Configuration Guides › SOA Agent for Web Servers Guide › Configure the SOA Agent to Work on an Oracle iPlanet Web Server › Run the Configuration Wizard on Windows

Run the Configuration Wizard on Windows

Note: The SOA Security Manager Agent Configuration wizard only modifies the default obj.conf file on the Oracle iPlanet (formerly Sun Java System) web server. To protect other instances or reverse proxy deployments with SOA Security Manager, copy the SOA Security Manager settings from the default obj.conf file to any respective instance_name-obj.conf files. For example, your web server created an obj.conf file when you installed it, but you later added a server instance named my_server.example.com. To protect resources on my_server.example.com with SOA Security Manager, copy the SOA Security Manager settings added by the wizard from the obj.conf file to the my_server.example.com-obj.conf file.

To configure the SOA Agent on an Oracle iPlanet web server

1. If necessary, start the SOA Agent Configuration Wizard.
2. The default method is to select Start, Programs, CA, SOA Security Manager, SOA Security Manager Configuration Wizard. If you have placed the Wizard shortcut in a non-default location, the procedure will be different.

   Important! If you are running this wizard on Windows Server 2008, run the executable file with administrator permissions. Use these permissions even if you are logged in to the system as an administrator. For more information, see the release notes for your SOA Security Manager component.

   Note: If you chose to configure the SOA Agent immediately after the installation, SOA Security Manager starts the wizard automatically.

3. If you have already done host registration, skip to the next step. If not, select No in the Host Registration dialog box to skip registration, then click Next.

   To register a trusted host, refer to the installation chapter for your platform.

4. Select the web server instances that you want to configure with SOA Agents.

   If you have already configured a server with a SOA Agent and you are running the Configuration Wizard to configure additional web servers instances, the Wizard displays the Select One or More Instances to Overwrite dialog box. This dialog box lists the web servers that you have previously configured.

   1. Select one of the following:

      Overwrite—to overwrite the server instance configuration.

      Preserve—to preserve the web servers configuration.

      Important! If you uncheck a previously configured server, the SOA Agent will be removed from this server.

   2. Click Next.
5. In the Agent Configuration Object field, enter the name of the Agent Configuration Object for this web server instance, then click Next.

   This name must match an Agent Configuration Object already defined at the Policy Server. For example, to use the default enter iPlanetDefaultSettings.

6. If applicable, select one of the advanced SSL authentication schemes listed in the SSL Authentication dialog box. If the Agent is not providing advanced authentication, select No advanced authentication. Click Next.

   The selections are:

   • HTTP Basic over SSL—identifies a user based on a user name and password. The credential delivery is always done over an encrypted Secure Sockets Layer (SSL) connection.
   • X509 Client Certificate—identifies a user based on X.509 V3 client certificates. Digital certificates act as a signature for a user. Certificate authentication uses SSL communication.
   • X509 Client Cert and HTTP Basic—combines X.509 Client Certificate and Basic authentication. The user’s X.509 client certificate must be verified and he or she must provide a valid user name and password.
   • X509 Client Cert or HTTP Basic—combines X.509 Client Certificate and Basic authentication. The user’s X.509 client certificate must be verified, or he or she must provide a valid user name and password.
   • X509 Client Cert or Form—The X.509 Client Certificate or HTML Forms authentication scheme combines the use of X.509 Client Certificates and the use of customized HTML forms to collect authentication information. Using this scheme, the user’s X.509 client certificate must be verified or the user must provide the credentials requested by an HTML form.
   • X509 Client Cert and Form—The X.509 Client Certificate and HTML Forms authentication scheme combines the use of X.509 Client Certificates and the use of customized HTML forms to collect authentication information. Using this scheme, the user’s X.509 client certificate must be verified and the user must provide the credentials requested by an HTML form.

   Note: For additional information about advanced authentication schemes, see the Policy Server Configuration Guide.

7. In the Web Server Configuration Summary dialog box. Confirm that the configuration settings are correct, then click Install.

   The SOA Agent files are installed and the Configuration Complete dialog box displays.

8. Click Done to exit the Configuration Wizard.
9. Enable the SOA Agent:
   1. Open the WebAgent.conf file, located in:

      Sun_Java_System_server_home\servers\https-hostname\config

   2. Set the EnableWebAgent parameter to Yes.
   3. Save the file.
10. Apply changes to Oracle iPlanet Web Server files. This is required for the Agent’s configuration to take effect.

More Information

Install the SOA Agent for Web Servers on a Windows System

Information Required for Trusted Host Registration