Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility

1 Service Controller Security Overview

• Basic Security Considerations
• Overview of Service Controller Security
• Oracle Security Documentation
• Understanding the Service Controller Environment

2 Implementing Service Controller Security

• About the Service Controller Security Model
• Implementing Service Controller Securely
  • Changing Default Ports
    • Securing the Administration Port
  • Configuring Password Security
  • Securing the Administration Console Connection
  • Securing Clusters
  • Configuring Domain Security
    • Securing Domains with System-Level Security
    • Securing Domains with Properties Settings
    • Securing Hosted Domains
  • Securing Administration Clients and Managed Servers
  • Enabling and Disabling SSL
  • Setting Up the Service Controller Public Key Infrastructure
    • About Keytool and X.500 Distinguished Names
    • Setting Up the PKI for Administration Server-Managed Server Security
    • Setting Up the PKI for Administration Server to Administration Console Security
  • Setting Up a Credential Store
  • Setting Up Network Communication End Points
  • Securing Service Controller with Firewalls
  • Securing Network Traffic with Protocol-Specific Security
    • HTTPS Protocol Required for Production
• Securing Network Communication
  • SIP
  • SS7 SIGTRAN M3UA
  • Diameter
  • SMPP
  • Web Services (SOAP or REST over HTTP)
• Monitoring Service Controller Events

3 Administering Credential Stores

• About Credential Store
  • Understanding How Credential Store Works
    • Considerations for Using Credential Store with Hosted Domains
  • Configuring the Credential Store Domain Settings
    • Moving the Credential Store Key Files
    • Changing Credential Store Encryption Settings
    • Backing Up Credential Store files
  • Provisioning and Administering Credential Stores
    • Storing or Validating a Credential (Password) in the Credential Store
    • Storing a Keystore in a Credential Store
    • Verifying that a Credential Exists in a Credential Store
    • Deleting Credentials from the Credential Store
  • Using the Credential Store Management API
    • setPassword
    • validatePasssword
    • setKeystore
    • containsKey
    • deleteKey
    • clear (Removes all Credentials)