Need info to configure SSL for Portal Server in EP6SP2

Hello,
We need to configure SSL for Portal Server. We are using J2EE 6.20 Patch 25 and EP6SP2P4. The ITS is already using https and it creats lots of Session issues since Portal is not in https.
Is there any OSS Note or How to guide to configure Portal to use SSL.
Thanks.
- PK

Hi Marcel,
Thanx for your Post, I have a Question, we will use CISCO for load balancing and SSL termination but I have a big issue, the URL in the portal applciation is always the same ant the URL in the borwser, I guess al the other URL´s are in the Frames, how will we configure the SSL termination for the login page in example if the URL in the Browser appears always the same?
Thanx in Advanced!!!

Similar Messages

Configuring SSL for SOA Server

Hi All,
I wrkin on SOA suite 11g. I am tryin to implement transport level security. Firstly 1-way authentication and than 2-way mutual authentication. For that I need to enable the SSL for SOA server which is managed by the WLS admin server. As per my knowledge the WLS comes with demoidentity and demotrust keystores. If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.
Now, in case i need to create new keystores than can i do the same using keytool utility. Additionally, is it possible to make CA using keytool utility? If yes, kindly provide me some links about how to do the same.
Thanks in advance.

Hi Shomit,
If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.You can use the Demo keystores for dev purpose but it is NOT recommended to use demo keystores for production use.
in case i need to create new keystores than can i do the same using keytool utilityYes, you can do it using Keytool utility.
is it possible to make CA using keytool utility?Actually you can generate a self-signed cert and use that as a CA for signing CSR's.
kindly provide me some links about how to do the sameYou should get everything here -
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13707/ssl.htm#i1200848
Regards,
Anuj

How to configure SSL for Oracle Weblogic Server

Hi,
Please help me to configure SSL in oracle weblogic server.
If possible, please provide step by step to configure SSL.

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

Kerberos Configuration Manager for SQL Server: Access of system information failed!

I'm trying to use the new Kerberos Configuration Manager for SQL Server tool that was released recently to verify SPN on several SQL Servers, but any time I attempt to connect to a server I get the following error in the log:
6/24/2013 3:48:22 PM Info: Connect to WMI, \\<HOSTNAME>\root\cimv2
6/24/2013 3:48:25 PM Error: Access of system information failed System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1332) occurred while enumerating the group membership. The member's SID could not be resolved.
at System.DirectoryServices.AccountManagement.SAMMembersSet.IsLocalMember(Byte[] sid)
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNextLocal()
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNext()
at System.DirectoryServices.AccountManagement.FindResultEnumerator`1.MoveNext()
at System.Linq.Enumerable.Contains[TSource](IEnumerable`1 source, TSource value, IEqualityComparer`1 comparer)
at KerberosCM.WMIHelper.isUserLocalAdmin(SystemInfo si, UserPrincipal user)
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
6/24/2013 3:48:25 PM Error: Error System.Exception: Access of system information failed!
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
at KerberosCM.SystemInfo.GetInfo()
at KerberosConfigMgr.Utility.Login(String serverName, String login, String password, Boolean isCmdLine, Form uiForm)
Things I have tried to resolve this:
1. Verified that my account is a Domain Admin.
2. Attempt to connect locally without inputting any information for server/user/pw
3. Attempt to connect remotely using server/user/pw
I always receive the same error message and log: Access of system information failed!
Has anyone else run into this issue?

Update to this:
There were some invalid user accounts added to the Local Administrators group only showing up as a GUID. This caused the enumeration of the group to fail and generate the error in my original post. Removing those user accounts from the Administrators group
got past the enumeration error.
However, now when attempting to connect to the servers (locally or remotely) I get this error:
6/27/2013 10:24:24 AM Info: Connect to WMI, \root\cimv2
6/27/2013 10:24:38 AM Error: Access of system information failed System.Runtime.InteropServices.COMException (0x80070035): The network path was not found.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at System.DirectoryServices.AccountManagement.SAMStoreCtx.ResolveCrossStoreRefToPrincipal(Object o)
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNextForeign()
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNext()
at System.DirectoryServices.AccountManagement.FindResultEnumerator`1.MoveNext()
at System.Linq.Enumerable.Contains[TSource](IEnumerable`1 source, TSource value, IEqualityComparer`1 comparer)
at KerberosCM.WMIHelper.isUserLocalAdmin(SystemInfo si, UserPrincipal user)
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
6/27/2013 10:24:38 AM Error: Error System.Exception: Access of system information failed!
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
at KerberosCM.SystemInfo.GetInfo()
at KerberosConfigMgr.Utility.Login(String serverName, String login, String password, Boolean isCmdLine, Form uiForm)

How configure SSL for Oracle Lite

Hi all,
I'm trying to configure SSL but I've many doubts.
I already have one SSL certificate, I read in the documentation that is necessary to use the keytool.
Someone can help me for use this tool?
tks,
Everson

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

How Do I Configure SSL for RAC Installation.

Experts,
Requesting your inputs on configuring SSL for my RAC environment.
- Oracle DB version is 11.2.0.2
- RAC is with two nodes.
- Two nodes are : rac1.oracle.com and rac2.oracle.com
- RAC setup has SCAN feature configured. SCAN FQDN : racscan.oracle.com
- All clients talk to RAC DB using SCAN feature as shown below.
client applications -> racscan.oracle.com ---> rac1.oracle.com
---> rac2.oracle.com
- tnsnames.ora file on both RAC instances has hostname as "racscan.oracle.com" instead of their individual phyiscal host names.
How do I configure SSL for RAC:
1. Do I need to generate certificate request for individual hostnames or only for SCAN hostname ?.
2. If I generate a certificate based on SCAN hostname, how does SSL work since SCAN hostname is not a phyiscal host name ?
3. What is recommended strategy for configuring SSL for RAC environment ?
Thanks

The documentation on the creation of Oracle Wallets is not specific to RAC, and the RAC SCAN instructions for TCPS are very vague on the specific requirements for the certificates required in the wallets for proper operation. I too am struggling to get it to work. Does anyone have a more technical guide to the specific configuration of the certificates needed and what specific configuration file changes need to be made?
Also, the self signed documentation is getting REALLY old. Oracle, please stop giving instructions that demonstrate irresponsibility and show the proper method of certificate requesting and importing to wallets.
Edited by: user11338513 on Mar 21, 2012 2:23 PM

Kerberos Configuration Manager for SQL Server is available

This thread describes the Microsoft Kerberos Configuration Manager diagnostic tool for SQL Server. This tool is available for download from the Microsoft Download Center:
Download the package now.
About Kerberos Configuration Manager
The Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services (SSRS), and SQL Server Analysis Services (SSAS). It can perform the following
functions:
Collect information on operating systems and Microsoft SQL Server instances that are installed on a server.
Report on all Service Principal Name (SPN) and delegation configurations on the server.
Identify potential problems in SPNs and delegations.
Fix potential SPN problems.
More information
This tools helps troubleshoot the following exceptions:
401
Note: This error message is for http errors, SSRS errors, and some other similar errors.
Login failed for user 'NTAUTHORITY\ANONYMOUS'
Login failed for user '(null)'
Login failed for user ''
Cannot generate SSPI Context
For more information about Kerberos Configuration Manager, go to the following related blogs:
Released: Kerberos Configuration Manager for SQL Server
Kerberos Configuration Manager updated for Reporting Services
Kerberos Configuration Manager updated for Analysis Services and SQL Server 2014
Reference from the following KB article: Kerberos Configuration Manager for SQL Server is available
Elvis Long
TechNet Community Support

Thanks for posting, Elvis. Can you post this to the SQL Security forum too?
Dan Guzman, SQL Server MVP, http://www.dbdelta.com

How to implement SSL for Portal with ADS (for Adobe besed MSS Application)

Hi Experts,
What is the Minimum setting is required to implement the SSL for Portal with ADS.
Http is working fine with Portal with ADS and R/3 for Adobe Based MSS Form.
Please let me know.
Regards
Ali

Rajat,
Nice to see your reply...
Could you please write me the steps how to do that.
I would like to implement SSL only in portal. So is that mandatory to implement the SSL in ADS and R/3 too.
Please what are the minimum setting is required.
Sure points will be rewarded
Regards
Ali

Configure logshipping for report server database

Hi All,
Could some one please let me know the steps to be followed to configure logshipping for report server databases.
Thanks in Advance,
Regards, Kranthi

Hi Kranthi,
Based on my understanding, you want to know how to change the roles between primary server and secondary server when primary server goes down. Also you want to know when you should install reporting service on secondary to make sure reporting service could
be used by application team.
When primary server goes down, you should manually fail over to the secondary server and make it your new primary server. Before changing roles between primary server and secondary server, you should initial role change. For more information, please refer
to this link: http://msdn.microsoft.com/en-us/library/ms178117.aspx.
Besides, considering lots of time of reporting service installation and downtime during failover, I recommend you to install reporting service on secondary before configuring log shipping. When application team want to use reporting service with reportserver
database after you performing fail over to the secondary server, you can follow bellow steps to reset the database which will be used by reporting service:
Open Reporting Services Configuration Manager\Database.
Click Change database in the Current Report Server Database section.
On Action page, check Choose an existing report server database box. Click Next.
On Database Server page, type the secondary sever name then connect to it. Click Next.
On Database page, select the reportserver database from the drop-down menu of Report Server Database. Click Next.
Set the credentials, then click Finish on Progress and Finish page.
If you have any questions, please feel free to ask.
Best regards,
Qiuyun Yu

Tool for portal server monitoring

hi
'm new to portal administrator. can anyone pls tel how to monitor portal server whether there is any tool for portal server monitoring..
regards
raj

Hi,
there are many tools for monitoring different stuff on portal in different ways, but as you said you are new i would suggest you to go with manual stuff so that more things can be viewed.
please check below links for more details:
http://help.sap.com/saphelp_nwce10/helpdata/en/2e/30e93adccb444b871f3d4e7f905b84/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/7b/86eb3f0c49f106e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/en/5a/84b83b3683094be10000000a11402f/content.htm
/people/daniel.wroblewski/blog/2007/01/02/mysteries-of-the-portal-activity-report
/people/daniel.wroblewski/blog/2007/01/17/mysteries-of-the-portal-activity-report-ii
/people/daniel.wroblewski/blog/2007/01/23/mysteries-of-the-portal-activity-report-iii
Regards,
Pavan
Edited by: Pavan Kumar on Jul 22, 2009 12:38 PM

Change Directory server for Portal Server 6.2

Hi there,
I have the following problem with Portal Server 6.2 configuration which hopefully someone here will be able to help me with.
Basically our current setup is the Sun Portal Server 6.2, ID server 6.1 and Directory server all sitting on one (Solaris 9) box. We now wish to separate the Portal / ID server components and the Directory Server component to separate boxes. In portal server 6.0 i think there was a pssetup tool which allowed configuration of a directory server which populated it with the necessary data for portal and ID server. The directory server we will be installing to will not necessarily be a clean install, i.e. it may already be populated with data.
Is there some way therefore to re-configure the existing directory server to allow us to point our portal / ID server at it?
Thanks in advance for any help
Laurence.

This can be done. You need to import the portal/identity server's schema into your new directory server and then export your existing directory server's content and import it into the new one.

What do I need to install Integration Kit for SharePoint Server 2007

What do I need to install the Integration Kit for Microsoft Office SharePoint Server 2007? It gives me an SP3 needed error but does not tell me what SP3. Has any one sucessfully installed this kit? Please help.

Hi,
The sharepoint PIK is available for BO enterprise only. SP3 is refering to BO enterprise XIR2 SP3. This Service Pack is not available for CR 2008. In order to integrate CR 2008 in BO enterprise XIR3 you need to install SP0 on top of CR 2008. But as I said above without BO enterprise you won't be able to use the PIK.
I copied the following system requirements from our Install Guide for BOE XiR3 PIK:
System requirements
For a list of system requirements, consult the Platforms.txt file included
with your product distribution. For additional important information that may
pertain to your deployment, it is also strongly recommended that you consult
the Release Notes included with your product distribution.
In general, the following components must be installed and configured
correctly before you install the BusinessObjects Enterprise XI 3.0 Portal
Integration Kit:
u2022 Microsoft Windows SharePoint Services or Office SharePoint Portal
Server 2003.
u2022 BusinessObjects Enterprise XI .NET SDK (on your SharePoint machine
or machines).
u2022 Microsoft Windows Server 2003 (any edition).
u2022 BusinessObjects Enterprise and Crystal Reports (on either the same
machine and/or on a different machine).
Kind regards,
Tim

Configure SSL Throughout Portal in 10.1.2.0.2

My installation is going to contain both the Infrastructure (IM, SSO) as well as the Middle-tier (Portal) and I want to later configure SSL. Oracle says in the documentation that the servername must be different for each home. I'm thinking that I will use the hosts file to alias the IP address but I'm not sure if the installer looks at the file or somewhere in the system to get the machine name. I don't want to change the machine name after the infrastructure installation has completed but I can change the hosts file and the order of the alias names. Has anyone successfully done this before that can point me in the right direction?
Thanks,
Denise

I've looked at the tool but my concern is having the infrastructure & midtier on the same box. I want to make sure that the initial installation is correct since each installation requires a different server name for ssl to work.
Has anyone done this and gotten it to work? Suggestions, or things to look out for?
Thanks,
Denise

How to configure SSL for SOA BPM/Webcenter 11.1.1.3

Hi,
I have installed BPM 11.1.1.3 and Webcenter 11.1.1.3 in the same HOME. First installed BPM and then extended the domain for webcenter. During the installation I selected the SSL check-box also. Now how do I disable the HTTP and enable only HTTPS. I need to configure SSL can someone please provide some steps or a link to some document around SSL configuration of BPM/Webcenter 11.1.1.3.
Thanks

Hi,
Anyone I too am looking for the same info.
Thanks

DNS alias name for portal server

Hi
I am using sun ONE portal server 6.2. We have added the DNS alias for the hostname in the DNS server for the portal server.
I have added this alias hostname configuration in
a. organizational alias name of the amconsole
b.Have modified the gateway.virtualhost name parameter in the /etc/opt/SUNWps/platform.conf.default file.
Kindly let me know if I have to add to any other places as we are using SUN ONE webserver, application server, IM server.
Waiting for your reply
Best Regards
Ramkumar Raghavan

you also might need to add an entry into /opt/SUNWam/lib/AMConfig.properties and add a FQDN entry for your new dns alias.

Need info to configure SSL for Portal Server in EP6SP2

Similar Messages

Maybe you are looking for