Technical Notes

Installing Reflection for the Web Security Proxy Server on OpenVMS
Technical Note 2204
Last Reviewed 17-May-2007
Applies To
Reflection for the Web version 9.5
Summary

This technical note describes installing and configuring the optional Security Proxy Server in an OpenVMS environment.

Installing Java Runtime Environment

The Security Proxy Server requires a Java 2-compliant Java Virtual Machine (JVM). To verify Java is present, enter the command JAVA -VERSION. Example:

If Java is not installed, download and install HP’s Java (JTE or JRE) for your OpenVMS version from http://www.hp.com/java/.

Installing the Security Proxy Server

Follow these steps to install the Security Proxy Server software.

Note: You need to be logged in as SYSTEM to perform this installation.

1. In your product distribution, locate the file rwebproxy.zip:

• If you downloaded RWeb95.100war.zip from the Attachmate Download Library, rwebproxy.zip is located in the unzipped install\nonautomated directory.
• On CD media, rwebproxy.zip is located in the non-windows\install\nonautomated directory.

2. On your OpenVMS system, create a directory in which you can install the Security Proxy Server. This directory must be on an ODS-5 volume.
3. Copy the rwebproxy.zip file from step 1 to the installation directory you created in step 2.
4. Unzip the file in the installation directory. Note: To obtain an Unzip utility for OpenVMS, go to http://h71000.www7.hp.com/openvms/freeware/freeware.html.

5. In the [.BIN] subdirectory of your installation, create a DCL script file named SECURITYPROXY.COM containing the following:

Configuring the Security Proxy Server

If you have the X Window System available on your OpenVMS system, you can use the X Windows Method. Otherwise, use the Non-X Method.

X Windows Method

Follow these steps to configure the Security Proxy Server using X Windows.

1. In the [.BIN] subdirectory of your installation, create a DCL script file named SECURITYWIZARD.COM to launch the Security Wizard.

2. In an X11 terminal session window (such as DECterm), run the script you created to start the Security Wizard.

3. Use the Security Wizard to create a new server.properties file in the [.CONF] subdirectory of your installation:
   1. On the Status tab, click New.
   2. Select the root directory of your Security Proxy installation (from step 2 of Installing the Security Proxy Server).
   3. When prompted, enter the fully qualified host name of your OpenVMS server (for example, vmshost.acme.com).
4. Use the Security Wizard to generate a new Security Proxy certificate:
   1. Click the Proxy Security Certificates tab and click Generate.
   2. Fill in all the fields and click Generate.

5. Import the certificate from the Reflection for the Web Management Server:
   1. Click the Trusted Certificates tab and click Import.
   2. Select "From server."
   3. Enter the server name, port number, and context of your Management Server, and a Friendly name.

6. Click Save and Exit.
7. Import the Security Proxy public key into the Management Server:
   1. In a web browser, open the Administrative WebStation of your Reflection for the Web Management Server. For example, http://myrwebmgmtserver.acme.com/rweb/AdminStart.html.
   2. Click Security Setup > Security Proxy tab.
   3. Under “Import Settings from Reflection Security Proxy,” in the “Security proxy server name” edit field, enter the fully qualified name of your OpenVMS machine (for example, vmshost.acme.com).
   4. Click “Import Settings.”
8. Verify that the settings are correct.
9. To manually start the Security Proxy Server on OpenVMS, change to the [.BIN] subdirectory of your installation and enter @SECURITYPROXY.

Non-X Method

Follow these steps to configure the Security Proxy Server if you do not have the X Window System (Xwindows) available on your OpenVMS system.

1. Create the server.properties and certificate files on a Windows system and upload them to the OpenVMS installation:
   1. On a Windows system, temporarily install the Security Proxy Server. You can select just the proxy from the installation options.
   2. When prompted for the server name and common name, enter the fully qualified name of your OpenVMS machine (for example, vmshost.acme.com) in each field.
   3. After installation is complete, copy all the generated certificates from the Windows system (keystores\*.pfx) to the equivalent directory on the OpenVMS machine.
   4. Copy the properties file (conf\server.properties) to the equivalent directory on the OpenVMS machine.
2. To manually start the Security Proxy Server on OpenVMS, change to the [.BIN] subdirectory of your installation and enter @SECURITYPROXY.

3. Import the Security Proxy public key into the Management Server:
   1. In a web browser, open the Administrative WebStation of your Reflection for the Web Management Server. For example, http://myrwebmgmtserver.acme.com/rweb/AdminStart.html.
   2. Click Security Setup > Security Proxy tab.
   3. Under “Import Settings from Reflection Security Proxy,” in the “Security proxy server name” edit field, enter the fully qualified name of your OpenVMS machine (for example, vmshost.acme.com).
   4. Click “Import Settings.”
4. Verify that the settings are correct.

Related Technical Notes

0200	Using the Attachmate Download Library (FAQ)
1320	Configuring the Security Proxy in a Windows Environment
1557	Reflection for the Web Security Proxy Server Performance Factors
1812	Setting Up the Reflection for the Web Security Proxy Server in UNIX, Linux, or Mac OS X
9988	Reflection for the Web Technical Notes