BEA Logo BEA WebLogic Enterprise Release 5.0

  Corporate Info  |  News  |  Solutions  |  Products  |  Partners  |  Services  |  Events  |  Download  |  How To Buy

 

   WLE Doc Home   |   BEA WebLogic Enterprise Installation Guide   |   Previous   |   Next   |   Contents   |   Index

WLE Security Service Installation on Windows NT, 98, and 95 Systems

This chapter explains how to install the optional BEA WebLogic Enterprise (WLE) Security Service software on a Microsoft Windows system. The following topics are discussed:

For information about installing WLE Security Service software on a UNIX system, see WLE Security Service Installation on UNIX Systems.

The WLE Security Service software is packaged on a CD that is separate from the WLE product box. A WLE Security Service CD is distributed only if you purchased this software. This software provides 56-bit or 128-bit Secure Sockets Layer (SSL) and Link-Level Encryption (LLE) features for WLE applications. Each level of encryption is packaged on a separate CD.

The installation screens are similar for both levels of security. In this chapter, the sample screens are from a WLE Security Service 128-bit installation on Microsoft Windows NT.

Before You Install

This section describes the following topics:

Confirming That the WLE 5.0 Software Has Been Installed

Before you can install the WLE Security Service 5.0 software, you must first install at least one WLE 5.0 server component, or one of the following WLE 5.0 client component options:

If you are installing the WLE 5.0 Security Service software on a Windows 98 or Windows 95 client system, you must first install one of the WLE 5.0 client component options shown in the previous list.

If the target system only has the TUXEDO server or client (shown as "BEA /WS Client" ) software installed from the WLE 5.0 installation, the WLE Security Service installation procedure only installs the Link-Level Encryption (LLE) components. The Secure Sockets Layer (SSL) components are not installed on this type of target system.

LDAP Information Required During the Installation

During the 56-bit or 128-bit Security Service installation, the procedure will prompt you for the required LDAP server information shown in the following list.

If you do not know the appropriate LDAP values for the prompts, contact the person in your organization or company who is responsible for defining the LDAP server tree. At most companies, this person is the Security Administrator or the Directory Services Administrator.

Note: After the installation, it is not possible to modify a file to adjust these values. The only way to change these values is to re-install the WLE Security Service software and specify the updated values. Therefore, it is important that you understand the appropriate values for the requested information before you start the installation.

Before Re-installation, Backup LDAP Files

If you are re-installing the 56-bit or 128-bit WLE Security Service software on a system, the installation procedure will overwrite the LDAP filter file if you selected its default name and location. By default, the LDAP filter file is installed in %TUXDIR%\udataobj\security\bea_ldap_filter.dat, where TUXDIR is the directory in which you installed the WLE software. This file is used to define search filters that can further refine the scope of searches in the LDAP server tree.

On re-installation, the Security Service installation procedure will also overwrite the LDAP peer validation rule file, %TUXDIR%\udataobj\security\peer_val.rul .

Before you re-install the Security Service software, temporarily rename these files if you do not want the installation procedure to overwrite them. After the installation procedure, rename the files back to their original names and locations.

Stopping WLE or BEA TUXEDO Applications and Related Services

Before beginning the installation, make sure no BEA TUXEDO or WLE client or server applications are running. For information about the tmshutdown command, see Starting and Shutting Down Applications in the Administration section of the WebLogic Enterprise online documentation.

Check That Your Account Has Administrator Privileges

You need administrator privileges to perform the installation. If you attempt to install the WLE Security Service software without administrator privileges, the following error message will be displayed:

Cannot Install TUXEDO IPC Helper Service.

Platforms Supported

The Microsoft Windows platforms listed in Table 3-1 are supported.

Table 3-1 Supported Microsoft Windows Platforms

Operating System

Release/Version

Microsoft Windows NT

4.0 (Intel) Service Pack 4 (SP4)

Microsoft Windows 95

Service Pack 1

Microsoft Windows 98

For the hardware and software requirements for NT, see WLE Platform Data Sheets.

Installing the WLE Security Service on Microsoft Windows Systems

This section describes how to install the 56-bit or 128-bit WLE Security Service software on Microsoft Windows systems. The sample screens show the installation of the 128-bit software on a Windows NT system.

Microsoft Windows NT Installation Procedure

It will take approximately 5 minutes to install the software.

To install the WLE Security Service 56-bit or 128-bit software on a Microsoft Windows system, perform the following steps:

  1. Insert the WLE Security Service software CD in the CD player. The Windows autorun feature is used to automatically begin the installation. (To bypass the autorun feature, hold down the Shift key while inserting the CD in the CD player. You can then run the setup.exe file in the inwnt40 directory on the CD.)

  2. The Setup screen is displayed, followed by the Welcome screen.

  3. Click Next. The Software License Agreement screen is displayed.

  4. To accept the license agreement, click Yes. The User Information screen is displayed.

  5. Enter your name and the name of your company and click Next.

  6. If a WLE or BEA TUXEDO application and related services are running, the Severe message screen is displayed:

    If this happens, click OK, which will exit the installation without installing any portion of the software. Then use the tmshutdown command, if appropriate, to stop any running applications. Also stop any WLE or BEA TUXEDO services, if appropriate. You can do this on Windows NT systems by clicking Start -> Settings -> Control Panel. In the Control Panel, open the Services panel. The Services screen is displayed.

    Scroll to the entries for TUXEDO IPC Helper and TListen. For each entry, select it in the display box and click Stop to change its status from Started to Stopped. Then click Close. If you encountered the screens shown in this step, you will have to restart the installation program.

  7. If you did not encounter the problem described in the preceding step, the installation program displays the Enter LDAP Server URL And Port Information screen.

    Note: If you installed only BEA TUXEDO server or client software on this system, the following screen is not displayed.

    Note: For this release, the Back button on this screen is disabled.

    This information will be stored locally as a registered SSL certificate lookup plug-in that WLE client and server applications can use.

  8. The Base Object screen is displayed.

    Note: If you installed only BEA TUXEDO server or client software on this system, the following screen is not displayed.

  9. The base object is the point in the LDAP tree at which you want users to start searching; in this case, to start searching for certificates. There are no strict rules about the syntax for this value. Enter the base object string exactly as it was specified in the LDAP server tree. Click Next. The Enter LDAP Filter File Information screen is displayed.

    Note: If you installed only BEA TUXEDO server or client software on this system, the following screen is not displayed.

  10. The default location for the LDAP filter file is wledir\udataobj\security\bea_ldap_filter.dat . This file is used to define search filters that can further refine the scope of searches in the LDAP server tree. (For more information, see Using Security in the WebLogic Enterprise online documentation.) Click Next to accept this default; or, enter a new value and click Next. The Setup Complete screen is displayed:

  11. Click Finish to complete the installation.

  12. Reboot your system. Your system restarts. If you attempt to run the WLE software before you restart your system, the software may fail.

Removing (Uninstalling) the WLE Security Service from Your System

To remove the WLE Security Service software from your system, follow the steps in this section.

Warning: After you complete these steps, you will have to re-install the WLE 5.0 software on your system.

  1. Log on to the system. If you are using a Microsoft Windows NT system, log on as the administrator or as a member of the Administrator group.

  2. Make sure that no BEA TUXEDO or WLE client or server applications are running. Use tmshutdown to shut down all WLE applications.

  3. On the Microsoft Windows taskbar, click Start -> Programs-> BEA Security Service 128 -> UnInstall BEA Security Service 128. (If you installed the 56-bit version of the Security Service, the taskbar path is Start -> Programs-> BEA Security Service 56 -> UnInstall BEA Security Service 56.)

  4. The Confirm File Deletion screen is displayed. For example:

  5. Click Yes to confirm the removal and to uninstall the WLE Security Service software. The Uninstall screen is displayed. For example:

The WLE Security Service product is removed from your system and from the Windows Registry.

Warning: Again, after you complete these steps, you will have to re-install the WLE 5.0 software on your system.