Tasks
Security migration considerations
There are a few security considerations to take into account when planning a migration from WAS V6.1 to V7.0:
SPNEGO Trust Association Interceptor (SPNEGO TAI), introduced in V6.1, has been deprecated in V7.0. SPNEGO Web authentication has taken its place and it should be used instead.
SAS security protocol has been deprecated and is only supported between V6.0 and previous version servers that have been federated in a V7.0 cell. IBM recommends CSIv2 protocol to be adopted during the migration process.
Multiple Security Domains add a new dimension to the security environment. Although we are not required to take advantage of it, we recommend its use for separating admin security from app security.
In previous releases of WAS, we could associate a small set of security attributes at a server level that were used by all of the apps of that server. This way of configuring the security attributes is deprecated in WAS V7.0 and will be removed in a future release.