Component of Tivoli Access Manager

Access Manager, Version 5.1 

Tivoli Access Manager Base components

Tivoli Access Manager Base includes the following installation components. These components are shipped on the IBM Tivoli Access Manager Base CD for supported platforms with the exception of the Web Portal Manager component, which is shipped on the IBM Tivoli Access Manager Web Administration Interfaces CD. Use these installation components to set up Base systems listed in Tivoli Access Manager Base systems.

Access Manager Application Development Kit

The Access Manager Application Development Kit provides a development environment that enables you to code third-party applications to query the authorization server for authorization decisions. This kit contains support for using both C APIs and Java^(TM) classes for authorization and administration functions. To run the Java program or to compile and run your own Java programs, you must install and configure a Java runtime environment system.

Access Manager Authorization Server

The Access Manager Authorization Server provides access to the authorization service for third-party applications that use the Tivoli Access Manager authorization API in remote cache mode. The authorization server also acts as a logging and auditing collection server to store records of server activity.

Access Manager Java Runtime Environment

The Access Manager Java Runtime Environment offers a reliable environment for developing and deploying Java applications in a Tivoli Access Manager secure domain. Use it to add Tivoli Access Manager authorization and security services to new or existing Java applications.

You can use the pdjrtecfg command to configure this component to use the proper JRE on your system. You can also configure this component to several different JREs on the same system, if so desired.

Note that if you plan to install the Web Portal Manager interface, this component is required. It is also required with the Access Manager Application Development Kit component if you are a developer using Tivoli Access Manager Java runtime environment classes. For more information, see the IBM Tivoli Access Manager for e-business Administration Java Classes Developer Reference and the IBM Tivoli Access Manager for e-business Authorization Java Classes Developer Reference.

Access Manager Policy Proxy Server

The Access Manager Policy Proxy Server is used to set up a proxy server, which acts as an intermediary between a less trusted network and a more trusted network. This server ensures security and provides administrative control and caching services. It is associated with or part of a gateway server that separates the enterprise network from the outside network, and a firewall server that protects the enterprise network from outside intrusion. In a Tivoli Access Manager environment, the proxy server runs on behalf of the policy server for a given number of authorization applications and administrative functions, such as pdadmin commands.

Access Manager Policy Server

The Access Manager Policy Server maintains the master authorization database for the management domain as well as the policy databases associated with other secure domains that you might decide to create. This server is key to the processing of access control, authentication, and authorization requests. It also updates authorization database replicas and maintains location information about other Tivoli Access Manager servers.

Optionally, you can configure a standby server to take over policy server functions in the event of a system failure or unplanned outage. When the policy server goes down, the standby policy server acts as the primary policy server until the primary policy server assumes its original role. In turn, the standby policy server reverts back to a standby role. At any given time, there is only one active policy server andonly one shared copy of the policy databases.

Tivoli Access Manager supports the use of one standby policy server on supported AIX platforms. In addition, deploying a standby policy server requires the installation and configuration of High Availability Cluster Multiprocessing (HACMP) software--a clustering solution designed to provide high-availability access to business-critical data and application through component redundancy and application failover.

Access Manager Runtime

The Access Manager Runtime contains runtime libraries and supporting files that applications can use to access Tivoli Access Manager servers.

You must install and configure the Access Manager Runtime component on each system that runs Tivoli Access Manager except for Web Portal Manager and Java runtime environment systems.

Access Manager Web Portal Manager

The Access Manager Web Portal Manager is a Web-based graphical user interface (GUI) used for Tivoli Access Manager administration. Similar to the pdadmin command line interface, this GUI provides management of users, groups, roles, permissions, policies, and other Tivoli Access Manager tasks. A key advantage is that you can perform these tasks remotely, without requiring any special network configuration.

The Web Portal Manager interface also includes a set of delegated management services that enables a business to delegate user administration, group and role administration, security administration, and application access provisioning to participants (sub-domains) in the business system. These sub-domains can further delegate management and administration to trusted sub-domains under their control.

This component is shipped separately on the IBM Tivoli Access Manager Web Administration Interfaces CD. Supported browsers for the Web Portal Manager interface are as follows:

• Netscape Navigator 4.7x and 7.0
• Microsoft Internet Explorer 5.5 and 6.0

Provisioning Fast Start

A Provisioning Fast Start Installer is provided on the Tivoli Access Manager Base CDs for AIX and Windows platforms. Use this installer to install a Provisioning Fast Start collection of utilities that can help you integrate Tivoli Access Manager with Tivoli Identity Manager (which is a separately orderable IBM product). The tasks supported by these utilities include:

• Creating a Tivoli Access Manager service and provisioning policy on the Tivoli Identity Manager server
• Configuring Tivoli Identity Manager for use with WebSEAL single sign-on
• Importing and synchronizing user data in Tivoli Identity Manager
• Creating a Web interface for user management with Tivoli Identity Manager