Contents

Title and Copyright Information

Preface

• Audience
• Related Documents
• Document Revision History
• Documentation Accessibility

1 Overview of Convergence

• Directory Placeholders Used in This Guide
• Default Paths and File Names
• High Level Architecture
  • Web Client Component
  • Web Server Static Client Component
  • Server Components

2 Using the Convergence Administration Utility

• About the Convergence Administration Utility
• Administration Utility Options
  • Command-Line Utility Syntax
  • Managing Security of Passwords
  • Command-line Options
• Setting and Unsetting Configuration Parameters
• Running the Administration Utility in Batch Mode

3 Convergence Administrative Tasks

• Authentication
  • Setting Up Account for End User
    • Constructing a Filter for Email Address Login
    • Enabling Email Address Login on Convergence Server
    • Activating mailAlternateAddress (optional)
  • Configuring LDAP Authentication in Convergence
  • Configuring Convergence for Multiple Directory Servers
  • Configuring LDAP Over SSL
• Logging
  • Enabling Logging
  • About Log Levels
  • Specify the Log File Location
  • About Log Rotation Policies
  • Logging User IP Address and Session Tracking Information
  • Sample Convergence Logging Session
• About SSL in Convergence
  • Configuring SSL in Convergence
  • Configuring Authentication Only SSL in Convergence
  • Enabling SSL for Back-End Servers
    • Enabling SSL for Messaging Server
    • Enabling SSL for Calendar Server
    • Enabling SSL for Convergence Address Book
    • Enabling SSL for Instant Messaging
    • Enabling SSL for Contacts Server Address Book
    • Enabling SSL for Indexing and Search Service
    • Enabling SSL for LDAP
• Redirecting Convergence HTTP Sessions to HTTPS
• Enabling HTTP Strict Transport Security
• Configuring the Convergence Display Name to Map to the LDAP Display Name
  • Configuring the Convergence Display Name
  • Configuring the Corporate Address Book to Perform displayName Search
• About Single Sign-On
  • Configuring Convergence for Trusted Circle SSO
  • Writing a Custom SSO Module
• LDAP Service
  • Configuring LDAP Failover
• Configuration Management
  • Configuring Convergence to use SSL for Configuration Management
  • Changing Convergence Administrator Password
• Deployment-Specific Customizable Client Options for Convergence
  • Customizing the Login URL and Page for a Specific Domain
  • Setting the Auto Logout Time
• Verifying passwords in Convergence
• Creating a Directory Server User in LDAP to Manage Convergence
• Configuring VLV Browsing Indexes for Directory Server
  • Applying the VLV Browsing Index Settings
  • Generate the Indexes
• Handling Invalid Session Redirects in Convergence

4 Enabling Core Services for Convergence

• Enabling Services for the Entire Convergence Installation
• Enabling Services for an Individual User or Domain
  • Managing Service Access Through LDAP
• Using the Delegated Administrator Command-Line Utility to Manage Services
• Using Delegated Administrator to Manage Services
• Enabling and Disabling Services with Direct LDAP Provisioning
  • LDAP Attributes for Mail Service
  • LDAP Attributes for Calendar Service
  • LDAP Attributes for Instant Messaging Service
• Enabling and Configuring IM Service After Initial Configuration of Convergence

5 Mail Service Administration

• About S/MIME
  • Configuring Convergence with S/MIME
  • Certificate Requirements for Using S/MIME in Convergence
    • Private and Public Keys
    • Keys Stored on Smart Cards
    • Keys Stored on the Client Machine
    • Publish Public Keys in LDAP Directory
    • Give Mail Users Permission to Use S/MIME
    • Multi-language Support
    • Wildcard SSL Certificates: Not Supported
  • Configuring and Sending Encrypted Mail: Instructions for Convergence End Users
    • Logging In for the First Time
    • Signature and Encryption Settings
    • Enabling the Java Console
  • Securing Internet Links With SSL
    • Securing the Link Between Messaging Server and Convergence
    • Securing the Link Between the Messaging Server and S/MIME Applet
  • Key Access Libraries for the Client Machines
  • Verifying Private and Public Keys
    • Finding a User's Private or Public Key
    • About Certificate Checking Against a CRL
    • Accessing a CRL
    • Proxy Server and CRL Checking
    • Using a Stale CRL
    • Determining Which Message Time to Use
    • Trouble Accessing a CRL
    • When a Certificate is Revoked
  • Granting Permission to Use S/MIME Features
    • S/MIME Permission Examples
  • Managing Certificates for S/MIME
    • CA Certificates in an LDAP Directory
    • Public Keys and Certificates in an LDAP Directory
    • Verifying That Keys and Certificates Exist in the LDAP Directory
  • Configuring Messaging Server to Use S/MIME in Convergence
    • Overview of the S/MIME Applet
    • Configuring S/MIME
    • Accessing LDAP for Public Keys, CA certificates and CRLs Using Credentials
    • Setting Passwords for Specific URLs
    • Summary of Using LDAP credentials
  • Messaging Server configutil Options for S/MIME
  • Messaging Server smime.conf Parameters
• Managing Attachment Previewing
  • About Outside In Transformation Server and the Outside In Proxy
  • Configuring File Directory Access
  • Managing Attachment Life Cycles
  • Supporting Extended Character Locales
  • Customizing Transformation Blacklist
• Enabling Anti-Spam
  • Configuring Convergence to Combat Spam
  • Configuring Messaging Server to Combat Spam
• Removing Rich Text Formatting for Email Composition

6 Address Book Service Administration

• Configuring Horizontal Scalability for the Personal Address Book
  • Horizontal Scalability Architecture
  • Setting the psRoot Value Automatically
• Setting Up Address Book JMQ Notification
  • Prerequisites for Setting up the Notification Service
  • Configuring Convergence
    • Message Queue Notification Service Configuration
  • Notification Strategies
  • Setting Event Notification Triggers
  • Configuring GlassFish Server
  • Troubleshooting the Notification Service
  • Data Format used for Notification Service
    • Message Format: Create Contact
    • Message Format: Modify Contact
    • Message Format: Delete Contact
    • Message Format: Create Contact Photo
• Configuring Address Book to Use Different Directory Server from the User Group Server
• Configuring the Corporate Directory
• Enabling Address Autocomplete for the Corporate Directory
• Setting Up Domain-Based Configuration for Address Book
• Disabling the Corporate Directory in Specific Domains
• Changing the Default Corporate Directory Search Filter in Address Book
• Configuring Virtual List View for Convergence Corporate Directory
• About Supported vCard Standards
• Changing the Locale Character Set for Importing or Exporting vCard Entries
• Enabling Contact Export and Import with Photo in vCard
• Hiding Administrator Accounts in the Default Domain Corporate Directory
• About Personal Address Book Contacts Deleted by the End User
• Enhancing Corporate Directory Search Using VLV Indexing
  • Creating the VLV Index in the Directory Server
  • Generating Indexes
  • Configuring Convergence
  • Verifying the VLV Settings

7 Calendar Service Administration

• Enabling CalDAV Service
  • Enabling SMS Calendar Notifications in Convergence

8 Instant Messaging Service Administration

• Configuring Multiple Domains for Instant Messaging
• Configuring Convergence to Display Presence Information in Email
• Configuring Instant Messenger Status to Update Based on Calendar Availability

9 Configuring Convergence to Use Proxy Authentication

• Configuring Convergence for Proxy Authentication
• Proxy Authentication Request

10 Convergence Properties Reference

• Global Convergence Configuration Properties

11 Monitoring Convergence

• Overview of Monitoring Convergence
• Enabling Convergence Monitoring
• Configuring Convergence for JMX Monitoring
• Using Jconsole for Convergence Monitoring
  • About Convergence JMX Metrics
• Using the iwcmetrics Command for Convergence Monitoring
  • About Convergence Non-JMX Metrics

12 Troubleshooting Convergence

• Configuring Log Levels to Gather Information

13 Overview of Add-on Services in Convergence

• About the Add-on Framework
• About the Add-On Configuration Files
  • add-ons.properties
  • addon_name.json
  • addon_name.properties
• Configuring WebRTC Services in Convergence
  • Configuring WebRTC in Convergence with WebRTC Session Controller
    • About Authentication with WebRTC Session Controller and Convergence
    • Mapping Between Web Identity and IP Multimedia Subsystem Identity
    • Enabling WebRTC Services in Convergence
    • Configuring WebRTC Session Controller for Convergence
    • Configuring the SSO Provider on WebLogic Server
  • Configuring WebRTC in Convergence with WIT Software
    • Adding WebRTC Services to Convergence with WIT Software
  • Implementing the Identity Mapper
  • Enabling Sound Alerts in Firefox
  • Creating a Custom Identity Mapper
    • Developing Sample Custom Identity Mapper Data Files
    • Compiling the Sample Custom Identity Mapper
    • Configuring the Sample Custom Identity Mapper
    • Verifying the Custom Identity Mapper
• Configuring Multinetwork Instant Messaging Add-On Services
  • About Multinetwork IM Add-on Services in Convergence
    • Enabling Facebook Chat in Convergence
    • Enabling Federated XMPP IM Networks in the Convergence UI
• Configuring Convergence for SMS
  • Configuring One-Way SMS for Convergence
    • Configuring Messaging Server for One-Way SMS
    • Configuring the SMS Add-on Service in the Convergence UI
    • Restarting GlassFish Server
  • Configuring Two-Way SMS for Convergence
    • Configuring Messaging Server for Two-Way SMS
    • Configuring Instant Messaging Server for Two-Way SMS
    • Configuring GlassFish Server for Two-Way SMS
    • Configuring ENS Support for Convergence
    • Configuring the SMS Add-on Service in the Convergence UI
    • Restarting GlassFish
• Configuring Social Add-On Services in Convergence
  • About Social Add-on Services in Convergence
  • Enabling Add-On Services Through the Convergence Social Tab
• Configuring the Advertising Add-On Service in Convergence
  • About the Advertising Add-On Service
  • Configuring Advertising for Convergence
  • Enabling the Advertising Add-On Service
  • Displaying Ads in a Skyscraper Panel
    • Parameters for Configuring Skyscraper Panels in the advertising.json File
  • Displaying Ads in an Ad Box

14 Tuning GlassFish Server to Enhance Convergence Performance

• Convergence Performance Tuning Overview
• Tuning GlassFish Server Configuration Parameters
  • Tuning Parameters for the HTTP Listener
  • Configuring GlassFish Server to Compress Client Files
• Enhancing Browser Caching of Static Files
• Tuning JVM Options
  • Activating the Garbage Collection Log
  • Invoking the Java HotSpot Server VM
  • Tuning the JVM Heap Size
  • Setting Garbage Collection Algorithms
  • Setting the Permanent Generation Size
  • Tuning the JVM RMI GC Interval Parameters
  • Sample List of JVM Options
• Miscellaneous Performance Tuning Tips

15 Setting Up Multiple Corporate Directories

• Adding a Corporate Directory
• Configuring Multiple Corporate Directories
• Disabling Corporate Directory (Newly Added or Default)

A ExpiresFilter.java Reference