Administration and Deployment Guide

ALES Architecture

ALES Components

Administration Server

Service Control Manager (SCM)

Security Service Module (SSM)

Security Providers

Deployment Architecture

Generalized Architecture

Location of ALES Components

WebLogic Clusters

Starting and Stopping ALES Components

Starting and Stopping the Administration Server On Windows

Starting and Stopping Administration Server on UNIX

Administration Server Startup Option on Linux

Starting and Stopping SCMs and SSMs on Windows

Starting and Stopping SCMs and SSMs on UNIX

SCM Start-Up Option on Linux

Configuring SSL for Production Environments

SSL Basics

Private Keys, Digital Certificates, and Trusted Certificate Authorities

One-Way SSL versus Two-Way SSL

Keystores

How the Administration Server Establishes Trust

Configuring SSL

Create a Keystore and Load Signed Certificates

Configuring One-Way SSL

Configure One-Way SSL on WebLogic Server

Configure One-Way SSL on Tomcat

Configuring Two-Way SSL

Configure Two-Way SSL on Weblogic Server

Configure Two-Way SSL on Apache Tomcat

Keytool Utility`

Failover and System Reliability

Understanding Failover

Assuring Runtime Availability for SSMs

Assuring Administrative Availability

Failover Considerations for the Database Server

Failover Considerations for a Security Service Module

Failover Considerations for a Service Control Manager

Setting up Administration Servers for Failover

Installing the Secondary Administration Server

Initialize the Secondary Server Trust Stores

Configure the Secondary Server Trust Synchronization Mechanism