Certification Study Guide: IBM Tivoli Access Manager for e-business 6.0

82 Certification Study Guide: IBM Tivoli Access Manager for e-business 6.0

3.3.1 Web Security Runtime (PDWebRTE)

The Access Manager Web Security Runtime contains shared authentication

library files used for Web Security systems. As a prerequisite, PDWebRTE

requires Access Manager RTE installed (and all other dependent software).

All other Web Security components run on top of PDWebRTE, as shown in

Figure 3-3.

Figure 3-3 Tivoli Access Manager Web Security components

3.3.2 WebSEAL (PDWeb)

Access Manager WebSEAL is a security manager for Web-based resources.

WebSEAL is a high-performance, multi-threaded Web server that applies

fine-grained security policy to the protected Web object space. WebSEAL can

provide single sign-on solutions and incorporate back-end Web application

server resources into its security policy.

As shown in Figure 3-3, WebSEAL runs on top of the Web Security Runtime

component. Like the other components, WebSEAL can be configured using the

pdconfig utility. In addition the configuration tool amwebcfg can be used for

configuration or unconfiguration of a WebSEAL server.

Operating System

GSKit

LDAP Client

Tivoli Security Utilities

PDRTE

PDlic

PDWebRTE

PDWeb

PDWebADK

PDPlgES +

IBM WebSphere

Edge

PDWebPI

PDWPIapa

PDWPIIHS

PDWPIiPlanet

PDIIS

PDAuthADK