Aimstar

AIMSTAR Blog

Securing WebLogic Servers Part 3 – Configuring a Managed Server and Node Manager

Posted by Theodore Williams on Aug 23, 2017 10:00:00 AM

Configuring a Managed Server and Node Manager


This article is the third in a three-part series that details how to secure a WebLogic server.   

In general, the WebLogic Admin Server is used for administrative duties and the managed servers are used to deploy applications on WebLogic.  Managed servers can be configured to use keystores and run on a secure port in a manner similar to that used to secure Admin Servers. 

 

The WebLogic Node Manager can be used to start and stop WebLogic managed servers.  This article details how to configure a WebLogic managed server to run on a secure port and allow WebLogic Node Manager to start and stop the managed server.


Relevant Topics: Oracle DBA,  Oracle WebLogic, Managed Server, Node Manager, Keystores, WebLogic Security,  NIST SP 800-53

Read More

Topics: Oracle DBA, Oracle Database Administration, WebLogic, Node Manager, WebLogic Managed Server, NIST SP 800-53, WebLogic Security, Keystores

Securing WebLogic Servers Part 2 - Configuring the Admin Server

Posted by Theodore Williams on Aug 22, 2017 5:30:00 PM

Configuring the Admin Server


This article is the second in a three-part series that details how to secure a WebLogic server.  

The Oracle WebLogic Admin Server can be configured through the Admin Console to run on a secure port.  WebLogic provides default keystores that can be used to simulate SSL access in a test environment.  This article details the steps in configuring the WebLogic Admin Server to use keystores with certificates that can be used in a production environment.

Relevant Topics: Oracle DBA,  Oracle WebLogic, Admin Server, Keystores, WebLogic Security,  NIST SP 800-53

Read More

Topics: Oracle DBA, Oracle Database Administration, WebLogic, NIST SP 800-53, WebLogic Security, Keystores

Securing WebLogic Servers Part 1 - Configuring Keystores

Posted by Theodore Williams on Aug 22, 2017 3:00:00 PM

Configuring Keystores for WebLogic Servers


This article is the first in a three-part series that details how to secure a WebLogic server.  Keystores can be used to add a certificate to a WebLogic server.  There are two types of keystores – Trust and Identity.  A trust keystore contains certificates from a trusted Certificate Authority (CA) and does not contain sensitive information.  An identity keystore contains the certificate for the WebLogic server and contains sensitive information used to verify the server.

Relevant Topics: Oracle DBA,  Oracle WebLogic, Keystores, WebLogic Security,  NIST SP 800-53

Read More

Topics: Oracle DBA, Oracle Database Administration, WebLogic, NIST SP 800-53, WebLogic Security, Keystores