WebLogic Enterprise Encryption Package Installation on Windows Systems

 

This chapter explains how to install the following optional BEA WebLogic Enterprise Encryption Package software products on Windows NT systems:

• WebLogic Enterprise 5.1 56-bit Encryption Package

• WebLogic Enterprise 5.1 128-bit Encryption Package

This topic includes the following sections:

• Before You Install

• Platforms Supported

• Installing the WebLogic Enterprise 5.1 Encryption Package on Microsoft Windows Systems

• Removing (Uninstalling) the WebLogic Enterprise Encryption Package from Your System

  Notes: The Encryption Package software described in this chapter is distinct and separate from the SSL software that you install on J-Engine server systems, as described in Part II of this document.

  When installing the Encryption Package software (formerly called Security Service) on a Tuxedo-only system, only the encryption libraries are updated. None of the SSL files are installed, nor are the SSL plug-ins registered.When installing on any other system (CORBA C++, CORBA Java, etc.), the encryption libraries are updated, the information about SSL is prompted for, the SSL files are installed, and the plug-ins are registered.

  Also note that the Encryption software cannot be installed on a RMI/EJB client-only system.

For information about installing WebLogic Enterprise Encryption Package software products on a UNIX system, see WebLogic Enterprise Encryption Package Installation on UNIX Systems.

The WebLogic Enterprise Encryption Package software products are packaged on a CD that is separate from the WebLogic Enterprise product box. A WebLogic Enterprise Encryption Package CD is distributed only if you purchased this software. This software provides 56-bit or 128-bit Secure Sockets Layer (SSL) and Link-Level Encryption (LLE) features for WebLogic Enterprise applications. Each level of encryption is packaged on a separate CD.

The installation screens are similar for both levels of security. In this chapter, the sample screens are from a WebLogic Enterprise128-bit Encryption Package product installation on Microsoft Windows NT. Installation screens that are identical to the WebLogic Enterprise T-Engine installation screens are described, but not shown, in this chapter.

 

---

Before You Install

This topic includes the following sections:

• Installing a WebLogic Enterprise 5.1 Encryption Package Product to Support WebLogic Enterprise Connectivity

• Confirming That the WebLogic Enterprise 5.1 Software Has Been Installed

• LDAP Information Required During the Installation

• Before Re-installation, Backup LDAP Files

• Stopping WebLogic Enterprise or BEA Tuxedo Applications and Related Services

• Check That Your Account Has Administrator Privileges

Installing a WebLogic Enterprise 5.1 Encryption Package Product to Support WebLogic Enterprise Connectivity

If you are installing a WebLogic Enterprise 5.1 Encryption Package product to support WebLogic Enterprise Connectivity (WLEC), you need to take the following steps:

1. Confirm that the WebLogic Enterprise 5.1 J-Engine server components have been installed on your machine, as described in Part II of this document.

2. Install either the WebLogic Enterprise CORBA C++ or CORBA Java client software on your machine, as described in the section Microsoft Windows 2000 or NT 4.0 Installation Procedure.

3. Complete the remaining steps described in the current chapter.

Confirming That the WebLogic Enterprise 5.1 Software Has Been Installed

Before you can install a WebLogic Enterprise 5.1 Encryption Package software product, you must first install at least one WebLogic Enterprise 5.1 server component, or one of the following WebLogic Enterprise 5.1 client component options:

• All WebLogic Enterprise client components (recommended)

• BEA CORBA C++ client

• BEA CORBA Java client

If you are installing a WebLogic Enterprise 5.1 Encryption Package software product on a Windows 98 or Windows 95 client system, you must first install one of the WebLogic Enterprise 5.1 client component options shown in the previous list.

If the target system only has the Tuxedo server or client software installed from the WebLogic Enterprise 5.1 installation, the WebLogic Enterprise 5.1 Encryption Package installation procedure only installs the Link-Level Encryption (LLE) components. The Secure Sockets Layer (SSL) components are not installed on this type of target system.

LDAP Information Required During the Installation

During the 56-bit or 128-bit Encryption Package installation, the procedure prompts you for the required LDAP server information shown in the following list.

If you do not know the appropriate LDAP values for the prompts, contact the person in your organization or company who is responsible for defining the LDAP server tree. At most companies, this person is the Security Administrator or the Directory Services Administrator.

Note: After the installation, it is not possible to modify a file to adjust these values. The only way to change these values is to re-install the WebLogic Enterprise Encryption Package software and specify the updated values. Therefore, it is important that you understand the appropriate values for the requested information before you start the installation.

• The hostname of the LDAP server computer system.

• The port on the LDAP server computer system that is listening for requests.

• An appropriate base object in the LDAP server tree. The base object is the point in the LDAP tree at which you want users to start searching for certificates. By defining a specific location in the LDAP tree, you can narrow the scope of the search for certificates on the relevant portion of the LDAP server tree, and avoid longer-than-necessary searches through irrelevant portions of the LDAP server tree.

  Note: These LDAP prompts are not presented if the target system only has the Tuxedo server or client software installed (from WebLogic Enterprise 5.1). In this case, only the WebLogic Enterprise Encryption Package's Link-Level Encryption (LLE) components are installed on the target system. During the WebLogic Enterprise Encryption Package installation procedure, the Secure Sockets Layer (SSL) components are not installed on this type of target system.

Before Re-installation, Backup LDAP Files

If you are re-installing the 56-bit or 128-bit WebLogic Enterprise Encryption Package software on a system, the installation procedure will overwrite the LDAP filter file if you selected its default name and location. By default, the LDAP filter file is installed in %TUXDIR%\udataobj\security\bea_ldap_filter.dat, where TUXDIR is the directory in which you installed the WebLogic Enterprise software. This file is used to define search filters that can further refine the scope of searches in the LDAP server tree.

On re-installation, the Encryption Package installation procedure will also overwrite the LDAP peer validation rule file, %TUXDIR%\udataobj\security\peer_val.rul.

Before you re-install the Encryption Package software, temporarily rename these files if you do not want the installation procedure to overwrite them. After the installation procedure, rename the files back to their original names and locations.

Stopping WebLogic Enterprise or BEA Tuxedo Applications and Related Services

Before beginning the installation, make sure no BEA Tuxedo or WebLogic Enterprise client or server applications are running. For information about the tmshutdown command, see Starting and Shutting Down Applications in the Administration section of the WebLogic Enterprise online documentation.

Check That Your Account Has Administrator Privileges

You need administrator privileges to perform the installation. If you attempt to install the WebLogic Enterprise 5.1 Encryption Package software without administrator privileges, the following error message will be displayed:

Cannot Install Tuxedo IPC Helper Service.

 

---

Platforms Supported

The Microsoft Windows platforms listed in Table 12-1 are supported.

Table 12-1 Supported Microsoft Windows Platforms

Operating System	Release/Version
Microsoft Windows 2000
Microsoft Windows NT	4.0 (Intel) Service Pack 5 (SP5)
Microsoft Windows 95	Service Pack 1
Microsoft Windows 98

For the hardware and software requirements for NT, see WebLogic Enterprise T-Engine Platform Data Sheets.

 

---

Installing the WebLogic Enterprise 5.1 Encryption Package on Microsoft Windows Systems

This section describes how to install the WebLogic Enterprise 56-bit or 128-bit Encryption Package software products on Microsoft Windows systems. The sample screens show the installation of the 128-bit Encryption Package software on a Windows NT system.

Microsoft Windows Installation Procedure

It will take approximately 5 minutes to install the software.

To install the WebLogic Enterprise 56-bit or 128-bit Encryption Package software on a Microsoft Windows system, perform the following steps:

1. Insert the WebLogic Enterprise Encryption Package software CD in the CD player. The Windows autorun feature is used to automatically begin the installation. (To bypass the autorun feature, hold down the Shift key while inserting the CD in the CD player. You can then run the setup.exe file in the inwnt40 directory on the CD.)

2. The Setup screen is displayed, followed by the Welcome screen.

   

3. Click Next. The Software License Agreement screen is displayed. To accept the license agreement, click Yes.

4. The User Information screen is displayed. Enter your name and the name of your company and click Next.

5. If a WebLogic Enterprise or BEA Tuxedo application and related services are running, the Severe message screen is displayed:

   

   If this happens, click OK, which will exit the installation without installing any portion of the software. Then use the tmshutdown command, if appropriate, to stop any running applications. Also stop any WebLogic Enterprise or BEA Tuxedo services, if appropriate. You can do this on Windows NT systems by clicking Start->Settings->Control Panel. In the Control Panel, open the Services panel. The Services screen is displayed.

   

   Scroll to the entries for Tuxedo IPC Helper and TListen. For each entry, select it in the display box and click Stop to change its status from Started to Stopped. Then click Close. If you encountered the screens shown in this step, you will have to restart the installation program.

6. If you did not encounter the problem described in the preceding step, the installation program displays the Enter LDAP Server URL And Port Information screen.

   Note: If you installed only BEA Tuxedo server or client software on this system, the following screen is not displayed.

   

   This information will be stored locally as a registered SSL certificate lookup plug-in that WebLogic Enterprise client and server applications can use.

   • In the Hostname input box, enter the LDAP server's fully qualified node name and domain name.

   • In the Port input box, enter the port on which the LDAP server is listening.

7. The Base Object screen is displayed.

   Note: If you installed only BEA Tuxedo server or Tuxedo client software on this system, the following screen is not displayed.

   

8. The base object is the point in the LDAP tree at which you want users to start searching; in this case, to start searching for certificates. There are no strict rules about the syntax for this value. Enter the base object string exactly as it was specified in the LDAP server tree. Click Next. The Enter LDAP Filter File Information screen is displayed.

   Note: If you installed only BEA Tuxedo server or client software on this system, the following screen is not displayed.

   

9. The default location for the LDAP filter file is wledir\udataobj\security\bea_ldap_filter.dat. This file is used to define search filters that can further refine the scope of searches in the LDAP server tree. (For more information, see Using Security in the WebLogic Enterprise online documentation.) Click Next to accept this default; or, enter a new value and click Next. The Setup Complete screen is displayed:

   

10. Click Finish to complete the installation.

11. Reboot your system. Your system restarts. If you attempt to run the WebLogic Enterprise software before you restart your system, the software may fail.

 

---

Removing (Uninstalling) the WebLogic Enterprise Encryption Package from Your System

To remove a WebLogic Enterprise Encryption Package product from your system, follow the steps in this section.

1. Log on to the system. If you are using a Microsoft Windows NT system, log on as the administrator or as a member of the Administrator group.

2. Make sure that no BEA Tuxedo or WebLogic Enterprise client or server applications are running. Use tmshutdown to shut down all WebLogic Enterprise applications.

3. On the Microsoft Windows taskbar, click Start -> Programs -> BEA 128-bit Encryption Package-> UnInstall BEA 128-bit Encryption Package. (If you installed the 56-bit version of the Encryption Package, the taskbar path is Start - > Programs -> BEA 56-bit Encryption Package -> UnInstall BEA 56-bit Encryption Package.)

4. The Confirm File Deletion screen is displayed. For example:

   

5. Click Yes to confirm the removal and to uninstall the WebLogic Enterprise Encryption Package product. The Uninstall screen is displayed. For example:

   

The WebLogic Enterprise Encryption Package product is removed from your system and from the Windows Registry.