IBM HTTP Server powered by Apache v9.0

1. Overview
   • New in this release
   • IBM HTTP Server vs. Apache HTTP Server

2. Migrate and install IHS
   • Migrate from previous versions of IHS
     • Migrate from IHS V5.3 for z/OS
     • Migrate to IHS 9.0

   • Install IHS on distributed systems with Installation Manager
     • Mounting CD-ROMS on AIX, HP-UX, Linux and Solaris systems
     • Install IHS using the GUI
     • Install IHS silently
     • Dependencies required by IHS on Windows
     • Create multiple instances of IHS on Windows operating systems
     • Run multiple instances of IHS from a single install
     • Install fix packs on IHS using the Installation Manager GUI
     • Uninstall IHS using the GUI
     • Uninstall IHS silently
     • Uninstall fix packs from IHS using the Installation Manager GUI

   • Install and configure IHS from an archive
     • Install IHS from an archive
     • Configure IHS for Liberty
     • Configure IHS with WebSphere Application Server

   • Migrate and install IHS on z/OS systems

3. Administer IHS
   • Perform required z/OS system configurations
   • Start and stop IHS
     • Use the administrative console to start IHS
     • Use apachectl commands to start IHS
     • Use Windows services to start IHS
     • Use JCL procedures to start IHS on z/OS

   • Configure IHS
     • Apache modules included with IHS
     • Apache programs included with IHS
     • Apache APR and APR-util libraries included with IHS
     • Apache MPMs included with IHS
     • IPv4 and IPv6 configuration for Windows operating systems

   • Enable IHS for FastCGI applications
     • Learn about FastCGI
     • FastCGI directives

   • Manage IHS remotely with the WebSphere Application Server administrative console
   • Extending IHS functionality with third-party plug-in modules
     • Viable compilers for Apache and third-party plug-in modules
     • Build method options for dynamic modules
     • Considerations for building dynamic modules on Windows platforms
     • Considerations for building dynamic modules on Unix platforms

   • Configure IHS for SMF recording
     • Recording operational statistics
     • Recording information about requests and responses

   • Classify HTTP requests for WLM (z/OS operating systems)
     • WLM directives for IHS

4. Administer the administration server
   • Start and stop the IHS administration server
   • Protecting access to the IHS administration server
     • Enable access to the administration server using the htpasswd utility
     • Run the setupadm command for the administration server
     • Set permissions manually for the administration server

5. Secure applications and their environment
   • Secure IHS
   • Configure SSL between the IHS Administration Server and the deployment manager
   • Secure with SSL communications
     • Example
     • Secure Sockets Layer (SSL) protocol
       • Certificates
         • List of trusted certificate authorities on the IHS
         • Certificate expiration dates
         • SSL Certificate revocation list and Online Certificate Status Protocol
         • Obtaining certificates

       • Public Key Infrastructure
       • Session ID cache

     • SSL directive considerations
     • IHS authentication
     • Encryption
     • Secure Sockets Layer environment variables
       • SSL handshake environment variables
       • Server certificate environment variables
       • Client certificate environment variables

     • SSL directives

   • Set advanced SSL options
     • Choosing the level of client authentication
     • Server Name Indication
     • Viewing cipher specifications
     • SSL cipher specifications
     • Choosing the type of client authentication protection
     • Defining SSL for multiple-IP virtual hosts
     • Set up a reverse proxy configuration with SSL

   • IHS certificate management
   • Manage keys with the IKEYMAN graphical interface (Distributed systems)
     • Start the Key Management utility user interface
     • Working with key databases
     • Changing the database password
     • Create a new key pair and certificate request
     • Importing and exporting keys
     • Listing certificate authorities
     • Certificate expiration dates
     • Create a self-signed certificate
     • Receiving a signed certificate from a certificate authority
     • Displaying default keys and certificate authorities
     • Storing a certificate authority certificate
     • Storing the encrypted database password in a stash file

   • Manage keys from the command line (Distributed systems)
     • Use the gskcapicmd command
     • Key Management Utility command-line interface (gskcmd) syntax
     • Create a new key database using the command-line interface
     • Manage the database password using the command line
     • Create a new key pair and certificate request
     • Importing and exporting keys using the command line
     • Create a self-signed certificate
     • Receiving a signed certificate from a certificate authority
     • Displaying default keys and certificate authorities
     • Storing a certificate authority certificate
     • Store your CMS encrypted database password in a stash file

   • Manage keys with the native key database gskkyman (z/OS systems)
   • Getting started with the cryptographic hardware for SSL (Distributed systems)
     • Cryptographic hardware for Secure Sockets Layer
     • Use IKEYMAN to store keys on a PKCS11 device
     • Configure IHS to use nCipher and Rainbow accelerator devices and PKCS11 devices

   • Authenticating with LDAP on IHS using mod_ldap
     • Converting your directives from mod_ibm_ldap to mod_ldap
       • LDAP directive migration

   • Authenticating with SAF on IHS (z/OS systems)
   • Set up HTTP Strict Transport Security (HSTS)

6. Troubleshooting and support: IHS
   • Troubleshooting IHS
     • Security bulletins for IHS
     • Known problems on Windows platforms
     • Known problems on z/OS platforms
     • Known problems with hardware cryptographic support on AIX
     • Symptoms of poor server response time
     • Hints and tips for managing IHS using the administrative console
     • Could not connect to IHS administration server error
     • Experiencing an IHS Service logon failure on Windows operating systems

   • Viewing error messages for a target server that fails to start
     • SSL cache messages
     • SSL configuration messages
     • SSL handshake messages
     • SSL initialization messages
     • I/O error messages
     • SSL stash utility messages
     • z/OS messages

7. Reference
   • Command-line utilities
     • Key Management Utility command-line interface (gskcmd) syntax

   • Administrator reference: Files
     • Apache APR and APR-util libraries included with IHS
     • Apache modules included with IHS
     • Apache MPMs included with IHS
     • Apache programs included with IHS
     • Client certificate environment variables
     • Server certificate environment variables
     • SSL handshake environment variables

   • Administrator reference: Settings and custom properties
     • AFPA directives
     • FastCGI directives
     • LDAP directives
     • LDAP directive migration
     • SAF directives
     • SSL cipher specifications
     • SSL directives
     • WLM directives for IHS

   • Messages
     • SSL cache messages
     • SSL configuration messages
     • SSL handshake messages
     • I/O error messages
     • SSL initialization messages
     • SSL stash utility messages

   • Administrator best practices
     • IHS V5.3 for z/OS: Part 1: Planning
     • IHS V5.3 for z/OS: Part 2: Installing
     • IHS V5.3 for z/OS: Part 3: Using
     • IHS V5.3 for z/OS: Part 4: Basic configuration
     • IHS V5.3 for z/OS: Part 5: Advanced configuration
     • IHS V5.3 for z/OS: Part 6: Programming

Release notes