Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Overview

2 General Security Principles

• 2.1 Keep Software Up To Date
• 2.2 Restrict Network Access to Critical Services
• 2.3 Follow the Principle of Least Privilege
• 2.4 Monitor System Activity
• 2.5 Keep Up To Date on Latest Security Information

3 System Deployment

• 3.1 Network Security in an OHI Environment
  • 3.1.1 Accessing the User Interface outside the Firewall
  • 3.1.2 Provide access to OHI Web Services for External Clients
  • 3.1.3 Configuring SSL
    • 3.1.3.1 Configuring SSL in WebLogic
    • 3.1.3.2 Configuring SSL for Authentication: using LDAPS
    • 3.1.3.3 Configuring SSL for Coherence

4 User Access

• 4.1 User Provisioning
• 4.2 User Authentication
• 4.3 User Authorization
• 4.4 Cookies

5 Web Services Security

• 5.1 Web Services Security Overview
• 5.2 Minimal Required Security for OHI Web Services
• 5.3 Applying WS-Security Policies