Deployment Guide

Welcome

How to Use This Book

Audience

Organization

Typographical Conventions

BEA Documentation and Resources

Components of AquaLogic User Interaction

Planning Portal Structure and Content

Single Portals and Federated Portals

Experience Definitions

Knowledge Directory

Communities

Portlets

Collaboration

Incorporating AquaLogic Interaction Collaboration

Example: Sales Process Automation

Example: Customer Support

Example: Finance Application

Example: E-learning Application

Incorporating AquaLogic Interaction Process

Search

Developing and Integrating Custom Applications

Example: Access and Personalization

Example: Searching for Data and Documents

Example: Customer Branded Support Site

Defining Administrative Roles

About Access Privileges and Activity Rights

Creating a Group Hierarchy

Assigning Activity Rights

Defining an Administrative Object Hierarchy

Managing Quality through Object Migration

Customizing the User Interface

About Experience Definitions

Navigation

Style Sheets and Portlets

Branding

Pluggable Event Interfaces (PEIs)

Custom Activity Spaces

Provisioning Host Computers

Component Host Requirements

Optimization Strategies

Load Balancing

Portlet Support

PPE Load Balancing and SSL

Verifying That PPE Load Balancing is Configured Correctly

PPE Configuration Settings

External Service Load Balancing

Scaling Using Federated Portals

Implementing Network Security

Security Architecture

Firewalls and Security

Implementing AquaLogic Interaction in a DMZ

Web Services and Internal Network Security

Risk Mitigation Scenarios

Scenario 1: The Reverse Proxy + IIS

Scenario 2: Multiple Network Cards

Scenario 3: Limited Functionality for External Users

Security Modes

Deploying SSL

About Encryption

Encryption of Persistent Data

About Public Key Infrastructure (PKI)

Public Key Cryptography

Attack 1: The Imposter and the Bank

Defense: X.509 Digital Certificates

Attack 2: Using a Digital Certificate to Prove Identity

Conclusion: Signed and Certified

About Delegation and Portals

PKI Does Not Permit Delegation

Application to Portals

Using PKI in Your Portal

Complete Solution: PKI with an SSO Server

Stand-Alone Solution without Delegation

Summary

Setting Up SSL

Importing CA Certificates into the Keystore

Importing CA Certificates into the cacerts Keystore (for Java Portals)

Importing CA Certificates into MMC (for .NET Portals)

Setting Up Publisher to Use a Secure Image Service or Portal

Setting Up Workflow to Use a Secure Image Service or Portal

Setting Up Collaboration to Use a Secure Image Service

Setting Up Studio to Use a Secure Image Service or Portal

Troubleshooting

Single Sign-On Options

Delegating to Remote Authentication or SSO

Logging in to the Portal with Auto-Authentication

Brokering Credentials to the Remote Tier

Summary

Using Migration Features to Stage Your Deployment

Localizing Your Deployment

About Localization

Localizing Names and Descriptions of Objects Stored in the Database

Adding a User Interface Language

Adding Language Style Sheets

Adding an Online Help Language

Adding Javascript Language Files

Language Support in the Knowledge Directory

Developing a Production Maintenance Plan

Periodic Tasks

Monitoring ALUI Services

Monitoring Databases and Java Application Servers

Monitoring Usage

Troubleshooting Tools

ALI Logging Utilities

View Source

When to Use View Source

How to Use View Source

What Is Available in View Source

AquaLogic Interaction Products Worksheet

Portal Content Responsibilities Worksheet

Administrative Roles Worksheet

Evaluating Hardware for the Portal Component

Portal Performance on Various Hardware Hosts

Component-Host Templates

Guidelines

Components Required for all Deployments

General Principles

One-Host Portals

Usage

Configuration Worksheet

Two-Host Portals

Usage

Configuration Worksheet

Risks and Mitigation

Three-Host Portals

Usage

Configuration Optimized for a Large Amount of Content

Configuration Optimized for a Large Number of Users

Four-Host Portals

Usage

Configuration Optimized Equally for Content and Users

Configuration Optimized for a Large Amount of Content

Configuration Optimized for a Large Number of Users

Component-Host Worksheets

Development Environment

Production Environment