Contents

Title and Copyright Information

Preface

• Audience
• Related Documents
• Nomenclature
• Documentation Accessibility

1 Contacts Server Security Overview

• Basic Security Considerations
• Understanding the Contacts Server Environment
• Overview of Contacts Server Security
• Recommended Deployment Topologies
• Operating System Security
  • Firewall Port Configuration
• Database Security
• Secure Communications
• LDAP Security

2 Performing a Secure Contacts Server Installation

• Installing Infrastructure Components Securely
• Credentials Needed to Install Contacts Server Components
• Post-Installation Configuration

3 Implementing Contacts Server Security

• About System Security in Contacts Server
• Configuring HTTPS on Front-End GlassFish Server Hosts
  • Installing an Official Certificate
  • Setting SSL Default Port to 443
  • Changing the URL Prefix When Reconfiguring for SSL
• Disabling SSLv3 on Front-End GlassFish Server Hosts
• Disabling HTTP on Front-End GlassFish Server Hosts
• Configuring HTTPS on Front-End WebLogic Server Hosts
  • Setting up Certificates for Production Environment
  • Configuring Keystore and SSL in WebLogic Server
  • Ensuring the URL Prefix when Reconfiguring for SSL
• Disabling SSLv3 on Front-End Oracle WebLogic Server Hosts
• Enabling LDAP SSL in Contacts Server
• Enabling Secure Notification Mail Submission
• Configuring and Using Authentication
• Configuring and Using Access Control
• Adding LDAP Access Control for Contacts Server Features
• Configuring and Using SSL with the Contacts Server Database and Document Store
  • Configuring SSL for the MySQL Database
  • Configuring SSL for the Oracle Database
    • Installing the Database Certificate
    • Enabling the TCP/IP SSL Listener in Oracle Net Services
    • Completing Installation and Modifying JDBC Connection Pool Settings
  • Configuring SSL for the Remote Document Store
    • Creating an SSL Certificate
    • Creating or Updating the SSL Keystore on the Document Store Server Host
    • Changing SSL Configuration on the Document Store
    • Installing a Certificate on the Contacts Server Host
    • Configuring Contacts Server to Use SSL for the Document Store
• Securing Contacts Server and Application Server Secure
  • Preventing Denial of Service Attacks on Application Server
  • Configuring JMX Port for GlassFish Server to Use SSL
  • Configuring JMX Port for WebLogic Server to Use SSL
• Detecting Possible Security Issues

A Secure Deployment Checklist

• Secure Deployment Checklist