IBM SG24-7645-00 Internet and Firewall Security, Secure Socket Layer SSL Overview, 7645install.fm

Draft Document for Review May 23, 2008 10:14 am 7645install.fm

5.6.12 Internet and Firewall Security

For security purposes Maximo can also be configured to take advantage of the more secure protocol, Hypertext Transfer Protocol Secure (HTTPS). If Maximo clients exist outside the corporate network, you can add a firewall or other security measure.

Firewalls are configured to allow communication over HTTP (typically Port 80) or HTTPS (typically Port 443). The following information is generic and does not reflect any particular firewall brand.

Secure Socket Layer (SSL) Overview

Secure socket layer provides secure connections over a network connection by doing the following:

–allowing two applications to authenticate each other’s identity

–encrypting the data exchanged between the two applications

Authentication allows a server and optionally a client to verify the identity of the application on the other end of a network connection. Encryption makes data transmitted over the network intelligible only to the intended recipient. IBM WebSphere and BEA WebLogic support SSL, and IBM Corporation has certified the SSL implementation with the Maximo-WebSphere and Maximo-BEA WebLogic integration.

Configuring Secure Socket Layer To implement SSL

A Web server must have an associated certificate for each external interface (IP address) that accepts secure connections. After you install the certificate on the Web server, replacing the .http with .https encrypts a session between the browser and server.

For example:

http://MaximoAppServer will be entered as https://MaximoApp Server

The standard port for HTTPS is 443.

If a Proxy server or Firewall controls network traffic, this port and protocol must be opened. SSL comes with some additional overhead for encryption and decryption of data. Encryption and decryption can affect performance.

Internet Explorer Settings

It is advisable that you enable your browser to automatically check for newer versions of stored pages when you login to Maximo, to ensure this perform the following steps:

Chapter 5. Installation 95