Contents

Title and Copyright Information

Preface

• Audience
• Related Documents
• Convention
• Documentation Accessibility

1 Overview of Convergence

• About Convergence
• Convergence Deployment Architecture
  • Convergence Client Components
  • Convergence Static Components
  • Convergence Domain Components
• Directory Placeholders Used in This Guide

2 Using the Convergence Administration Utility

• About the Convergence Administration Utility
• Administration Utility Options
  • Command-Line Utility Syntax
  • Managing Security of Passwords
  • Command-line Options
• Setting and Unsetting Configuration Parameters
• Running the Administration Utility in Batch Mode

3 Convergence Administrative Tasks

• Authentication
  • Setting Up Account for End User
    • Constructing a Filter for Email Address Login
    • Enabling Email Address Login on Convergence Server
    • Activating mailAlternateAddress (optional)
    • Enabling Email Address Login for Back-End Servers
      • Enabling Email Address Login for Messaging Server
      • Enabling Email Address Login for Calendar Server
      • Enabling Email Address Login for Contacts Server Address Book
      • Enabling Email Address Login for Indexing and Search Service
  • Configuring Directory Server Authentication in Convergence
  • Configuring Convergence for Multiple Directory Servers
  • Configuring LDAP Over SSL
• Logging
  • Enabling Logging
  • About Log Levels
  • Setting and Unsetting the Appender Reference for the Components of Convergence
  • Specifying the Logging properties for an individual Component
  • Specify the Log File Location
  • About Log Rotation Policies
  • Logging User IP Address and Session Tracking Information
  • Sample Convergence Logging Session
• About SSL in Convergence
  • Configuring SSL in Convergence
  • Configuring Authentication Only SSL in Convergence
  • Enabling SSL for Back-End Servers
    • Enabling SSL for Messaging Server
    • Enabling SSL for Calendar Server
    • Enabling SSL for Convergence Address Book
    • Enabling SSL for Instant Messaging
    • Enabling SSL for Contacts Server Address Book
    • Enabling SSL for Indexing and Search Service
    • Enabling SSL for the Directory Server
• Redirecting Convergence HTTP Sessions to HTTPS
• Enabling HTTP Strict Transport Security
• Configuring the Convergence Display Name
  • Configuring the Corporate Address Book to Perform displayName Search
• Configuring Convergence to Hide Global Time Zone Selection from Options
• Configuring Convergence to Prevent Host Header Attack
  • Preventing Host Header Attack in a Single Domain
  • Preventing Host Header Attack in Multiple Domains
• About Single Sign-On
  • Configuring Convergence for SSO with Oracle Access Manager
    • Setting Up Oracle Access Manager
    • Enabling SSO with Oracle Access Manager
    • Sample Custom Logout Redirect Script
  • Configuring Convergence for Trusted Circle SSO
  • Writing a Custom SSO Module
• Directory Server Services for Convergence
  • Configuring Directory Server Failover
• Configuration Management
  • Configuring Convergence to use SSL for Configuration Management
  • Changing Convergence Administrator Password
• Deployment-Specific Customizable Client Options for Convergence
  • Customizing the Login URL and Page for a Specific Domain
  • Configuring Another Page for Changing Password
    • User's Password is About to Expire
    • User's Password is Expired
    • User's Password is Reset by Administrator
  • Configuring Another Page for Changing Password for users of a specific domain
    • User's Password is About to Expire
    • User's Password is Expired
    • User's Password is Reset by Administrator
  • Setting the Auto Logout Time
• Verifying passwords in Convergence
• Creating a Directory Server User to Manage Convergence
• Configuring VLV Browsing Indexes for Directory Server
  • Applying the VLV Browsing Index Settings
  • Generate the Indexes
• Handling Invalid Session Redirects in Convergence

4 Enabling Core Services for Convergence

• Enabling Services for the Entire Convergence Installation
• Enabling Services for an Individual User or Domain
  • Managing Service Access Through the Directory Server
• Using the Delegated Administrator Command-Line Utility to Manage Services
• Using Delegated Administrator to Manage Services
• Enabling and Disabling Services with Directory Server Provisioning
  • Directory Server Attributes for Mail Service
  • Directory Server Attributes for Calendar Service
  • Directory Server Attributes for Instant Messaging Service
• Enable and Configuring IM Service After Initial Configuration of Convergence

5 Mail Service Administration

• About S/MIME
  • Configuring Convergence with S/MIME
  • Certificate Requirements for Using S/MIME in Convergence
    • Private and Public Keys
    • Keys Stored on Smart Cards
    • Keys Stored on the Client Machine
    • Publish Public Keys in LDAP Directory
    • Give Mail Users Permission to Use S/MIME
    • Multi-language Support
    • Wildcard SSL Certificates: Not Supported
  • Configuring and Sending Encrypted Mail: Instructions for Convergence End Users
    • Logging In for the First Time
    • Signature and Encryption Settings
    • Enabling the Java Console
  • Securing Internet Links With SSL
    • Securing the Link Between Messaging Server and Convergence
    • Securing the Link Between the Messaging Server and S/MIME Applet
  • Key Access Libraries for the Client Machines
  • Verifying Private and Public Keys
    • Finding a User's Private or Public Key
    • About Certificate Checking Against a CRL
    • Accessing a CRL
    • Proxy Server and CRL Checking
    • Using a Stale CRL
    • Determining Which Message Time to Use
    • Trouble Accessing a CRL
    • When a Certificate is Revoked
  • Granting Permission to Use S/MIME Features
    • S/MIME Permission Examples
  • Managing Certificates for S/MIME
    • CA Certificates in an LDAP Directory
    • Public Keys and Certificates in an LDAP Directory
    • Verifying That Keys and Certificates Exist in the LDAP Directory
  • Configuring Messaging Server to Use S/MIME in Convergence
    • Overview of the S/MIME Applet
    • Configuring S/MIME
    • Accessing LDAP for Public Keys, CA certificates and CRLs Using Credentials
    • Setting Passwords for Specific URLs
    • Summary of Using LDAP credentials
  • Messaging Server configutil Options for S/MIME
  • Messaging Server smime.conf Parameters
• Managing Attachment Previewing
  • About Outside In Transformation Server and the Outside In Proxy
  • Configuring File Directory Access
  • Managing Attachment Life Cycles
  • Supporting Extended Character Locales
  • Customizing Transformation Blacklist
• About HTML Filtering
  • Enabling and Disabling HTML Filtering
  • Configuring HTML Filtering in Convergence
• Enabling Anti-Spam
  • Configuring Convergence to Combat Spam
  • Configuring Messaging Server to Combat Spam
• Disabling Rich Text Formatting

6 Address Book Service Administration

• Configuring Horizontal Scalability for the Personal Address Book
  • Horizontal Scalability Architecture
  • Setting the psRoot Value Automatically
• Setting Up Address Book JMQ Notification
  • Prerequisites for Setting up the Notification Service
  • Configuring Convergence
    • Message Queue Notification Service Configuration
  • Notification Strategies
  • Setting Event Notification Triggers
  • Configuring GlassFish Server
  • Troubleshooting the Notification Service
  • Data Format used for Notification Service
    • Message Format: Create Contact
    • Message Format: Modify Contact
    • Message Format: Delete Contact
    • Message Format: Create Contact Photo
• Configuring Address Book to Use Different Directory Server from the User Group Server
• Configuring the Corporate Directory
• Enabling Address Autocomplete for the Corporate Directory
• Setting Up Domain-Based Configuration for Address Book
• Disabling the Corporate Directory in Specific Domains
• Changing the Default Corporate Directory Search Filter in Address Book
• Configuring Virtual List View for Convergence Corporate Directory
• About Supported vCard Standards
• Changing the Locale Character Set for Importing or Exporting vCard Entries
• Enabling Contact Export and Import with Photo in vCard
• Hiding Administrator Accounts in the Default Domain Corporate Directory
• About Personal Address B ook Contacts Deleted by the End User
• Enhancing Corporate Directory Search Using VLV Indexing
  • Creating the VLV Index in the Directory Server
  • Generating Indexes
  • Configuring Convergence
  • Verifying the VLV Settings

7 Calendar Service Administration

• Enabling CalDAV Service
• Enabling SMS Calendar Notifications in Convergence
• Hiding or Showing the SMS Option in the Notifications Tab in Calendar Options and in the Reminder Dialog Box
• Reserving Calendar Resources
• Creating a Calendar Resource in Corporate Directory
• Viewing Event Invitation and Task Details in Anonymous Calendar in Convergence

8 Contacts Server Administration

• Enabling Contacts Server Service

9 Instant Messaging Service Administration

• Configuring Multiple Domains for Instant Messaging
• Configuring Convergence to Display Presence Information in Email
• Configuring Instant Messenger Status to Update Based on Calendar Availability

10 Configuring Convergence to Use Proxy Authentication

• Configuring Convergence for Proxy Authentication
• Proxy Authentication Request

11 Convergence Properties Reference

• Global Convergence Configuration Properties

12 Monitoring Convergence

• Overview of Monitoring Convergence
• Enabling Convergence Monitoring
• Configuring Convergence for JMX Monitoring
• Using Jconsole for Convergence Monitoring
  • About Convergence JMX Metrics
• Using the iwcmetrics Command for Convergence Monitoring
  • About Convergence Non-JMX Metrics

13 Troubleshooting Convergence

• Configuring Log Levels to Gather Information

14 Setting Up Multiple Corporate Directories

• Adding a Corporate Directory
• Configuring Multiple Corporate Directories
• Disabling Corporate Directory (Newly Added or Default)

15 Overview of Add-on Services in Convergence

• About the Add-on Framework
• About the Add-On Configuration Files
  • add-ons.properties
  • addon_name.json
  • addon_name.properties
• Configuring WebRTC Services in Convergence
  • Configuring WebRTC in Convergence with WebRTC Session Controller
    • About Authentication with WebRTC Session Controller and Convergence
    • Mapping Between Web Identity and IP Multimedia Subsystem Identity
    • Enabling WebRTC Services in Convergence
    • Configuring WebRTC Session Controller for Convergence
    • Configuring the SSO Provider on WebLogic Server
  • Configuring WebRTC in Convergence with WIT Software
    • Adding WebRTC Services to Convergence with WIT Software
  • Extending the Audio/Video Interface
    • Developing the User Interface Layer
    • Developing the Service Layer
    • Viewing A/V Interface API Documentation
  • Implementing the Identity Mapper
  • Enabling Sound Alerts in Firefox
  • Creating a Custom Identity Mapper
    • Developing Sample Custom Identity Mapper Data Files
    • Compiling the Sample Custom Identity Mapper
    • Configuring the Sample Custom Identity Mapper
    • Verifying the Custom Identity Mapper
• Configuring Convergence for SMS
  • Configuring One-Way SMS for Convergence
    • Configuring Messaging Server for One-Way SMS
    • Configuring the SMS Add-on Service in the Convergence UI
    • Restarting GlassFish Server
  • Configuring Two-Way SMS for Convergence
    • Configuring Messaging Server for Two-Way SMS
    • Configuring Instant Messaging Server for Two-Way SMS
    • Configuring GlassFish Server for Two-Way SMS
    • Configuring ENS Support for Convergence
    • Configuring the SMS Add-on Service in the Convergence UI
    • Restarting GlassFish
• Configuring the Advertising Add-On Service in Convergence
  • About the Advertising Add-On Service
  • Configuring Advertising for Convergence
  • Enabling the Advertising Add-On Service
  • Displaying Ads in a Skyscraper Panel
    • Parameters for Configuring Skyscraper Panels in the advertising.json File
  • Displaying Ads in an Ad Box

16 Tuning Oracle Certified Application Server to Enhance Convergence Performance

• Convergence Performance Tuning Overview
• Tuning GlassFish Server Configuration Parameters
  • Tuning Parameters for the HTTP Listener
  • Configuring GlassFish Server to Compress Client Files
  • Enhancing Browser Caching of Static Files for GlassFish Server
  • Tuning JVM Options
    • Activating the Garbage Collection Log
    • Invoking the Java HotSpot Server VM
    • Tuning the JVM Heap Size
    • Setting Garbage Collection Algorithms
    • Setting the Permanent Generation Size
    • Setting the MaxMetaspaceSize in Java 8
    • Tuning the JVM RMI GC Interval Parameters
    • Sample List of JVM Options
• Tuning Oracle WebLogic Server Configuration Parameters
  • Configuring Oracle WebLogic Server to Compress Client Files
  • Enhancing Browser Caching of Static Files for Oracle WebLogic Server
  • Tuning the JVM Heap Size
  • Setting Garbage Collection Algorithms
• Miscellaneous Performance Tuning Tips

A ExpiresFilter.java Reference

Glossary