Configuring Components

Running the Security Proxy Wizard

If you used an automated installer, the security proxy server has been configured for you and you can skip this step; you can run the wizard later to manage your proxy settings.

If you used archive files to install Reflection, you must first run the Security Proxy Wizard on the computer where you installed the software before you can run the security proxy server.

The wizard imports or generates the security certificate used to authenticate the security proxy server and sets up a properties file that contains information about each security proxy connection. If you are using authorization, the security proxy also imports the certificate from the Reflection management server.

Starting the Security Proxy Wizard

Windows

• If you used the automated installer, go to Start > Programs > Attachmate Reflection Administrator > Utilities and click Security Proxy Wizard. Alternatively, run the SecurityWizard.bat file in the [installation path]\securityproxy\bin\ folder.
  
  
• If you installed the archive file and completed the initial configuration, run the [installation path]\securityproxy\bin\SecurityWizard.bat file.
  
  

UNIX or Linux

• The Security Proxy Wizard requires an X11 window to display its graphical interface. Use the console of an X window, or an X session, as provided with Reflection X, and open a terminal window.
  
  
• Run the [installation path]/securityproxy/bin/SecurityWizard.sh file. (If you manually installed the security proxy, edit SecurityWizard.sh before running it.)
  
  

Security Proxy Wizard Options

If you run the Security Proxy Wizard from the command line or from a Command Prompt, these command line options are available:

Configuring the Security Proxy Using the Security Proxy Wizard

If you used archive files to install the security proxy, run the wizard to complete the configuration of a security proxy.

1. Start the Security Proxy Wizard.
   
   
2. Create a server.properties file. Click New on the Status tab in the Security Proxy Wizard. It is recommended that you install the file in the \securityproxy\conf\ directory within your installation of the security proxy server. For example, in the Select Data Root dialog box, select the securityproxy directory, and then click the Create button. The conf directory and the server.properties file are automatically created. Verify that you do not have two \conf\ directories in the path. Click Yes to continue. Enter a host name for the security proxy server, and then click OK.
   
   
3. Add the management server certificate to the security proxy trusted certificates list. On the Trusted Certificates tab, you can import a trusted certificate from a file or directly from the management server over the network. For evaluation purposes, import a trusted certificate from the Reflection management server over the network. Click Import, then click the Server button.
   
   
4. Specify (or accept the defaults for) the Reflection management server address, the management server (not the proxy server) port number, the servlet context, and the friendly name of the Reflection management server. The context name is used in the URL that accesses the management server, and it is often--although not always--the same as the directory within which the management server is installed. The default context name is rweb. Click OK.
   
   
5. Create the proxy. On the Proxies tab, click Add. Enter the local port number. This is the port on which the proxy listens for connections. It can be any unused port number; it should not be the standard port for the host connection. (Click Help for more information.) Click Add to change the default cipher suite.
   
   
6. In the Add Cipher Suite dialog box, select a Cipher suite or accept the default. Click the Generate button.
   
   
7. In the Generate Security Proxy Certificate dialog box, enter the certificate information. Click the Generate button.
   
   
8. In the Add Cipher Suite dialog box, click OK to add the cipher suite.
   
   
9. Modify the Proxy Type as necessary. For evaluation purposes, retain the default settings. For more information click the Help button.
   
   
10. In the Add Proxy dialog box, click OK to add the proxy.
    
    
11. Export the settings to the management server. Click Export Settings on the Proxies tab. In the Export Proxies dialog box, specify or accept the default Management server, Port, and Context, and then click Export.
    
    
12. When you have set up the security proxy server component, click Exit to close the wizard and save your settings. To make changes to the proxy server settings later, simply rerun the wizard.