Security: Links

 

Use the following links to find relevant supplemental information about securing applications and their environments. The information resides on IBM and non-IBM Internet sites, whose sponsors control the technical accuracy of the information.

These links are provided for convenience. Often, the information is not specific to the IBM WebSphere Application Server product, but is useful all or in part for understanding the product. When possible, links are provided to technical papers and Redbooks that supplement the broad coverage of the release documentation with in-depth examinations of particular product areas.

View links to additional information about:

• Planning, business scenarios and IT architecture.
• Programming model and decisions
• Programming specifications
• Administration

 

Planning, business scenarios and IT architecture

• WebSphere Application Server Library
• WebSphere Application Server Support
• WAS V5 Security Redbook

 

Programming model and decisions

• Java Secure Socket Extension (JSSE) Documentation.

  Refer to $ND_HOME/web/docs/jsse/jssedocs.jar for the javadoc of the APIs.

  • For other JSSE information refer to $ND_HOME/web/docs/jsse/API_users_guide.html and $ND_HOME/web/docs/jsse/readme.jsse.ibm.html .

  • For sample JSSE applications refer to $ND_HOME/web/docs/jsse/samplejsse.jar .

• Key management utility (iKeyman) documentation.

  Look in...

  /opt/WebSphere/AppServer/web/docs/ikeyman/ikmuserguide.pdf

  ...for the SSL introduction and iKeyman.

• Java Cryptography Extension (JCE) documentation.

  • For the Java Cryptography Architecture (JCA) specification and JCE API usage refer to $ND_HOME/web/docs/jce/api_users_guide.html .

  • For JCE sample applications refer to $ND_HOME/web/docs/jce/SampleJCE.jar .

  • For Java Cryptography Architecture Reference refer to $ND_HOME/web/docs/jce/CryptoSpec.html .

  • For how to implement a JCE provider refer to $ND_HOME/web/docs/jce/HowToImplAProvider.html .

  • For the javadoc of JCE APIs refer to $ND_HOME/web/docs/jce/jcedocs.jar .

  • For an overview of IBM JCE refer to $ND_HOME/web/docs/jce/readme.jce.ibm.html .

• Application Assembly Tool (AAT) documentation.

  Refer to $ND_HOME/web/docs/aat/en/WAS_Network_Deployment .html for AAT documentation. This documentation can help when securing J2EE enterprise applications.

• Java 2 Platform Security for IBM Application Developer Kit 1.3

  • Refer to Java 2 Security check permission algorithm

 

Programming specifications

• J2EE Specifications

• EJB Specifications

• Servlet Specifications

• CSIv2 Specification

• JAAS Specification.

  For programming and usage in JAAS, refer to the specification located at $ND_HOME/web/docs/jaas/JaasDocs.jar . This document contains the following files when unpacked:

   

  login.html

  LoginModule Developer's Guide

   

  api.html

  Developer's Guide JAAS(JavaDoc)

   

  HelloWorld.tar

  Sample JAAS application

• Java 2 Platform, Standard Edition, Version 1.3.1 API Specification

 

Administration

• WebSphere Application Server Version 4.0 Security Redbook: WebSphere Security Model .

• IBM HTTP Server Support and Documentation

• IBM Directory Server Support and Documentation

• IBM Application Developer Kit Readme

  • For IBM Application Developer Kit Readme refer to $ND_HOME/java/docs/readme.devkit.ibm.html

  • For IBM Application Developer Kit Installation and Configuration Readme refer to $ND_HOME/java/docs/readme.install.ibm.html

• IBM cryptographic hardware devices

• Supported hardware, software and APIs prerequisite Web site

 

WebSphere is a trademark of the IBM Corporation in the United States, other countries, or both.

 

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.