Technical data

14 Managing Security
14-46 Administration Guide
Before you can boot WebLogic Server, you need to give boot permission for the server
to a specific Group. This security measure prevents unauthorized users from booting
WebLogic Server.
By default, only the system user can modify MBeans. BEA recommends limiting the
number of users that can access and modify MBeans. Use the following ACL to access
to all the WebLogic Server MBeans:
access.weblogic.admin.mbean=Group or User name
If a user or group fails in an attempt to access a MBean, a
weblogic.management.NoAccessRuntimeException is returned. The server log
contains the details indicating which user attempted to access what MBean.
Before you can grant permissions to Users or Groups through the Administration
Console, you need to give the Administrators Group the following permission:
acl.modify.weblogic.admin=Administrators
Configuring the SSL Protocol
The following sections describe how to obtain digital certificates and configure the
SSL protocol:
n Obtaining a Private Key and Digital Certificate
n Storing Private Keys and Digital Certificates
n Defining Trusted Certificate Authorities
n Defining Attributes for the SSL Protocol
n Modifying Parameters for SSL Session Caching
For a complete description of the SSL Protocol, see Introduction to WebLogic Security
and Security Fundamentals.
This release of WebLogic Server supports SSL v3.0.