WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

12.1 What is new in V7.0
This section describes the major new features added to WebSphere Application
Server V7.0.
► Multiple security domains
This feature provides the possibility of having different security settings in the
same cell, therefore allowing separate security environments for
administrative applications and user applications. A security domain can be
enabled at cell, node, or application server scope.
► Security auditing
As a new subsystem of the WebSphere Application Server security
infrastructure, security auditing achieves two primary objectives:
– Confirming the effectiveness and integrity of the existing security
configuration.
– Identifying areas where improvement to the security configuration might
be needed.
► Certificate management enhancements
New certificate management functions have been provided to improve the
security of communications between a server and a client:
– Creating and using a certificate authority (CA) client to enable users to
connect to a CA server to request, query, and revoke certificates
– Creating and using chained personal certificates to allow a certificate to be
signed with a longer life span
– Creating and revoking CA certificates to ensure secure communication
between the CA client and the CA server
– For WebSphere Application Server for z/OS, performing certificate
management on System Authorization Facility (SAF) keyrings
► Security annotations
Security annotations, which are an alternative means of defining security
roles and policies, can be used instead of, or in addition to, defining roles and
policies in the deployment descriptor.
► Fine-grained administrative security in the Integrated Solutions Console
In addition to the existing support in the wsadmin command tool, fine-grained
security can now be configured in the Integrated Solutions Console as well.
380 WebSphere Application Server V7.0: Concepts, Planning, and Design