Instruction/ maintenance manual of the product 3.75 RSA Security
Go to page of 11
RSA ClearT rust Ready Implement ation Guide For A pplica tion Serv er s Last Modified 2/19/02 1. Partner Information Partner Nam e SilverStream W eb Site www.
3. Product Requir ements Component Description Operating system One of the f ollowing: § W indows NT W ork station or W indows NT Server 4.0 or higher with Service Pack 3 or higher Service Pack 6a or later is r ecomm ended for Y2K com pliance. You must have Ser vice Pack 5 or later to run the server on a m achine not connec ted to a network.
4. Product Confi guration The goal of this Implem entation Guide is to ex plai n how ClearTrust and SilverStr eam eXtend Applic ation Server 3.75 can be integrated. It ex plains how to use ClearTrus t as a single sign-on produc t and to secure pages and other objec ts on a SilverStream Application Server.
This integration supports the use either Microsoft’s IIS web server or Sun’s iPlanet web server (f orm erly Netscape’s) . Microsof t’s W eb ser ver (IIS 4.0) was used for testing and certific ation purposes A . Configure the WSI module : There ar e numerous references within this document to the ‘W SI’ or ‘W SI module’.
B. Changed priority of Cl earTrust ISA PI Filter. By default, the Clear Trust web plugin ISAPI f ilter installs at a LOW priority and the SilverStream W SI module ISAPI f ilter installs at a MEDIUM pr iority . In order f or ClearTrus t to authorize SilverStream us ers, its ISAPI filter has to load at a higher priority.
the MMC, right-clic k your W SI directory and select Properties . On the Directory tab, disable Read and Writ e access permissions and make sure Execut e permissions are enabled .
D. Protect Silv erStream resources SilverStream resources are protected via Clear T rust by proxy ing content through the IIS ser ver running both the RSA ClearTr ust IIS web plug-in and the SilverStream IIS W SI m odule. Because of this , y ou will need to secure the Silver Stream s erver so that users cannot connect directly to it.
1. Start the ClearT rust Services. 2. Verify that the web server is started and that the Clear Trust plug as well as s ingle sign on was succ essfully initialized. 3. Start the SilverStream application ser ver. 4. Check the AgW SI log file to verif y that the W SI m odule started without errors.
Example ClearTrust Logon W hen a us er mak es a request f or a protected res ource that resides on the Silver Stream Application server, they will be prompted with a Login Screen: After the us er succ.
5. Certification Checklist for A pplication Servers Date Test ed: 01/31/02 Product Tested Version RSA ClearTr ust 4.6.1.1 SilverStream eXtend Application Server 3.75 Developer Edition W SI Module (agis api.dll) 1.0 Microsof t Internet Inform ation Server (IIS) 4.
6. Know n Issues · Clear Trust IIS plug in priority. The ClearT rust IIS filters should alway s load firs t, before any other filter s. In order to m ake sur e this happens, include the following line in the ClearT rust plugins default.c onf file located on the IIS m achine: s ecurecontrol.
An important point after buying a device RSA Security 3.75 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought RSA Security 3.75 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data RSA Security 3.75 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, RSA Security 3.75 you will learn all the available features of the product, as well as information on its operation. The information that you get RSA Security 3.75 will certainly help you make a decision on the purchase.
If you already are a holder of RSA Security 3.75, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime RSA Security 3.75.
However, one of the most important roles played by the user manual is to help in solving problems with RSA Security 3.75. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device RSA Security 3.75 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
