Contents


List of Figures

Introduction

Overall Layout
Related Documents
Software Requirements
Hardware requirements

Memory
Disk Space

Recommended Installation Template

iWS 6.0 SP2
iAS 6.5
iTTM 3.0.1
iTTM Certificate Aliases

Chapter 1 Installation Worksheet

iTTM Installation Overview
iTTM Installation Procedure

SW pre-requisites

Pre-requisites
Packages included
Packages not included
Certificate Prerequisites
System Resources

iTTM prerequisite installations

iPlanet Web Server v6.0 Installation
Starting iPlanet Web Server 6.0
Verifying iPlanet Web Server 6.0
iWS Checklist
iPlanet Application Server v6.5 Installation
Post iPlanet Web Server and iPlanet Application Server Installation Steps
iAS Checklist

iTTM Installation Process

iTTM setup script
Silent iTTM setup script
OCSP Responder
JMS Proxy Setup

iTTM Configuration issues

Configuring the Trustbase OCSP Responder with the Certificate Authority
Configuring the iWS for URL rewriting and SSL Decryption
Installation Structure
iTTM Checklist
Post Installation Steps

Oracle Database Configuration

Running the iPlanet Trustbase Transaction Manager SQL Scripts
Oracle Example Checklist

Cryptographic Services Configuration

Cryptographic Installation Scenarios
Cryptographic Providers
PKCs11 provider with software token
PKCs11 provider with generic hardware token
PKCs11 provider with nCipher token
nCipher native provider upgrade: ittm 2.2.1 to 3.0.1

LDAPS (Optional)
Identrus Configuration
iTTM Certificate Configuration

runCertWizard
runOCSPResponderCertWizard

Secure properties (Optional)

Installation Procedure

Start iPlanet Trustbase Transaction Manager

First Time Start Procedure
Restart procedure
Error checking
Normal Shutdown procedure
Uninstallation
Reinstallation

Identrus Authorisation

TokenKeyTool Checklist

Chapter 2 Architectural Configuration

iPlanet Application Server configuration
Using a DMZ
Machine Installations
HTTP/HTTPS Proxy Implementation
Configuring the SMTP Proxy Separately
iAS and iWS on separate machines
URL Rewrites with iAS and iWS on separate machines
LDAPS

Technical Note on LDAP

Chapter 3 Logging on

Configuration Management overview
Logon Screen
Configuration Options

Chapter 4 Authorisation

Introduction
Authorising users to access a service

Defining a role
Adding users to roles
Adding a Certificate
Mapping roles to Services

Chapter 5 Logs

Introduction
Audit log

Trustbase Audits:
Identrus Transaction Co-ordinator Audits:
Audit Configuration
Audit viewing

Raw Logging
Errors

Viewing
Configuring Error Event Types
Error Messages
Error checking

Chapter 6 SMTP Proxy Configuration

S/MIME Settings

Chapter 7 Service Deployment

Overview of Deploying a Service
Deploying
Authorisation Services

Services not requiring Authorisation
Registering your Service

Chapter 8 Configuration Recovery

Dynamic Configuration Export
Configuration Security
Dynamic Configuration Import
Data Model

Database Table Definitions
Auditdata
Auditparameters
audit_text
bill_data
cert_data
Error
error_codes
error_parameters
error_support
identrus_data
ocsp_data
ocsp_requests
ocsp_responses
raw_data
smime_transport
smtp_connection
smtp_message

What configuration data needs to be backed up?
What happens when certificates expire?
How to do Disaster Recovery?

Glossary and References

Software Platform
Transport Protocols
Security Related Protocols
Trading Protocols
Message Protocols
Glossary

Index



Appendix A Using TokenKeyTool

Starting TokenKeyTool

Commands for dealing with TokenKeyStoreManagers
Commands for dealing with TokenKeyStores
Utility commands
Miscellaneous commands