2 Performing a Secure MSS Installation

This chapter presents planning information for your Oracle Communications MetaSolv Solution (MSS) system and describes recommended installation scenarios that enhance security.

Installing MSS Securely

By default, the MSS installer selects SSL mode for installation. Oracle recommends that you install and run MSS over SSL. Running the installer in SSL mode does add a little overhead with the encryption of transmitted data. You can choose to perform a less secure SSL install if needed.

For secure installation of MSS, do the following:

  • When creating the WebLogic Server domain for MSS:

    • Make sure that SSL ports are being used on the Administration server and all Managed servers.

    • If installing MSS on a cluster of servers, configure the cluster addresses to use SSL ports.

    • After you have created the WebLogic Server domain for MSS, start the Administration server. Then, use t3s to start the Managed servers. For example:

      startManagerServer.sh ManagedServer_1 t3s://host_name
      

      where ManagedServer_1 is the name of the first Managed server, and host_name is the host name of the Administration server.

  • Using the WebLogic Server Administration Console, configure Certificate Identity and trust store to use SSL. Do not use the default demonstration certificate that comes with WebLogic Server. See the WebLogic administrator's documentation for more information.

  • Run the MSS installer with the default SSL configuration enabled.

For more information about installing MSS, see MSS Installation Guide.