iTP Secure WebServer System Administrator's Guide (iTPWebSvr 5.1+)

Integrating the WebSafe2 Internet Security
Processor (WISP)
iTP Secure WebServer System Administrator’s Guide—522659-001
5-7
Installing the WebSafe2 Interface Driver (WID)
Installing the WebSafe2 Interface Driver (WID)
Install the WID software by unpaxing the file T7951PAX using the following
command:
$ISV.ZOSSUTL.COPYOSS $ISV.ZOSSUTL.T7951PAX
where:
ISV
is your installed volume.
COPYOSS
ensures that all files in the archive are placed in the /user/tandem/webserver
directories.
Configuring the iTP Secure WebServer for WebSafe2 Internet Security
Processors (WISPs)
Run
install.WS -websafe
located in <installation directory>/admin/conf to configure the iTP
Secure WebServer for WISPs:
•
To configure the WISP at the same time that you configure the rest of the iTP
Secure WebServer environment, use the install.WS script with or without the -
upgrade option, depending on whether you are establishing a new configuration or
upgrading an existing one.
•
To add the WISP to an existing configuration, use the install.WS script with the
-websafe option. (If you are running install.WS -upgrade to replace an existing
iTP Secure WebServer with a new one, do not specify the -websafe option. The
script automatically updates the WebSafe2 configuration.)
Before you run the script, you should use the Subsystem Control Facility (SCF) to verify
that the TCP/IP process has been specified for the private WebSafe2 subnet. (Perform
this verification step even if you plan to use $ZTC0, the default TCP/IP process name.)
If the TCP/IP process name you specify when configuring the iTP Secure WebServer is
not already specified for the WebSafe2 subnet, the WID cannot start and the iTP Secure
WebServer cannot communicate with the WISP.
The install.WS script prompts you for the DN, the IP addresses of the WISPs, and
the TCP/IP process name for each address. If you are running install.WS with the -
upgrade or -websafe option, the script automatically detects the presence of your old
configuration, saves the old httpd.websafe.config file as httpd.websafe.config.BAK, and
implements the new configuration you specify.