Remove Tivoli Access Manager

After you have installed and used IBM Tivoli Access Manager, you may find that you no longer require its use. You can then remove it from the IBM WebSphere Portal environment and restore authentication capabilities to IBM WAS and authorization capabilities to WebSphere Portal.

To remove Tivoli Access Manager from the WebSphere Portal environment. After performing this procedure, the following changes occur:

  1. Perform the following steps, from the WAS console, if you configured Tivoli Access Manager for authentication:

    1. Select Security -> Global security -> Web and SIP security -> Trust association -> Interceptors.

    2. Delete com.ibm.ws.security.web.TAMTrustAssociationInterceptorPlus.

    3. Click OK then Save.

  2. Stop and restart the appropriate servers to propagate the changes.

  3. Optional. If you configured Tivoli Access Manager for authorization:

    1. Change the enableExternalization property to false in Access Control Config Service. This will prevent the Externalize/Internalize icon from appearing in the Administrative Access portlet once Tivoli Access Manager is removed.

    2. Use either the Resource Permissions portlet or the XML configuration interface to internalize any resources managed by Tivoli Access Manager.

    3. Edit the services.properties file found in the WP_PROFILE/PortalServer/config/config directory; find the value com.ibm.wps.services.ac.ExternalAccessControlService, and change it to com.ibm.wps.ac.impl.ExternalAccessControlDefaultImpl.

        Clustered: Complete this step on all nodes.

  4. Optional. To remove the credential vault adapter and its associated segments if you configured it for Tivoli Access Manager:

    1. Use the Credential Vault portlet to remove any segments added since installation.

        Do not remove DefaultAdminSegment.

    2. Remove the Vault.AccessManager Credential Vault Adapter implementation properties; including class, config, manager, and readonly; from the Credential Vault Service configuration.

        The systemcred.dn property cannot be removed.

    3. Remove the accessmanagervault.properties file from the WP_PROFILE/PortalServer/config/config directory.

        Clustered: Complete this step on all nodes.

  5. Optional. If you enabled user provisioning, go to Disable user provisioning.

  6. Optional. Restore the backup copy of the theme so that the login and logout pages restore to the default before Tivoli Access Manager was enabled.

  7. Optional. Remove all junction points, access control lists (ACLs), protected objectspace entries (POS entries), custom actions, and custom action groups.

  8. Optional. Run the following task to remove the connection to Tivoli Access Manager:

      ./ConfigEngine.sh run-svrssl-unconfig -DWasPassword=foo -Dwp.ac.impl.PDAdminPwd=foo from the WP_PROFILE/ConfigEngine

      Clustered:

        Complete this step on all nodes.

  9. If necessary, uninstall any Tivoli Access Manager components.

  10. Stop and restart the appropriate servers to propagate the changes.


Parent

Configure Tivoli Access Manager

 


+

Search Tips   |   Advanced Search