s9C Tivoli Access Manager dC5CLr pdconfig 4dC

WebSEAL#



% WebSEAL;#

*Z Solaris P20 WebSEAL ~qw,kjIBPy8>DYw:

1. w* root C'G<#

2. ZLx0,i$zyCf>D Solaris Yw53DyPXh9!LrGq<Q-2

0#PXj{DX8m~DE",kND6IBM Tivoli Access Manager "P5w7#


3. + IBM Tivoli Access Manager Web Security for Solaris CD 20= /cdrom/cdrom0#

4. +?<|D* /cdrom/cdrom0/solaris#


Tivoli Access Manager policy server,r_CFczH0QmS=2+rP,r+d

C runtime#

6. k4PBPYwPDdP;n:




~#


pkgadd -d . PDWeb

vV;u{"/J:0k*T setuid/setgid 20b)Z]p?1

8. dk y "4 Enter |#

1a>Lx1,dk y "4 Enter |#

S CD Pb9uD~"20=2LO#

vV{",m> WebSEAL m~|D20QI&jI#pkgadd 5CLrKv#


WebSEAL ~qw;#

Z UNIX OdC WebSEAL ~qw

9C Tivoli Access Manager dC5CLr pdconfig Z UNIX =(OdC

WebSEAL#WebSEAL ~qwDdC=hZyPD UNIX =(O<`,#

*Z UNIX 53OdC WebSEAL ~qw,kjITB8>E":

1. w* root C',Z UNIX bGLra>{BdkTB|n:

pdconfig

vV0Access Manager for e-business hCK%1#

Access Manager for e-business hCK%

1. dCm~|2. !{dCm~|3. T>dC4,x. Kv

k!qK%n [x]:

2. t!qdCm~|rdk 1#

vV0Access Manager for e-business dCK%1#

Access Manager for e-business dCK%1. Access Manager WebSEAL dCx. 5X= Access Manager for e-business hCK%

k!qK%n [x]:

3. dk Access Manager WebSEAL dCDK%E#

vV0Access Manager WebSEAL for e-business hCK%1#

Z 3 B 9C>z20 15

Access Manager WebSEAL for e-business hCK%

1. dC2. T>dC4,x. Kv

k!qK%n [x]:

4. t!qdCrdk 1,"4 Enter |#

vV;va>,kszdk Tivoli Access Manager \m1D\k#

5. dk sec_master D\k#

IQbp"M:g{X4dkms\k,I\4=ms{":ms:IZ"TG

<'\DN}+`,]1x(KJ'#g{"zKms,kq!}7D\k,H

} 5 VS.sx(e},;sXBt/ pdconfig#

+a>ztC WebSEAL ~qwM LDAP ~qw.dD SSL (E#

6. dk y(G)r n(q)TtC Access Manager ~qwM LDAP ~qw.dD

SSL (E#

k*tC Access Manager ~qwM LDAP ~qw.dD SSL (Ep(y/n)[G]?

g{k*#$ WebSEAL 5}M LDAP ~qw.dD SSL (E,k*A=h 7#

g{;k#$ WebSEAL 5}M LDAP ~qw.dD SSL (E,k*A=h 8#

7. v1zk*#$ WebSEAL 5}M LDAP ~qw.dD SSL (E1,dk y

(G)#dkTBE"(?Ndks4 Enter |):

kdk LDAP SSL M'z\?D~D;C:kdk SSL M'z$ij)(g{h*):kdk LDAP SSL M'z\?D~\k:kdk LDAP ~qw SSL KZE:

(#;h*M'z$ij)#v1+ LDAP ~qwdC**sM'zK$i1Eh

*Kj)#;civB,LDAP ~qwvh*~qwK$i#g{ LDAP ~qw

;h*M'zK$i,rZvVKa>1;h4 Enter |#

1!D LDAP ~qw SSL KZ* 636#

8. 1z;k#$ WebSEAL 5}M LDAP ~qw.dD SSL (E1,dk n(q)#

4 Enter |#

9. li Web ~qwdC5#^DNNh*|DD5#s`}ivB,IS\1!5#

vVTBA;T0r:

kli Web ~qwdC:1. tC TCP HTTP? G

2. HTTP KZ 803. tC HTTPS? G

4. HTTPS KZ 4435. Web D5y?< /opt/pdweb/www/docsa. S\dC"Lx20x. Kv20!q*|DDn:

":g{}ZKFczOKPNNd| Web ~qw(g:IBM HTTP Server),

rki$CZd|b)~qwD TCP HTTP KZk WebSEAL TCP HTTP K

ZGqe;#(#ivB,g{fZKZEe;,pdconfig 5CLralb=

e;"vSKZED!q#


10. 1z7EdC}71,kdkV8 a TS\CdC"Lx20#4B Enter |#

ZdC WebSEAL ~qw1+T>;)4,{"#

dCjI1,4,{"+8> WebSEAL ~qw}Zt/#

11. 4 Enter |Lx#


12. 4 Enter |!q1!!n x TKv5CLr#

":Tivoli Access Manager WebSEAL 'V?(wzFczOP`v WebSEAL ~q

w5}#PX`v WebSEAL ~qw5}DE",kND6IBM Tivoli Access

Manager WebSEAL \m18O7#

Z UNIX O20 WebSEAL ADK>Z|,Z?V\'VD UNIX =(O20 WebSEAL ADK D8>E"#WebSEAL

ADK *s20 Tivoli Access Manager ADK#

":WebSEAL ADK _PT WebSEAL ~qwDHvu~#g{P4ZCFczO2

0 WebSEAL ~qw,r*AZ 11 3D:Z UNIX O20MdC WebSEAL ~

qw;

*20 WebSEAL ADK,kqU`&ZPD8>E":

v Z 17 3D:Z AIX O20 WebSEAL ADK;

v Z 18 3D:Z HP-UX O20 WebSEAL ADK;

v Z 19 3D:Z zSeries OD Linux O20 WebSEAL ADK;

v Z 19 3D:Z Solaris O20 WebSEAL ADK;

Z AIX O20 WebSEAL ADK*Z AIX O20 WebSEAL ADK,kjITB8>E":

1. i$Q20MdC WebSEAL ~qwm~|#

g{P420 WebSEAL ~qw,rkjIZ 12 3D:Z AIX O20 WebSEAL

~qw;PD8>E"#

2. i$GqT root G<,T0 IBM Tivoli Access Manager Web Security for AIX CD

GqZ CD }/wP#

3. WebSEAL ADK *sWH20 Tivoli Access Manager ADK#g{ Tivoli Access

Manager ADK Q20,rx}K=h#g{C ADK 10P420,kdkTB|

n:

installp -c -a -g -X -d /dev/cd0 PD.AuthADK

20 ADK D~#020**1mD0a{1?V+T?;vQI&20Dm~|8

>0I&1E"#

!n hv

–c a;yP10Q&CD+P4a;D8(|B#

–a &C;vr`vm~z7r|B#bG1!Yw#Kj>ITk –c j>;p9

C,Z201&CMa;m~z7|B#

Z 3 B 9C>z20 17

!n hv

–g 1C420ra;1,Kj>+VpT/X20ra;w*8(m~z7Hv

u~DyPm~z7r|B#

–X "T)9yP;_Pc;UdjI20DD~53#

–d 8(ITR=D20iJD;C#}g:

/dev/cd0

4. dkTB|n20 WebSEAL ADK:

installp -c -a -g -X -d . PDWeb.ADK

20 WebSEAL ADK D~#020**1mD0a{1?V+T?;vQI&20

Dm~|8>0I&1E"#

WebSEAL ADK ;*sNNdC#VZ,WebSEAL ADK D20Q-jI#

Z HP-UX O20 WebSEAL ADK*Z HP-UX O20 WebSEAL ADK,kjITB8>E":


g{P420 WebSEAL ~qw,rkjIZ 13 3D:Z HP-UX O20

WebSEAL ~qw;PD8>E"#

2. i$zGqGT root Dm]G<D

3. + IBM Tivoli Access Manager Web Security for HP-UX CD ek}/wP#

4. Zs(Ht/ pfs_mountd,;sYt/ pfsd(g{|GP4KP)#9C

pfs_mount |n20 CD#}g,dkBP|n:


dP /dev/dsk/c0t0d0 G CD h8x /cdrom G20c#



n:

swinstall -s /cdrom/hp PDAuthADK

1a>Lx1,dk y "4 Enter |#S CD Pb9uD~"20=2LO#v

V;u4,{",8v Tivoli Access Manager ADK m~|D20QI&#swinstall5CLrKv#


swinstall -s /cdrom/hp PDWebADK


V;u4,{",8v WebSEAL ADK m~|D20QI&#swinstall 5CLr

Kv#



Z zSeries OD Linux O20 WebSEAL ADK*20 WebSEAL ADK,kjITB8>E":


g{P420 WebSEAL ~qw,rkjIZ 13 3D:Z Linux on zSeries O2

0 WebSEAL ~qw;PD8>E"#

2. i$TBE":

v w* root C'G<#

v zITS IBM Tivoli Access Manager Web Security for Linux on zSeries CD P

CJ rpm m~|#k"b:C CD ;\20Z Linux for zSeries zwO#XZ

CJD8>E",kNDZ 11 3D:Z UNIX O20MdC WebSEAL ~q

w;#

20m~|;Z CD OD /zSeries ?<P#



n:

rpm -i PDAuthADK*.rpm



rpm -i PDWebADK-PD-4.1.0-0.s390.rpm



Z Solaris O20 WebSEAL ADK*Z Solaris O20 WebSEAL ADK,kjITB8>E":


g{P420 WebSEAL ~qw,rkjIZ 14 3D:Z Solaris O20 WebSEAL

~qw;PD8>E"#

2. i$TBE":

v w* root C'G<#

v IBM Tivoli Access Manager Web Security for Solaris CD Q0k /cdrom/cdrom0

P#

v 10?<*:/cdrom/cdrom0/solaris



n:

pkgadd -d . PDAuthADK


V;u4,{",8v Tivoli Access Manager ADK m~|D20QI&#pkgadd5CLrKv#


Z 3 B 9C>z20 19

pkgadd -d . PDWebADK


V;u4,{",8v WebSEAL ADK m~|D20QI&#pkgadd 5CLr

Kv#


Z Windows O20 WebSEAL ~qwM WebSEAL ADKWebSEAL 20+D~i!Sm~|dCP@"Kv4#9C InstallShield LrI2

0 WebSEAL D~#SE,9C pdconfig dC5CLr4dC WebSEAL ~qw#



% WebSEAL;#

*Z Windows P20 WebSEAL,kjIBPy8>DYw:

1. T_P Windows \m1X(DC'G<= Windows r#

2. ZLx0,i$zyCf>D Windows Yw53DyPXh9!LrGq<Q-

20#PXj{DX8m~DE",kND6IBM Tivoli Access Manager "P5

w7#

3. + IBM Tivoli Access Manager Web Security for Windows CD ek CD }/wP#

4. 7(CFczGqQ-dC runtime#g{CFczO20K policy server,r_C

FczH0QmS=2+rP,r+dC runtime#

5. k4PBPYwPDdP;n:


v g{Fcz4dC runtime,r(}4U6IBM Tivoli Access Manager Base 2

08O7PX(Z=(D8>E"420"dCXkDX8m~#

mb,g{k*20 WebSEAL ADK,rXk20Hvu~ Tivoli Access

Manager ADK#PXj{D8>E",kND6IBM Tivoli Access Manager Base

208O7#

6. (}+wTBD~(TB|nPDV8 E: zm CD }/w)KP WebSEAL

InstallShield 20Lr:

E:\Windows\PolicyDirector\Disk Images\Disk1\WebSEAL\Disk Images\Disk 1\setup.exe

vV0!q20oT1T0r#

7. !q`&DoT"%w7(#

InstallShield Lrt/,vV06-1T0r#

8. %wB;=#

vV0mI$-i1T0r#

9. %wGS\mI$-i#

vV0!q?DX;C1T0r#

10. S\1!5r%w/@8(m;;C#%wB;=#

vV0!qi~1T0r#

11. !q?vk*20Dm~|D4!r:


v PDWeb

Cm~||, WebSEAL ~qwM5CLr#Z1!ivB,Cm~|G$H!

PD#

v PDWebADK

Km~|P|, WebSEAL ADK#g{k20Km~|,rXk!qC4!r#

ZIT20 PDWebADK m~|.0,XkWH20 PDAuthADK#g{H0

;P20 PDAuthADK,r PDWebADK D20a'\#

12. %wB;=#

!(m~|DD~;i!=ELO#vV;u{",8vm~|Q20#

13. %wjIKv InstallShield Lr#

14. *KbgNdC WebSEAL ~qwDE",kNDZ 21 3D:Z Windows Od

C WebSEAL ~qw;#

Z Windows OdC WebSEAL ~qw

*dC WebSEAL ~qw,kjITB8>E"# WebSEAL ADK ;*sNNdC#


2. !qt/ → Lr → Access Manager for e-business → dC#

vV0Access Manager for e-business dC1T0r#

3. !q Access Manager WebSEAL "%wdC#

vV0Access Manager WebSEAL for e-business dC1T0r#

4. !q1!D WebSEAL "%wdC#

vV0Access Manager \m1\k1T0r#

5. dk sec_master D\k"%w7(#

IQbp"M:g{X4dkmsD\k,I\a4=ms{":ms:IZ"

TG<'\N}}`,KJ'Q-]1x(#g{"zKiv,rq!}7D\

k,H} 5 VSTcx(e},;sXBt/dCLr#

6. vV0k LDAP ~qwD SSL (E1T0r#

g{k*#$ WebSEAL M LDAP ~qw.dD SSL (E,k*A=h 7#

g{;k#$ WebSEAL M LDAP ~qw.dD SSL (E,k*A=h 8#

7. v1k*#$ WebSEAL M LDAP ~qw.dD SSL (E1!q0G1#

a. dk LDAP M'z SSL E":

v CZ SSL l}DKZE

v \?}]bD~+76;C

v $ij)

v \?}]bD~D\k

b. %w7(#

c. vV0HTTP tT1T0r#*A=h 9#

8. g{;k#$ WebSEAL M LDAP ~qw.dD SSL (E,k!q0q1#%w

7(#

vV0HTTP tT1T0r#Lx=h 9#

Z 3 B 9C>z20 21

9. !qr!{!qJm;2+D TCP HTTP CJ4!r#g{Jm;2+D TCP

HTTP CJ,rk8(KZE#s`}ivB,IS\1!KZE 80#g{fZN

NKZEe;,pdconfig 5CLralb=e;"vSKZE!q#

10. !qr!{!qJm HTTPS CJ4!r#g{Jm HTTPS CJ,rk8(KZ

E#s`}ivB,IS\1!KZE 443#g{fZNNKZEe;,pdconfig5CLralb=e;"vSKZE!q#%w7(#

vV4,{"}ZdC Tivoli Access Manager WebSEAL#1dCjI1,vV;

u4,{"8>dCQI&#vV0Access Manager WebSEAL for e-business d

C1T0r#

11. %wXU#


12. %wXU#

VZ,WebSEAL Z Windows DdCQ-jI#

":Tivoli Access Manager WebSEAL 'V?(wzFczOP`v WebSEAL ~q

w5}#PX`v WebSEAL ~qw5}DE",kND6IBM Tivoli Access

Manager WebSEAL \m18O7#


Z 4 B + WebSEAL S V3.8 }6A 4.1

Tivoli Access Manager 'V Tivoli Access Manager WebSEAL S V3.8 r V3.9 = V4.1

D}6#>BhvgN+ V3.8 WebSEAL ~qw}6= V4.1#

":PXTZ WebSEAL }6}LD^F,kZ Tivoli 'V Web >cPli6IBM

Tivoli Access Manager "P5w7#

ZIT9CTB WebSEAL D}6}L.0,Xk7#TB Tivoli Access Manager i

~Q}6A V4.1:




XZ+b)i~}6= V4.1 D8>E",kN<6IBM Tivoli Access Manager Base 2

08O7#

Z AIX O}6 WebSEAL*Z AIX O}6 WebSEAL ~qw,kjITB8>E":

1. w* root C'G<#

2. i$ Tivoli Access Manager 2+rGq\;}6 WebSEAL:

a. i$2+rD Tivoli Access Manager policy server GqQ}6= V4.1#PX

policy server D}68>E",kND6IBM Tivoli Access Manager Base 20

8O7#i$ Tivoli Access Manager policy server Gq}ZKP,RzGqI

k.*5#I(}4Py> pdadmin |n45V#}g:

pdadmin login -a sec_master -p passwordpdadmin> acl list

g{;\G<,r;*Lx WebSEAL }6#bvG<Jb.sEILx#

3. #9 WebSEAL ~qw#dkTB|n:

/usr/bin/pdweb stop

4. 20 IBM Tivoli Access Manager Web Security for AIX CD#

5. +?<|D*:

mount_point/usr/sys/inst.images

6. q! Tivoli Access Manager migrate.conf D~#CD~;Z CD ODTB?<:

mount_point/usr/sys/inst.images/migrate/migrate.conf

a. + migrate.conf 4F=:

/tmp/migrate.conf

b. `-2+rD migrate.conf "mS sec_master \k#

pdadmin-login = sec_masterpdadmin-pwd = sec_master_password

T migrate.conf PDd|u?9C1!5#


7. 7#z;Z inst.images ?<#

cd mount_point/usr/sys/inst.images


installp -c -a -X -F -d . PDWeb.Web

S CD Pb9uD~"20=2LO#

020**1D0a{1?V+TQI&20Dm~|8>0I&1E"#

installp 5CLrKv#

WebSEAL ~qw+T/XBt/#

9. g{kZKFczO}6 WebSEAL ADK,rVZ20|#

WebSEAL ADK T Tivoli Access Manager ADK _P`XT#b=v ADK m~

|<|,Z Web Security CD O#g{P420 V4.1 Tivoli Access Manager ADK,

rVZ20|#9C installp 20?vm~|:

installp -c -a -X -F -d . PDAuthADK

installp -c -a -X -F -d . PDWebADK

S CD Pb9uD~"20=2LO#

020**1D0a{1?V+TQI&20Dm~|8>0I&1E"#

installp 5CLrKv#

IBM Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NN

dC=h#

VZ,WebSEAL Z AIX OD}6Q-jI#

;h*KP pdconfig dC WebSEAL#WebSEAL T/9C V3.8 dCE"#-<D

webseald.conf dCD~kz(FDdChC<Q#t,"9C V4.1 DZMN}xP

|B#

Z HP-UX O}6 WebSEAL*Z HP-UX O}6 WebSEAL,kjITB8>E":

1. w* root C'G<#


a. i$2+rD Tivoli Access Manager policy server GqQ}6= V4.1#

b. i$ Tivoli Access Manager policy server Gq}ZKP,RzGqIk.*5#

I(}4Py> pdadmin |n45V#}g:



3. + WebSEAL $i\?D~}]bM\kf"D~4F=3Y1?<:

cp /var/pdweb/www/certs/pdsrv.kdb /temporary_directorycp /var/pdweb/www/certs/pdsrv.sth /temporary_directory


4. dkTB|n:

cd /opt/pdweb/.configuretouch upgrade38


/usr/bin/pdweb stop

6. 20 IBM Tivoli Access Manager Web Security for HP-UX CD:

/usr/sbin/pfs_mount mount_device mount_point

}g:



mount_point/hp/migrate/migrate.conf


/tmp/migrate.conf




8. 7#z;Z hp ?<#

cd mount_point/hp

9. 9C swinstall 5CLr20 WebSEAL ~qwm~|:

swinstall -s mount_point/hp PDWeb

vV;u{",8vVvWNQI&#S CD Pb9uD~"20=2LO#

vV;u{",8v4PWNQI&#swinstall 5CLrKv#

10. g{zkZKFczP9C WebSEAL ADK,kVZ20|#g{;k9C|,r

x}K=h"*AB;=#


|<|,Z Web Security CD O#

a. 9C swinstall 20 Tivoli Access Manager ADK:

swinstall -s /mount_point/hp PDAuthADK

1VvWNI&1,vV;u4,{"#+D~i!=2LO#14PWNI

&1,vV;u4,{"#swinstall 5CLrKv#

Tivoli Access Manager ADK m~|;h*NNdC#

b. 9C swinstall 20 WebSEAL ADK:

swinstall -s /mount_point/hp PDWebADK



WebSEAL ADK m~|;h*NNdC#

11. Z*< WebSEAL }6.0,V4Q#tD V3.8 WebSEAL $iD~:

Z 4 B + WebSEAL S V3.8 }6A 4.1 25

cp /temporary_directory/pdsrv.kdb /opt/pdweb/www/certs/pdsrv.kdbcp /temporary_directory/pdsrv.sth /opt/pdweb/www/certs/pdsrv.sth

12. KP WebSEAL }6E>:

cd /opt/pdweb/sbinPDWeb_upgrade

":}6s,swlist |nI\@;T> Policy Director WebSEAL 3.8.0 DPm#

IvTKu?#WebSEAL 3.8 ~xFD~Q}6= V4.1#

Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NNdC=h#

VZ,WebSEAL Z HP-UX OD}6Q-jI#



|B#

Z Solaris O}6 WebSEAL*Z Solaris O}6 WebSEAL ~qw,kjITB8>E":

1. w* root C'G<#








/usr/bin/pdweb stop

4. + IBM Tivoli Access Manager Web Security for Solaris CD 20=Bv76P:

/cdrom/cdrom0

5. +?<|D*:

/cdrom/cdrom0/solaris


mount_point/solaris/migrate/migrate.conf


/tmp/migrate.conf




7. 7#z;Z solaris ?<#

cd mount_point/solaris



pkgadd -a /mount_point/solaris/pddefault -d . PDWeb

S CD Pb9uD~"20=2LO#

vV;u{",8v}ZxP}6#

vV;u{",8v WebSEAL m~|D20QI&#pkgadd 5CLrKv#

WebSEAL ~qw+T/XBt/#




rVZ20|#9C pkgadd 20?vm~|:

pkgadd -a mount_point/solaris/pddefault -d . PDAuthADK

pkgadd -a mount_point/solaris/pddefault -d . PDWebADK

S CD Pb9uD~"20=2LO#vV;u{",8v WebSEAL ADK m~

|D20QI&#pkgadd 5CLrKv#

IBM Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NN

dC=h#

WebSEAL Z Solaris OS V3.8 = V4.1 D}6QjI#



|B#

Z Windows O}6 WebSEAL*Z Windows O}6 WebSEAL,kjITB8>E":






MSDOS> pdadmin login -a sec_master -p passwordpdadmin> acl list


3. 7# WebSEAL ~qw;ZKP#9C~q<j#9 WebSEAL ~qw#


5. S Web Security CD q! Tivoli Access Manager migrate.conf D~#CD~;

Z CD ODTB?<:

E:\Windows\migrate\migrate.conf


%TEMP%\migrate.conf

Z 4 B + WebSEAL S V3.8 }6A 4.1 27

g{4hC %TEMP%,r+ migrate.conf Ck %TMP%#




6. KP WebSEAL 20Lr(TB|nPDV8 E: zm CD }/w):

MSDOS> E:\Windows\PolicyDirector\Disk Images\Disk1\WebSEAL\Disk Images\Disk1\setup.exe

vV0!q20oT1T0r#

7. !q`&DoT"%w7(#

InstallShield Lrt/#

8. %wjIKv20Lr#

WebSEAL +T/t/#

VZ,WebSEAL Z Windows OD}6Q-jI#



|B#


Z 5 B + WebSEAL S V3.9 }6A 4.1

Tivoli Access Manager 'V Tivoli Access Manager WebSEAL S V3.8 r V3.9 = V4.1

D}6#>BhvgN+ V3.9 WebSEAL ~qw}6= V4.1#

":PXTZ WebSEAL }6}LD^F,kZ Tivoli 'V Web >cPli6IBM

Tivoli Access Manager "P5w7#

ZIT9CTB WebSEAL D}6}L.0,Xk7#TB Tivoli Access Manager i

~Q}6A V4.1:




XZ+b)i~}6= V4.1 D8>E",kN<6IBM Tivoli Access Manager Base 2

08O7#

Z AIX O}6 WebSEAL*Z AIX O}6 WebSEAL ~qw,kjITB8>E":

1. w* root C'G<#






PX policy server D}68>E",kND6IBM Tivoli Access Manager Base

208O7#



/usr/bin/pdweb stop

4. 20 IBM Tivoli Access Manager Web Security for AIX CD#

5. 7#z;Z inst.images ?<#

cd mount_point/usr/sys/inst.images


installp -c -a -X -F -d . PDWeb.Web

S CD Pb9uD~"20=2LO#

020**1D0a{1?V+TQI&20Dm~|8>0I&1E"#

installp 5CLrKv#


WebSEAL ~qw+T/XBt/#




rVZ20|#9C installp 20?vm~|:

installp -c -a -X -F -d . PDAuthADK

installp -c -a -X -F -d . PDWebADK

S CD Pb9uD~"20=2LO#

020**1D0a{1?V+TQI&20Dm~|8>0I&1E"#

installp 5CLrKv#

Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NNdC

=h#

VZ,WebSEAL Z AIX OD}6Q-jI#



|B#

Z HP-UX O}6 WebSEAL*Z HP-UX O}6 WebSEAL,kjITB8>E":

1. w* root C'G<#





# pdadmin login -a sec_master -p passwordpdadmin> acl list



cp /var/pdweb/www/certs/pdsrv.kdb /temporary_directorycp /var/pdweb/www/certs/pdsrv.sth /temporary_directory

4. dkTB|n:



/usr/bin/pdweb stop

6. 20 IBM Tivoli Access Manager Web Security for HP-UX CD:

/usr/sbin/pfs_mount mount_device mount_point

}g:



7. 7#z;Z hp ?<#

cd mount_point/hp

8. 9C swinstall 5CLr20 WebSEAL ~qwm~|:

swinstall -s mount_point/hp PDWeb

vV;u{",8vVvWNQI&#S CD Pb9uD~"20=2LO#

vV;u{",8v4PWNQI&#swinstall 5CLrKv#

9. g{kZKFczO9C WebSEAL &CLr*"_$_d(ADK),rVZ20

|#g{;k9C|,rx}K=h"*AB;=#


|<|,Z WebSEAL CD O#

a. 9C swinstall 20 Tivoli Access Manager ADK:

swinstall -s /mount_point/hp PDAuthADK




b. 9C swinstall 20 WebSEAL ADK:

swinstall -s /mount_point/hp PDWebADK







cd /opt/pdweb/sbinPDWeb_upgrade

":}6s,swlist |nI\@;T> Policy Director WebSEAL 3.9.0 DPm#

IvTKu?#WebSEAL 3.9 ~xFD~Q}6= V4.1#

Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NNdC=h#

VZ,WebSEAL Z HP-UX OD}6Q-jI#



|B#

Z 5 B + WebSEAL S V3.9 }6A 4.1 31

Z Linux on zSeries O}6 WebSEAL*Z Linux on zSeries O}6 WebSEAL ~qw,kjITB8>E":

1. w* root C'G<#








cp /var/pdweb/www/certs/pdsrv.kdb /tmpcp /var/pdweb/www/certs/pdsrv.sth /tmp

4. dkTB|n:



/usr/bin/pdweb stop

6. q!T Access Manager WebSEAL for Linux on zSeries rpm D~DCJ(#k

"b:10 Linux on zSeries ;'V=S CD }/w#9CTB=(.;q!X

*DD~:

v + WebSEAL for Linux on zSeries D~0km;v$w>#9C ftp T+D~

*F= Linux for zSeries zwOD?<P#

v + IBM Tivoli Access Manager for Linux on zSeries CD 20=m;v$w>P#

9C NFS S Linux on zSeries zwOCJ|#

b) WebSEAL D~;Z CD ODTB?<P:

/zSeries

7. 9C rpm 5CLr20 WebSEAL ~qwm~|:

rpm -U PDWeb-PD-4.1.0-0.s390.rpm

S CD Pb9uD~"20=2LO#

rpm 5CLrKv#

8. g{kZKFczO9C WebSEAL &CLr*"_$_d(ADK),rVZ20

|#g{;k9C|,rx}K=h"*AB;=#


|<|,Z WebSEAL CD O#

a. 9C rpm 20 Tivoli Access Manager ADK:

rpm -U PDAuthADK-PD-4.1.0-0.s390.rpm

+D~i!=2LO#rpm 5CLrKv#


b. 9C rpm 20 WebSEAL ADK:


rpm -U PDWebADK-PD-4.1.0-0.s390.rpm

+D~i!=2LO#rpm 5CLrKv#





cd /opt/pdweb/sbin./PDWeb_upgrade

vV{",8vm~|QI&}6R~qwQt/#

11. i$ WebSEAL Gq}ZKP:

./pd_start statusAccess Manager ~qw~qw QtC }ZKP___________________________________

webseald G G

Z Solaris O}6 WebSEAL*Z Solaris O}6 WebSEAL ~qw,kjITB8>E":

1. w* root C'G<#








/usr/bin/pdweb stop

4. + IBM Tivoli Access Manager Web Security for Solaris CD 20=Bv76P:

/cdrom/cdrom0

5. 7#z;Z solaris ?<#

cd mount_point/solaris


pkgadd -a /mount_point/solaris/pddefault -d . PDWeb

S CD Pb9uD~"20=2LO#

vV;u{",8v}ZxP}6#

vV;u{",8v WebSEAL m~|D20QI&#pkgadd 5CLrKv#

WebSEAL ~qw+T/XBt/#

Z 5 B + WebSEAL S V3.9 }6A 4.1 33




rVZ20|#9C pkgadd 20?vm~|:

pkgadd -a mount_point/solaris/pddefault -d . PDAuthADK

pkgadd -a mount_point/solaris/pddefault -d . PDWebADK

S CD Pb9uD~"20=2LO#vV;u{",8v WebSEAL ADK m~

|D20QI&#pkgadd 5CLrKv#

Tivoli Access Manager ADK m~|M WebSEAL ADK m~|<;h*NNdC

=h#

WebSEAL Z Solaris OS V3.9 = V4.1 D}6QjI#



|B#

Z Windows O}6 WebSEAL*Z Windows O}6 WebSEAL,kjITB8>E":






MSDOS> pdadmin login -a sec_master -p passwordpdadmin> acl list


3. 7# WebSEAL ~qw;ZKP#9C~q<j#9 WebSEAL ~qw#


5. KP WebSEAL 20Lr(TB|nPDV8 E: zm CD }/w):

MSDOS> E:\Windows\PolicyDirector\Disk Images\Disk1\WebSEAL\Disk Images\Disk1\setup.exe

vV0!q20oT1T0r#

6. !q`&DoT"%w7(#

InstallShield Lrt/#

7. %wjIKv20Lr#

WebSEAL +T/t/#

VZ,WebSEAL Z Windows OD}6Q-jI#



|B#


Z 6 B !{dCM}% WebSEAL

>BhvKgN!{ WebSEAL M WebSEAL ADK DdC"+|G}%#

":T WebSEAL D!{dC+yPE"S WebSEAL acD}]bP}%#Z}%

CE".0,k7#;Yh*|#

WebSEAL @5Z Tivoli Access Manager runtime#>B;PhvgN}% runtime#*

}% runtime,k4U6IBM Tivoli Access Manager Base 208O7PD8>E"x

PYw#

!{dCk}% WebSEAL G=v=hD}L#WH,Xk9C pdconfig 5CLr

S2+r!{dC WebSEAL#;sEIT9CX(Z=(D5CLrS2LO}%

WebSEAL D~#

*!{dC WebSEAL,kjITBBZ.;PD8>E":

v :Z UNIX O!{dC WebSEAL;

v Z 36 3D:Z Windows O!{dC WebSEAL;

*}% WebSEAL D~,kjITBBZ.;PD8>E":

v Z 37 3D:S AIX }% WebSEAL;

v Z 37 3D:S HP-UX }% WebSEAL;

v Z 38 3D:S Linux on zSeries }% WebSEAL;

v Z 38 3D:S Solaris }% WebSEAL;

v Z 39 3D:S Windows }% WebSEAL;

Z UNIX O!{dC WebSEAL9C pdconfig dC5CLr!{dC WebSEAL#

1. w* root C'G<#

2. t/ pdconfig dC5CLr:

pdconfig

vV0Access Manager for e-business hCK%1#

Access Manager for e-business hCK%

1. dCm~|2. !{dCm~|3. T>dC4,x. Kv

k!qK%n [x]:

3. t!q!{dCm~|rdk 2#

vV0Access Manager for e-business !{dCK%1#

4. dk Access Manager WebSEAL !{dCDK%E#



5. dk 2 !{dC#

vV0Access Manager WebSEAL for e-business !{dCK%1#

6. dk 1 !q1!D WebSEAL ~qw#

":g{zD53dC|,`v WebSEAL 5},rXkZT1!D WebSEAL ~

qw!{dC.0}%yP5}#1;Pq-KYw3r1,avVms{

"/fz#

vVa>,ksdk Tivoli Access Manager \m1D\k#

7. dk sec_master D\k#

vV;5P4,{"#b){"8>}Z!{~qwdC,}Ze}U>D~,

"R}ZUXb"Kc#WebSEAL ~qwQ#9,"RnsD4,{"8>QI

&!{dC#

8. 4 Enter |#

!{dCQjI#


9. dk x Kv pdconfig 5CLr#

10. LxxkS UNIX 53}% WebSEAL D~D`&BZ#

Z Windows O!{dC WebSEAL9C pdconfig dC5CLr!{dC WebSEAL#

*Z Windows O!{dC WebSEAL M WebSEAL ADK,kjITB8>E":

1. T_P\m1X(D Windows C'G<#

2. %w*< → Lr → Access Manager for e-business → dC


3. !q Access Manager WebSEAL "%w!{dC#

vV0Access Manager WebSEAL for e-business dC1T0r#

4. !q1! WebSEAL "%w!{dC#

vV0Access Manager \m1\k1T0r#

5. dk sec_master D\k#%w7(#

vV;u{",8v WebSEAL }Z!{dC#vV0Access Manager WebSEAL

for e-business dC1T0r#

6. i$GqQ!{dC WebSEAL#01! WebSEAL1DdC4,+T0q1Pv#

7. %wXU#


8. %wXU#

9. LxxkS Windows 53}% WebSEAL D~D`&BZ#


S AIX }% WebSEAL9C installp S AIX }% WebSEAL D~#

":Z}% WebSEAL ADK D~.0,;XTd!{dC#

1. w* root C'G<#

2. !qTB|n.;:

v *}% WebSEAL ADK,kdkTB|n:

installp -u PDWeb.ADK

v *}% WebSEAL,kdkTB|n:

installp -u PDWeb.Web

!n hv

–u S53}%8(Dm~z70dyP20D|B#

":Z}% PDWeb .0,Xk}% PDWebADK#

3. }% WebSEAL D~#020**1mD0a{1?V+T?;vQI&}%Dm

~|8>0I&1E"#

WebSEAL D}%QjI#

*k}% Tivoli Access Manager runtime,k4U6IBM Tivoli Access Manager Base 2

08O7PD8>E"xPYw#

S HP-UX }% WebSEAL9C swremove S HP-UX }% WebSEAL D~#


1. w* root C'G<#

2. !qTB|n.;:


swremove PDWebADK


swremove PDWeb

":WebSEAL ADK T WebSEAL _P`XT#1 WebSEAL ADK Z53O

@;fZ1,;*"T}% WebSEAL#WH}% WebSEAL ADK#

vV;5PXZ?v}%!qD4,{"#vV;u4,{",8vVvWNQI

&#swremove 5CLrS2LO}% WebSEAL D~#

1}%jI1,swremove 5CLrKv#

VZ,WebSEAL Z HP-UX OD}%Q-jI#


08O7PD8>E"xPYw#

Z 6 B !{dCM}% WebSEAL 37

S Linux on zSeries }% WebSEAL9C rpm S Linux on zSeries }% WebSEAL D~#


1. w* root C'G<#

2. !qTB|n.;:


rpm -e PDWebADK-PD-4.1.0-0

":XkWH}% WebSEAL ADK .sE\I&}% WebSEAL#


rpm -e PDWeb-PD-4.1.0-0

v *+ WebSEAL ADK M WebSEAL <}%,kdkTB|n(Pvm~|N}

D3r;a}pnp):

rpm -e PDWebADK-PD-4.1.0-0 PDWeb-PD-4.1.0-0

;avV7O}%!(m~|D{"r4,#rpm 5CLrKv#

!(m~|D}%QjI#*k}% Tivoli Access Manager runtime,k4U6IBM Tivoli

Access Manager Base 208O7PD8>E"xPYw#

S Solaris }% WebSEAL9C pkgrm S Solaris }% WebSEAL D~#


1. w* root C'G<#

2. !qTB|n.;:


pkgrm PDWebADK


pkgrm PDWeb

":Z}% PDWeb .0,Xk}% PDWebADK#

v *+ WebSEAL M WebSEAL ADK <}%,kdkTB|n:

pkgrm PDWeb PDWebADK

vVa>,*sz7O}%!(m~|

3. dk y#

vV;u{"/J:0k*Lx}%Km~|p?1

4. dk y#

Z?vD~}%1,+vV4,{"Pvb)D~#

Z postremove E>KPs,4,{"8vm~|D}%QI&#

pkgrm 5CLrKv#!(m~|D}%QjI#



08O7PD8>E"xPYw#

S Windows }% WebSEALZ Windows =(O WebSEAL I=vi~iI:WebSEAL M WebSEAL ADK#I

T+b=vi~<}%,2ITv}% WebSEAL ADK i~#

g{!q}% WebSEAL ~qw,r WebSEAL ADK +T/}%#

kqU`&BZPD8>E":

v Z 39 3D:}% WebSEAL M WebSEAL ADK;

v Z 39 3D:v}% WebSEAL ADK;

}% WebSEAL M WebSEAL ADK9C Windows mS/>}Lr<jgf}%?vm~|DD~#

*Z Windows O}% WebSEAL M WebSEAL ADK,kjITB8>E":

1. %wmS/>}Lr<j#

2. !q Access Manager WebSEAL#

3. %w|D/>}#

vV0!q20oT1T0r#

4. !qoT"%w7(#

5. !q}%%!4%#%wB;=#

vV07O6X1T0r#

6. %w7(#

}% WebSEAL D~#WebSEAL ADK D~2+}%#

vV0,$jI1T0r#

7. %wjI#

WebSEAL D}%QjI#


08O7PJ1D8>E"xPYw#

v}% WebSEAL ADKITv}% WebSEAL ADK D~x;}% WebSEAL ~qwD~#


*Z Windows Ov}% WebSEAL ADK,kjITB8>E":

1. %wmS/>}Lr<j#

2. !q Tivoli Access Manager WebSEAL#

3. %w|D/>}#

vV0!q20oT1T0r#

4. !qoT"%w7(#

Z 6 B !{dCM}% WebSEAL 39

5. !q^D%!4%#%wB;=#

vV0!qi~1T0r#

6. e} PDWebADKs 4!r#

":1ze}C4!r1,InstallShield +8(}%Ki~#

7. %wB;=#

}% WebSEAL ADK D~#

8. %wjIKvLr#

VZ,WebSEAL ADK Z Windows OD}%Q-jI#


=<. yw

>E"G*Z@za)Dz7M~q`4D#IBM I\Zd|zRrXx;a)>D5

PV[Dz7"~qr&\XT#PXz10yZxrDz7M~qDE",krz

1XD IBM zmI/#NNT IBM z7"Lrr~qD}C"GbZw>r5>;

\9C IBM Dz7"Lrr~q#;*;V8 IBM D*6z(,NN,H&\Dz

7"Lrr~q,<ITzf IBM z7"Lrr~q#+G,@@Mi$NNG IBM

z7"Lrr~q,rIC'TP:p#

IBM +>I\Q5Pr}Zjkk>D5hvZ]PXDwn({#a)>D5"4Z

hC'9Cb)({DNNmI$#zITCif==+mI$i/Dy:

IBM Director of Licensing

IBM Corporation

500 Columbus Avenue

Thornwood, NY 10594

U.S.A

PX+VZ(DBCS)E"DmI$i/,kkzyZzRrXxD IBM *6z(?E

*5,rCif==+i/Dy:

IBM World Trade Asia Corporation

Licensing

2-31 Roppongi 3-chome, Minato-ku

Tokyo 106, Japan

>un;JC"zrNNbyDunk1X(I;;BDzRrXx:zJL5zw

+>T04V41Dy!a)>vfo,;=PNNN=D(^[Gw>D,9G,

>D)#$,|((+;^Z)TGV(T"JzTMJCZ3X(C>D,>#

$#3)zRrXxZ3);WP;Jmb}w>r,>D#$#rK>unI\;

JCZz#

>E"PI\|,<u=f;;<7DX=r!"ms#K&DE"+(Z|D;b

)|D+`k>JODBf>P#IBM ITf1T>JOPhvDz7M/rLrxP

DxM/r|D,x;mP(*#

>E"PTG IBM Web >cDNN}C<;G*K=cp{Ea)D,;TNN==

d1TG) Web >cD#$#C Web >cPDJO;G IBM z7JOD;?V,

9CG) Web >cx4DgU+IzTPP##

IBM IT4|O*J1DNN==9CrV"zya)DNNE"x^kTzP#NN

pN#

>LrD;mI=g{*KbPXLrDE"To=gB?D:(i)JmZ@"4(

DLrMd|Lr(|(>Lr).dxPE";;,T0(ii)JmTQ-;;DE

"xP`%9C,kkBPX7*5:


IBM Corporation

2Z4A/101

11400 Burnet Road

Austin, TX 78758

USA

;*qXJ1Du~Mun,|(3)iNBD;(}?D6Q,<IqCb=fD

E"#

>D5PhvDmILr0dyPICDmIJOyP IBM @] IBM M'-i"IBM

zJLrmI$-irNN,H-iPDuna)#

K&|,DNNT\}]<GZ\X73PbCD#rK,Zd|Yw73PqCD

}]I\aPwTD;,#P)b?I\GZ*"6D53OxPD,rK;#$k

;cIC53OxPDb?a{`,#Kb,P)b?G(}Fcx@FD,5Ja

{I\aPnl#>D5DC'&1i$dX(73DJC}]#

f0G IBM z7DE"ISb)z7D)&L"dvf5wrd|I+*qCDJO

Pq!#IBM ;PTb)z7xPbT,2^(7OdT\D+7T"f]TrNNd

|XZG IBM z7Dyw#PXG IBM z7T\DJb&1rb)z7D)&La

v#

yPXZ IBM 44=rrbrDyw<If1|DrUX,x;mP(*,|Gvv

m>K?jMb8xQ#

>JO|,U#LqYwP9CD}]M(mD>}#*K!I\j+D5w|G,

b)>}|,vK"+>"7FMz7D{F#yPb){F<Gi9D,NNT5

JLqs5y9CD{FMX7DW,?tIO#

f(mI$:

>JO|,4oTN=Dy>&CLr,|G]>KwVYw53OD`L<u#g

{?DG*K*""9C"-zrV"byD&CLr,4{O*d`4>y>Lr

DYw=(D&CLr`LSZD&CLr,rITNNN=4F"^D"V"b)

y>Lr,x^kr IBM 6Q#b)>};PZyPu~BxP9WDbT#yT

IBM ^(#$r5>b)LrDI?T"JCTr&\#g{?DG*K*""9C"

-zrV"byD&CLr,4{O IBM D&CLr`LSZD&CLr,rITN

NN=4F"^D"V"b)y>Lr,x^kr IBM 6Q#

2b)y>LrD?]=4rdNN?VrNN\zz7,<Xk|,gBf(y

w:

©(s+>D{F)(j]). ?V>zkIzT IBM Corp. y>Lr. © Copyright

IBM Corp. _dkj]_. All rights reserved.

g{(}m=4i4KE",I\;avVU,MJ+5w#

Lj

TBuoGzJL5zw+>Z@zM/rd|zRrXxDLjr"aLj:


AIX

DB2

IBM

IBM Uj

Tivoli

Tivoli Uj

Microsoft"Windows"Windows NT M Windows UjG Microsoft Corporation Z@z

M/rd|zRrXxDLj#

Java MyPyZ Java DLjMUjG Sun Microsystems, Inc. Z@zMd|zRrX

xDLjr"aLj#

UNIX G The Open Group Z@zMd|zRrXxD"aLj#

d|+>"z7M~q{FI\Gd|+>DLjr~qjG#

=<. yw 43


w}

[X]`Xvfo viii



��

Pz!"

S152-0454-01

Documents

IBM Tivoli Access Manager.. WebSEAL€¦ · Z 4 B + WebSEAL S V3.8}6A 4.1.....23 Z AIX O}6 WebSEAL .....23 Z HP-UX O}6 WebSEAL .....24 Z Solaris O}6 WebSEAL .....26