CA eTrust SiteMinder Policy Server Management

Key Management Scenarios
Key Management Scenarios
There are three types of scenarios for key management based on how you
implement Policy Servers, policy stores and key stores, along with your single
sign-on requirements. These scenarios include:
■
Common Policy Store and Key Store
In this scenario, a group of Policy Servers shares a single policy store and
key store, providing access control and single sign-on in a single cookie
domain.
The policy store data is maintained in a single policy store. Key data is
maintained in a single key store. The key store may be part of the policy
store, or may be a separate store.
Both policy store and key store data may be replicated for failover
purposes. Replication must be configured based on the database or
directory type selected for the policy store. For information about
replication schemes, consult the documentation provided by your database
or directory vendor.
■
Multiple Policy Stores with a Common Key Store
In this scenario, groups of Policy Servers connect to separate policy stores,
but share a common key store, providing access control and single sign-on
across multiple cookie domains.
The policy store data for each group of Policy Servers is maintained in a
single policy store. Key data for all groups of Policy Servers is maintained
in a single key store. The separate key store allows Agents associated with
all Policy Servers to share keys, enabling single sign-on across separate
cookie domains.
Both policy store and key store data may be replicated for failover
purposes. Replication must be configured based on the database or
directory type selected for the policy store. For information about
replication schemes, consult the documentation provided by your database
or directory vendor.
Chapter 6: Configuring and Managing Encryption Keys 51