Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual
Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual

Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual

Security products for jboss
Hide thumbs Also See for LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING:
Table of Contents

Advertisement

Quick Links

Installing and Configuring
LiveCycle Security Products for JBoss
Adobe
LiveCycle
®
October 2006
Version 7.2

Advertisement

Table of Contents
loading

Summary of Contents for Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING

  • Page 1 Installing and Configuring LiveCycle Security Products for JBoss Adobe LiveCycle ® ™ October 2006 Version 7.2...
  • Page 2 © 2006 Adobe Systems Incorporated. All rights reserved. Adobe® LiveCycle™ 7.2 Installing and Configuring LiveCycle Security Products for JBoss® for Microsoft® Windows® and Linux® Edition 1.1, October 2006 If this guide is distributed with software that includes an end user agreement, this guide, as well as the software described in it, is furnished under license and may be used or copied only in accordance with the terms of such license.
  • Page 3: Table Of Contents

    Contents Preface ............................6 What’s in this guide? ..................................6 Who should read this guide? ..............................6 Conventions used in this guide..............................6 Related documentation ................................7 Updated LiveCycle product information......................... 8 Before You Install ........................9 About the installation, configuration, and deployment process.................. 9 Methods for installing, configuring, and deploying LiveCycle products..............10 Upgrading LiveCycle products..............................11 System requirements..................................11...
  • Page 4 Adobe LiveCycle Contents Installing and Configuring LiveCycle Security Products for JBoss Part II: Manual Configuration and Deployment Installing LiveCycle Products....................33 Performing the installation...............................33 Viewing the error log ..................................35 Preparing your Environment....................36 Creating the LiveCycle database ............................36 Creating a MySQL database ...............................36 Creating an Oracle database..............................37 Creating a DB2 database ..............................38 Creating a SQL Server database............................40...
  • Page 5 Adobe LiveCycle Contents Installing and Configuring LiveCycle Security Products for JBoss Part III: Post-Deployment Configuration 10 Configuring SSL on JBoss......................65 Creating an SSL Credential ...............................66 Enabling SSL....................................67 11 Integrating with LiveCycle Policy Server ................. 69 Configuring LiveCycle products to integrate with LiveCycle Policy Server ............69 Configuring multiple security products for integration....................70 Configuring LiveCycle Policy Server for EJB access ......................70 Uninstalling LiveCycle Products....................
  • Page 6: Preface

    Preface This guide is one of several resources available to help you learn about Adobe® LiveCycle™ suite of security products. The LiveCycle security products enable you to dynamically apply settings such as usage rights, encryption, digital signatures, and confidentiality settings to existing Adobe PDF documents. What’s in this guide? This guide provides information about how to install and configure the following LiveCycle security products for Microsoft®...
  • Page 7: Related Documentation

    Adobe LiveCycle Preface Installing and Configuring LiveCycle Security Products for JBoss Related documentation Name Default value Description [appserver root] Windows (Turnkey Installation): The home directory of the application ● C:\Adobe\LiveCycle\jboss\ server that runs the LiveCycle products. Windows (Manual Installation): ● C:\jboss Linux: ●...
  • Page 8: Updated Livecycle Product Information

    Adobe LiveCycle Preface Installing and Configuring LiveCycle Security Products for JBoss Updated LiveCycle product information Updated LiveCycle product information Adobe Systems has posted a Knowledge Center article to communicate any updated LiveCycle product information with customers. You can access the article at: www.adobe.com/support/products/enterprise/knowledgecenter/c4811.pdf.
  • Page 9: Before You Install

    Before You Install This chapter describes how to prepare your system for installing LiveCycle security products: “About the installation, configuration, and deployment process” on page 9 ● “Deploying multiple LiveCycle products” on page 10 ● “System requirements” on page 11 ●...
  • Page 10: Methods For Installing, Configuring, And Deploying Livecycle Products

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Methods for installing, configuring, and deploying LiveCycle products Methods for installing, configuring, and deploying LiveCycle products You can use one of the following methods for installing, configuring, and deploying LiveCycle products as well as initializing the database (for LiveCycle Policy Server): Turnkey: The turnkey method lets you install the files, and then run Configuration Manager to configure the EAR files and other components and automatically perform the following tasks:...
  • Page 11: Upgrading Livecycle Products

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Upgrading LiveCycle products Upgrading LiveCycle products For the latest information on upgrading LiveCycle products, refer to the Knowledge Center article at: www.adobe.com/support/products/enterprise/knowledgecenter/c4811.pdf. System requirements This section includes details about the software and hardware that is required for running LiveCycle products.
  • Page 12 Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Supported software Required software Supported version Database MySQL 4.1 ● If you want to set up a database schema and new users on MySQL using a graphical user interface (GUI), you must install the MySQL Administrator tool.
  • Page 13: Platform And Software Combinations

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Platform and software combinations Platform and software combinations The table in this section summarizes the software combinations supported for each operating system. For a complete list, see “Supported Platform and Software Combinations”...
  • Page 14: Manual Installation And Deployment Checklist

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Manual installation and deployment checklist Do not use the turnkey configuration method if you plan to enable SSL. If you require SSL, perform a manual configuration. (See “Installing LiveCycle Products”...
  • Page 15: Livecycle Reader Extensions Rights Credential

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss LiveCycle Reader Extensions Rights credential Task Topic Run Configuration Manager and select the Custom “Configuring LiveCycle Products” on Configuration Wizard. This will configure and assemble page 44 the products.
  • Page 16: Preparing Trust Components For Livecycle Reader Extensions

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Preparing trust components for LiveCycle Reader Extensions Extensions Server 6.1 or higher, your credential is still valid and, therefore, you do not receive a new one from Adobe. If your organization purchases a production version of LiveCycle Reader Extensions, the production Rights credential is delivered by Electronic Software Download (ESD), and you are notified by email.
  • Page 17: Preparing Trust Components For Livecycle Document Security

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Preparing trust components for LiveCycle Document Security Preparing trust components for LiveCycle Document Security LiveCycle Document Security uses a variety of security resources to sign, certify, encrypt, decrypt, and validate PDF documents.
  • Page 18: Signing And Validating Trust.xml

    Adobe LiveCycle Before You Install Installing and Configuring LiveCycle Security Products for JBoss Signing and validating trust.xml If you are upgrading from Document Security Server 6.0 or later, you can use your existing trust directory and trust.xml file; you can specify the existing trust directory with Configuration Manager. This table describes the trust or security components required to run LiveCycle Document Security.
  • Page 19: Part I: Turnkey Installation

    Part I: Turnkey Installation This section of the guide describes how to complete a turnkey installation of LiveCycle products For information on the manual configuration and deployment of the products, see “Manual Configuration and Deployment” on page...
  • Page 20: Installing Livecycle Products Using The Turnkey Installation

    Installing LiveCycle Products Using the Turnkey Installation This chapter describes how to install LiveCycle products using the turnkey method. The turnkey installation automatically performs all of the tasks required to install and configure LiveCycle products on a JBoss Application Server running on Windows. The turnkey installation performs the following tasks: Installs the product files ●...
  • Page 21 Adobe LiveCycle Installing LiveCycle Products Using the Turnkey Installation Installing and Configuring LiveCycle Security Products for JBoss Installing LiveCycle Reader Extensions or LiveCycle Document Security ➤ (LiveCycle Reader Extensions, LiveCycle Document Security) To run the turnkey installation: 1. At the root level of the installation DVD, double-click the .exe file. 2.
  • Page 22: Modifying Livecycle Services

    Adobe LiveCycle Installing LiveCycle Products Using the Turnkey Installation Installing and Configuring LiveCycle Security Products for JBoss Modifying LiveCycle services 20. Type the path to your JDK or click Browse to navigate to its root directory, and then click Next. 21.
  • Page 23 Adobe LiveCycle Installing LiveCycle Products Using the Turnkey Installation Installing and Configuring LiveCycle Security Products for JBoss Installing LiveCycle Policy Server The turnkey installation specifies “localhost” as the host and port “8080” for use by JBoss and port “3306” for MySQL. If JBoss and MySQL are already installed, ensure that they are not using these ports.You cannot configure an alternative host or port for JBoss or MySQL during the turnkey installation and configuration process.
  • Page 24 Adobe LiveCycle Installing LiveCycle Products Using the Turnkey Installation Installing and Configuring LiveCycle Security Products for JBoss Installing LiveCycle Policy Server 9. Accept the default Adobe directory location as listed or click Browse and navigate to the directory where you want to install the product, and then click Next. Tip: If you type in the name of a directory that does not exist, InstallShield creates the directory for you.
  • Page 25: Modifying Livecycle Services

    Adobe LiveCycle Installing LiveCycle Products Using the Turnkey Installation Installing and Configuring LiveCycle Security Products for JBoss Modifying LiveCycle services Modifying LiveCycle services By default, the turnkey installation configures the JBoss for Adobe LiveCycle service to require manual startup. If you want to set the service to start up automatically, perform the following task. ➤...
  • Page 26: Post-Deployment

    Post-deployment This chapter describes how to get started using your LiveCycle security products: “LiveCycle Policy Server” on page 26 ● “LiveCycle Reader Extensions” on page 30 ● “LiveCycle Document Security” on page 31 ● LiveCycle Policy Server After deploying LiveCycle Policy Server to the application server, you can perform the following tasks: Configure the LiveCycle Policy Server run-time properties using the LiveCycle Policy Server web pages, ●...
  • Page 27 Adobe LiveCycle Post-deployment Installing and Configuring LiveCycle Security Products for JBoss Configuring LiveCycle Policy Server run-time properties ➤ To configure run-time properties: 1. In a web browser, navigate to http://hostname:port/edc/Main.do and log in as the Super Administrator. Where port is the port number that the application server uses (the default value is 8080), and hostname is the name of the computer that hosts the application server.
  • Page 28: Adding Kerberos Authentication

    Adobe LiveCycle Post-deployment Installing and Configuring LiveCycle Security Products for JBoss Adding Kerberos authentication Adding Kerberos authentication To use Kerberos authentication with LiveCycle Policy Server, you must complete the following tasks: Ensure that your network meets certain network configuration criteria. (See “Network requirements”...
  • Page 29: Adding Kerberos Authentication Using The Administration Interface

    Adobe LiveCycle Post-deployment Installing and Configuring LiveCycle Security Products for JBoss Adding Kerberos authentication 2. When you are back in the tree view of the users in the directory, right-click the account and select Reset Password. Reset the password to the exact same password that you initially set the account to. Note: Resetting the password effectively clears the cache in the Active Directory and lets you proceed to the next step.
  • Page 30: Configuring Support For The Novell Edirectory Directory Server

    Adobe LiveCycle Post-deployment Installing and Configuring LiveCycle Security Products for JBoss Configuring support for the Novell eDirectory directory server Configuring support for the Novell eDirectory directory server The Novell eDirectory directory server is supported as an LDAP server by LiveCycle Policy Server. To configure eDirectory as an authentication provider, install LiveCycle Policy Server to use LDAP configuration as described in this guide for your application server.
  • Page 31: Livecycle Document Security

    Adobe LiveCycle Post-deployment Installing and Configuring LiveCycle Security Products for JBoss LiveCycle Document Security ➤ To access the LiveCycle Reader Extensions web application: 1. Ensure that LiveCycle Reader Extensions is deployed to the application server and the application server is running. 2.
  • Page 32: Part Ii: Manual Configuration And Deployment

    Part II: Manual Configuration and Deployment This section of the guide describes how to manually configure and deploy your LiveCycle products. For information on the turnkey configuration and deployment of the products, see “Installing LiveCycle Products Using the Turnkey Installation” on page...
  • Page 33: Installing Livecycle Products

    Installing LiveCycle Products This chapter applies to all LiveCycle security products. This chapter describes how to use the installation program to install LiveCycle Document Security, LiveCycle Policy Server, or LiveCycle Reader Extensions on a Windows or Linux operating system. Before you install the product, you must ensure that your environment includes the software and hardware required to run LiveCycle products.
  • Page 34 Adobe LiveCycle Installing LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Performing the installation ➤ To install LiveCycle products for manual deployment: 1. At the root level of the installation media, start the installation program: (Windows) Double-click the .exe file. ●...
  • Page 35: Viewing The Error Log

    Adobe LiveCycle Installing LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Viewing the error log Viewing the error log If any errors occur during the installation, the installation program creates a log file called log.txt, which contains the error messages. The log file is located in the [LiveCycle root] directory. Next steps You must now prepare your database and application server for hosting LiveCycle products.
  • Page 36: Preparing Your Environment

    Preparing your Environment This chapter applies to all LiveCycle security products. This chapter describes how to prepare your environment for hosting LiveCycle products. You must perform the tasks provided in this chapter before you configure the application server: “Creating the LiveCycle database” on page 36 ●...
  • Page 37: Creating An Oracle Database

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Creating an Oracle database MySQL user account The MySQL user account that you create requires these privileges to access the tables in the LiveCycle database: SELECT ● INSERT ●...
  • Page 38: Creating A Db2 Database

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Creating a DB2 database The user name and password of the new user you create on the database are used again when you create the data source. The Connect role requires the following system privileges: Alter Session ●...
  • Page 39 Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Creating a DB2 database ➤ To create a DB2 database: 1. On the computer that hosts DB2, create a new text file that includes the following DB2 script: create database dbname using codeset utf-8 territory default;...
  • Page 40: Creating A Sql Server Database

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Creating a SQL Server database Configuring a DB2 database for concurrent usage If you are using a DB2 database, you must configure it for multiple-user scenarios. ➤ To configure the DB2 database for concurrent usage: 1.
  • Page 41: Preparing Jboss

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Preparing JBoss Preparing JBoss This section applies to all LiveCycle security products. To prepare JBoss for the manual configuration of LiveCycle products, you must do the following: Install JBoss Application Server 3.2.
  • Page 42: Configuring Documentserviceslibrary.jar

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Configuring DocumentServicesLibrary.jar 4. Open the ares-roles.properties file. 5. In the file, type the name of each user you defined in the ares-users.properties file, and type the roles of each user.
  • Page 43: Copying Files To Run Livecycle Policy Server With Livecycle Workflow

    Adobe LiveCycle Preparing your Environment Installing and Configuring LiveCycle Security Products for JBoss Copying files to run LiveCycle Policy Server with LiveCycle Workflow Copying files to run LiveCycle Policy Server with LiveCycle Workflow This section applies to LiveCycle Policy Server only. To run LiveCycle Policy Server with LiveCycle Workflow, you must copy the following library files from the [LiveCycle root]/PolicyServer/sdk/lib/JBoss directory to the [LiveCycle root]/components/workflow/ext directory:...
  • Page 44: Configuring Livecycle Products

    Configuring LiveCycle Products This chapter applies to all LiveCycle security products. This chapter describes how to configure LiveCycle products for deployment. This chapter assumes that you have installed your LiveCycle products. If you have not installed the products, see “Installing LiveCycle Products” on page The instance of Configuration Manager that is installed with one LiveCycle product can be used with all LiveCycle products.
  • Page 45: Configuring Livecycle Products For Deployment

    Adobe LiveCycle Configuring LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Configuring LiveCycle products for deployment ➤ To create an endorsed directory: 1. Navigate to the [appserver root]/server/all/lib directory and create a directory called endorsed. 2. Copy the following files from the [LiveCycle root]/components/Policyserver/endorsed directory to the endorsed directory you just created: dom3-xercesImpl-2.4.0.jar ●...
  • Page 46 Adobe LiveCycle Configuring LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Configuring LiveCycle products for deployment 12. (LiveCycle Reader Extensions, LiveCycle Document Security) On the Data Manager Module Configuration continued screen, accept the default values for the following properties or enter new values, and then click Next: Local storage sweep interval (in seconds): The amount of time between attempts to delete any ●...
  • Page 47 Adobe LiveCycle Configuring LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Configuring LiveCycle products for deployment 15. (LiveCycle Reader Extensions, LiveCycle Document Security) On the Java Home Selection screen, browse to the location of the application server JDK and click Next. 16.
  • Page 48 Adobe LiveCycle Configuring LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Configuring LiveCycle products for deployment 23. (LiveCycle Reader Extensions) On the Reader Extensions Configuration screen, complete the product configuration, and then click Next: Directory for PDF uploads and storage: The root directory for product application files, including ●...
  • Page 49: Manually Configuring Jboss

    Manually Configuring JBoss This chapter describes how to manually configure JBoss Application Server to prepare for the manual deployment of LiveCycle Policy Server, LiveCycle Reader Extensions, and LiveCycle Document Security. If you installed the product using the turnkey method, you only need to configure JAAS authentication. (See “Configuring JAAS authentication”...
  • Page 50: Setting Up Jboss

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Setting up JBoss Setting up JBoss Before configuring JBoss and deploying LiveCycle products, you must set up the JBoss environment by completing the following tasks: Install JDK1.4.2_04 or higher. ●...
  • Page 51: Configuring Jboss Properties

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring JBoss properties 3. Open the jboss-service.xml file ([appserver root]/server/all/conf ) in a text editor and after the following text: <!-- EAR deployer, remove if you are not using Web layers --> <mbean code="org.jboss.deployment.EARDeployer"...
  • Page 52: Connecting Jboss To The Database

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Connecting JBoss to the database Connecting JBoss to the database This section applies to LiveCycle Policy Server only. You must configure the data source to connect the instance of JBoss that hosts LiveCycle Policy Server to the LiveCycle database.
  • Page 53: Configuring A Sql Server Data Source

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring a SQL Server data source Configuring a SQL Server data source To enable LiveCycle Policy Server to communicate with a SQL Server database that stores LiveCycle data, you must create a data source file and deploy it to the instance of JBoss that hosts LiveCycle Policy Server.
  • Page 54: Configuring An Oracle Data Source

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring an Oracle data source Configuring an Oracle data source To enable LiveCycle Policy Server to communicate with an Oracle tablespace that stores LiveCycle products run-time data, you must create an Oracle data source on JBoss and deploy it to the instance of JBoss that hosts LiveCycle Policy Server.
  • Page 55: Configuring A Db2 Data Source

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring a DB2 data source Configuring a DB2 data source To enable JBoss to communicate with a DB2 database that stores LiveCycle data, you must create a DB2 data source on JBoss and deploy it to the instance of JBoss that hosts LiveCycle Policy Server.
  • Page 56: Configuring Jaas Authentication

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring JAAS authentication Configuring JAAS authentication For both turnkey and manual installations of LiveCycle Policy Server on JBoss, you need to configure JAAS authentication. To configure JAAS authentication, you must add an application policy element in the login-config.xml file that JBoss uses so that LiveCycle Policy Server can communicate with your LDAP server.
  • Page 57 Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring JAAS authentication For example, if your directory uses the schema attribute for the user login identification, you would use the following XML for the search filter option: <module-option name = "searchfilterPrefix">(&amp;(objectClass=*)(uid=</module-option>...
  • Page 58: Example Application Policies

    Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring JAAS authentication Example application policies The following two application policy nodes are examples for use with Sun ONE and Active Directory LDAP servers. The examples use the hypothetical company company_name.com on the LDAP computer named XYZ.
  • Page 59 Adobe LiveCycle Manually Configuring JBoss Installing and Configuring LiveCycle Security Products for JBoss Configuring JAAS authentication Example 7.2 Active Directory application policy node <application-policy name="UsernamePwd_ADS"> <authentication> <!-- do not change the following two lines--> <login-module code="com.adobe.edc.server.provider. authentication.login.LDAPLoginModule" flag="required"> <module-option name = "java.naming.factory.initial">com.sun.jndi. ldap.LdapCtxFactory</module-option>...
  • Page 60: Manually Deploying To Jboss

    Manually Deploying to JBoss This chapter applies to all LiveCycle security products. This chapter describes how to deploy your LiveCycle products to JBoss: “About deploying LiveCycle products” on page 60 ● “Deploying to JBoss” on page 61 ● “Resetting the counter for LiveCycle Reader Extensions” on page 62 ●...
  • Page 61: Summary Of Deployable Components

    Adobe LiveCycle Manually Deploying to JBoss Installing and Configuring LiveCycle Security Products for JBoss Summary of deployable components Summary of deployable components This table lists the deployable components for LiveCycle security products. Component LiveCycle product adobe-FontManager.ear LiveCycle Reader Extensions LiveCycle Document Security LCM.ear LiveCycle.ear LiveCycle Reader Extensions...
  • Page 62: Resetting The Counter For Livecycle Reader Extensions

    Adobe LiveCycle Manually Deploying to JBoss Installing and Configuring LiveCycle Security Products for JBoss Resetting the counter for LiveCycle Reader Extensions Resetting the counter for LiveCycle Reader Extensions You can optionally reset the counter for LiveCycle Reader Extensions. ➤ To reset the counter: 1.
  • Page 63: Initializing The Database

    Initializing the Database This chapter applies to LiveCycle Policy Server only. This chapter describes how to initialize the LiveCycle database for LiveCycle Policy Server. This chapter assumes that you have configured the LiveCycle database for integration with the product and deployed the product to the application server. If you have not done this, see “Manually Deploying to JBoss”...
  • Page 64: Part Iii: Post-Deployment Configuration

    Part III: Post-Deployment Configuration This section of the guide describes the additional configuration tasks that you need to perform after LiveCycle products are deployed to the application server and the LiveCycle database is initialized (for LiveCycle Policy Server).
  • Page 65: Configuring Ssl On Jboss

    Configuring SSL on JBoss This chapter describes how to create SSL credentials and configure SSL on the application server to enhance the security of communication with your application server. Note: It is recommended that you complete the installation, configuration, and deployment of the LiveCycle products and ensure that the products are running correctly before configuring SSL on the application server.
  • Page 66: Creating An Ssl Credential

    Adobe LiveCycle Configuring SSL on JBoss Installing and Configuring LiveCycle Security Products for JBoss Creating an SSL Credential Creating an SSL Credential To configure SSL on JBoss you need an SSL credential for authentication purposes. You can use the IBM Key Management tool that is installed with Java keytool to create a credential ➤...
  • Page 67: Enabling Ssl

    Adobe LiveCycle Configuring SSL on JBoss Installing and Configuring LiveCycle Security Products for JBoss Enabling SSL Enabling SSL You can now enable SSL on the application server by editing the files indicated in this section. When SSL is configured, you must manually start JBoss. ➤...
  • Page 68 Adobe LiveCycle Configuring SSL on JBoss Installing and Configuring LiveCycle Security Products for JBoss Enabling SSL ➤ To edit the jboss-service file: 1. Open the jboss-service file in the [appserver root]/server/all/conf directory in a text editor. 2. Locate the Transaction section of the jboss-service file. 3.
  • Page 69: Integrating With Livecycle Policy Server

    Integrating with LiveCycle Policy Server This chapter describes how to integrate LiveCycle Reader Extensions and LiveCycle Document Security with LiveCycle Policy Server. Product integration enables the following functionality: LiveCycle Reader Extensions can open policy-protected PDF documents using the openPDFWithAPS ● API method.
  • Page 70: Configuring Multiple Security Products For Integration

    Adobe LiveCycle Integrating with LiveCycle Policy Server Installing and Configuring LiveCycle Security Products for JBoss Configuring multiple security products for integration Configuring multiple security products for integration Perform the following configuration tasks if you are deploying a custom LiveCycle Reader Extensions or LiveCycle Document Security application that interacts with LiveCycle Policy Server hosted on JBoss: Create a directory called endorsed in the %JBOSS_HOME%/server/all/lib directory.
  • Page 71: Uninstalling Livecycle Products

    Uninstalling LiveCycle Products This section describe how to uninstall LiveCycle product files that you installed using a manual or turnkey installation. Removing the product files installed using a turnkey installation Each LiveCycle product that you install using the turnkey installation includes an uninstall program that you can use to remove the product from your computer.
  • Page 72: Removing The Product Files Installed Using Manual Installation

    Adobe LiveCycle Uninstalling LiveCycle Products Installing and Configuring LiveCycle Security Products for JBoss Removing the product files installed using manual installation ➤ To remove the MySQL service: 1. Ensure that the MySQL service is stopped. To stop the MySQL for Adobe LiveCycle service, from a command prompt, type: net stop "MySQL for Adobe LiveCycle"...
  • Page 73: Enhancing Server Performance

    Enhancing Server Performance This appendix contains general tips that you can use to improve server performance when using LiveCycle products. Optimizing inline documents and impacts on JVM memory If you are typically processing documents of a relatively small size, you can improve the performance associated with the document transfer speed and storage space by implementing the following LiveCycle product configurations: Increase the maximum inline size for LiveCycle products so that it is larger than the size of most...
  • Page 74: Cleaning Up Temporary Files From Global Storage Directory

    Adobe LiveCycle Enhancing Server Performance Installing and Configuring LiveCycle Security Products for JBoss Cleaning up temporary files from Global storage directory Example B.1 Calculating the JVM maximum heap size In this example, the current JVM maximum heap is set to 512 MB, and the maximum inline size is 64 KB. The server needs to be configured for the scenario where ten jobs are run simultaneously, and each job has nine input files and one result file (a total of ten files per job, and 1000 files processed simultaneously).
  • Page 75: Supported Platform And Software Combinations

    Supported Platform and Software Combinations This appendix provides the supported platforms and software combinations for LiveCycle products. For a summary of the platforms combinations, see “Before You Install” on page Platform Application server Database Microsoft JBoss 3.2.5 J2SDK version 1.4.2_04 IBM®...
  • Page 76 Adobe LiveCycle Supported Platform and Software Combinations Installing and Configuring LiveCycle Security Products for JBoss Platform Application server Database Red Hat Linux JBoss 3.2.5 J2SDK version 1.4.2_04 IBM DB2 8.2 Advanced Server (Version 8.1 FixPack 7) 2.1 Update 3 JBoss 3.2.5 J2SDK version 1.4.2_04 MS SQL Server 2000 SP3 JBoss 3.2.5...
  • Page 77 Adobe LiveCycle Supported Platform and Software Combinations Installing and Configuring LiveCycle Security Products for JBoss Platform Application server Database IBM AIX® 5.2 IBM WebSphere 5.1.1.5 IBM JDK installed with Oracle 9i WebSphere IBM WebSphere 5.1.1.5 IBM JDK installed with Oracle 10g WebSphere IBM AIX 5.3 IBM WebSphere 5.1.1.5...
  • Page 78 Adobe LiveCycle Supported Platform and Software Combinations Installing and Configuring LiveCycle Security Products for JBoss Platform Application server Database SUSE Linux JBoss 3.2.5 J2SDK version 1.4.2_04 IBM DB2 8.2 Enterprise Server (Version 8.1 FixPack 7) JBoss 3.2.5 J2SDK version 1.4.2_04 MS SQL Server 2000 SP3 JBoss 3.2.5 J2SDK version 1.4.2_04...
  • Page 79: D Content And Format Of The Trust.xml File

    Content and Format of the trust.xml File This chapter applies to LiveCycle Reader Extensions and LiveCycle Document Security only. The trust.xml file contains most of the trust information needed by the PDF Manipulation Module. Any trust information not directly contained in the file is referred to by the file. The trust.xml file consists of the following sections: trustAnchors (certificates) ●...
  • Page 80: Trustanchor Element

    Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss trustAnchor element <prefs> <proxy name="network-proxy" port="80" /> <ocsp URL="" SendNonce="true" ReqRevCheck="CertRevRequiredIfInfoAvail" MaxClockSkew="10" ResponseFreshness="525600" URLToConsult="AIAInCertToCheck" SignRequest="false" /> <timestamp URL="http://tsp.adobe.com" CheckRevocation="CertRev" HashAlgorithm="SHA1" Username="uname" Password="pwd" /> <signature EmbedRevInfo="true"...
  • Page 81: Credentials Element

    Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss credentials element credentials element element has three sub-elements that describe a type of private key container: credentials —A reference to a PKCS#12 (.p12) file stored on disk. p12record ●...
  • Page 82: Crl Element (Certificate Revocation)

    Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss CRL element (Certificate revocation) Record type Attributes Description Common to all (Optional) Specifies whether the revocation information is EmbedRevInfo record types embedded within the certificate. The value indicates true that, if available, the revocation information is embedded.
  • Page 83: Prefs Element (Plug-In Preferences)

    Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss prefs element (Plug-in preferences) prefs element (Plug-in preferences) element provides global preferences for all of the operations performed by the PDF prefs Manipulation Module. Some of the global preferences may be overridden by information within certificates or credentials, or by individual certificate or credential preferences (as described in the previous sections).
  • Page 84 Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss prefs element (Plug-in preferences) Record type Attribute Description (Optional) The local OCSP Server URL. This attribute is used ocsp only when the attribute (see attribute later URLToConsult in this table) is set to LocalConfig...
  • Page 85 Adobe LiveCycle Content and Format of the trust.xml File Installing and Configuring LiveCycle Security Products for JBoss prefs element (Plug-in preferences) Record type Attribute Description (Optional) Specifies whether to embed revocation signature EmbedRevInfo information within the signature. A value of indicates true the revocation information is embedded, if available.
  • Page 86: Fonts Installed With The Font Manager Module

    Fonts Installed with the Font Manager Module Some modules require access to fonts that are installed with the Font Manager Module. This module contains a number of bundled fonts that you can use in your custom applications. For information on adding your own fonts to the Font Manager Module, see “Configuring LiveCycle Products”...
  • Page 87: Index

    Index Adobe LiveCycle Reader Extensions integrating with LiveCycle Policy Server 69 accessing JAR file, configuring 42 LiveCycle database tables 37 manual installation 33 LiveCycle Policy Server via web browser 26 resetting counter for 62 product information updates 8 Rights credentials 15 web application, LiveCycle Reader Extensions 30 setting up users, roles, and login files 41 Active Directory...
  • Page 88 Adobe LiveCycle Index Installing and Configuring LiveCycle Security Products for JBoss configuring (Continued) Oracle data source for JBoss 54 EAR files SQL Server data source for JBoss 53 deployable 61 SSL on JBoss 65 deploying to JBoss 61 transaction time-out property 51 eDirectory directory server, configuring support for 30 trust data 17 EJB access, LiveCycle Policy Server 70...
  • Page 89 Adobe LiveCycle Index Installing and Configuring LiveCycle Security Products for JBoss JBoss (Continued) home directory name 60 PDF support 12 installing 41 prefs element, trust.xml file 83 log files 62 private keys 17 properties, configuring 51 product files, removing 71, 72 setting up the environment 50 public keys 17 starting and stopping 49...
  • Page 90 Adobe LiveCycle Index Installing and Configuring LiveCycle Security Products for JBoss verifying web application, LiveCycle Reader Extensions 30 LiveCycle Document Security installation 31 web browser support 11 trust.xml file 18 viewing log files 35, 62 XML configuration file, LiveCycle Policy Server 70...

This manual is also suitable for:

Livecycle 7.2

Table of Contents