51 lines
8.1 KiB
HTML
51 lines
8.1 KiB
HTML
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<meta name="Copyright" content="Copyright (c) 2006 by IBM Corporation">
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights - -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<title>Security</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="ic.css">
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<script type="text/javascript" language="Javascript" src="synch.js"></script>
|
||
|
|
<h1>Security</h1>
|
||
|
|
|
||
|
|
<p>Make your server secure. Learn the language of security and how to set up and plan for your system security. Learn how to secure your network and communications applications, and how to add highly secure cryptographic processing capability to your server. Find information about object signing and signature validation, identity mapping, and solutions to Internet security risks. Use the manuals and guides to find additional information about system security.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzamv/rzamvplansec.htm">Plan and set up system security</a></strong><br>Plan and set up system security provides you with detailed information about planning, setting up, and using your system security. This topic collection combines the information formerly in the Basic system security and planning topic collection and in the <i>Tips and Tools for Securing Your iSeries</i> manual.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzajc/rzajcoverview.htm">Cryptography</a></strong><br>The cryptographic hardware adds highly secure cryptographic processing capability to your server. It also includes encryption and digital signatures.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzahu/rzahurazhudigitalcertmngmnt.htm">Digital Certificate Manager</a></strong><br>Find information about using digital certificates and the Secure Sockets Layer (SSL) to enable secure communications for many applications. With Digital Certificate Manager, a feature for i5/OS<SUP>(TM)</SUP>, you can manage digital certificates for your network.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><a href="../rzalv/rzalvmst.htm"><strong>Enterprise Identity Mapping</strong></a><br>Find information about how to configure, manage, and use Enterprise Identity Mapping (EIM), a technology for mapping identities within an enterprise. You can use EIM to create one-to-one mappings between individual user identities or for creating many-to-one mappings between a group of user identities in one user registry and a single user identity in another user registry. EIM also provides a common set of APIs that can be used across platforms to develop applications that can use the identity mappings that you create to look up the relationships between user identities. In addition, you can use EIM in conjunction with network authentication service, the i5/OS implementation of Kerberos, to provide a single signon environment.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzaub/rzaubkickoff.htm">Intrusion detection</a></strong><br>Intrusion detection involves gathering information about unauthorized access attempts and attacks coming in over the TCP/IP network. Security administrators can analyze the auditing records that intrusion detection provides to secure the iSeries network from these types of attacks.</P>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzajb/rzajbrzajb0ippacketsecuritysd.htm">IP filtering and network address translation</a></strong><br>Included here is information that you need to use the packet rules function to control and monitor TCP/IP traffic into and out of your server. Also, use NAT to hide private IP addresses behind a registered, public IP address.</P>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzaj4/rzaj4secoverview.htm">iSeries and Internet Security</a></strong><br>Find overview information about Internet security risks and server solutions for combating these risks. You can apply common Internet-use scenarios to your own Internet situation.</P>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="rzahgsecref.htm">iSeries Security Reference</a></strong><br>This manual provides information about planning, setting up, managing, and auditing security on your server. It describes all the features of security on the server and discusses how security features relate to other aspects of the server, such as work management, backup and recovery, and application design.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzakh/rzakh000.htm">Network authentication service</a></strong><br>Learn how to configure network authentication service on your server. With network authentication service, you can configure your server to participate in a Kerberos network. Also when network authentication is used with Enterprise Identity Mapping (EIM), it provides administrators with a way to enable a single-signon environment in their networks.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzalz/rzalzosintro.htm">Object signing and signature verification</a></strong><br>Find information about i5/OS object signing and signature verification security capabilities that you can use to ensure the integrity of objects. Learn how to use one of several OS/400 methods for creating digital signatures on objects to identify the source of the object and provide a means for detecting changes to the object. Also learn how to enhance system security by verifying digital signatures on objects, including operating system objects, to determine whether there have been changes to the contents of the object since it was signed.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzain/rzainoverview.htm">Secure Sockets Layer</a></strong><br>Configure Secure Sockets Layer (SSL) to secure communications for many popular applications, such as iSeries<SUP>(TM)</SUP> Access, Telnet, IBM<SUP>(R)</SUP> HTTP Server for iSeries, and others.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzalx/rzalxsecterms.htm">Security terminology</a></strong><br>Definitions and descriptions of commonly used security terms are included here.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzamh/rzamh1.htm">Service tools user IDs and passwords</a></strong><br>Service tools can be accessed from dedicated service tools (DST) or system service tools (SST). Service tools user IDs and passwords are required to access DST, SST, and to use some iSeries Navigator functions.</p>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzamz/rzamzsso.htm">Single signon</a></strong><br>Single signon as implemented in i5/OS provides an environment in which users only need to know and manage their Windows domain user identities and passwords. Single signon uses network authentication service for authentication and Enterprise Identity Mapping (EIM) to map from one user identity to another user identity; for example, you can map from an authenticated Windows user identity to an approriate i5/OS user profile for authorization purposes. Using single signon allows you to reduce the number of times that a user is prompted for information to sign on, as well as to eliminate the user's passwords in i5/OS. For an administrator, this approach significantly reduces the time and cost of managing passwords. For application developers, using this approach for single signon eliminates the need to implement application-specific user registries and application-specific authorization mechanisms.</P>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="../rzaja/rzajagetstart.htm">Virtual Private Networking</a></strong><br>Find information about how to set up a virtual private network (VPN), which allows your company to securely extend its private intranet over a public network, such as the Internet.</P>
|
||
|
|
|
||
|
|
<p style="margin-left:50px;"><strong><a href="rzahgsecuritysecuritymans.htm">Related information</a></strong><br>The following references complement the existing security information in the information center. This information contains technical, know-how, and "how-to" information.</p>
|
||
|
|
</body></html>
|