Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Secure Service integration > Secure service integration > Secure buses
Migrate an existing secure bus to multiple domain security
Use this task to migrate a secured service integration bus from the global security domain to a cell-level or custom security domain.
The security settings for a bus are held in a security domain. There are three types of security domain:
- Review the information in Service integration security planning and Messaging security and multiple security domains.
- All the bus members must be at WAS v7.0 or later; use of multiple domain security is not supported for earlier versions of the product.
- Ensure that there are no indoubt transactions on the messaging engine because incomplete transactions cannot be recovered after the bus is secured. See Resolve indoubt transactions.
- Stop all servers on which the SIB Service enabled. This ensures that the bus security configuration is applied consistently when the servers are restarted. See Stop an application server.
- The global security domain which a bus uses by default.
- A cell level security domain which the bus might inherit from the administrative cell.
- A custom domain which might contain security settings that are unique to the bus.
We can use the admin console to change the type of security domain that the bus uses. Note that the link Configure Security Domain only becomes active if you select and apply the option to use a selected security domain. In this case, also specify a user realm. We can either use the existing global security settings, or customize a user realm specifically for the domain.
Procedure
- In the navigation pane, click Service integration -> Buses -> security_value . The security settings panel for the selected bus are displayed.
- Select either Inherit the cell level security domain or Use the selected domain, depending on the type of security domain to use for the bus.
- Click Apply.
- Complete the following steps to create a custom security domain:
- Click the link Configure Security Domain. The security domain configuration panel for the selected bus is displayed.
- Use the name suggested for the security domain, or type a new one.
- Optional: Type a description of the security domain.
- Select the type of user realm for the domain. We can either use the global security settings, or configure a new one.
- Click Next.
- Review the summary of your choices:
- Optional: If you want to make changes, click Previous to return to an earlier panel, and make the changes you require.
- Click Finish to confirm your choices.
- Save your changes to the master configuration.
Results
You have migrated your existing bus from the global domain to a non-global security domain. The new security settings for the bus are displayed in the updated Bus Security Settings panel.
What to do next
We must propagate the bus security configuration to all the affected nodes, and restart the servers. See Synchronize nodes using wsadmin.sh and Start an application server.