WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

There are some specific considerations for installers that we address here. Take
into account the following security considerations during the installation planning
phase:
► Certificates
– If you will use digital certificates, make sure that you request them with
enough lead time so that they are available when you need them.
– If default certificates or dummy key ring files are provided with any of the
products you plan to install, replace them with your own certificates.
– If you are using self-signed certificates, plan your signer structure carefully
and exchange signer certificates if necessary.
Note: In WebSphere Application Server V7.0 signer and personal
certificates can be either created or imported during profile creation. If
you have new certificates created you can choose the correct DN
during profile creation.
► Network and physical security
– Usually one or more firewalls are part of the topology. After determining
what ports need to be open, make a request to the firewall administrator to
open them.
– Plan the physical access to the data center where the machines are going
to be installed to prevent delays to the personnel involved in the installation
and configuration tasks.
► User IDs
– Request user IDs with enough authority for the installation purposes, for
example, root on a Linux or UNIX operating system and a member of the
administrator group on a Windows operating system. For more
information, see the following Web page:
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.i
bm.websphere.installation.nd.doc/info/ae/ae/tins_install.html
Although non-root installation is also supported, some limitations apply.
For more information, see the following Web page:
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.i
bm.websphere.installation.nd.doc/info/ae/ae/cins_nonroot.html
– If there is a policy on password expiration, it should be well known so as to
avoid disruption on the service (password expiration of root, Administrator,
or the password of the user to access some database).
224 WebSphere Application Server V7.0: Concepts, Planning, and Design