IBM Tivoli Access Manager for e-business V4.1 Facilitates the Integration of Your e-business Applications

Transcription

1 Software Announcement October 22, 2002 V4.1 Facilitates the Integration of Your e-business Applications Overview IBM Tivoli Access Manager for e-business, an e-business access control solution, delivers user identity management, Web Single Sign-On (SSO), policy-based authorization, and a single point of security management across heterogeneous e-business platforms and applications, such as Portals, Customer Relationship Management (CRM), Enterprise Resource Planning (ERP), Supply Chain Management (SCM) solutions, and J2EE applications. By helping to reduce the need to manage user identities and security policies within each application, Tivoli Access Manager for e-business can provide rapid time to value by accelerating application deployment. Two choices for Web security implementation are available to enhance deployment flexibility: the Web Proxy solution (WebSEAL) and Web Agents for Web Application/J2EE Servers/J2EE Application Servers. New in V4.1 The addition of support for Novell edirectory as a user registry/repository enables full use of existing e-infrastructure. The new releases of WebSphere Application Server and BEA WebLogic Server are supported. End-user personalization capabilities have been further enhanced with user locale-based language customization and Microsoft Windows desktop single sign-on with MS Internet Explorer. Key e-business application solutions are supported, such as PeopleSoft 8.1/8.3, Siebel 7, mysap.com, Plumtree Corporate Portal, Citrix MetaFrame 1.8, Citrix Nfuse 1.7, BroadVision One-to-One Enterprise V6, SAP Enterprise Portal 5, and Epicentric Foundation Server 4. New secure hardware storage for private keys now supports IBM 4758 PCI and ncipher nforce 300 PCI. Many of the newest versions of hardware and software in the e-business environment are supported, including HP-UX 11i, Red Hat Linux 7.2 for Intel clients, SuSE Linux Enterprise Server 7 64-bit, and IBM Directory Server V4.1. Key Prerequisites Minimum hardware and software requirements for desired platforms. Planned Availability Date October 25, 2002 (Electronic download and media availability) End of Support IBM Tivoli support for IBM Access Manager for e-business V3.9 will be discontinued on May 17, Support for Tivoli SecureWay Policy Director V3.8 will be discontinued October 25, At a Glance If you would like to help lower enterprise costs while supporting new, innovative business models, then you will be interested in the integrated enterprise security management capabilities of V4.1. Key highlights and benefits include: Extension of the e-infrastructure to include support for Novell edirectory, Microsoft Active Directory, plug-ins for Microsoft IIS, and Kerberos Support for new releases of WebSphere Application Server and BEA WebLogic Server Support for WebSphere Portal Server V4.1 to enable Portal resources to be secured and managed via Access Manager Support for e-business application solutions by vendors such as PeopleSoft, Siebel, mysap.com, Plumtree, BroadVision, Citrix, SAP Portal, and Epicentric with new secure hardware support for solutions from IBM For ordering, contact: Your IBM representative or IBM Americas Call Centers at 800-IBM-CALL Reference: YE001 This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

2 Description Access Management, Identity Management, and Privacy Management are fundamental components of an e-business strategy that empower businesses to securely manage relationships with customers, Business Partners, suppliers, employees, and so on. By delivering a standards-based integrated platform for managing identities, access, and policies, IBM Tivoli Access Manager for e-business enables you to quickly and rapidly deploy secure e-business applications for intra-enterprise and cross-enterprise deployments. Today, Internet-based solutions are being used successfully in many ways. They include business portals, Customer Relationship Management (CRM) systems, e-commerce networks, vertical industry solutions, and Supply Chain Management (SCM) systems. For example, business-to-consumer solutions may assume the form of consumer portals or employee portals integrating CRM, Enterprise Resource Planning (ERP), and employee applications into a common access portal. Support for Internet-facing applications is vital. Enterprise application integration with Web middleware (such as WebSphere Application Server (WAS) and BEA WebLogic Server), secure messaging (such as IBM Tivoli Access Manager for Business Integration), business processes, and ERP is critical to deliver faster time-to-value to business units. V4.1 has the flexibility to: Provide a common security platform for e-business, business integration, and enterprise application integration Deliver standards-based security for today s e-business applications, including transparent coverage of J2EE applications, and emerging Web services, on platforms such as WAS and BEA WebLogic Server Provide out-of-the-box support for today s e-business solutions, including CRM solutions, ERP solutions, and SCM solutions by a range of vendors including Siebel, SAP, PeopleSoft, Plumtree, Kana, Citrix, and Epicentric, to name a few Provide core capabilities to help enable business owners and their affiliates support branding, customer affinity, and enterprise application integration solutions on UNIX, Linux, Windows, and mainframe platforms V4.1 provides: A control point for managing and provisioning user profiles, privileges, and entitlements that deliver personalized and secure access to end users across the extended enterprise. A scalable standards-based, cross-platform security architecture that bridges Internet-facing, cross-enterprise applications with intra-enterprise application integration. This architecture includes common security management, Web SSO, and enforcement of user access rights, privileges, and entitlements across the e-business infrastructure (J2EE, WebSphere, and BEA), and mainframe platforms. Support for the IBM Tivoli Access Manager for Business Integration product solution to secure WebSphere MQ transactions. Platform security for enterprise UNIX and Linux servers using the add-on IBM Tivoli Access Manager for Operating Systems. e-business Platform and Solution Support V4.1 of adds features that help enable you to manage your e-business platform and adds support for e-business solutions from many Independent Software Vendors (ISVs). Support for WebSphere Access Manager for e-business delivers J2EE support with WAS. V4.1 will provide support for WAS V The specific advantages to WAS customers include: The ability to dynamically manage user-to-role relationships for multiple WAS applications from a single logical policy database. Access Control Lists (ACLs), which provide a more flexible set of user-to-role policies than the current WebSphere security implementation provides. The ability to leverage a common security model across WebSphere and many non-websphere resources. Access Manager for e-business and WAS employ common user identity and profiles, Access Manager-based authorization, and use of Access Manager s Web Portal Manager to achieve a single point of security management. A solution that complies with the J2EE 1.2 and 1.3 Security Specification. Support for BEA WebLogic Server (BEA WLS) has been enhanced to provide J2EE with BEA WLS V7 with continued support for V6.1. The specific advantages to BEA WLS customers include: The ability to dynamically manage user-to-role relationships for multiple WLS applications from a single logical policy database ACLs, which provide a flexible set of user-to-role policies The ability to leverage a common security model across WLS and non-wls resources with common user identity and profiles, and use of Web Portal Manager to achieve a single point of security management A solution that complies with the J2EE 1.2 and 1.3 Security Specifications Web Server Agents (Plug-ins) Access Manager for e-business V4.1 provides continued architectural deployment flexibility by delivering Web Server Agents for the following Web servers: Microsoft Internet Information Server Sun ONE (formerly Netscape/iPlanet) Enterprise Server IBM HTTP Server The key features of the Access Manager Web Server Agents include: Multiple user authentication mechanisms: Authentication via user name and password, X.509 certificates, and SecurID tokens. Advanced authentication features such as step-up authentication for entry to sensitive Web space and client location authentication based on IP-addresses. Web SSO: Support for e-community cross-domain single sign-on

3 Password policy (including N strikes out), password strength, and password expiration. Extensible password policy interface: As per existing Cross Domain Authentication Service (CDAS) interface. Virtual hosting support. New enhancements enrich the end-user experience through: Multi-Locale Client Support which provides the ability to customize Web Server Agents pages as well as URLs based on the end user s preferred language for a more personalized user experience Customized Web Pages for Logon and Logout which provides additional flexibility in user session management by providing specific pages for Login Welcome and Logout Windows Desktop Login to Microsoft Internet Information Server which allows a Windows user who has already signed on to her/his desktop to avoid having to logon again to Access Manager (refer to Microsoft Platform support for more details) Platform support will be extended to include Sun ONE 6 (formerly iplanet) on Solaris 2.8. Enhancements to Access Manager Plug-in for WebSphere Edge Server Access Manager for e-business V4.1 Plug-In for WebSphere Edge server is enhanced to provide dynamic business data from the user registry to Web applications. Specific user attributes are sent to the application via the standard HTTP tag-value pair. Support for WebSphere Portal Server (WPS) WPS V4.1 provides support for Access Manager as an e-business security platform. The main ways in which Access Manager supports WPS are: Sharing user information in Lightweight Directory Access Protocol (LDAP). SSO between WebSEAL and WPS using the trust association interceptor (TAI). Access Manager for e-business can be configured out of the box to provide access control to portlets and page groups within WPS. When enabled, Access Manager can control who can see which portlets/page groups. Portlets can use Access Manager for fine-grained access control. Access Manager has a variety of interfaces that these portlets can leverage (for example, JAAS). WPS includes the ability to have Access Manager s GSO ID/password transformation capability replace the WPS s secure vault SSO service providing a highly secure environment with the advantage of having one centralized lock box in Access Manager, rather than maintaining information in several locations. Support for IBM Tivoli Configuration Manager IBM Tivoli Configuration Manager V4.2 helps customers gain control over their enterprise software and hardware. Its software distribution module provides the ability to rapidly and efficiently deploy complex mission-critical applications to multiple locations from a central point. After systems have been deployed, the inventory module allows users to automatically scan for and collect hardware and software configuration information from computer systems across the enterprise. By leveraging the authentication and authorization capability of Access Manager V4.1, Tivoli Configuration Manager V4.2 is able to provide both internal and external users (for example, employees and consultants) the capability to independently manage the configuration of their workstations. This can lower expense and increase return on investment by helping reduce the need for administrators/operators assisted actions. Support for IBM Tivoli Risk Manager and IBM Tivoli Enterprise Data Warehouse integrates with Tivoli Enterprise Data Warehouse, which provides a centralized location to view audit events across Tivoli applications. This integration can be leveraged via the IBM Tivoli Risk Manager adapter, a component of IBM Tivoli Risk Manager. IBM Tivoli Risk Manager adapter manages, configures, and forwards Access Manager audit events to Tivoli Data Warehouse. Extended e-infrastructure Support By supporting the following prominent user registries, Access Manager for e-business V4.1 helps e-infrastructure platform flexibility by allowing enterprises to maximize existing e-infrastructure investments in their e-business environment: Novell edirectory. Access Manager V4.1 delivers a key e-infrastructure platform extension by providing support for Novell NDS edirectory. This support enables enterprises to leverage Access Manager for e-business V4.1 in a Novell edirectory environment to use Novell as a native user registry for user and credential management. IBM Directory Server V4.1 (with IBM DB2 V7.2). IBM Directory V4.1 will be included as part of the Access Manager V4.1 distribution. Access Manager V4.1 is also compatible with IBM Directory V3.2.1 and V3.2.2 (with IBM DB2 V7.2). Microsoft Active Directory that ships with Windows Advanced Server. Sun ONE Directory Server 5.0 and 5.1 (formerly iplanet). IBM Lotus Domino Server V Microsoft Platform Support Security in the Microsoft Environment: Access Manager V4.1 adds comprehensive security support for Microsoft environments through two primary architectures built on the Microsoft platform. The architectures are: WebSEAL: This high-performance, scalable reverse-proxy server can be deployed on the Microsoft Windows NT and Microsoft Windows 2000 Advanced Server platforms, and makes authorization and authentication decisions from a centralized database. Internet Information Server (IIS) Plug-in: Authentication and authorization security for Microsoft applications can also be initiated directly on the IIS server by deploying a Web-server agent (plug-in) onto the server rather than using WebSEAL as a front end. Authentication and authorization information is still stored in a central location, and does not need to be written into the applications. Access Manager V4.1 supports Microsoft IIS 5.0 on the Windows 2000 Advanced Server platform. Windows 2000 Desktop SSO: Windows 2000 desktop SSO is possible between Internet Explorer (IE) and IIS when IE

4 can obtain credentials for the logged in user that are valid on the IIS server. The credentials are passed from IE to IIS in the HTTP headers when the IIS server requests authentication. The Access Manager Microsoft IIS Plug-in V4.1 provides support of Windows desktop SSO by using the Microsoft Security Support Provider Interface (SSPI) and Simple and Protected Negotiation (SPNEGO) protocols to request and verify user credentials from IE, and then makes authorization decisions for the requested resource. Two commonly used security providers are NT LAN Manager (NTLM) and Kerberos. Access Manager Plug-in for Web Servers uses the SSPI and SPNEGO generally and, therefore, both the NTLM and Kerberos protocols are supported. Microsoft Active Directory Registry Support: Support for Microsoft Active Directory as a user registry ties together Access Manager s support for the Microsoft platform by providing a user registry that WebSEAL and the IIS server can authenticate with to secure and provide SSO to Web-based applications running in the Microsoft environment. WebSEAL Component Enhancements Session Management: A key feature of WebSEAL is to provide session management services. Web Session Management Services provide enterprises with high levels of flexibility in defining how to manage user sessions in intra-enterprise and cross-enterprise (affiliate) environments. WebSEAL manages sessions by providing back-end applications with a session ID that is consistent across re-authentications. This session ID is available to the back end via the tag-value supplied HTTP header. V4.1 extends session management features to manage customer relationships by including support for the following features: Multi-Locale Client Support which provides the ability to customize WebSEAL pages to accommodate the end user s preferred language for a more personalized user experience. Customized Web Pages for Logon and Logout which provides additional flexibility in user session management by providing specific pages for Login Welcome and Logout. Extended User Attributes stored in the LDAP registry may be needed by back-end applications. WebSEAL can retrieve and forward this information whether the user authenticates using certificates, tokens, or ID/password, providing more robust user information to back-end servers. Support for Simple Object Access Protocol (SOAP) over HTTP and SOAP over HTTPS: WebSEAL supports authorization for SOAP messages at the HTTP level (SOAP over HTTP/S, SOAP transactions authenticated at the HTTP level with Basic-Authorization or Digital certificates, and URL-level authorization on SOAP transactions). Today, customers are developing and deploying Web services using middleware tools from WebSphere, Microsoft.NET, and BEA WebLogic services. By enabling the static Web services bindings to point to a URL through WebSEAL, customers can extend the secure proxy capability for Web services applications using HTTP or HTTPS. Federated Identity Management Interface Access Manager V4.1 introduces a new Federated Identity Management Interface that extends support for identities by providing open e-community interfaces in WebSEAL to allow customization and interoperability for multi-enterprise federation. Access Manager V4.1 extends support for the federated identity model to provide open e-community interfaces to allow customization and interoperability for multi-domain Web SSO. To facilitate applications supporting emerging security tokens, Access Manager V4.1 will have the interfaces to support new federation tokens (produce and consume). With this framework in place, libraries can be written to allow WebSEAL to CDSSO to non-webseal servers, and for WebSEAL to accept SSO requests from non-webseal servers. The token creation and handling code is put into shared libraries. Therefore, customers can override the default CDSSO token creation and customize it to their environment by inserting their choice of third-party defined token formats, token mapping, and token encryption/decryption techniques. This open interface allows Access Manager to support cross-enterprise, cross-platform, and cross-vendor integration. In order to achieve Cross Domain Single Sign-On (CDSSO), a vouch for token is generated to securely transmit a user s identity between multiple domains. In Access Manager V4.1, the way that the token is encoded and decoded is externalized. Therefore, customers can override the default CDSSO token creation and insert their choice of third-party token formats or a customized token format of their own. Hardware Key Store and SSL Acceleration: Support for advanced security and performance features on WebSEAL are supported in V4.1 through the following features: Hardware Key Store Support: This release provides new support for the following tamper-resistant devices that store private keys and certificates. This support is provided through GSKit 5 and will be offered for: ncipher nforce PCI 300 for AIX, HP-UX, Solaris, and Windows IBM 4758 PCI for AIX and Windows Hardware SSL Acceleration Support: WebSEAL can leverage the SSL hardware acceleration support provided in GSKit 5 SSL-based Hardware Acceleration. V4.1 will provide support for: ncipher nforce PCI 300 on Solaris and Windows Rainbow Cryptoswift PCI on AIX, Solaris, HP-UX, and Windows IBM 4960 PCI on AIX Web Portal Manager (WPM) For V4.1, the Access Manager administrative GUI, known as WPM, is built on the IBM WAS AESS V4.0.3 and included in the Access Manager V4.1 product distribution. New in V4.1, WPM gives users the convenience of creating, updating, and managing WebSEAL junctions graphically as well as through the command line interface. Bi-Directional (BiDi) language support is also included in WPM. Data input in a BiDi language can now be handled and displayed correctly by WPM. Linux Runtime and API Support Expanded platform coverage is offered with support for the Red Hat Linux (Intel) 7.2 for Intel clients, in addition to existing support for the 7.1 client platform for the following components: Access Manager Runtime Environment

5 Access Manager Authorization Application Developer s Kit (ADK) and Administration API Access Manager Java Runtime Environment, including Java Authentication and Authorization Services (JAAS), Java 2 Security, and Java Administration APIs Access Manager for e-business V4.1 provides additional support for 64-bit SuSE Linux Enterprise Server for IBM zseries along with existing support for 31-bit SuSE Linux for zseries. Support for e-business Applications Using Java-Based API Tivoli Access Manager for e-business provides support for securing J2EE-compliant applications. Application developers building on the WAS or the BEA WebLogic platform can leverage the J2EE security model to build their applications. Access Manager V4.1 provides a Java interface for management applications within the Java Runtime package. Classes are provided for server administration, protected object management, protected object policy (POP), Web SSO targets, and authorization actions/action groups. Integration with ISV Solutions: V4.1 supports many portal, CRM, content management, and supply-chain applications. Your IBM representative can provide a comprehensive list of supported ISV solutions. Key applications supported by Access Manager V4.1 include: Support for PeopleSoft 8.1/8.3 IBM Access Manager for e-business V4.1 has been certified by PeopleSoft for the PeopleSoft 8 e-business platform. The support enables: Web SSO to the PeopleSoft environment using Access Manager for e-business V4.1 s WebSEAL and documentation for PeopleSoft support from the following Tivoli Web site: Support for Epicentric Foundation Server V4 IBM Access Manager for e-business V4.1 has Tivoli-ready certification for Epicentric Foundation Server 4. The support enables: Web SSO to the Epicentric environment using Access Manager for e-business V4.1 s WebSEAL and documentation for Epicentric support from the following Tivoli Web site: Support for BroadVision One-to-One Enterprise V6 IBM Access Manager for e-business V4.1 has Tivoli-ready certification for the BroadVision One-to-One e-business platform. The support enables: Web SSO to the BroadVision environment using Access Manager for e-business V4.1 s WebSEAL and documentation for BroadVision support from the following Tivoli Web site: Support for Siebel Customer Relationship Management V7 IBM Access Manager for e-business V4.1 supports Siebel CRM V7 solution on Access Manager for e-business V4.1 supported server platforms. The support enables you to leverage: Web SSO to the Siebel 7 environment using Access Manager for e-business V 4.1 s WebSEAL Common policy management by mapping Access Manager for e-business V4.1 s credentials to Siebel application roles and documentation for Siebel support from the following Tivoli Web site: Support for mysap.com Internet Transaction Server (ITS), and the SAP Enterprise Portal 5 IBM Access Manager for e-business V4.1 supports the SAP mysap.com and Enterprise Portal 5 e-business platforms. The support enables: Web SSO to the mysap.com environment using Access Manager for e-business V4.1 s WebSEAL Web SSO to the SAP Enterprise Portal 5 environment using Access Manager for e-business V4.1 s WebSEAL and documentation for mysap.com and SAP Enterprise Portal from the following Tivoli Web site: Support for Plumtree Corporate Portal 4.5 IBM Access Manager for e-business V4.1 has Tivoli-ready certification for the Plumtree Corporate Portal 4.5 platform. The support enables: Web SSO to the Plumtree environment using Access Manager for e-business V4.1 s WebSEAL and documentation for Plumtree from the following Tivoli Web site: Support for CITRIX MetaFrame 1.8 and CITRIX Nfuse 1.7 IBM Access Manager for e-business V4.1 integrates with the Citrix MetaFrame and Nfuse e-business solutions. The support enables: Web SSO to the Citrix MetaFrame environment using Access Manager for e-business V4.1 s WebSEAL Web SSO to the Citrix Nfuse environment using Access Manager for e-business V4.1 s WebSEAL

6 and documentation for Citrix from the following Tivoli Web site: A number of systems integrators throughout the world are trained on Access Manager for e-business and have formed Access Manager services offerings. IBM Global Services (IGS) has a worldwide Access Manager services offering. For a systems integrator in your area, contact your local IBM Tivoli security sales representative. Product Positioning Tivoli Access Manager for e-business V4.1 directly addresses the significant costs experienced in trying to better secure the application and middleware elements of an e-business infrastructure. By a delivering unified Identity and Security Control layer across their e-business infrastructure, Access Manager for e-business helps reduce application development, deployment, and operational costs by eliminating the current practice of manage security and identity policies within each application silos. IBM Tivoli Access Manager delivers these benefits by offering advanced integration with: WAS and solutions, such as WebSphere Portal Server, for securing e-business application deployments Microsoft platforms Web services environments based on SOAP over HTTP Environments that use Novell edirectory as a user registry e-business applications that run on BEA WebLogic Server Reference Information For additional information on IBM Access Manager for e-business V3.9, refer to Software Announcement , dated April 9, Trademarks zseries and the e-business logo are trademarks of International Business Machines Corporation in the United States or other countries or both. WebSphere, SecureWay, DB2, and AIX are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel is a registered trademark of Intel Corporation. Microsoft is a trademark of Microsoft Corporation. Windows and Windows NT are registered trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. UNIX is a registered trademark of the Open Company in the United States and other countries. Tivoli Enterprise is a trademark of International Business Machines Corporation or Tivoli Systems Inc. in the United States or other countries or both. Tivoli is a registered trademark of International Business Machines Corporation or Tivoli Systems Inc. in the United States or other countries or both. Domino is a trademark of Lotus Development Corporation and/or IBM Corporation. Lotus is a registered trademark of Lotus Development Corporation and/or IBM Corporation. Other company, product, and service names may be trademarks or service marks of others

7 IBM US Announcement Supplemental Information October 22, 2002 Education Support Training is available for many IBM Tivoli products. Education is offered through IBM Learning Services, and through IBM Tivoli Systems. Worldwide information about education offerings is available on the IBM Learning Services home page at: For current information on IBM Tivoli Systems education, call , or visit the IBM Tivoli Systems home page at: Offering Information Product information will be available through Offering Information (OITOOL) at: And through the Passport Advantage Web site at: Publications The following hardcopy publication is shipped with this program. Read Me First (GI ) The following publications can be ordered after planned availability from the IBM Publications Center Portal, your IBM representative, or your authorized IBM Business Partner. ReadMe First (GI ). Release Notes (SC ). This publication will not be available in hardcopy. IBM Tivoli Access Manager Base Installation Guide (SC ). IBM Tivoli Access Manager Base Administrator s Guide (SC ). IBM Tivoli Access Manager WebSEAL Installation Guide (SC ). IBM Tivoli Access Manager WebSEAL Administrator s Guide (SC ). IBM Tivoli Access Manager for WebLogic Server User s Guide (SC ). IBM Tivoli Access Manager for WebSphere Application Server User s Guide (SC ). IBM Tivoli Access Manager Plug-in for Edge Server User s Guide (SC ). IBM Tivoli Access Manager Plug-in for Web Servers User s Guide (SC ). IBM Tivoli Access Manager Administration C API Developer s Reference (SC ). IBM Tivoli Access Manager Authorization C API Developer s Reference (SC ). IBM Tivoli Access Manager Administration Java Classes Developer s Reference (SC ). IBM Tivoli Access Manager Authorization Java Classes Developer s Reference (SC ). IBM Tivoli Access Manager WebSEAL Developer s Reference (SC ). IBM Tivoli Access Manager Error Message Reference (SC ). IBM Tivoli Access Manager Performance Tuning Guide (SC ). IBM Tivoli Access Manager Command Reference (GC ). IBM Tivoli Access Manager Problem Determination Guide (GC ). The Publication Notification System (PNS) is available by order number/product number. Customers currently subscribing to PNS will automatically receive notifications by . Customers who wish to subscribe, can visit the PNS Web site location at: /applications/publications/cgiben/pbi.cgi The IBM Publications Center Portal: /applications/publications/cgiben/pbi.cgi The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided, as well as payment options via credit card. Furthermore, a large number of publications are available online in various file formats, which can currently be downloaded free of charge. Note that PNS subscribers most often order their publications via the Publications Center. This announcement is provided for your information only. For additional information, contact your IBM representative, call 800-IBM-4YOU, or visit the IBM home page at: IBM United States IBM is a registered trademark of International Business Machines Corporation

8 Technical Information Specified Operating Environment Hardware Requirements Minimum/recommended processor, disk space, and memory requirements for IBM Tivoli Access Manager for e-business V4.1 follow: Processor: 300 MHz/400 MHz Disk space excluding WebSphere, Web server, or Web browser: 101 MB/226 MB Memory excluding WebSphere, Web server, or Web browser: 224 MB/576 MB Software Requirements V4.1 runs on the following operating systems: Access Manager Base IBM AIX and Hewlett-Packard HP-UX 11.0 and 11i Microsoft Windows NT 4.0 with SP 6a Microsoft Windows 2000 Advanced Servers with SP2 Red Hat Linux 7.1 and 7.2 (Intel only) Runtime, Java Runtime, and Authorization ADK components only SuSE Linux Enterprise Server 7 for S/390 and IBM zseries (2.4.7 kernel, 31 bit) and SuSE Linux Enterprise Server 7 for 64 bit zseries ( kernel, 64 bit with a 31-bit compatible mode) Access Manager WPM IBM AIX and Microsoft Windows NT 4.0 with SP 6a Microsoft Windows 2000 Advanced Servers with SP2 Access Manager WebSEAL IBM AIX and Hewlett-Packard HP-UX 11.0 and 11i Microsoft Windows NT 4.0 with SP 6a Microsoft Windows 2000 Advanced Servers with SP2 SuSE Linux Enterprise Server 7 for S/390 and zseries (2.4.7 kernel, 31 bit) and SuSE Linux Enterprise Server 7 for 64 bit zseries ( kernel, 64 bit with a 31-bit compatible mode) Access Manager Plug-in for Edge Server IBM AIX and Microsoft Windows 2000 Advanced Servers with SP2 Red Hat Linux 7.1 (Intel only) Access Manager Plug-in for Web Servers IBM HTTP Server on AIX and iplanet 6.0 on Solaris 7, 8, and 9 Microsoft IIS 5.0 on Windows 2000 Advanced Servers Access Manager for WebSphere Application Server IBM AIX and Hewlett-Packard HP-UX 11.0 and 11i Microsoft Windows NT 4.0 with SP 6a Microsoft Windows 2000 Advanced Servers with SP2 Red Hat Linux 7.1 and 7.2 (Intel only) Access Manager for WebLogic Server IBM AIX and Hewlett-Packard HP-UX 11.0 and 11i Microsoft Windows NT 4.0 with SP 6a Microsoft Windows 2000 Advanced Servers with SP2 Red Hat Linux 7.2 (Intel only) Packaging Planning Information IBM Access Manager for e-business V4.1 is distributed with: IBM International Program License Agreement (IPLA) (Z ) License Information (CT0TLML) ReadMe First Card 16 CD-ROMs Publications (refer to the Publications section) This program contains the applicable IBM license agreement, and License Information (LI) if appropriate, and will be presented for acceptance at the time of installation of the program. The license and LI will be stored in a directory such as LICENSE.TXT for future reference. Security, Auditability, and Control IBM Access Manager for e-business V4.1 uses the security and auditability features of the operating system software. The customer is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communication facilities. Ordering Information Passport Advantage Customer: Details Media Pack Entitlement Customers with active Maintenance or subscription for the products listed below are entitled to receive the corresponding media pack. Entitled Maintenance Offerings V3.9 Tivoli Management Points Processor Unlimited User Option Media Packs Description IBM Tivoli Access Manager for e-business V4.1 Media Pack Multilingual Part Number BJ07JML

9 New Licensees: Orders for new licenses will be accepted now. Shipment will begin on the planned availability date. Ordering Information for Passport Advantage The quantity of the Passport Advantage part numbers in the following table is based on the number of required Tivoli Management Points. To order for Passport Advantage, specify the desired part number and quantity. Description Tivoli Mgmnt Point License and Software Maintenance First Anniversary Tivoli Mgmnt Point License and Software Maintenance Second Anniversary Part Number D57V4LL D57V5LL Description Unlimited User Option Processor License and Software Maintenance First Anniversary Unlimited User Option Processor License and Software Maintenance Second Anniversary Unlimited User Option Processor Software Maintenance Renewal to Anniversary Date Unlimited User Option Processor Software Maintenance After-License to Anniversary Date Part Number D516WLL D516XLL E00B1LL D516YLL Tivoli Mgmnt Point Software Maintenance Renewal to Anniversary Date Tivoli Mgmnt Point Software Maintenance After-License to Anniversary Date E17W1LL D57WTLL Scalable Usage Model Table Tivoli Management Points (TMPs) per 1000 Users Scalable Usage Level Cumulative Users Minimum 1 5,001 15,001 50, , ,001 Maximum 5,000 15,000 50, , ,000 1,000,000 TMPs Scalable Usage Level Cumulative Users Minimum 1,000,001 3,000,001 10,000,001 20,000,001 Maximum 3,000,000 10,000,000 20,000,000 50,000,000 TMPs To order a media pack for Passport Advantage, specify the applicable part number in the desired quantity from the following table: Description Part Number Description IBM Tivoli Access Manager for e-business V3.9 Media Pack Multilingual Part Number BJ04CML IBM Tivoli Access Manager for e-business V4.1 Media Pack BJ07JML Terms and Conditions Withdrawal of Passport Advantage Part Numbers The following Passport Advantage part numbers will be withdrawn on December 3, Agreement: For orders under Passport Advantage: IBM IPLA, IBM International Passport Advantage Agreement (PAA), and an IBM International Passport Advantage Agreement Enrollment Form

10 Transferable: Yes, except for programs acquired at a discount or allowance Limited Warranty Applies: Yes Guarantee: 30 day money-back guarantee Usage Restriction: Yes. Usage is limited to the quantity of processors licensed; processors and clients licensed; or TMP authorizations. Volume Offering (IVO): No Upgrade Protection Applies: Covered, as long as Software Maintenance is in effect Educational Allowance Available: education institution customers Licensed Program Materials Availability Restricted Materials of IBM: None Non-Restricted Source Materials: None Object Code Only (OCO): All Maintenance Applies Yes, to qualified Software Maintenance under Passport Advantage: Yes Software Maintenance for IBM Tivoli products: No Complementary Introductory Support: Not available Program Services and End of Support: Program services for an IBM Tivoli program are one year from the date IBM or your Business Partner makes the program available to you. The program services duration period shall be less than one year for programs acquired after the announcement of a program s end-of-support (EOS) date. EOS for programs or versions/releases of programs will be announced 12 months prior to the effective date. Software Maintenance for IBM Tivoli Products and Passport Advantage Support Center applies: Yes. Access is available through the IBM Support Center, Support Web Site for Problem Reporting: /products/support/ Availability of Passport Advantage Software Maintenance: Passport Advantage Software Maintenance is provided at no additional charge for each eligible program acquired until the first anniversary date. For an additional fee, a license can be acquired with maintenance to the second anniversary date. Passport Advantage Software Maintenance is provided for renewal for a fee at each anniversary date. Customers who do not renew their Software Maintenance will have to purchase the Maintenance After-License option to renew their maintenance agreement when they require a new level of software code or remote technical support. Passport Advantage Software Maintenance is available until 12 months after announcement of product discontinuance, (that is, end of life [EOL]) Software Maintenance and Passport Advantage Software Maintenance are applicable to: The current release The immediate previous release for 12 months after the general availability of the current release APAR Mailing Address: IBM Burnet Road Austin, TX Attention: Product Development IBM Operational Support Services Support Line: No Product Web Site: A complete list of products, terminology definitions, and licensing documents are available at the following Web site: Passport Advantage Prices For Passport Advantage and charges, contact your IBM representative or your authorized IBM Business Partner. For additional information about the Passport Advantage offering, visit the following Web site: Order Now Use Priority/Reference Code: YE001 Phone: Fax: Internet: Mail: 800-IBM-CALL 800-2IBM-FAX ibm direct@vnet.ibm.com IBM Atlanta Sales Center Dept. YE001 P.O. Box 2690 Atlanta, GA You may also contact your local IBM representative. identify your representative, call 800-IBM-4YOU. Note: date. Trademarks Shipments will begin after the planned availability IBMLink, SP, zseries, and the e-business logo are trademarks of International Business Machines Corporation in the United States or other countries or both. WebSphere, AIX, SP2, and S/390 are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Intel is a registered trademark of Intel Corporation. Microsoft is a trademark of Microsoft Corporation. Windows NT and Windows are registered trademarks of Microsoft Corporation. Java is a trademark of Sun Microsystems, Inc. Tivoli is a registered trademark of International Business Machines Corporation or Tivoli Systems Inc. in the United States or other countries or both. Other company, product, and service names may be trademarks or service marks of others. To