MACROMEDIA LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING LIVECYCLE FOR JBOSS Manual
Summary of LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING LIVECYCLE FOR JBOSS
Page 1
Bb c installing and configuring livecycle security products for jboss adobe ® livecycle ™ october 2006 version 7.2.
Page 2
© 2006 adobe systems incorporated. All rights reserved. Adobe® livecycle™ 7.2 installing and configuring livecycle security products for jboss® for microsoft® windows® and linux® edition 1.1, october 2006 if this guide is distributed with software that includes an end user agreement, this guide, as ...
Page 3: Contents
3 contents preface .......................................................................................................................................... 6 what’s in this guide? .........................................................................................................................
Page 4
Adobe livecycle contents installing and configuring livecycle security products for jboss 4 part ii: manual configuration and deployment 4 installing livecycle products.................................................................................................... 33 performing the installation....
Page 5
Adobe livecycle contents installing and configuring livecycle security products for jboss 5 part iii: post-deployment configuration 10 configuring ssl on jboss.......................................................................................................... 65 creating an ssl credential .......
Page 6: Preface
6 preface this guide is one of several resources available to help you learn about adobe® livecycle™ suite of security products. The livecycle security products enable you to dynamically apply settings such as usage rights, encryption, digital signatures, and confidentiality settings to existing ado...
Page 7: Related Documentation
Adobe livecycle preface installing and configuring livecycle security products for jboss related documentation 7 most of the information about directory locations in this guide is cross-platform (all file names and paths are case-sensitive in linux). Any platform-specific information is indicated as...
Page 8
Adobe livecycle preface installing and configuring livecycle security products for jboss updated livecycle product information 8 updated livecycle product information adobe systems has posted a knowledge center article to communicate any updated livecycle product information with customers. You can ...
Page 9: Before You Install
9 1 before you install this chapter describes how to prepare your system for installing livecycle security products: ● “about the installation, configuration, and deployment process” on page 9 ● “deploying multiple livecycle products” on page 10 ● “system requirements” on page 11 ● “installation, co...
Page 10: Products
Adobe livecycle before you install installing and configuring livecycle security products for jboss methods for installing, configuring, and deploying livecycle products 10 methods for installing, configuring, and deploying livecycle products you can use one of the following methods for installing, ...
Page 11: Upgrading Livecycle Products
Adobe livecycle before you install installing and configuring livecycle security products for jboss upgrading livecycle products 11 upgrading livecycle products for the latest information on upgrading livecycle products, refer to the knowledge center article at: www.Adobe.Com/support/products/enterp...
Page 12
Adobe livecycle before you install installing and configuring livecycle security products for jboss supported software 12 note: the following software is provided on the livecycle policy server dvd for your convenience: ● oracle 9i thin client (type 2) ● mysql connector/j version 3.0 ● db2 jdbc driv...
Page 13
Adobe livecycle before you install installing and configuring livecycle security products for jboss platform and software combinations 13 platform and software combinations the table in this section summarizes the software combinations supported for each operating system. For a complete list, see “s...
Page 14
Adobe livecycle before you install installing and configuring livecycle security products for jboss manual installation and deployment checklist 14 do not use the turnkey configuration method if you plan to enable ssl. If you require ssl, perform a manual configuration. (see “installing livecycle pr...
Page 15
Adobe livecycle before you install installing and configuring livecycle security products for jboss livecycle reader extensions rights credential 15 livecycle reader extensions rights credential before you begin the installation process, you must obtain and install the livecycle reader extensions ri...
Page 16
Adobe livecycle before you install installing and configuring livecycle security products for jboss preparing trust components for livecycle reader extensions 16 extensions server 6.1 or higher, your credential is still valid and, therefore, you do not receive a new one from adobe. If your organizat...
Page 17: Configuring Trust Data
Adobe livecycle before you install installing and configuring livecycle security products for jboss preparing trust components for livecycle document security 17 preparing trust components for livecycle document security livecycle document security uses a variety of security resources to sign, certi...
Page 18
Adobe livecycle before you install installing and configuring livecycle security products for jboss signing and validating trust.Xml 18 if you are upgrading from document security server 6.0 or later, you can use your existing trust directory and trust.Xml file; you can specify the existing trust di...
Page 19
19 part i: turnkey installation this section of the guide describes how to complete a turnkey installation of livecycle products for information on the manual configuration and deployment of the products, see “manual configuration and deployment” on page 32 ..
Page 20: Turnkey Installation
20 2 installing livecycle products using the turnkey installation this chapter describes how to install livecycle products using the turnkey method. The turnkey installation automatically performs all of the tasks required to install and configure livecycle products on a jboss application server run...
Page 21
Adobe livecycle installing livecycle products using the turnkey installation installing and configuring livecycle security products for jboss installing livecycle reader extensions or livecycle document security 21 ➤ (livecycle reader extensions, livecycle document security) to run the turnkey insta...
Page 22: Modifying Livecycle Services
Adobe livecycle installing livecycle products using the turnkey installation installing and configuring livecycle security products for jboss modifying livecycle services 22 20. Type the path to your jdk or click browse to navigate to its root directory, and then click next. 21. (livecycle document ...
Page 23
Adobe livecycle installing livecycle products using the turnkey installation installing and configuring livecycle security products for jboss installing livecycle policy server 23 the turnkey installation specifies “localhost” as the host and port “8080” for use by jboss and port “3306” for mysql. I...
Page 24
Adobe livecycle installing livecycle products using the turnkey installation installing and configuring livecycle security products for jboss installing livecycle policy server 24 9. Accept the default adobe directory location as listed or click browse and navigate to the directory where you want to...
Page 25: Modifying Livecycle Services
Adobe livecycle installing livecycle products using the turnkey installation installing and configuring livecycle security products for jboss modifying livecycle services 25 modifying livecycle services by default, the turnkey installation configures the jboss for adobe livecycle service to require ...
Page 26: Post-Deployment
26 3 post-deployment this chapter describes how to get started using your livecycle security products: ● “livecycle policy server” on page 26 ● “livecycle reader extensions” on page 30 ● “livecycle document security” on page 31 livecycle policy server after deploying livecycle policy server to the a...
Page 27
Adobe livecycle post-deployment installing and configuring livecycle security products for jboss configuring livecycle policy server run-time properties 27 ➤ to configure run-time properties: 1. In a web browser, navigate to http://hostname:port/edc/main.Do and log in as the super administrator. Whe...
Page 28
Adobe livecycle post-deployment installing and configuring livecycle security products for jboss adding kerberos authentication 28 adding kerberos authentication to use kerberos authentication with livecycle policy server, you must complete the following tasks: ● ensure that your network meets certa...
Page 29
Adobe livecycle post-deployment installing and configuring livecycle security products for jboss adding kerberos authentication 29 2. When you are back in the tree view of the users in the directory, right-click the account and select reset password. Reset the password to the exact same password tha...
Page 30
Adobe livecycle post-deployment installing and configuring livecycle security products for jboss configuring support for the novell edirectory directory server 30 configuring support for the novell edirectory directory server the novell edirectory directory server is supported as an ldap server by l...
Page 31
Adobe livecycle post-deployment installing and configuring livecycle security products for jboss livecycle document security 31 ➤ to access the livecycle reader extensions web application: 1. Ensure that livecycle reader extensions is deployed to the application server and the application server is ...
Page 32
32 part ii: manual configuration and deployment this section of the guide describes how to manually configure and deploy your livecycle products. For information on the turnkey configuration and deployment of the products, see “installing livecycle products using the turnkey installation” on page 20...
Page 33: Performing The Installation
33 4 installing livecycle products this chapter applies to all livecycle security products. This chapter describes how to use the installation program to install livecycle document security, livecycle policy server, or livecycle reader extensions on a windows or linux operating system. Before you in...
Page 34
Adobe livecycle installing livecycle products installing and configuring livecycle security products for jboss performing the installation 34 ➤ to install livecycle products for manual deployment: 1. At the root level of the installation media, start the installation program: ● (windows) double-clic...
Page 35: Viewing The Error Log
Adobe livecycle installing livecycle products installing and configuring livecycle security products for jboss viewing the error log 35 viewing the error log if any errors occur during the installation, the installation program creates a log file called log.Txt, which contains the error messages. Th...
Page 36: Preparing Your Environment
36 5 preparing your environment this chapter applies to all livecycle security products. This chapter describes how to prepare your environment for hosting livecycle products. You must perform the tasks provided in this chapter before you configure the application server: ● “creating the livecycle d...
Page 37: Creating An Oracle Database
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss creating an oracle database 37 mysql user account the mysql user account that you create requires these privileges to access the tables in the livecycle database: ● select ● insert ● update ● ...
Page 38: Creating A Db2 Database
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss creating a db2 database 38 the user name and password of the new user you create on the database are used again when you create the data source. The connect role requires the following system ...
Page 39
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss creating a db2 database 39 ➤ to create a db2 database: 1. On the computer that hosts db2, create a new text file that includes the following db2 script: create database dbname using codeset ut...
Page 40
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss creating a sql server database 40 configuring a db2 database for concurrent usage if you are using a db2 database, you must configure it for multiple-user scenarios. ➤ to configure the db2 dat...
Page 41: Preparing Jboss
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss preparing jboss 41 preparing jboss this section applies to all livecycle security products. To prepare jboss for the manual configuration of livecycle products, you must do the following: ● in...
Page 42: Copying Files
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss configuring documentserviceslibrary.Jar 42 4. Open the ares-roles.Properties file. 5. In the file, type the name of each user you defined in the ares-users.Properties file, and type the roles ...
Page 43: Installing Database Drivers
Adobe livecycle preparing your environment installing and configuring livecycle security products for jboss copying files to run livecycle policy server with livecycle workflow 43 copying files to run livecycle policy server with livecycle workflow this section applies to livecycle policy server onl...
Page 44
44 6 configuring livecycle products this chapter applies to all livecycle security products. This chapter describes how to configure livecycle products for deployment. This chapter assumes that you have installed your livecycle products. If you have not installed the products, see “installing livecy...
Page 45
Adobe livecycle configuring livecycle products installing and configuring livecycle security products for jboss configuring livecycle products for deployment 45 ➤ to create an endorsed directory: 1. Navigate to the [appserver root]/server/all/lib directory and create a directory called endorsed. 2. ...
Page 46
Adobe livecycle configuring livecycle products installing and configuring livecycle security products for jboss configuring livecycle products for deployment 46 12. (livecycle reader extensions, livecycle document security) on the data manager module configuration continued screen, accept the defaul...
Page 47
Adobe livecycle configuring livecycle products installing and configuring livecycle security products for jboss configuring livecycle products for deployment 47 15. (livecycle reader extensions, livecycle document security) on the java home selection screen, browse to the location of the application...
Page 48
Adobe livecycle configuring livecycle products installing and configuring livecycle security products for jboss configuring livecycle products for deployment 48 23. (livecycle reader extensions) on the reader extensions configuration screen, complete the product configuration, and then click next: ●...
Page 49: Manually Configuring Jboss
49 7 manually configuring jboss this chapter describes how to manually configure jboss application server to prepare for the manual deployment of livecycle policy server, livecycle reader extensions, and livecycle document security. If you installed the product using the turnkey method, you only nee...
Page 50: Setting Up Jboss
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss setting up jboss 50 setting up jboss before configuring jboss and deploying livecycle products, you must set up the jboss environment by completing the following tasks: ● install jdk1.4.2_04 o...
Page 51: Configuring Jboss Properties
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring jboss properties 51 3. Open the jboss-service.Xml file ([appserver root]/server/all/conf ) in a text editor and after the following text: name="jboss.J2ee:service=eardeployer"> add...
Page 52
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss connecting jboss to the database 52 connecting jboss to the database this section applies to livecycle policy server only. You must configure the data source to connect the instance of jboss t...
Page 53
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring a sql server data source 53 configuring a sql server data source to enable livecycle policy server to communicate with a sql server database that stores livecycle data, you must cr...
Page 54
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring an oracle data source 54 configuring an oracle data source to enable livecycle policy server to communicate with an oracle tablespace that stores livecycle products run-time data, ...
Page 55: Configuring Security
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring a db2 data source 55 configuring a db2 data source to enable jboss to communicate with a db2 database that stores livecycle data, you must create a db2 data source on jboss and dep...
Page 56
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring jaas authentication 56 configuring jaas authentication for both turnkey and manual installations of livecycle policy server on jboss, you need to configure jaas authentication. To ...
Page 57
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring jaas authentication 57 for example, if your directory uses the schema attribute uid for the user login identification, you would use the following xml for the search filter option:...
Page 58
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring jaas authentication 58 example application policies the following two application policy nodes are examples for use with sun one and active directory ldap servers. The examples use...
Page 59
Adobe livecycle manually configuring jboss installing and configuring livecycle security products for jboss configuring jaas authentication 59 example 7.2 active directory application policy node authentication.Login.Ldaploginmodule" flag="required"> com.Sun.Jndi. Ldap.Ldapctxfactory "user.Provider....
Page 60: Jboss Directory Name
60 8 manually deploying to jboss this chapter applies to all livecycle security products. This chapter describes how to deploy your livecycle products to jboss: ● “about deploying livecycle products” on page 60 ● “deploying to jboss” on page 61 ● “resetting the counter for livecycle reader extension...
Page 61: Deploying to Jboss
Adobe livecycle manually deploying to jboss installing and configuring livecycle security products for jboss summary of deployable components 61 summary of deployable components this table lists the deployable components for livecycle security products. Deploying to jboss you deploy livecycle produc...
Page 62: Viewing Log Information
Adobe livecycle manually deploying to jboss installing and configuring livecycle security products for jboss resetting the counter for livecycle reader extensions 62 resetting the counter for livecycle reader extensions you can optionally reset the counter for livecycle reader extensions. ➤ to reset...
Page 63: Initializing The Database
63 9 initializing the database this chapter applies to livecycle policy server only. This chapter describes how to initialize the livecycle database for livecycle policy server. This chapter assumes that you have configured the livecycle database for integration with the product and deployed the pro...
Page 64
64 part iii: post-deployment configuration this section of the guide describes the additional configuration tasks that you need to perform after livecycle products are deployed to the application server and the livecycle database is initialized (for livecycle policy server)..
Page 65: Configuring Ssl On Jboss
65 10 configuring ssl on jboss this chapter describes how to create ssl credentials and configure ssl on the application server to enhance the security of communication with your application server. Note: it is recommended that you complete the installation, configuration, and deployment of the live...
Page 66: Creating An Ssl Credential
Adobe livecycle configuring ssl on jboss installing and configuring livecycle security products for jboss creating an ssl credential 66 creating an ssl credential to configure ssl on jboss you need an ssl credential for authentication purposes. You can use the ibm key management tool that is install...
Page 67: Enabling Ssl
Adobe livecycle configuring ssl on jboss installing and configuring livecycle security products for jboss enabling ssl 67 enabling ssl you can now enable ssl on the application server by editing the files indicated in this section. When ssl is configured, you must manually start jboss. ➤ to enable s...
Page 68
Adobe livecycle configuring ssl on jboss installing and configuring livecycle security products for jboss enabling ssl 68 ➤ to edit the jboss-service file: 1. Open the jboss-service file in the [appserver root]/server/all/conf directory in a text editor. 2. Locate the transaction section of the jbos...
Page 69: Livecycle Policy Server
69 11 integrating with livecycle policy server this chapter describes how to integrate livecycle reader extensions and livecycle document security with livecycle policy server. Product integration enables the following functionality: ● livecycle reader extensions can open policy-protected pdf docume...
Page 70
Adobe livecycle integrating with livecycle policy server installing and configuring livecycle security products for jboss configuring multiple security products for integration 70 configuring multiple security products for integration perform the following configuration tasks if you are deploying a ...
Page 71
71 a uninstalling livecycle products this section describe how to uninstall livecycle product files that you installed using a manual or turnkey installation. Removing the product files installed using a turnkey installation each livecycle product that you install using the turnkey installation incl...
Page 72
Adobe livecycle uninstalling livecycle products installing and configuring livecycle security products for jboss removing the product files installed using manual installation 72 ➤ to remove the mysql service: 1. Ensure that the mysql service is stopped. To stop the mysql for adobe livecycle service...
Page 73
73 b enhancing server performance this appendix contains general tips that you can use to improve server performance when using livecycle products. Optimizing inline documents and impacts on jvm memory if you are typically processing documents of a relatively small size, you can improve the performa...
Page 74
Adobe livecycle enhancing server performance installing and configuring livecycle security products for jboss cleaning up temporary files from global storage directory 74 example b.1 calculating the jvm maximum heap size in this example, the current jvm maximum heap is set to 512 mb, and the maximum...
Page 75
75 c supported platform and software combinations this appendix provides the supported platforms and software combinations for livecycle products. For a summary of the platforms combinations, see “before you install” on page 9 . Platform application server jdk database microsoft windows server 2003,...
Page 76
Adobe livecycle supported platform and software combinations installing and configuring livecycle security products for jboss 76 red hat linux advanced server 2.1 update 3 jboss 3.2.5 j2sdk version 1.4.2_04 ibm db2 8.2 (version 8.1 fixpack 7) jboss 3.2.5 j2sdk version 1.4.2_04 ms sql server 2000 sp3...
Page 77
Adobe livecycle supported platform and software combinations installing and configuring livecycle security products for jboss 77 ibm aix® 5.2 ibm websphere 5.1.1.5 ibm jdk installed with websphere oracle 9i ibm websphere 5.1.1.5 ibm jdk installed with websphere oracle 10g ibm aix 5.3 ibm websphere 5...
Page 78
Adobe livecycle supported platform and software combinations installing and configuring livecycle security products for jboss 78 suse linux enterprise server 9.0 jboss 3.2.5 j2sdk version 1.4.2_04 ibm db2 8.2 (version 8.1 fixpack 7) jboss 3.2.5 j2sdk version 1.4.2_04 ms sql server 2000 sp3 jboss 3.2...
Page 79
79 d content and format of the trust.Xml file this chapter applies to livecycle reader extensions and livecycle document security only. The trust.Xml file contains most of the trust information needed by the pdf manipulation module. Any trust information not directly contained in the file is referre...
Page 80: Trustanchor Element
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss trustanchor element 80 maxclockskew="10" responsefreshness="525600" urltoconsult="aiaincerttocheck" signrequest="false" /> hashalgorithm="sha1" username="uname" password="pwd" />...
Page 81: Credentials Element
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss credentials element 81 credentials element the credentials element has three sub-elements that describe a type of private key container: ● p12record —a reference to a pkcs#12 (.P...
Page 82
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss crl element (certificate revocation) 82 crl element (certificate revocation) the crl element lists all of the crl files used by the pdf manipulation module for certificate revoca...
Page 83
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss prefs element (plug-in preferences) 83 prefs element (plug-in preferences) the prefs element provides global preferences for all of the operations performed by the pdf manipulati...
Page 84
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss prefs element (plug-in preferences) 84 ocsp url (optional) the local ocsp server url. This attribute is used only when the urltoconsult attribute (see attribute later in this tab...
Page 85
Adobe livecycle content and format of the trust.Xml file installing and configuring livecycle security products for jboss prefs element (plug-in preferences) 85 signature embedrevinfo (optional) specifies whether to embed revocation information within the signature. A value of true indicates the rev...
Page 86
86 e fonts installed with the font manager module some modules require access to fonts that are installed with the font manager module. This module contains a number of bundled fonts that you can use in your custom applications. For information on adding your own fonts to the font manager module, se...
Page 87: Index
87 index a accessing livecycle database tables 37 livecycle policy server via web browser 26 product information updates 8 web application, livecycle reader extensions 30 active directory account, creating 28 application policy node 58 adding authentication to livecycle policy server 28 certificates...
Page 88
Adobe livecycle index installing and configuring livecycle security products for jboss 88 configuring (continued) oracle data source for jboss 54 sql server data source for jboss 53 ssl on jboss 65 transaction time-out property 51 trust data 17 users, roles, and user groups 41 connecting jboss to li...
Page 89
Adobe livecycle index installing and configuring livecycle security products for jboss 89 jboss (continued) home directory name 60 installing 41 log files 62 properties, configuring 51 setting up the environment 50 starting and stopping 49 jboss service, uninstalling 71 jboss-service file, modifying...
Page 90
Adobe livecycle index installing and configuring livecycle security products for jboss 90 v verifying livecycle document security installation 31 trust.Xml file 18 viewing log files 35, 62 w web application, livecycle reader extensions 30 web browser support 11 x xml configuration file, livecycle po...