MOA-IDSPSS Release 1.5.1.tags/1.5.1

git-svn-id: https://joinup.ec.europa.eu/svn/moa-idspss/tags/1.5.1@1271 d688527b-c9ab-4aba-bd8d-4036d912da1d

111 files changed, 3264 insertions, 0 deletions

diff --git a/id/server/data/deploy/conf/Catalina/localhost/proxy.xml b/id/server/data/deploy/conf/Catalina/localhost/proxy.xml
new file mode 100644
index 000000000..eef60b953
--- /dev/null
+++ b/id/server/data/deploy/conf/Catalina/localhost/proxy.xml
@@ -0,0 +1,25 @@
+<!--
+
+    Context configuration file for the MOA-Proxy App
+
+    aus einer Tomcat 4.x.xx server.xml Datei:
+    <Context path="" docBase="../moa-id-proxy.war" debug="0"/>
+
+-->
+<Context path="" docBase="${catalina.base}/webappsProxy/moa-id-proxy.war" privileged="true"
+
+         antiResourceLocking="false" antiJARLocking="false">
+
+<!--
+<ResourceLink name="users" global="UserDatabase"
+                type="org.apache.catalina.UserDatabase"/>
+-->
+
+  <!-- Uncomment this Valve to limit access to the Admin app to localhost
+   for obvious security reasons. Allow may be a comma-separated list of
+   hosts (or even regular expressions).
+  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
+    allow="127.0.0.1"/>
+  -->
+
+</Context>
diff --git a/id/server/data/deploy/conf/moa-id/MOAIdentities.xsd b/id/server/data/deploy/conf/moa-id/MOAIdentities.xsd
new file mode 100644
index 000000000..91c7a6cc0
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/MOAIdentities.xsd
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>

+<!-- edited with XMLSPY v5 rel. 4 U (http://www.xmlspy.com) by Rudolf Schamberger (Stabsstelle IKT-Strategie) (Bundesrechenzentrum GmbH) -->

+<xs:schema targetNamespace="http://reference.e-government.gv.at/namespace/moa/20020822#/xmllpr20030814" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:tns="http://reference.e-government.gv.at/namespace/moa/20020822#/xmllpr20030814" elementFormDefault="qualified" attributeFormDefault="unqualified">

+	<xs:element name="MOAIdentities">

+		<xs:annotation>

+			<xs:documentation>MOAIdentities provides a mapping from identities to parameters used in the XMLLoginParameterResolver of MOA-ID</xs:documentation>

+		</xs:annotation>

+		<xs:complexType>

+			<xs:sequence maxOccurs="unbounded">

+				<xs:element name="Mapping">

+					<xs:complexType>

+						<xs:sequence>

+							<xs:element name="Identity">

+								<xs:complexType>

+									<xs:choice>

+										<xs:element name="NamedIdentity" type="tns:NamedIdentityType"/>

+										<xs:element name="bPKIdentity" type="tns:bPKIdentitiyType"/>

+										<xs:element name="wbPKIdentity" type="tns:wbPKIdentitiyType"/>

+									</xs:choice>

+								</xs:complexType>

+							</xs:element>

+							<xs:element name="Parameters" type="tns:ParametersType"/>

+						</xs:sequence>

+					</xs:complexType>

+				</xs:element>

+			</xs:sequence>

+		</xs:complexType>

+	</xs:element>

+	<xs:complexType name="wbPKIdentitiyType">

+		<xs:simpleContent>

+			<xs:extension base="xs:boolean">

+				<xs:attribute name="wbPK" type="xs:string" use="required"/>

+			</xs:extension>

+		</xs:simpleContent>

+	</xs:complexType>

+	<xs:complexType name="bPKIdentitiyType">

+		<xs:simpleContent>

+			<xs:extension base="xs:boolean">

+				<xs:attribute name="bPK" type="xs:string" use="required"/>

+			</xs:extension>

+		</xs:simpleContent>

+	</xs:complexType>

+	<xs:complexType name="NamedIdentityType">

+		<xs:simpleContent>

+			<xs:extension base="xs:boolean">

+				<xs:attribute name="SurName" type="xs:string" use="required"/>

+				<xs:attribute name="GivenName" type="xs:string" use="required"/>

+				<xs:attribute name="BirthDate" type="xs:string" use="optional"/>

+			</xs:extension>

+		</xs:simpleContent>

+	</xs:complexType>

+	<xs:complexType name="ParametersType">

+		<xs:attribute name="UN" type="xs:string" use="optional"/>

+		<xs:attribute name="PW" type="xs:string" use="optional"/>

+		<xs:attribute name="Param1" type="xs:string" use="optional"/>

+		<xs:attribute name="Param2" type="xs:string" use="optional"/>

+		<xs:attribute name="Param3" type="xs:string" use="optional"/>

+	</xs:complexType>

+</xs:schema>

diff --git a/id/server/data/deploy/conf/moa-id/SampleIdentities.xml b/id/server/data/deploy/conf/moa-id/SampleIdentities.xml
new file mode 100644
index 000000000..abda0bf64
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleIdentities.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration für den Einsatz der MOA-ID Proxy-Komponenten unter Einsatz eines speziellen XMLLoginParameterResolver 
+	 Damit kann unter Einsatz des XMLLoginParameterResolverPlainData (s.u.) eine Einschränkung von Benutzer für OA erfolgen. 	 -->
+<!-- Beispiel für ein Element ProxyComponent in der MOA-ID Konfigurationsdatei welches den XMLLoginParameterResolverPlainData 
+     mit der Benutzerdatei Identities.xml verwendet um sich über Basic Authentication (401) an einer Webseite anzumeldne 	     	-->
+     
+     
+<!--
+		<ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600" 
+						loginParameterResolverImpl="at.gv.egovernment.moa.id.proxy.XMLLoginParameterResolverPlainData" 
+						loginParameterResolverConfiguration="Identities.xml">
+			<ConnectionParameter URL="http://www.digitales.oesterreich.gv.at/">
+			</ConnectionParameter>
+		</ProxyComponent>
+-->
+<MOAIdentities xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#/xmllpr20030814" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://reference.e-government.gv.at/namespace/moa/20020822#/xmllpr20030814 MOAIdentities.xsd">
+	<!-- Eintrag aller Benutzer mit Berechtigung -->
+	<!-- Die Daten müssen in der Schreibweise wie in der Personenbindung (= Schreibweise des ZMRs) eingegeben werden -->
+
+	<!-- Benutzerin Kunz -->
+	<Mapping>
+		<Identity>
+			<NamedIdentity SurName="Kunz" GivenName="Karin Stella" BirthDate="1900-01-01">1</NamedIdentity>
+		</Identity>
+		<Parameters UN="KunzKS" PW="geheim"/>
+	</Mapping>
+	<!-- Benutzer Mustermann -->
+	<Mapping>
+		<Identity>
+			<NamedIdentity SurName="Mustermann-Fall" GivenName="Max Moriz" BirthDate="1900-01-01">1</NamedIdentity>
+		</Identity>
+		<Parameters UN="MustMM" PW="höchst?Geheim"/>
+	</Mapping>
+</MOAIdentities>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration.xml b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration.xml
new file mode 100644
index 000000000..6525642f1
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration.xml
@@ -0,0 +1,96 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-ID ohne Proxy -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"/ -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<TrustProfileID>MOAIDBuergerkartePersonenbindung</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDaten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!--<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+				<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+		<!-- Einstellungen für den Zugriff auf das Online-Vollmachten Service -->
+		<!-- <OnlineMandates> -->
+		<!-- Echtsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis/MandateIssueRequest">-->
+		<!-- Testsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis-test/MandateIssueRequest">-->
+		<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Online-Vollmachten System an -->
+		<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+		<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+		<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore>				-->
+		<!-- </ConnectionParameter> -->
+		<!-- Hinweis: Um den Online-Vollmachten Modus für eine Online Applikation zu aktivieren, müssen Sie das Vollmachten Profil angeben -->
+		<!-- (siehe Element OnlineMandates unter MOA-IDConfiguration/AuthComponent/OnlineMandates)-->
+		<!-- </OnlineMandates> -->
+	</AuthComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- publicURLPrefix referenziert hier keine richtige Online Applikation; muss angepasst werden -->
+	<OnlineApplication publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH -->
+		<AuthComponent slVersion="1.2">
+			<!-- Aktivieren von Vollmachten fuer diese Online-Applikation-->
+			<!-- Hinweis: Hierzu muss auch die Verbindung zum Online-Vollmachten Service konfigurieren -->
+			<!-- (siehe OnlineApplication/AuthComponent/Mandates)-->
+			<!--<Mandates>-->
+			<!-- Liste der Vollmachten-Profile, die festlegen mit welchen Vollmachtstypen man sich bei der Online-Applikation anmelden kann-->
+			<!-- Unter https://vollmachten.stammzahlenregister.gv.at/mis/ finden Sie eine Liste der unterstützen Vollmachten-Profile.-->
+			<!--				<Profiles>Zustellung,Prokura,PostvollmachtAufBasisProkura,WKOVollmachtAufBasisProkura,ZVR,ZVRMitPostvollmacht,ERsB,ErsBMitPostvollmacht,PostvollmachtBilateral,GeneralvollmachtBilateral,WKOVollmachtBilateral</Profiles>-->
+			<!--			</Mandates>-->
+		</AuthComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAIDConfigurationProxy.xml b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfigurationProxy.xml
new file mode 100644
index 000000000..27bf6681c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfigurationProxy.xml
@@ -0,0 +1,117 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-ID -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!--  <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- ConnectionParameter URL="http://moa.gv.at/moa-spss-test/services/SignatureVerification"/ -->
+			<!-- ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"/ -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<TrustProfileID>MOAIDBuergerkartePersonenbindung</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDaten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+				<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+		<!-- Einstellungen für den Zugriff auf das Online-Vollmachten Service -->
+		<!-- <OnlineMandates> -->
+		<!-- Echtsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis/MandateIssueRequest">-->
+		<!-- Testsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis-test/MandateIssueRequest">-->
+		<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Online-Vollmachten System an -->
+		<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+		<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+		<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore>				-->
+		<!-- </ConnectionParameter> -->
+		<!-- Hinweis: Um den Online-Vollmachten Modus für eine Online Applikation zu aktivieren, müssen Sie das Vollmachten Profil angeben -->
+		<!-- (siehe Element OnlineMandates unter MOA-IDConfiguration/AuthComponent/OnlineMandates)-->
+		<!-- </OnlineMandates> -->
+	</AuthComponent>
+	<!-- Konfiguration fuer MOA-ID-PROXY -->
+	<ProxyComponent>
+		<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-ID-AUTH Web Service -->
+		<AuthComponent>
+			<ConnectionParameter URL="http://localhost:8080/moa-id-auth/services/GetAuthenticationData">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</AuthComponent>
+	</ProxyComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- Demo Online-Applikation: Zugriff auf www.digitales.oesterreich.gv.at ueber MOA-ID-PROXY -->
+	<OnlineApplication publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH -->
+		<AuthComponent slVersion="1.2">
+			<!-- Aktivieren von Vollmachten fuer diese Online-Applikation-->
+			<!-- Hinweis: Hierzu muss auch die Verbindung zum Online-Vollmachten Service konfigurieren -->
+			<!-- (siehe OnlineApplication/AuthComponent/Mandates)-->
+			<!--<Mandates>-->
+			<!-- Liste der Vollmachten-Profile, die festlegen mit welchen Vollmachtstypen man sich bei der Online-Applikation anmelden kann-->
+			<!-- Unter https://vollmachten.stammzahlenregister.gv.at/mis/ finden Sie eine Liste der unterstützen Vollmachten-Profile.-->
+			<!--				<Profiles>Zustellung,Prokura,PostvollmachtAufBasisProkura,WKOVollmachtAufBasisProkura,ZVR,ZVRMitPostvollmacht,ERsB,ErsBMitPostvollmacht,PostvollmachtBilateral,GeneralvollmachtBilateral,WKOVollmachtBilateral</Profiles>-->
+			<!--			</Mandates>-->
+		</AuthComponent>
+		<!-- fuer MOA-ID-PROXY -->
+		<ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600">
+			<!-- <ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600" loginParameterResolverImpl="at.gv.egovernment.moa.id.proxy.DefaultLoginParameterResolver" loginParameterResolverConfiguration="" connectionBuilderImpl="at.gv.egovernment.moa.id.proxy.DefaultConnectionBuilder"> -->
+			<!-- URL und akzeptierte TLS-Server-Zertifikate der Online-Applikation -->
+			<ConnectionParameter URL="http://www.digitales.oesterreich.gv.at/">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ProxyComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       fuer MOA-ID-PROXY: CA-Zertifikat des Servers MOA-ID-AUTH, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKs.xml b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKs.xml
new file mode 100644
index 000000000..eefc7cf6a
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKs.xml
@@ -0,0 +1,98 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-ID ohne Proxy -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- <ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"> -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuezt) -->
+				<TrustProfileID>MOAIDBuergerkartePersonenbindungMitTestkarten</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuetzt) -->
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust bzw. A-CERT Zertifikat mit Verwaltungseigenschaft. Wenn ihr MOA-ID Zertifikat -->
+				<!-- diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+		<!-- Einstellungen für den Zugriff auf das Online-Vollmachten Service -->
+		<!-- <OnlineMandates> -->
+		<!-- Echtsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis/MandateIssueRequest">-->
+		<!-- Testsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis-test/MandateIssueRequest">-->
+		<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Online-Vollmachten System an -->
+		<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+		<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+		<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore>				-->
+		<!-- </ConnectionParameter> -->
+		<!-- Hinweis: Um den Online-Vollmachten Modus für eine Online Applikation zu aktivieren, müssen Sie das Vollmachten Profil angeben -->
+		<!-- (siehe Element OnlineMandates unter MOA-IDConfiguration/AuthComponent/OnlineMandates)-->
+		<!-- </OnlineMandates> -->
+	</AuthComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!--  publicURLPrefix referenziert hier keine richtige Online Applikation; muss angepasst werden  -->
+	<OnlineApplication publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH -->
+		<AuthComponent slVersion="1.2">
+			<!-- Aktivieren von Vollmachten fuer diese Online-Applikation-->
+			<!-- Hinweis: Hierzu muss auch die Verbindung zum Online-Vollmachten Service konfigurieren -->
+			<!-- (siehe OnlineApplication/AuthComponent/Mandates)-->
+			<!-- <Mandates> -->
+			<!-- Liste der Vollmachten-Profile, die festlegen mit welchen Vollmachtstypen man sich bei der Online-Applikation anmelden kann-->
+			<!-- Unter https://vollmachten.stammzahlenregister.gv.at/mis/ finden Sie eine Liste der unterstützen Vollmachten-Profile.-->
+			<!--<Profiles>Zustellung,Prokura,PostvollmachtAufBasisProkura,WKOVollmachtAufBasisProkura,ZVR,ZVRMitPostvollmacht,ERsB,ErsBMitPostvollmacht,PostvollmachtBilateral,GeneralvollmachtBilateral,WKOVollmachtBilateral</Profiles>-->
+			<!--</Mandates> -->
+		</AuthComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+	</ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- Vertrauenswürdige Bürgerkartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKsProxy.xml b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKsProxy.xml
new file mode 100644
index 000000000..f9e296c62
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAIDConfiguration_withTestBKsProxy.xml
@@ -0,0 +1,118 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-ID  -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- <ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"> -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuezt) -->
+				<TrustProfileID>MOAIDBuergerkartePersonenbindungMitTestkarten</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuetzt) -->
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+				<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+		<!-- Einstellungen für den Zugriff auf das Online-Vollmachten Service -->
+		<!-- <OnlineMandates> -->
+		<!-- Echtsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis/MandateIssueRequest">-->
+		<!-- Testsystem -->
+		<!-- <ConnectionParameter URL="https://vollmachten.stammzahlenregister.gv.at/mis-test/MandateIssueRequest">-->
+		<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Online-Vollmachten System an -->
+		<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+		<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+		<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore>				-->
+		<!-- </ConnectionParameter> -->
+		<!-- Hinweis: Um den Online-Vollmachten Modus für eine Online Applikation zu aktivieren, müssen Sie das Vollmachten Profil angeben -->
+		<!-- (siehe Element OnlineMandates unter MOA-IDConfiguration/AuthComponent/OnlineMandates)-->
+		<!-- </OnlineMandates> -->
+	</AuthComponent>
+	<!-- Konfiguration fuer MOA-ID-PROXY -->
+	<ProxyComponent>
+		<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-ID-AUTH Web Service -->
+		<AuthComponent>
+			<ConnectionParameter URL="http://localhost:8080/moa-id-auth/services/GetAuthenticationData">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</AuthComponent>
+	</ProxyComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- Demo Online-Applikation: Zugriff auf www.digitales.oesterreich.gv.at ueber MOA-ID-PROXY -->
+	<OnlineApplication publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH -->
+		<AuthComponent slVersion="1.2">
+			<!-- Aktivieren von Vollmachten fuer diese Online-Applikation-->
+			<!-- Hinweis: Hierzu muss auch die Verbindung zum Online-Vollmachten Service konfigurieren -->
+			<!-- (siehe OnlineApplication/AuthComponent/Mandates)-->
+			<!--<Mandates>-->
+			<!-- Liste der Vollmachten-Profile, die festlegen mit welchen Vollmachtstypen man sich bei der Online-Applikation anmelden kann-->
+			<!-- Unter https://vollmachten.stammzahlenregister.gv.at/mis/ finden Sie eine Liste der unterstützen Vollmachten-Profile.-->
+			<!--				<Profiles>Zustellung,Prokura,PostvollmachtAufBasisProkura,WKOVollmachtAufBasisProkura,ZVR,ZVRMitPostvollmacht,ERsB,ErsBMitPostvollmacht,PostvollmachtBilateral,GeneralvollmachtBilateral,WKOVollmachtBilateral</Profiles>-->
+			<!--			</Mandates>-->
+		</AuthComponent>
+		<!-- fuer MOA-ID-PROXY -->
+		<ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600">
+			<!-- <ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600" loginParameterResolverImpl="at.gv.egovernment.moa.id.proxy.DefaultLoginParameterResolver" loginParameterResolverConfiguration="" connectionBuilderImpl="at.gv.egovernment.moa.id.proxy.DefaultConnectionBuilder"> -->
+			<!-- URL und akzeptierte TLS-Server-Zertifikate der Online-Applikation -->
+			<ConnectionParameter URL="http://www.digitales.oesterreich.gv.at/">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ProxyComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       fuer MOA-ID-PROXY: CA-Zertifikat des Servers MOA-ID-AUTH, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration.xml b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration.xml
new file mode 100644
index 000000000..f639af1b6
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration.xml
@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-WID ohne Proxy -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- ConnectionParameter URL="http://moa.gv.at/moa-spss-test/services/SignatureVerification"/ -->
+			<!-- ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"/ -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<TrustProfileID>MOAIDBuergerkartePersonenbindung</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDaten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust oder A-CERT Zertifikat mit Verwaltungseigenschaft oder Dienstleistereigenschaft. -->
+				<!-- Wenn ihr MOA-ID Zertifikat diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+	</AuthComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- publicURLPrefix referenziert hier keine richtige Online Applikation; muss angepasst werden -->
+	<OnlineApplication type="businessService" publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH WID Modus -->
+		<AuthComponent slVersion="1.2" provideStammzahl="true" provideAUTHBlock="true" provideIdentityLink="false" provideCertificate="true">
+			<!-- Spezifikation der Stammzahl des Wirtschaftsunternehmens -->
+			<IdentificationNumber>
+				<!-- Beispiel Firmenbuchnummer -->
+				<pr:Firmenbuchnummer xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#">468924i</pr:Firmenbuchnummer>
+			</IdentificationNumber>
+		</AuthComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfigurationProxy.xml b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfigurationProxy.xml
new file mode 100644
index 000000000..a63eb8db9
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfigurationProxy.xml
@@ -0,0 +1,100 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-WID -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- ConnectionParameter URL="http://moa.gv.at/moa-spss-test/services/SignatureVerification"/ -->
+			<!-- ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"/ -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<TrustProfileID>MOAIDBuergerkartePersonenbindung</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDaten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust Zertifikat mit Verwaltungseigenschaft. Wenn ihr MOA-ID Zertifikat -->
+				<!-- diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+	</AuthComponent>
+	<!-- Konfiguration fuer MOA-ID-PROXY -->
+	<ProxyComponent>
+		<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-ID-AUTH Web Service -->
+		<AuthComponent>
+			<ConnectionParameter URL="http://localhost:8080/moa-id-auth/services/GetAuthenticationData">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</AuthComponent>
+	</ProxyComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- Demo Online-Applikation fuer MOA-WID: Zugriff auf www.digitales.oesterreich.gv.at ueber MOA-ID-PROXY -->
+	<OnlineApplication type="businessService" publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH WID Modus -->
+		<AuthComponent slVersion="1.2" provideStammzahl="true" provideAUTHBlock="true" provideIdentityLink="false" provideCertificate="true">
+			<!-- Spezifikation der Stammzahl des Wirtschaftsunternehmens -->
+			<IdentificationNumber>
+				<!-- Beispiel Firmenbuchnummer -->
+				<pr:Firmenbuchnummer xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#">468924i</pr:Firmenbuchnummer>
+			</IdentificationNumber>
+		</AuthComponent>
+		<!-- fuer MOA-ID-PROXY -->
+		<ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600">
+			<!-- <ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600" loginParameterResolverImpl="at.gv.egovernment.moa.id.proxy.DefaultLoginParameterResolver" loginParameterResolverConfiguration="" connectionBuilderImpl="at.gv.egovernment.moa.id.proxy.DefaultConnectionBuilder"> -->
+			<!-- URL und akzeptierte TLS-Server-Zertifikate der Online-Applikation -->
+			<ConnectionParameter URL="http://www.digitales.oesterreich.gv.at/">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ProxyComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       fuer MOA-ID-PROXY: CA-Zertifikat des Servers MOA-ID-AUTH, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKs.xml b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKs.xml
new file mode 100644
index 000000000..6d7e1d0d1
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKs.xml
@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-WID ohne Proxy -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- <ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"> -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuezt) -->
+				<TrustProfileID>MOAIDBuergerkartePersonenbindungMitTestkarten</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuetzt) -->
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust Zertifikat mit Verwaltungseigenschaft. Wenn ihr MOA-ID Zertifikat -->
+				<!-- diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+	</AuthComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- publicURLPrefix referenziert hier keine richtige Online Applikation; muss angepasst werden -->
+	<OnlineApplication type="businessService" publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH WID Modus -->
+		<AuthComponent slVersion="1.2" provideStammzahl="true" provideAUTHBlock="true" provideIdentityLink="false" provideCertificate="true">
+			<!-- Spezifikation der Stammzahl des Wirtschaftsunternehmens -->
+			<IdentificationNumber>
+				<!-- Beispiel Firmenbuchnummer -->
+				<pr:Firmenbuchnummer xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#">468924i</pr:Firmenbuchnummer>
+			</IdentificationNumber>
+		</AuthComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKsProxy.xml b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKsProxy.xml
new file mode 100644
index 000000000..6ce0f5d51
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/SampleMOAWIDConfiguration_withTestBKsProxy.xml
@@ -0,0 +1,101 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Beispielkonfiguration fuer MOA-WID -->
+<MOA-IDConfiguration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:sl11="http://www.buergerkarte.at/namespaces/securitylayer/20020831#">
+	<!-- Konfiguration fuer MOA-ID-AUTH -->
+	<AuthComponent>
+		<!-- Transformationen fuer die Anzeige des AUTH-Block im Secure Viewer -->
+		<SecurityLayer>
+			<!-- Wählen Sie hier den deutschen oder englischen Auswahltext -->
+			<TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_DE.xml"/>
+			<!-- <TransformsInfo filename="transforms/TransformsInfoAuthBlockTable_EN.xml"/>-->
+		</SecurityLayer>
+		<MOA-SP>
+			<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-SP Web Service, falls MOA-SP ueber Web Service angesprochen wird. 
+           Wenn MOA-SP direkt ueber API aufgerufen werden soll, so wird das Element auskommentiert -->
+			<!-- <ConnectionParameter URL="http://localhost:8080/moa-spss/services/SignatureVerification"> -->
+			<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+			<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			<!-- </ConnectionParameter> -->
+			<!-- TrustProfile fuer den IdentityLink der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyIdentityLink>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuezt) -->
+				<TrustProfileID>MOAIDBuergerkartePersonenbindungMitTestkarten</TrustProfileID>
+			</VerifyIdentityLink>
+			<!-- TrustProfile fuer die Signatur des Benutzers mit der Buergerkarte (muss in MOA-SP konfiguriert sein) -->
+			<VerifyAuthBlock>
+				<!-- Testkarten (a.sign test government sowie Security Kapsel Neu/SeLaNext ab Version 1.0.3 wird unterstuetzt) -->
+				<TrustProfileID>MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</TrustProfileID>
+				<!-- VerifyTransformsInfoProfile mit den Transformationen fuer die Anzeige der Anmeldedaten im Secure Viewer (muss in MOA-SP konfiguriert sein) -->
+				<!-- Wählen Sie hier entsprechende der Sprachauswahl im Element <SecurityLayer><TransformsInfo> das deutsche oder englische Profil -->
+				<VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_DE</VerifyTransformsInfoProfileID>
+				<!-- <VerifyTransformsInfoProfileID>MOAIDTransformAuthBlockTable_EN</VerifyTransformsInfoProfileID>-->
+			</VerifyAuthBlock>
+		</MOA-SP>
+		<!-- Einstellungen für den Zugriff auf das Stammzahlenregister-Gateway - für ausländische Personen -->
+		<ForeignIdentities>
+			<!-- Echtsystem (Eintragung ins ERnP nur mit Echtkarten gemäß E-Government Gleichwertigkeits Verordnung) -->
+			<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at/services/IdentityLinkCreation">
+				<!-- Testsystem (Eintragung ins ERnP - auch für Testkarten) -->
+				<!--<ConnectionParameter URL="https://gateway.stammzahlenregister.gv.at:8443/services/IdentityLinkCreation">-->
+				<!-- Geben Sie hier ihren Client Keystore für den Zugriff auf das Stammzahlenregister-Gateway an -->
+				<!-- Voraussetzung: A-Trust Zertifikat mit Verwaltungseigenschaft. Wenn ihr MOA-ID Zertifikat -->
+				<!-- diese Voraussetzung erfüllt, können Sie dieses hier angeben. -->
+				<!-- <ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ForeignIdentities>
+	</AuthComponent>
+	<!-- Konfiguration fuer MOA-ID-PROXY -->
+	<ProxyComponent>
+		<!-- URL und akzeptierte TLS-Server-Zertifikate des MOA-ID-AUTH Web Service -->
+		<AuthComponent>
+			<ConnectionParameter URL="http://localhost:8080/moa-id-auth/services/GetAuthenticationData">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</AuthComponent>
+	</ProxyComponent>
+	<!-- Eintragung fuer jede Online-Applikation -->
+	<!-- Demo Online-Applikation fuer MOA-WID: Zugriff auf www.digitales.oesterreich.gv.at ueber MOA-ID-PROXY -->
+	<OnlineApplication type="businessService" publicURLPrefix="https://localhost:8443/" friendlyName="Online Applikation 1">
+		<!-- fuer MOA-ID-AUTH WID Modus -->
+		<AuthComponent slVersion="1.2" provideStammzahl="true" provideAUTHBlock="true" provideIdentityLink="false" provideCertificate="true">
+			<!-- Spezifikation der Stammzahl des Wirtschaftsunternehmens -->
+			<IdentificationNumber>
+				<!-- Beispiel Firmenbuchnummer -->
+				<pr:Firmenbuchnummer xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#">468924i</pr:Firmenbuchnummer>
+			</IdentificationNumber>
+		</AuthComponent>
+		<!-- fuer MOA-ID-PROXY -->
+		<ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600">
+			<!-- <ProxyComponent configFileURL="oa/SampleOAConfiguration.xml" sessionTimeOut="600" loginParameterResolverImpl="at.gv.egovernment.moa.id.proxy.DefaultLoginParameterResolver" loginParameterResolverConfiguration="" connectionBuilderImpl="at.gv.egovernment.moa.id.proxy.DefaultConnectionBuilder"> -->
+			<!-- URL und akzeptierte TLS-Server-Zertifikate der Online-Applikation -->
+			<ConnectionParameter URL="http://www.digitales.oesterreich.gv.at/">
+				<!--	<AcceptedServerCertificates>certs/server-certs</AcceptedServerCertificates> -->
+				<!--	<ClientKeyStore password="Keystore Pass">file_to_clientkeystore</ClientKeyStore> -->
+			</ConnectionParameter>
+		</ProxyComponent>
+	</OnlineApplication>
+	<!-- ChainingModes fuer die Zertifikatspfadueberpruefung der TLS-Zertifikate -->
+	<ChainingModes systemDefaultMode="pkix">
+  </ChainingModes>
+	<!-- fuer MOA-ID-AUTH:  CA-Zertifikat des Servers MOA-SP, falls dieses Service ueber HTTPS angesprochen wird 
+       fuer MOA-ID-PROXY: CA-Zertifikat des Servers MOA-ID-AUTH, falls dieses Service ueber HTTPS angesprochen wird 
+       zusaeztlich: CA-Zertifikat aller Online-Applikationen, die ueber HTTPS angesprochen werden -->
+	<TrustedCACertificates>certs/ca-certs</TrustedCACertificates>
+	<!-- Cache-Verzeichnis fuer-Zertifikate -->
+	<!-- Hinweis: wenn TC in linux oder unix betrieben wird vollstaendigen pfad fuer DirectoryCertStoreParameters.RootDir verwenden -->
+	<GenericConfiguration name="DirectoryCertStoreParameters.RootDir" value="certs/certstore"/>
+	<!-- Time-Out fuer die Anmeldung von Beginn bis zum Anlegen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationSession.TimeOut" value="600"/>
+	<!-- Time-Out fuer die Anmeldung vom Anlegen bis zum Abholen der Anmeldedaten, in Sekunden -->
+	<GenericConfiguration name="AuthenticationData.TimeOut" value="120"/>
+	<!-- Alternatives Data URL prefix (falls Webserver vorgeschaltet wird) -->
+	<!--GenericConfiguration name="FrontendServlets.DataURLPrefix" value="https://<your_webserver>/moa-id-auth/"/ -->
+	<!-- HTTP Verbindung auf Frontend Servlets zulassen / verbieten (falls Webserver vorgeschaltet wird) -->
+	<!-- GenericConfiguration name="FrontendServlets.EnableHTTPConnection" value="true"/ -->
+	<!-- URL Liste der vertrauenwürdigen Bürgekartenumgebungen -->
+	<TrustedBKUs>
+		<BKUURL>https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+		<BKUURL>https://www.a-trust.at/mobile/https-security-layer-request/default.aspx</BKUURL>
+	</TrustedBKUs>
+</MOA-IDConfiguration>
diff --git a/id/server/data/deploy/conf/moa-id/certs/ca-certs/A-Trust-nQual-03.cer b/id/server/data/deploy/conf/moa-id/certs/ca-certs/A-Trust-nQual-03.cer
new file mode 100644
index 000000000..33e776369
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/certs/ca-certs/A-Trust-nQual-03.cer
diff --git a/id/server/data/deploy/conf/moa-id/certs/ca-certs/a-sign-SSL-03.cer b/id/server/data/deploy/conf/moa-id/certs/ca-certs/a-sign-SSL-03.cer
new file mode 100644
index 000000000..a699436ca
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/certs/ca-certs/a-sign-SSL-03.cer
diff --git a/id/server/data/deploy/conf/moa-id/certs/ca-certs/gateway.stammzahlenregister.gv.at.cer b/id/server/data/deploy/conf/moa-id/certs/ca-certs/gateway.stammzahlenregister.gv.at.cer
new file mode 100644
index 000000000..ff90e35f5
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/certs/ca-certs/gateway.stammzahlenregister.gv.at.cer
diff --git a/id/server/data/deploy/conf/moa-id/log4j.properties b/id/server/data/deploy/conf/moa-id/log4j.properties
new file mode 100644
index 000000000..0f31f4891
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/log4j.properties
@@ -0,0 +1,25 @@
+# commons-logging setup
+org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.Log4jFactory
+
+# define log4j root loggers
+log4j.rootLogger=info, stdout, R
+log4j.logger.moa=info
+log4j.logger.moa.spss.server=info
+log4j.logger.iaik.server=info
+log4j.logger.moa.id.auth=info
+log4j.logger.moa.id.proxy=info
+
+# configure the stdout appender
+log4j.appender.stdout=org.apache.log4j.ConsoleAppender
+log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
+#log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20c |  %10t | %m%n
+log4j.appender.stdout.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %20.20c | %10t | %m%n
+
+# configure the rolling file appender (R)
+log4j.appender.R=org.apache.log4j.RollingFileAppender
+log4j.appender.R.File=${catalina.base}/logs/moa-id.log
+log4j.appender.R.MaxFileSize=10000KB
+log4j.appender.R.MaxBackupIndex=1
+log4j.appender.R.layout=org.apache.log4j.PatternLayout
+log4j.appender.R.layout.ConversionPattern=%5p | %d{dd HH:mm:ss,SSS} | %t | %m%n
+
diff --git a/id/server/data/deploy/conf/moa-id/oa/BasicOAConfiguration.xml b/id/server/data/deploy/conf/moa-id/oa/BasicOAConfiguration.xml
new file mode 100644
index 000000000..fc99cea79
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/oa/BasicOAConfiguration.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Demokonfiguration fuer eine Online Applikation (OA) welche 401 Basic Authentication zur Uebergabe der Parameter verwendet -->
+<Configuration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+	<LoginType>stateless</LoginType>
+	<BasicAuth>
+		<UserID>MOAFamilyName</UserID>
+		<Password>MOAGivenName</Password>
+	</BasicAuth>
+</Configuration>
diff --git a/id/server/data/deploy/conf/moa-id/oa/HeaderOAConfiguration.xml b/id/server/data/deploy/conf/moa-id/oa/HeaderOAConfiguration.xml
new file mode 100644
index 000000000..4d34c3646
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/oa/HeaderOAConfiguration.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Demokonfiguration fuer eine Online Applikation (OA) welche Header Authentication zur Uebergabe der Parameter verwendet -->
+<Configuration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+	<LoginType>stateless</LoginType>
+	<HeaderAuth>
+		<!-- zusaetzlicher Header GivenName -->
+		<Header Name="X-MOAParameterGivenName" Value="MOAGivenName"></Header>
+		<Header Name="X-MOAParameterFamilyName" Value="MOAFamilyName"></Header>
+	</HeaderAuth>
+</Configuration>
diff --git a/id/server/data/deploy/conf/moa-id/oa/ParamOAConfiguration.xml b/id/server/data/deploy/conf/moa-id/oa/ParamOAConfiguration.xml
new file mode 100644
index 000000000..979faca95
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/oa/ParamOAConfiguration.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Demokonfiguration fuer eine Online Applikation (OA) welche Parameter Authentication verwendet -->
+<Configuration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+	<LoginType>stateless</LoginType>
+	<ParamAuth>
+		<!-- URL Parameter GivenName und FamilyName -->
+		<Parameter Name="GivenName" Value="MOAGivenName"></Parameter>
+		<Parameter Name="FamilyName" Value="MOAFamilyName"></Parameter>
+	</ParamAuth>
+</Configuration>
diff --git a/id/server/data/deploy/conf/moa-id/oa/SampleOAConfiguration.xml b/id/server/data/deploy/conf/moa-id/oa/SampleOAConfiguration.xml
new file mode 100644
index 000000000..edbfe7aa5
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/oa/SampleOAConfiguration.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Demokonfiguration fuer Online Applikation (OA) welche 401 Basic Authentication zur Uebergabe der Parameter verwendet -->
+<Configuration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+	<LoginType>stateless</LoginType>
+	<BasicAuth>
+		<UserID>MOAFamilyName</UserID>
+		<Password>MOAGivenName</Password>
+	</BasicAuth>
+</Configuration>
diff --git a/id/server/data/deploy/conf/moa-id/oa/SamplewbPKOAConfiguration.xml b/id/server/data/deploy/conf/moa-id/oa/SamplewbPKOAConfiguration.xml
new file mode 100644
index 000000000..2cff3bd67
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/oa/SamplewbPKOAConfiguration.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Demokonfiguration fuer eine Online Applikation (OA) welche 401 Basic Authentication zur Uebergabe der Parameter verwendet -->
+<Configuration xmlns="http://www.buergerkarte.at/namespaces/moaconfig#" xmlns:sl10="http://www.buergerkarte.at/namespaces/securitylayer/20020225#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+	<LoginType>stateless</LoginType>
+	<BasicAuth>
+		<UserID>MOAWBPK</UserID>
+		<Password>MOAGivenName</Password>
+	</BasicAuth>
+</Configuration>
diff --git a/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_DE.xml b/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_DE.xml
new file mode 100644
index 000000000..4ec0f94ae
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_DE.xml
@@ -0,0 +1,161 @@
+<sl10:TransformsInfo>

+	<dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">

+		<dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116">

+			<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#" exclude-result-prefixes="pr saml">

+				<xsl:output method="xml" xml:space="default"/>

+				<xsl:template match="/" xmlns="http://www.w3.org/1999/xhtml">

+					<html>

+						<head>

+							<title>Signatur der Anmeldedaten</title>

+							<style type="text/css" media="screen">

+              					.normalstyle { font-size: medium; } 

+              					.italicstyle { font-size: medium; font-style: italic; }

+								.titlestyle{ text-decoration:underline; font-weight:bold; font-size: medium; } 

+								.h4style{ font-size: large; }                                                                                      

+              				</style>

+						</head>

+						<body>

+							<h4 class="h4style">Anmeldedaten:</h4>

+							<p class="titlestyle">Daten zur Person</p>

+							<table class="parameters">

+								<xsl:if test="normalize-space(//@Issuer)">

+									<tr>

+										<td class="italicstyle">Name:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//@Issuer"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="string(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue)">

+									<tr>

+										<td class="italicstyle">Geburtsdatum:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,9,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,6,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,1,4)"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">Rolle:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OIDTextualDescription']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">Vollmacht:</td>

+										<td class="normalstyle">

+											<xsl:text>Ich melde mich in Vertretung an. Im nächsten Schritt wird mir eine Liste der für mich verfügbaren Vertretungsverhältnisse angezeigt, aus denen ich eines auswählen werde.</xsl:text>

+										</td>

+									</tr>

+								</xsl:if>

+							</table>

+							<p class="titlestyle">Daten zur Anwendung</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">Name:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='oaFriendlyName']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Staat:</td>

+									<td class="normalstyle">Österreich</td>

+								</tr>

+							</table>

+							<p class="titlestyle">Technische Parameter</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">URL:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='OA']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<xsl:if test="//saml:Attribute[@AttributeName='Geschaeftsbereich']">

+									<tr>

+										<td class="italicstyle">Bereich:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='Geschaeftsbereich']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">

+											Vollmachten-Referenz:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='mandateReferenceValue']"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']">

+									<tr>

+										<td class="italicstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']"/>:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Type"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='bPK'] or //saml:Attribute[@AttributeName='wbPK']">

+									<tr>

+										<td class="italicstyle">Identifikator:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='bPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">OID:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OID']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='HPI']">

+									<tr>

+										<td class="italicstyle">HPI:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='HPI']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<tr>

+									<td class="italicstyle">Datum:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,9,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,6,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,1,4)"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Uhrzeit:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,12,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,15,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,18,2)"/>

+									</td>

+								</tr>

+							</table>

+						</body>

+					</html>

+				</xsl:template>

+			</xsl:stylesheet>

+		</dsig:Transform>

+		<dsig:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/>

+	</dsig:Transforms>

+	<sl10:FinalDataMetaInfo>

+		<sl10:MimeType>application/xhtml+xml</sl10:MimeType>

+	</sl10:FinalDataMetaInfo>

+</sl10:TransformsInfo>

diff --git a/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_EN.xml b/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_EN.xml
new file mode 100644
index 000000000..5e45cd6d0
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-id/transforms/TransformsInfoAuthBlockTable_EN.xml
@@ -0,0 +1,161 @@
+<sl10:TransformsInfo>

+	<dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">

+		<dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116">

+			<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#" exclude-result-prefixes="pr saml">

+				<xsl:output method="xml" xml:space="default"/>

+				<xsl:template match="/" xmlns="http://www.w3.org/1999/xhtml">

+					<html>

+						<head>

+							<title>Signing the authentication data</title>

+							<style type="text/css" media="screen">

+              					.normalstyle { font-size: medium; } 

+              					.italicstyle { font-size: medium; font-style: italic; }

+								.titlestyle{ text-decoration:underline; font-weight:bold; font-size: medium; } 

+								.h4style{ font-size: large; }                                                                                      

+              				</style>

+						</head>

+						<body>

+							<h4 class="h4style">Authentication Data:</h4>

+							<p class="titlestyle">Personal Data</p>

+							<table class="parameters">

+								<xsl:if test="normalize-space(//@Issuer)">

+									<tr>

+										<td class="italicstyle">Name:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//@Issuer"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="string(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue)">

+									<tr>

+										<td class="italicstyle">Date of Birth:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,9,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,6,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,1,4)"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">Role:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OIDTextualDescription']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">Mandate:</td>

+										<td class="normalstyle">

+											<xsl:text>I log in as representative. In the next step a list of available mandates is shown. Here I select one mandate.</xsl:text>

+										</td>

+									</tr>

+								</xsl:if>

+							</table>

+							<p class="titlestyle">Application Data</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">Name:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='oaFriendlyName']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Country:</td>

+									<td class="normalstyle">Austria</td>

+								</tr>

+							</table>

+							<p class="titlestyle">Technical Parameters</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">URL:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='OA']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<xsl:if test="//saml:Attribute[@AttributeName='Geschaeftsbereich']">

+									<tr>

+										<td class="italicstyle">Sector:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='Geschaeftsbereich']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">

+											Mandate Reference:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='mandateReferenceValue']"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']">

+									<tr>

+										<td class="italicstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']"/>:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Type"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='bPK'] or //saml:Attribute[@AttributeName='wbPK']">

+									<tr>

+										<td class="italicstyle">Identifier:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='bPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">OID:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OID']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='HPI']">

+									<tr>

+										<td class="italicstyle">HPI:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='HPI']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<tr>

+									<td class="italicstyle">Date:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,9,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,6,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,1,4)"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Time:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,12,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,15,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,18,2)"/>

+									</td>

+								</tr>

+							</table>

+						</body>

+					</html>

+				</xsl:template>

+			</xsl:stylesheet>

+		</dsig:Transform>

+		<dsig:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/>

+	</dsig:Transforms>

+	<sl10:FinalDataMetaInfo>

+		<sl10:MimeType>application/xhtml+xml</sl10:MimeType>

+	</sl10:FinalDataMetaInfo>

+</sl10:TransformsInfo>

diff --git a/id/server/data/deploy/conf/moa-spss/SampleMOASPSSConfiguration.xml b/id/server/data/deploy/conf/moa-spss/SampleMOASPSSConfiguration.xml
new file mode 100644
index 000000000..dbf7cab1c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/SampleMOASPSSConfiguration.xml
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--MOA SPSS 1.3 Configuration File created by MOA SPSS Configuration Mapper-->
+<cfg:MOAConfiguration xmlns:cfg="http://reference.e-government.gv.at/namespace/moaconfig/20021122#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
+	<cfg:SignatureVerification>
+		<cfg:CertificateValidation>
+			<cfg:PathConstruction>
+				<cfg:AutoAddCertificates>true</cfg:AutoAddCertificates>
+				<cfg:UseAuthorityInformationAccess>true</cfg:UseAuthorityInformationAccess>
+				<cfg:CertificateStore>
+					<cfg:DirectoryStore>
+						<cfg:Location>certstore</cfg:Location>
+					</cfg:DirectoryStore>
+				</cfg:CertificateStore>
+			</cfg:PathConstruction>
+			<cfg:PathValidation>
+				<cfg:ChainingMode>
+					<cfg:DefaultMode>pkix</cfg:DefaultMode>
+					<cfg:TrustAnchor>
+						<cfg:Identification>
+							<dsig:X509IssuerName>CN=A-Trust-nQual-0,OU=A-Trust-nQual-0,O=A-Trust,C=AT</dsig:X509IssuerName>
+							<dsig:X509SerialNumber>536</dsig:X509SerialNumber>
+						</cfg:Identification>
+						<cfg:Mode>chaining</cfg:Mode>
+					</cfg:TrustAnchor>
+				</cfg:ChainingMode>
+				<cfg:TrustProfile>
+					<cfg:Id>MOAIDBuergerkartePersonenbindung</cfg:Id>
+					<cfg:TrustAnchorsLocation>trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten</cfg:TrustAnchorsLocation>
+				</cfg:TrustProfile>
+				<cfg:TrustProfile>
+					<cfg:Id>MOAIDBuergerkarteAuthentisierungsDaten</cfg:Id>
+					<cfg:TrustAnchorsLocation>trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten</cfg:TrustAnchorsLocation>
+				</cfg:TrustProfile>
+				<cfg:TrustProfile>
+					<cfg:Id>MOAIDBuergerkartePersonenbindungMitTestkarten</cfg:Id>
+					<cfg:TrustAnchorsLocation>trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten</cfg:TrustAnchorsLocation>
+				</cfg:TrustProfile>
+				<cfg:TrustProfile>
+					<cfg:Id>MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</cfg:Id>
+					<cfg:TrustAnchorsLocation>trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten</cfg:TrustAnchorsLocation>
+				</cfg:TrustProfile>
+			</cfg:PathValidation>
+			<cfg:RevocationChecking>
+				<cfg:EnableChecking>true</cfg:EnableChecking>
+				<cfg:MaxRevocationAge>0</cfg:MaxRevocationAge>
+				<cfg:ServiceOrder>
+					<cfg:Service>CRL</cfg:Service>
+					<cfg:Service>OCSP</cfg:Service>
+				</cfg:ServiceOrder>
+				<cfg:Archiving>
+					<cfg:EnableArchiving>false</cfg:EnableArchiving>
+					<cfg:ArchiveDuration>365</cfg:ArchiveDuration>
+					<cfg:Archive>
+						<cfg:DatabaseArchive>
+							<cfg:JDBCURL>jdbc:url</cfg:JDBCURL>
+							<cfg:JDBCDriverClassName>fully.qualified.classname</cfg:JDBCDriverClassName>
+						</cfg:DatabaseArchive>
+					</cfg:Archive>
+				</cfg:Archiving>
+			</cfg:RevocationChecking>
+		</cfg:CertificateValidation>
+		<cfg:VerifyTransformsInfoProfile>
+			<cfg:Id>MOAIDTransformAuthBlockTable_DE</cfg:Id>
+			<cfg:Location>profiles/MOAIDTransformAuthBlockTable_DE.xml</cfg:Location>
+		</cfg:VerifyTransformsInfoProfile>
+		<cfg:VerifyTransformsInfoProfile>
+			<cfg:Id>MOAIDTransformAuthBlockTable_EN</cfg:Id>
+			<cfg:Location>profiles/MOAIDTransformAuthBlockTable_EN.xml</cfg:Location>
+		</cfg:VerifyTransformsInfoProfile>
+	</cfg:SignatureVerification>
+</cfg:MOAConfiguration>
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/01540E2704537AA810D671E1C4106FD8821EB52A/C2556DADDF68A9EEF7F5C14A24CA33BCA930B201 b/id/server/data/deploy/conf/moa-spss/certstore/01540E2704537AA810D671E1C4106FD8821EB52A/C2556DADDF68A9EEF7F5C14A24CA33BCA930B201
new file mode 100644
index 000000000..592c96230
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/01540E2704537AA810D671E1C4106FD8821EB52A/C2556DADDF68A9EEF7F5C14A24CA33BCA930B201
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/0A5C2C9276B649D088A86BD9FD97E2B95658481D/08CAE18D8CFF86144CB8FFD671B916CAAB8BD4E9 b/id/server/data/deploy/conf/moa-spss/certstore/0A5C2C9276B649D088A86BD9FD97E2B95658481D/08CAE18D8CFF86144CB8FFD671B916CAAB8BD4E9
new file mode 100644
index 000000000..cac44093a
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/0A5C2C9276B649D088A86BD9FD97E2B95658481D/08CAE18D8CFF86144CB8FFD671B916CAAB8BD4E9
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/10D143E18C03A4A29F783D26F2F67E3B64C35CB0/BE9D654B0DE0F3CC53CA36703DD9D9049A5F9330 b/id/server/data/deploy/conf/moa-spss/certstore/10D143E18C03A4A29F783D26F2F67E3B64C35CB0/BE9D654B0DE0F3CC53CA36703DD9D9049A5F9330
new file mode 100644
index 000000000..32893db7f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/10D143E18C03A4A29F783D26F2F67E3B64C35CB0/BE9D654B0DE0F3CC53CA36703DD9D9049A5F9330
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/238ACC1D03DA5A2E7E580D760FB3EE218FDC5A97/D3C063F219ED073E34AD5D750B327629FFD59AF2 b/id/server/data/deploy/conf/moa-spss/certstore/238ACC1D03DA5A2E7E580D760FB3EE218FDC5A97/D3C063F219ED073E34AD5D750B327629FFD59AF2
new file mode 100644
index 000000000..33e776369
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/238ACC1D03DA5A2E7E580D760FB3EE218FDC5A97/D3C063F219ED073E34AD5D750B327629FFD59AF2
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/31B5BA02D476873C5220CDCFA0C095C4A31DEFDF/88D6151358A5E3C81D7AE1A536121DC03011BC03 b/id/server/data/deploy/conf/moa-spss/certstore/31B5BA02D476873C5220CDCFA0C095C4A31DEFDF/88D6151358A5E3C81D7AE1A536121DC03011BC03
new file mode 100644
index 000000000..376d0753f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/31B5BA02D476873C5220CDCFA0C095C4A31DEFDF/88D6151358A5E3C81D7AE1A536121DC03011BC03
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/328AA897B7E6270202B2FC0889FF88D66BB41122/35A40EF932B1F23980E2C672FC939E91EEBD0317 b/id/server/data/deploy/conf/moa-spss/certstore/328AA897B7E6270202B2FC0889FF88D66BB41122/35A40EF932B1F23980E2C672FC939E91EEBD0317
new file mode 100644
index 000000000..73553b996
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/328AA897B7E6270202B2FC0889FF88D66BB41122/35A40EF932B1F23980E2C672FC939E91EEBD0317
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/3314CE3E42175EACC28D57C35F192430BBADAC1A/B1D0BC027906A3B7E7518C93ACB26D978233ED27 b/id/server/data/deploy/conf/moa-spss/certstore/3314CE3E42175EACC28D57C35F192430BBADAC1A/B1D0BC027906A3B7E7518C93ACB26D978233ED27
new file mode 100644
index 000000000..5171276f4
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/3314CE3E42175EACC28D57C35F192430BBADAC1A/B1D0BC027906A3B7E7518C93ACB26D978233ED27
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/47ED4C584F9DCD54A6C2925252C5603ADAC93F49/84E4E75DBB2FD6397E6ABBD27FBE16D5BA71923E b/id/server/data/deploy/conf/moa-spss/certstore/47ED4C584F9DCD54A6C2925252C5603ADAC93F49/84E4E75DBB2FD6397E6ABBD27FBE16D5BA71923E
new file mode 100644
index 000000000..3be7b6a06
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/47ED4C584F9DCD54A6C2925252C5603ADAC93F49/84E4E75DBB2FD6397E6ABBD27FBE16D5BA71923E
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/68AF646E90A6FF370230F64ACD4E8A4F12C03916/CA80A13D41116E24CB1479E970CDC1C030C5907C b/id/server/data/deploy/conf/moa-spss/certstore/68AF646E90A6FF370230F64ACD4E8A4F12C03916/CA80A13D41116E24CB1479E970CDC1C030C5907C
new file mode 100644
index 000000000..277b6083a
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/68AF646E90A6FF370230F64ACD4E8A4F12C03916/CA80A13D41116E24CB1479E970CDC1C030C5907C
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/7A2CFA69FCA284D4627012A7A55662594C803B2A b/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/7A2CFA69FCA284D4627012A7A55662594C803B2A
new file mode 100644
index 000000000..ad13d7b28
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/7A2CFA69FCA284D4627012A7A55662594C803B2A
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/ADEC5673B57A18F16EFAF75EEFBFAD4841E2CD2B b/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/ADEC5673B57A18F16EFAF75EEFBFAD4841E2CD2B
new file mode 100644
index 000000000..d361d919f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/6F5F08A3A5D59CA877CB146F00BB0264369B2304/ADEC5673B57A18F16EFAF75EEFBFAD4841E2CD2B
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/679A4F81FC705DDEC419778DD2EBD875F4C242C6 b/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/679A4F81FC705DDEC419778DD2EBD875F4C242C6
new file mode 100644
index 000000000..36a442b89
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/679A4F81FC705DDEC419778DD2EBD875F4C242C6
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/82096E6D9B1248321625323D52858642CB0B748E b/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/82096E6D9B1248321625323D52858642CB0B748E
new file mode 100644
index 000000000..54f809962
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/9014D44A2072A5D74E12C7FE47F37D68371E1C42/82096E6D9B1248321625323D52858642CB0B748E
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/D4D1370FD1D9EAA46412008FF3E59E114BCF724A b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/D4D1370FD1D9EAA46412008FF3E59E114BCF724A
new file mode 100644
index 000000000..3c7775b6e
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/D4D1370FD1D9EAA46412008FF3E59E114BCF724A
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/DFA7DDEF5C212F0F0651E2A9DE1CE4A1AC63AF7A b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/DFA7DDEF5C212F0F0651E2A9DE1CE4A1AC63AF7A
new file mode 100644
index 000000000..b6f39e354
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/DFA7DDEF5C212F0F0651E2A9DE1CE4A1AC63AF7A
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/E619D25B380B7B13FDA33E8A58CD82D8A88E0515 b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/E619D25B380B7B13FDA33E8A58CD82D8A88E0515
new file mode 100644
index 000000000..f9fef65fc
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/E619D25B380B7B13FDA33E8A58CD82D8A88E0515
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/F825578F8F5484DFB40F81867C392D6CB0012B92 b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/F825578F8F5484DFB40F81867C392D6CB0012B92
new file mode 100644
index 000000000..f9f27442b
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/A95F0C3FA54CA93E3D5BA61AD23459300FA498D6/F825578F8F5484DFB40F81867C392D6CB0012B92
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/AC1B67D7D5A300767C0944ACE8458DD49960F1BD/4D523730501ADB80A76B0B473A4D21C7D86F8374 b/id/server/data/deploy/conf/moa-spss/certstore/AC1B67D7D5A300767C0944ACE8458DD49960F1BD/4D523730501ADB80A76B0B473A4D21C7D86F8374
new file mode 100644
index 000000000..61a7ccb15
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/AC1B67D7D5A300767C0944ACE8458DD49960F1BD/4D523730501ADB80A76B0B473A4D21C7D86F8374
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/AF03510E8BCAE72BB7C4E9D1910B4E12057075A4/7AC3EFA52DE27A930EC8754DB5E061476948E914 b/id/server/data/deploy/conf/moa-spss/certstore/AF03510E8BCAE72BB7C4E9D1910B4E12057075A4/7AC3EFA52DE27A930EC8754DB5E061476948E914
new file mode 100644
index 000000000..911640d0e
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/AF03510E8BCAE72BB7C4E9D1910B4E12057075A4/7AC3EFA52DE27A930EC8754DB5E061476948E914
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/42EFDDE6BFF35ED0BAE6ACDD204C50AE86C4F4FA b/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/42EFDDE6BFF35ED0BAE6ACDD204C50AE86C4F4FA
new file mode 100644
index 000000000..ab9e0cd7d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/42EFDDE6BFF35ED0BAE6ACDD204C50AE86C4F4FA
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/51C01567BCB22968EF5A297B7EA84E195594E0E8 b/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/51C01567BCB22968EF5A297B7EA84E195594E0E8
new file mode 100644
index 000000000..01965769d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/BF375B55D8D7CFC31FD8E3FBF7B1981A91A1A6CA/51C01567BCB22968EF5A297B7EA84E195594E0E8
diff --git a/id/server/data/deploy/conf/moa-spss/certstore/CC93161E57C3898635E1D086008BD053F542457F/7D60E314AA6AEF548A614A9354C5068192051A29 b/id/server/data/deploy/conf/moa-spss/certstore/CC93161E57C3898635E1D086008BD053F542457F/7D60E314AA6AEF548A614A9354C5068192051A29
new file mode 100644
index 000000000..afe6fdf09
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/certstore/CC93161E57C3898635E1D086008BD053F542457F/7D60E314AA6AEF548A614A9354C5068192051A29
diff --git a/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_DE.xml b/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_DE.xml
new file mode 100644
index 000000000..74bede15c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_DE.xml
@@ -0,0 +1,159 @@
+<?xml version="1.0" encoding="UTF-8"?>

+<VerifyTransformsInfoProfile xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#">

+	<dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">

+		<dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116">

+			<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#" exclude-result-prefixes="pr saml">

+				<xsl:output method="xml" xml:space="default"/>

+				<xsl:template match="/" xmlns="http://www.w3.org/1999/xhtml">

+					<html>

+						<head>

+							<title>Signatur der Anmeldedaten</title>

+							<style type="text/css" media="screen">

+              					.normalstyle { font-size: medium; } 

+              					.italicstyle { font-size: medium; font-style: italic; }

+								.titlestyle{ text-decoration:underline; font-weight:bold; font-size: medium; } 

+								.h4style{ font-size: large; }                                                                                      

+              				</style>

+						</head>

+						<body>

+							<h4 class="h4style">Anmeldedaten:</h4>

+							<p class="titlestyle">Daten zur Person</p>

+							<table class="parameters">

+								<xsl:if test="normalize-space(//@Issuer)">

+									<tr>

+										<td class="italicstyle">Name:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//@Issuer"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="string(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue)">

+									<tr>

+										<td class="italicstyle">Geburtsdatum:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,9,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,6,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,1,4)"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">Rolle:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OIDTextualDescription']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">Vollmacht:</td>

+										<td class="normalstyle">

+											<xsl:text>Ich melde mich in Vertretung an. Im nächsten Schritt wird mir eine Liste der für mich verfügbaren Vertretungsverhältnisse angezeigt, aus denen ich eines auswählen werde.</xsl:text>

+										</td>

+									</tr>

+								</xsl:if>

+							</table>

+							<p class="titlestyle">Daten zur Anwendung</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">Name:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='oaFriendlyName']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Staat:</td>

+									<td class="normalstyle">Österreich</td>

+								</tr>

+							</table>

+							<p class="titlestyle">Technische Parameter</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">URL:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='OA']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<xsl:if test="//saml:Attribute[@AttributeName='Geschaeftsbereich']">

+									<tr>

+										<td class="italicstyle">Bereich:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='Geschaeftsbereich']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">

+											Vollmachten-Referenz:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='mandateReferenceValue']"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']">

+									<tr>

+										<td class="italicstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']"/>:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Type"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='bPK'] or //saml:Attribute[@AttributeName='wbPK']">

+									<tr>

+										<td class="italicstyle">Identifikator:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='bPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">OID:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OID']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='HPI']">

+									<tr>

+										<td class="italicstyle">HPI:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='HPI']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<tr>

+									<td class="italicstyle">Datum:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,9,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,6,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,1,4)"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Uhrzeit:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,12,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,15,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,18,2)"/>

+									</td>

+								</tr>

+							</table>

+						</body>

+					</html>

+				</xsl:template>

+			</xsl:stylesheet>

+		</dsig:Transform>

+		<dsig:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/>

+	</dsig:Transforms>

+</VerifyTransformsInfoProfile>

diff --git a/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_EN.xml b/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_EN.xml
new file mode 100644
index 000000000..bf72e4689
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/profiles/MOAIDTransformAuthBlockTable_EN.xml
@@ -0,0 +1,159 @@
+<?xml version="1.0" encoding="UTF-8"?>

+<VerifyTransformsInfoProfile xmlns="http://reference.e-government.gv.at/namespace/moa/20020822#">

+	<dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">

+		<dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116">

+			<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#" exclude-result-prefixes="pr saml">

+				<xsl:output method="xml" xml:space="default"/>

+				<xsl:template match="/" xmlns="http://www.w3.org/1999/xhtml">

+					<html>

+						<head>

+							<title>Signing the authentication data</title>

+							<style type="text/css" media="screen">

+              					.normalstyle { font-size: medium; } 

+              					.italicstyle { font-size: medium; font-style: italic; }

+								.titlestyle{ text-decoration:underline; font-weight:bold; font-size: medium; } 

+								.h4style{ font-size: large; }                                                                                      

+              				</style>

+						</head>

+						<body>

+							<h4 class="h4style">Authentication Data:</h4>

+							<p class="titlestyle">Personal Data</p>

+							<table class="parameters">

+								<xsl:if test="normalize-space(//@Issuer)">

+									<tr>

+										<td class="italicstyle">Name:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//@Issuer"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="string(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue)">

+									<tr>

+										<td class="italicstyle">Date of Birth:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,9,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,6,2)"/>

+											<xsl:text>.</xsl:text>

+											<xsl:value-of select="substring(//saml:Attribute[@AttributeName='Geburtsdatum']/saml:AttributeValue,1,4)"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">Role:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OIDTextualDescription']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">Mandate:</td>

+										<td class="normalstyle">

+											<xsl:text>I log in as representative. In the next step a list of available mandates is shown. Here I select one mandate.</xsl:text>

+										</td>

+									</tr>

+								</xsl:if>

+							</table>

+							<p class="titlestyle">Application Data</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">Name:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='oaFriendlyName']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Country:</td>

+									<td class="normalstyle">Austria</td>

+								</tr>

+							</table>

+							<p class="titlestyle">Technical Parameters</p>

+							<table class="parameters">

+								<tr>

+									<td class="italicstyle">URL:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="//saml:Attribute[@AttributeName='OA']/saml:AttributeValue"/>

+									</td>

+								</tr>

+								<xsl:if test="//saml:Attribute[@AttributeName='Geschaeftsbereich']">

+									<tr>

+										<td class="italicstyle">Sector:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='Geschaeftsbereich']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='mandateReferenceValue']">

+									<tr>

+										<td class="italicstyle">

+											Mandate Reference:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='mandateReferenceValue']"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']">

+									<tr>

+										<td class="italicstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='IdentityLinkDomainIdentifierType']"/>:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Type"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='bPK'] or //saml:Attribute[@AttributeName='wbPK']">

+									<tr>

+										<td class="italicstyle">Identifier:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='bPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+											<xsl:value-of select="//saml:Attribute[@AttributeName='wbPK']/saml:AttributeValue/pr:Identification/pr:Value"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='OIDTextualDescription']">

+									<tr>

+										<td class="italicstyle">OID:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='OID']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<xsl:if test="//saml:Attribute[@AttributeName='HPI']">

+									<tr>

+										<td class="italicstyle">HPI:</td>

+										<td class="normalstyle">

+											<xsl:value-of select="//saml:Attribute[@AttributeName='HPI']/saml:AttributeValue"/>

+										</td>

+									</tr>

+								</xsl:if>

+								<tr>

+									<td class="italicstyle">Date:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,9,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,6,2)"/>

+										<xsl:text>.</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,1,4)"/>

+									</td>

+								</tr>

+								<tr>

+									<td class="italicstyle">Time:</td>

+									<td class="normalstyle">

+										<xsl:value-of select="substring(//@IssueInstant,12,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,15,2)"/>

+										<xsl:text>:</xsl:text>

+										<xsl:value-of select="substring(//@IssueInstant,18,2)"/>

+									</td>

+								</tr>

+							</table>

+						</body>

+					</html>

+				</xsl:template>

+			</xsl:stylesheet>

+		</dsig:Transform>

+		<dsig:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/>

+	</dsig:Transforms>

+</VerifyTransformsInfoProfile>

diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1.der b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1.der
new file mode 100644
index 000000000..1851527de
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1.der
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1[pwd=kunde1].p12 b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1[pwd=kunde1].p12
new file mode 100644
index 000000000..314cbc862
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/moa-ssl-kunde1[pwd=kunde1].p12
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/trustedServers[pwd=servers].keystore b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/trustedServers[pwd=servers].keystore
new file mode 100644
index 000000000..bd9765a4c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer1/trustedServers[pwd=servers].keystore
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2.der b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2.der
new file mode 100644
index 000000000..f50aa4d68
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2.der
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2[pwd=kunde2].p12 b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2[pwd=kunde2].p12
new file mode 100644
index 000000000..e5820fdf2
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/moa-ssl-kunde2[pwd=kunde2].p12
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/trustedServers[pwd=servers].keystore b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/trustedServers[pwd=servers].keystore
new file mode 100644
index 000000000..bd9765a4c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/customer2/trustedServers[pwd=servers].keystore
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/server/moa-ssl-server.der b/id/server/data/deploy/conf/moa-spss/sslKeys/server/moa-ssl-server.der
new file mode 100644
index 000000000..e0f78a82c
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/server/moa-ssl-server.der
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/tomcat[pwd=server].keystore b/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/tomcat[pwd=server].keystore
new file mode 100644
index 000000000..da42549d4
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/tomcat[pwd=server].keystore
diff --git a/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/trustedClients[pwd=clients].keystore b/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/trustedClients[pwd=clients].keystore
new file mode 100644
index 000000000..bdc296cf4
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/sslKeys/tomcat/trustedClients[pwd=clients].keystore
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..d361d919f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..ad13d7b28
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..f9f27442b
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..b6f39e354
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..f9fef65fc
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer
new file mode 100644
index 000000000..3c7775b6e
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..36a442b89
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer
new file mode 100644
index 000000000..54f809962
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..ab9e0cd7d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer
new file mode 100644
index 000000000..01965769d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer
new file mode 100644
index 000000000..33e776369
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der
new file mode 100644
index 000000000..3be7b6a06
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/EGIZ_Test_CA_-_User.20070829-20140101.SerNo00.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/EGIZ_Test_CA_-_User.20070829-20140101.SerNo00.cer
new file mode 100644
index 000000000..73553b996
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/EGIZ_Test_CA_-_User.20070829-20140101.SerNo00.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-Premium-Test-Sig-02.20041227-20141201.SerNo00b5ac.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-Premium-Test-Sig-02.20041227-20141201.SerNo00b5ac.cer
new file mode 100644
index 000000000..911640d0e
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-Premium-Test-Sig-02.20041227-20141201.SerNo00b5ac.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-Qual-01a.20041117-20141117.SerNo00da88.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-Qual-01a.20041117-20141117.SerNo00da88.cer
new file mode 100644
index 000000000..cac44093a
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-Qual-01a.20041117-20141117.SerNo00da88.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-nQual-01a.20041117-20080630.SerNo00da8b.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-nQual-01a.20041117-20080630.SerNo00da8b.cer
new file mode 100644
index 000000000..32893db7f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenMitTestkarten/a-sign-TEST-nQual-01a.20041117-20080630.SerNo00da8b.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..d361d919f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011130-20041130.SerNo01f6(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..ad13d7b28
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20011215-20041215.SerNo021e(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..f9f27442b
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo0291(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..b6f39e354
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20020207-20050207.SerNo210d(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..f9fef65fc
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01.20041201-20141201.SerNoE243(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer
new file mode 100644
index 000000000..3c7775b6e
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-01b.20041201-20141201.SerNo01C854.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..36a442b89
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02.20041203-20141203.SerNoE248(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer
new file mode 100644
index 000000000..54f809962
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-02b.20041203-20141203.SerNo01C857.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer
new file mode 100644
index 000000000..ab9e0cd7d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03.20080425-20180425.SerNoe694(SecureSignatureKeypair).cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer
new file mode 100644
index 000000000..01965769d
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-Qual-03b.20080424-20180424.SerNo041D14.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer
new file mode 100644
index 000000000..33e776369
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/A-Trust-nQual-03.20050817-20150817.SerNo016c1e.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der
new file mode 100644
index 000000000..3be7b6a06
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkarteAuthentisierungsDatenOhneTestkarten/C=AT,O=Hauptverband oesterr. Sozialvers.,CN=Root-CA 1-2045.der
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer
new file mode 100644
index 000000000..afe6fdf09
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/EGIZ_Test_CA_-_Signaturdienst.20070829-20140101.SerNo02.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/EGIZ_Test_CA_-_Signaturdienst.20070829-20140101.SerNo02.cer
new file mode 100644
index 000000000..277b6083a
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/EGIZ_Test_CA_-_Signaturdienst.20070829-20140101.SerNo02.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer
new file mode 100644
index 000000000..376d0753f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer
new file mode 100644
index 000000000..592c96230
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-02.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-02.cer
new file mode 100644
index 000000000..61a7ccb15
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-02.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer
new file mode 100644
index 000000000..5171276f4
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungMitTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer
new file mode 100644
index 000000000..afe6fdf09
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/A-CERT-GOVERNMENT-20090505-20360918.SerNo0E.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer
new file mode 100644
index 000000000..376d0753f
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Nikolaus_Schwab.20040219-20070219.SerNo5C39.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer
new file mode 100644
index 000000000..592c96230
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/Waltraut_Kotschy.20070119-20120119.SerNo02DE1C.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-02.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-02.cer
new file mode 100644
index 000000000..61a7ccb15
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-02.cer
diff --git a/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer
new file mode 100644
index 000000000..5171276f4
--- /dev/null
+++ b/id/server/data/deploy/conf/moa-spss/trustProfiles/MOAIDBuergerkartePersonenbindungOhneTestkarten/a-sign-corporate-light-03-20051114-20151114.SerNo01AAED.cer
diff --git a/id/server/data/deploy/errorpages/errorpage-auth_debug.jsp b/id/server/data/deploy/errorpages/errorpage-auth_debug.jsp
new file mode 100644
index 000000000..8e1e331d6
--- /dev/null
+++ b/id/server/data/deploy/errorpages/errorpage-auth_debug.jsp
@@ -0,0 +1,53 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

+<%@ page contentType="text/html; charset=UTF-8" %>

+<html>

+<head>

+<title>Ein Fehler ist aufgetreten</title>

+</head>

+<% Throwable exceptionThrown = (Throwable)request.getAttribute("ExceptionThrown");

+   String errorMessage = (String)request.getAttribute("ErrorMessage");

+   String wrongParameters = (String)request.getAttribute("WrongParameters");

+   String logLevel = (String)request.getAttribute("LogLevel");

+%>

+

+<body>

+<h1>Fehler bei der Anmeldung</h1>

+<p>Bei der Anmeldung ist ein Fehler aufgetreten.</p>

+

+<% if (logLevel != null) { %>

+<% if (errorMessage != null) { %>

+<p>

+<%= errorMessage%><br>

+</p>

+<% } %>

+<% if (exceptionThrown != null) { %>

+<p> 

+<%= exceptionThrown.getMessage()%>

+</p>

+<% } %>

+<% if (wrongParameters != null) { %>

+<p>Die Angabe der Parameter ist unvollst&auml;ndig.<br></p>

+<b> <%= wrongParameters %> </b><br>

+<p>

+   Beispiele f&uuml;r korrekte Links zur MOA-ID Authentisierung sind:

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/StartAuthentication?Target=&lt;Gesch&auml;ftsbereich&gt;&amp;OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/SelectBKU?Target=&lt;Gesch&auml;ftsbereich&gt;&amp;OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&amp;BKUSelectionTemplate=&lt;BKU-Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+Im Falle einer Applikation aus dem privatwirtschaftlichen Bereich (type="businessService") entf&auml;llt die Angabe des <i>Target</i> Parameters:

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/StartAuthentication?OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/SelectBKU?OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&amp;BKUSelectionTemplate=&lt;BKU-Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>Die Angabe der Parameter <tt>&quot;Template&quot;</tt> und <tt>&quot;BKUSelectionTemplate&quot;</tt> ist optional.</p>

+<% } %>

+<% } %>

+</body>

+</html>
\ No newline at end of file
diff --git a/id/server/data/deploy/errorpages/errorpage-auth_empty.jsp b/id/server/data/deploy/errorpages/errorpage-auth_empty.jsp
new file mode 100644
index 000000000..40739efea
--- /dev/null
+++ b/id/server/data/deploy/errorpages/errorpage-auth_empty.jsp
@@ -0,0 +1,13 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

+<%@ page contentType="text/html; charset=UTF-8" %>

+<html>

+<head>

+<title>Ein Fehler ist aufgetreten</title>

+</head>

+

+<body>

+<h1>Fehler bei der Anmeldung</h1>

+<p>Bei der Anmeldung ist ein Fehler aufgetreten.</p>

+

+</body>

+</html>
\ No newline at end of file
diff --git a/id/server/data/deploy/errorpages/errorpage-proxy_debug.jsp b/id/server/data/deploy/errorpages/errorpage-proxy_debug.jsp
new file mode 100644
index 000000000..8e1e331d6
--- /dev/null
+++ b/id/server/data/deploy/errorpages/errorpage-proxy_debug.jsp
@@ -0,0 +1,53 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

+<%@ page contentType="text/html; charset=UTF-8" %>

+<html>

+<head>

+<title>Ein Fehler ist aufgetreten</title>

+</head>

+<% Throwable exceptionThrown = (Throwable)request.getAttribute("ExceptionThrown");

+   String errorMessage = (String)request.getAttribute("ErrorMessage");

+   String wrongParameters = (String)request.getAttribute("WrongParameters");

+   String logLevel = (String)request.getAttribute("LogLevel");

+%>

+

+<body>

+<h1>Fehler bei der Anmeldung</h1>

+<p>Bei der Anmeldung ist ein Fehler aufgetreten.</p>

+

+<% if (logLevel != null) { %>

+<% if (errorMessage != null) { %>

+<p>

+<%= errorMessage%><br>

+</p>

+<% } %>

+<% if (exceptionThrown != null) { %>

+<p> 

+<%= exceptionThrown.getMessage()%>

+</p>

+<% } %>

+<% if (wrongParameters != null) { %>

+<p>Die Angabe der Parameter ist unvollst&auml;ndig.<br></p>

+<b> <%= wrongParameters %> </b><br>

+<p>

+   Beispiele f&uuml;r korrekte Links zur MOA-ID Authentisierung sind:

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/StartAuthentication?Target=&lt;Gesch&auml;ftsbereich&gt;&amp;OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/SelectBKU?Target=&lt;Gesch&auml;ftsbereich&gt;&amp;OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&amp;BKUSelectionTemplate=&lt;BKU-Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+Im Falle einer Applikation aus dem privatwirtschaftlichen Bereich (type="businessService") entf&auml;llt die Angabe des <i>Target</i> Parameters:

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/StartAuthentication?OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>

+<tt>&lt;a href="https://&lt;MOA-URL&gt;/SelectBKU?OA=&lt;OA-URL&gt;&amp;Template=&lt;Template-URL&gt;&amp;BKUSelectionTemplate=&lt;BKU-Template-URL&gt;&quot;&gt;</tt>

+</p>

+<p>Die Angabe der Parameter <tt>&quot;Template&quot;</tt> und <tt>&quot;BKUSelectionTemplate&quot;</tt> ist optional.</p>

+<% } %>

+<% } %>

+</body>

+</html>
\ No newline at end of file
diff --git a/id/server/data/deploy/errorpages/errorpage-proxy_empty.jsp b/id/server/data/deploy/errorpages/errorpage-proxy_empty.jsp
new file mode 100644
index 000000000..40739efea
--- /dev/null
+++ b/id/server/data/deploy/errorpages/errorpage-proxy_empty.jsp
@@ -0,0 +1,13 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

+<%@ page contentType="text/html; charset=UTF-8" %>

+<html>

+<head>

+<title>Ein Fehler ist aufgetreten</title>

+</head>

+

+<body>

+<h1>Fehler bei der Anmeldung</h1>

+<p>Bei der Anmeldung ist ein Fehler aufgetreten.</p>

+

+</body>

+</html>
\ No newline at end of file
diff --git a/id/server/data/deploy/tomcat/catalina.policy b/id/server/data/deploy/tomcat/catalina.policy
new file mode 100644
index 000000000..3df83157d
--- /dev/null
+++ b/id/server/data/deploy/tomcat/catalina.policy
@@ -0,0 +1,244 @@
+// Licensed to the Apache Software Foundation (ASF) under one or more

+// contributor license agreements.  See the NOTICE file distributed with

+// this work for additional information regarding copyright ownership.

+// The ASF licenses this file to You under the Apache License, Version 2.0

+// (the "License"); you may not use this file except in compliance with

+// the License.  You may obtain a copy of the License at

+//

+//     http://www.apache.org/licenses/LICENSE-2.0

+//

+// Unless required by applicable law or agreed to in writing, software

+// distributed under the License is distributed on an "AS IS" BASIS,

+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

+// See the License for the specific language governing permissions and

+// limitations under the License.

+

+// ============================================================================

+// catalina.corepolicy - Security Policy Permissions for Tomcat 5

+//

+// This file contains a default set of security policies to be enforced (by the

+// JVM) when Catalina is executed with the "-security" option.  In addition

+// to the permissions granted here, the following additional permissions are

+// granted to the codebase specific to each web application:

+//

+// * Read access to the document root directory

+//

+// $Id: catalina.policy 609451 2008-01-06 22:38:14Z markt $

+// ============================================================================

+

+

+// ========== SYSTEM CODE PERMISSIONS =========================================

+

+

+// These permissions apply to javac

+grant codeBase "file:${java.home}/lib/-" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to all shared system extensions

+grant codeBase "file:${java.home}/jre/lib/ext/-" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to javac when ${java.home] points at $JAVA_HOME/jre

+grant codeBase "file:${java.home}/../lib/-" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to all shared system extensions when

+// ${java.home} points at $JAVA_HOME/jre

+grant codeBase "file:${java.home}/lib/ext/-" {

+        permission java.security.AllPermission;

+};

+

+

+// ========== CATALINA CODE PERMISSIONS =======================================

+

+

+// These permissions apply to the launcher code

+grant codeBase "file:${catalina.home}/bin/commons-launcher.jar" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to the daemon code

+grant codeBase "file:${catalina.home}/bin/commons-daemon.jar" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to the commons-logging API

+grant codeBase "file:${catalina.home}/bin/commons-logging-api-1.1.1.jar" {

+		permission java.security.AllPermission;

+        permission java.io.FilePermission "<<ALL FILES>>", "read,write,execute,delete";

+};

+

+// These permissions apply to the server startup code

+grant codeBase "file:${catalina.home}/bin/bootstrap.jar" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to the JMX server

+grant codeBase "file:${catalina.home}/bin/jmx.jar" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to JULI

+grant codeBase "file:${catalina.home}/bin/tomcat-juli.jar" {

+		permission java.security.AllPermission;

+		

+        permission java.util.PropertyPermission "java.util.logging.config.class", "read";

+        permission java.util.PropertyPermission "java.util.logging.config.file", "read";

+        permission java.lang.RuntimePermission "shutdownHooks";

+        permission java.io.FilePermission "${catalina.base}${file.separator}conf${file.separator}logging.properties", "read";

+        permission java.util.PropertyPermission "catalina.base", "read";

+        permission java.util.logging.LoggingPermission "control";

+        permission java.io.FilePermission "${catalina.base}${file.separator}logs", "read, write";

+        permission java.io.FilePermission "${catalina.base}${file.separator}logs${file.separator}*", "read, write";

+		

+		permission java.io.FilePermission "<<ALL FILES>>", "read,write,execute,delete";

+		

+        permission java.lang.RuntimePermission "getClassLoader";

+        // To enable per context logging configuration, permit read access to the appropriate file.

+        // Be sure that the logging configuration is secure before enabling such access

+        // eg for the examples web application:

+        // permission java.io.FilePermission "${catalina.base}${file.separator}webapps${file.separator}examples${file.separator}WEB-INF${file.separator}classes${file.separator}logging.properties", "read";

+};

+

+// These permissions apply to the servlet API classes

+// and those that are shared across all class loaders

+// located in the "common" directory

+grant codeBase "file:${catalina.home}/common/-" {

+        permission java.security.AllPermission;

+};

+

+// These permissions apply to the container's core code, plus any additional

+// libraries installed in the "server" directory

+grant codeBase "file:${catalina.home}/server/-" {

+        permission java.security.AllPermission;

+};

+

+// The permissions granted to the balancer WEB-INF/classes and WEB-INF/lib directory

+grant codeBase "file:${catalina.home}/webapps/balancer/-" {

+        permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.digester";

+        permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.digester.*";

+};

+// ========== WEB APPLICATION PERMISSIONS =====================================

+

+

+// grant codeBase "jar:file:${catalina.home}/webapps/moa-spss/WEB-INF/lib/moa-common-1.4.4.jar!/-" {

+//	permission java.lang.FilePermission

+

+//}

+

+// These permissions are granted by default to all web applications

+// In addition, a web application will be given a read FilePermission

+// and JndiPermission for all files and directories in its document root.

+grant { 

+    // Required for JNDI lookup of named JDBC DataSource's and

+    // javamail named MimePart DataSource used to send mail

+    permission java.util.PropertyPermission "java.home", "read";

+    permission java.util.PropertyPermission "java.	.*", "read";

+    permission java.util.PropertyPermission "javax.sql.*", "read";

+

+    // OS Specific properties to allow read access

+    permission java.util.PropertyPermission "os.name", "read";

+    permission java.util.PropertyPermission "os.version", "read";

+    permission java.util.PropertyPermission "os.arch", "read";

+    permission java.util.PropertyPermission "file.separator", "read";

+    permission java.util.PropertyPermission "path.separator", "read";

+    permission java.util.PropertyPermission "line.separator", "read";

+

+    // JVM properties to allow read access

+    permission java.util.PropertyPermission "java.version", "read";

+    permission java.util.PropertyPermission "java.vendor", "read";

+    permission java.util.PropertyPermission "java.vendor.url", "read";

+    permission java.util.PropertyPermission "java.class.version", "read";

+    permission java.util.PropertyPermission "java.specification.version", "read";

+    permission java.util.PropertyPermission "java.specification.vendor", "read";

+    permission java.util.PropertyPermission "java.specification.name", "read";

+

+    permission java.util.PropertyPermission "java.vm.specification.version", "read";

+    permission java.util.PropertyPermission "java.vm.specification.vendor", "read";

+    permission java.util.PropertyPermission "java.vm.specification.name", "read";

+    permission java.util.PropertyPermission "java.vm.version", "read";

+    permission java.util.PropertyPermission "java.vm.vendor", "read";

+    permission java.util.PropertyPermission "java.vm.name", "read";

+	

+	// required for moa id/spss

+	permission java.util.PropertyPermission "*", "read, write";	

+	

+	//  make this finer, directory listing attack is possible, do not permit logging from here

+	

+//	permission java.io.FilePermission "${catalina.home}/temp/-", "read,write";

+//	permission java.io.FilePermission "${catalina.home}/temp", "read,write";

+	

+	permission java.io.FilePermission "${catalina.home}/conf/moa-id", "read,write";

+	permission java.io.FilePermission "${catalina.home}/conf/moa-id/-", "read,write";

+	permission java.io.FilePermission "${catalina.home}/conf/moa-spss", "read,write";

+	permission java.io.FilePermission "${catalina.home}/conf/moa-spss/-", "read,write";

+	permission java.io.FilePermission "${catalina.home}/conf/log4j.properties", "read";

+	permission java.io.FilePermission "${catalina.base}${file.separator}conf${file.separator}logging.properties", "read";    

+    permission java.util.logging.LoggingPermission "control";

+    permission java.io.FilePermission "${catalina.base}${file.separator}logs", "read, write";

+    permission java.io.FilePermission "${catalina.base}${file.separator}logs${file.separator}*", "read, write";

+	

+	permission java.security.SecurityPermission "*";

+	

+	permission java.lang.RuntimePermission "*";

+	

+	permission java.io.FilePermission "${catalina.home}/webapps/moa-spss/WEB-INF/server-config.wsdd", "read,write";

+	permission java.io.FilePermission "${catalina.home}/webapps/moa-id-auth/WEB-INF/server-config.wsdd", "read,write";

+	permission java.io.FilePermission "client-config.wsdd", "read,write";

+	

+	permission java.net.NetPermission "specifyStreamHandler";

+	

+	permission java.net.SocketPermission "*", "connect,accept,listen,resolve";

+

+	

+

+    // Required for OpenJMX

+    permission java.lang.RuntimePermission "getAttribute";

+

+    // Allow read of JAXP compliant XML parser debug

+    permission java.util.PropertyPermission "jaxp.debug", "read";

+

+    // Precompiled JSPs need access to this package.

+    permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.runtime";

+    permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.runtime.*";

+

+    // Precompiled JSPs need access to this system property.

+    permission java.util.PropertyPermission "org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER", "read";

+};

+

+

+// You can assign additional permissions to particular web applications by

+// adding additional "grant" entries here, based on the code base for that

+// application, /WEB-INF/classes/, or /WEB-INF/lib/ jar files.

+//

+// Different permissions can be granted to JSP pages, classes loaded from

+// the /WEB-INF/classes/ directory, all jar files in the /WEB-INF/lib/

+// directory, or even to individual jar files in the /WEB-INF/lib/ directory.

+//

+// For instance, assume that the standard "examples" application

+// included a JDBC driver that needed to establish a network connection to the

+// corresponding database and used the scrape taglib to get the weather from

+// the NOAA web server.  You might create a "grant" entries like this:

+//

+// The permissions granted to the context root directory apply to JSP pages.

+// grant codeBase "file:${catalina.home}/webapps/examples/-" {

+//      permission java.net.SocketPermission "dbhost.mycompany.com:5432", "connect";

+//      permission java.net.SocketPermission "*.noaa.gov:80", "connect";

+// };

+//

+// The permissions granted to the context WEB-INF/classes directory

+// grant codeBase "file:${catalina.home}/webapps/examples/WEB-INF/classes/-" {

+// };

+//

+// The permission granted to your JDBC driver

+// grant codeBase "jar:file:${catalina.home}/webapps/examples/WEB-INF/lib/driver.jar!/-" {

+//      permission java.net.SocketPermission "dbhost.mycompany.com:5432", "connect";

+// };

+// The permission granted to the scrape taglib

+// grant codeBase "jar:file:${catalina.home}/webapps/examples/WEB-INF/lib/scrape.jar!/-" {

+//      permission java.net.SocketPermission "*.noaa.gov:80", "connect";

+// };

+

diff --git a/id/server/data/deploy/tomcat/tomcat-4.1.x/server.mod_jk.xml b/id/server/data/deploy/tomcat/tomcat-4.1.x/server.mod_jk.xml
new file mode 100644
index 000000000..30770b5bf
--- /dev/null
+++ b/id/server/data/deploy/tomcat/tomcat-4.1.x/server.mod_jk.xml
@@ -0,0 +1,162 @@
+<!-- Alternate Example-less Configuration File -->

+<!-- Note that component elements are nested corresponding to their

+     parent-child relationships with each other -->

+<!-- A "Server" is a singleton element that represents the entire JVM,

+     which may contain one or more "Service" instances.  The Server

+     listens for a shutdown command on the indicated port.

+

+     Note:  A "Server" is not itself a "Container", so you may not

+     define subcomponents such as "Valves" or "Loggers" at this level.

+ -->

+<Server port="8005" shutdown="SHUTDOWN" debug="0">

+	<!-- Uncomment this entry to enable JMX MBeans support -->

+	<!--

+  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"

+                debug="0" port="-1" login="admin" password="admin"/>

+-->

+	<!-- A "Service" is a collection of one or more "Connectors" that share

+       a single "Container" (and therefore the web applications visible

+       within that Container).  Normally, that Container is an "Engine",

+       but this is not required.

+

+       Note:  A "Service" is not itself a "Container", so you may not

+       define subcomponents such as "Valves" or "Loggers" at this level.

+   -->

+	<!-- Define the Tomcat Stand-Alone Service -->

+	<Service name="Tomcat-Standalone">

+		<!-- A "Connector" represents an endpoint by which requests are received

+         and responses are returned.  Each Connector passes requests on to the

+         associated "Container" (normally an Engine) for processing.

+

+         By default, a non-SSL HTTP/1.1 Connector is established on port 8080.

+         You can also enable an SSL HTTP/1.1 Connector on port 8443 by

+         following the instructions below and uncommenting the second Connector

+         entry.  SSL support requires the following steps (see the SSL Config

+         HOWTO in the Tomcat 4.0 documentation bundle for more detailed

+         instructions):

+         * Download and install JSSE 1.0.2 or later, and put the JAR files

+           into "$JAVA_HOME/jre/lib/ext".

+         * Execute:

+             %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)

+             $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)

+           with a password value of "changeit" for both the certificate and

+           the keystore itself.

+

+         By default, DNS lookups are enabled when a web application calls

+         request.getRemoteHost().  This can have an adverse impact on

+         performance, so you can disable it by setting the

+         "enableLookups" attribute to "false".  When DNS lookups are disabled,

+         request.getRemoteHost() will return the String version of the

+         IP address of the remote client.

+    -->

+		<!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->

+		<Connector className="org.apache.coyote.tomcat4.CoyoteConnector" 

+			port="8009" minProcessors="5" maxProcessors="75" 

+			enableLookups="true" redirectPort="8443" acceptCount="10" debug="0" 

+			connectionTimeout="0" useURIValidationHack="false" 

+			protocolHandlerClassName="org.apache.jk.server.JkCoyoteHandler"/>

+		<!-- An Engine represents the entry point (within Catalina) that processes

+         every request.  The Engine implementation for Tomcat stand alone

+         analyzes the HTTP headers included with the request, and passes them

+         on to the appropriate Host (virtual host). -->

+		<!-- Define the top level container in our container hierarchy -->

+		<Engine name="Standalone" defaultHost="localhost" debug="0">

+			<!-- The request dumper valve dumps useful debugging information about

+           the request headers and cookies that were received, and the response

+           headers and cookies that were sent, for all requests received by

+           this instance of Tomcat.  If you care only about requests to a

+           particular virtual host, or a particular application, nest this

+           element inside the corresponding <Host> or <Context> entry instead.

+

+           For a similar mechanism that is portable to all Servlet 2.3

+           containers, check out the "RequestDumperFilter" Filter in the

+           example application (the source for this filter may be found in

+           "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").

+

+           Request dumping is disabled by default.  Uncomment the following

+           element to enable it. -->

+			<!--

+      <Valve className="org.apache.catalina.valves.RequestDumperValve"/>

+      -->

+			<!-- Global logger unless overridden at lower levels -->

+			<Logger className="org.apache.catalina.logger.FileLogger" 

+				prefix="catalina_log." suffix=".txt" timestamp="true"/>

+			<!-- Because this Realm is here, an instance will be shared globally -->

+			<Realm className="org.apache.catalina.realm.MemoryRealm" />

+			<!-- Replace the above Realm with one of the following to get a Realm

+           stored in a database and accessed via JDBC -->

+			<!-- Define the default virtual host -->

+			<Host name="localhost" debug="0" appBase="webapps" 

+				unpackWARs="true" autoDeploy="true">

+				<!-- Normally, users must authenticate themselves to each web app

+             individually.  Uncomment the following entry if you would like

+             a user to be authenticated the first time they encounter a

+             resource protected by a security constraint, and then have that

+             user identity maintained across *all* web applications contained

+             in this virtual host. -->

+				<!--

+        <Valve className="org.apache.catalina.authenticator.SingleSignOn"

+                   debug="0"/>

+        -->

+				<!-- Access log processes all requests for this virtual host.  By

+             default, log files are created in the "logs" directory relative to

+             $CATALINA_HOME.  If you wish, you can specify a different

+             directory with the "directory" attribute.  Specify either a relative

+             (to $CATALINA_HOME) or absolute path to the desired directory.

+        -->

+				<Valve className="org.apache.catalina.valves.AccessLogValve" 

+					directory="logs" prefix="localhost_access_log." 

+					suffix=".txt" pattern="common"/>

+				<!-- Logger shared by all Contexts related to this virtual host.  By

+             default (when using FileLogger), log files are created in the "logs"

+             directory relative to $CATALINA_HOME.  If you wish, you can specify

+             a different directory with the "directory" attribute.  Specify either a

+             relative (to $CATALINA_HOME) or absolute path to the desired

+             directory.-->

+				<Logger className="org.apache.catalina.logger.FileLogger" 

+					directory="logs" prefix="localhost_log." suffix=".txt" 

+					timestamp="true"/>

+				<!-- Define properties for each web application.  This is only needed

+             if you want to set non-default properties, or have web application

+             document roots in places other than the virtual host's appBase

+             directory.  -->

+				<!-- Tomcat Root Context -->

+				<!--

+          <Context path="" docBase="ROOT" debug="0"/>

+        -->

+			</Host>

+		</Engine>

+	</Service>

+	<!-- The MOD_WEBAPP connector is used to connect Apache 1.3 with Tomcat 4.0

+       as its servlet container. Please read the README.txt file coming with

+       the WebApp Module distribution on how to build it.

+       (Or check out the "jakarta-tomcat-connectors/webapp" CVS repository)

+

+       To configure the Apache side, you must ensure that you have the

+       "ServerName" and "Port" directives defined in "httpd.conf".  Then,

+       lines like these to the bottom of your "httpd.conf" file:

+

+         LoadModule webapp_module libexec/mod_webapp.so

+         WebAppConnection warpConnection warp localhost:8008

+         WebAppDeploy examples warpConnection /examples/

+

+       The next time you restart Apache (after restarting Tomcat, if needed)

+       the connection will be established, and all applications you make

+       visible via "WebAppDeploy" directives can be accessed through Apache.

+  -->

+	<!-- Define an Apache-Connector Service -->

+	<Service name="Tomcat-Apache">

+		<Connector className="org.apache.catalina.connector.warp.WarpConnector" 

+			port="8008" minProcessors="5" maxProcessors="75" 

+			enableLookups="true" acceptCount="10" debug="0"/>

+		<!-- Replace "localhost" with what your Apache "ServerName" is set to -->

+		<Engine className="org.apache.catalina.connector.warp.WarpEngine" 

+			name="Apache" debug="0" appBase="webapps">

+			<!-- Global logger unless overridden at lower levels -->

+			<Logger className="org.apache.catalina.logger.FileLogger" 

+				prefix="apache_log." suffix=".txt" timestamp="true"/>

+			<!-- Because this Realm is here, an instance will be shared globally -->

+			<Realm className="org.apache.catalina.realm.MemoryRealm" />

+		</Engine>

+	</Service>

+</Server>
\ No newline at end of file
diff --git a/id/server/data/deploy/tomcat/tomcat-4.1.x/server.xml b/id/server/data/deploy/tomcat/tomcat-4.1.x/server.xml
new file mode 100644
index 000000000..b259d2dec
--- /dev/null
+++ b/id/server/data/deploy/tomcat/tomcat-4.1.x/server.xml
@@ -0,0 +1,171 @@
+<!-- Alternate Example-less Configuration File -->

+<!-- Note that component elements are nested corresponding to their

+     parent-child relationships with each other -->

+<!-- A "Server" is a singleton element that represents the entire JVM,

+     which may contain one or more "Service" instances.  The Server

+     listens for a shutdown command on the indicated port.

+

+     Note:  A "Server" is not itself a "Container", so you may not

+     define subcomponents such as "Valves" or "Loggers" at this level.

+ -->

+<Server port="8005" shutdown="SHUTDOWN" debug="0">

+	<!-- Uncomment this entry to enable JMX MBeans support -->

+	<!--

+  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"

+                debug="0" port="-1" login="admin" password="admin"/>

+-->

+	<!-- A "Service" is a collection of one or more "Connectors" that share

+       a single "Container" (and therefore the web applications visible

+       within that Container).  Normally, that Container is an "Engine",

+       but this is not required.

+

+       Note:  A "Service" is not itself a "Container", so you may not

+       define subcomponents such as "Valves" or "Loggers" at this level.

+   -->

+	<!-- Define the Tomcat Stand-Alone Service -->

+	<Service name="Tomcat-Standalone">

+		<!-- A "Connector" represents an endpoint by which requests are received

+         and responses are returned.  Each Connector passes requests on to the

+         associated "Container" (normally an Engine) for processing.

+

+         By default, a non-SSL HTTP/1.1 Connector is established on port 8080.

+         You can also enable an SSL HTTP/1.1 Connector on port 8443 by

+         following the instructions below and uncommenting the second Connector

+         entry.  SSL support requires the following steps (see the SSL Config

+         HOWTO in the Tomcat 4.0 documentation bundle for more detailed

+         instructions):

+         * Download and install JSSE 1.0.2 or later, and put the JAR files

+           into "$JAVA_HOME/jre/lib/ext".

+         * Execute:

+             %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)

+             $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)

+           with a password value of "changeit" for both the certificate and

+           the keystore itself.

+

+         By default, DNS lookups are enabled when a web application calls

+         request.getRemoteHost().  This can have an adverse impact on

+         performance, so you can disable it by setting the

+         "enableLookups" attribute to "false".  When DNS lookups are disabled,

+         request.getRemoteHost() will return the String version of the

+         IP address of the remote client.

+    -->

+		<!-- Define a non-SSL Coyote HTTP/1.1 Connector on port 8080 -->

+		<Connector className="org.apache.coyote.tomcat4.CoyoteConnector" 

+			port="8080" minProcessors="5" maxProcessors="75" 

+			enableLookups="true" redirectPort="8443" acceptCount="100" 

+			debug="0" connectionTimeout="20000" useURIValidationHack="false" 

+			disableUploadTimeout="true"/>

+		<!-- Note : To disable connection timeouts, set connectionTimeout value to -1 -->

+		<!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->

+		<Connector className="org.apache.coyote.tomcat4.CoyoteConnector" 

+			port="8443" minProcessors="5" maxProcessors="75" 

+			enableLookups="uri" acceptCount="100" debug="0" scheme="https" 

+			secure="true" useURIValidationHack="false" 

+			disableUploadTimeout="true">

+			<Factory 

+				className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory" 

+				clientAuth="false" protocol="TLS"/>

+		</Connector>

+		<!-- An Engine represents the entry point (within Catalina) that processes

+         every request.  The Engine implementation for Tomcat stand alone

+         analyzes the HTTP headers included with the request, and passes them

+         on to the appropriate Host (virtual host). -->

+		<!-- Define the top level container in our container hierarchy -->

+		<Engine name="Standalone" defaultHost="localhost" debug="0">

+			<!-- The request dumper valve dumps useful debugging information about

+           the request headers and cookies that were received, and the response

+           headers and cookies that were sent, for all requests received by

+           this instance of Tomcat.  If you care only about requests to a

+           particular virtual host, or a particular application, nest this

+           element inside the corresponding <Host> or <Context> entry instead.

+

+           For a similar mechanism that is portable to all Servlet 2.3

+           containers, check out the "RequestDumperFilter" Filter in the

+           example application (the source for this filter may be found in

+           "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").

+

+           Request dumping is disabled by default.  Uncomment the following

+           element to enable it. -->

+			<!--

+      	<Valve className="org.apache.catalina.valves.RequestDumperValve"/>

+      	-->

+			<!-- Global logger unless overridden at lower levels -->

+			<Logger className="org.apache.catalina.logger.FileLogger" 

+				prefix="catalina_log." suffix=".txt" timestamp="true"/>

+			<!-- Because this Realm is here, an instance will be shared globally -->

+			<Realm className="org.apache.catalina.realm.MemoryRealm"/>

+			<!-- Define the default virtual host -->

+			<Host name="localhost" debug="0" appBase="webapps" 

+				unpackWARs="true" autoDeploy="true">

+				<!-- Normally, users must authenticate themselves to each web app

+             individually.  Uncomment the following entry if you would like

+             a user to be authenticated the first time they encounter a

+             resource protected by a security constraint, and then have that

+             user identity maintained across *all* web applications contained

+             in this virtual host. -->

+				<!--

+        <Valve className="org.apache.catalina.authenticator.SingleSignOn"

+                   debug="0"/>

+        -->

+				<!-- Access log processes all requests for this virtual host.  By

+             default, log files are created in the "logs" directory relative to

+             $CATALINA_HOME.  If you wish, you can specify a different

+             directory with the "directory" attribute.  Specify either a relative

+             (to $CATALINA_HOME) or absolute path to the desired directory.

+        -->

+				<Valve className="org.apache.catalina.valves.AccessLogValve" 

+					directory="logs" prefix="localhost_access_log." 

+					suffix=".txt" pattern="common"/>

+				<!-- Logger shared by all Contexts related to this virtual host.  By

+             default (when using FileLogger), log files are created in the "logs"

+             directory relative to $CATALINA_HOME.  If you wish, you can specify

+             a different directory with the "directory" attribute.  Specify either a

+             relative (to $CATALINA_HOME) or absolute path to the desired

+             directory.-->

+				<Logger className="org.apache.catalina.logger.FileLogger" 

+					directory="logs" prefix="localhost_log." suffix=".txt" 

+					timestamp="true"/>

+				<!-- Define properties for each web application.  This is only needed

+             if you want to set non-default properties, or have web application

+             document roots in places other than the virtual host's appBase

+             directory.  -->

+				<!-- Tomcat Root Context -->

+				<!--

+          <Context path="" docBase="../moa-id-proxy.war" debug="0"/>

+        -->

+			</Host>

+		</Engine>

+	</Service>

+	<!-- The MOD_WEBAPP connector is used to connect Apache 1.3 with Tomcat 4.0

+       as its servlet container. Please read the README.txt file coming with

+       the WebApp Module distribution on how to build it.

+       (Or check out the "jakarta-tomcat-connectors/webapp" CVS repository)

+

+       To configure the Apache side, you must ensure that you have the

+       "ServerName" and "Port" directives defined in "httpd.conf".  Then,

+       lines like these to the bottom of your "httpd.conf" file:

+

+         LoadModule webapp_module libexec/mod_webapp.so

+         WebAppConnection warpConnection warp localhost:8008

+         WebAppDeploy examples warpConnection /examples/

+

+       The next time you restart Apache (after restarting Tomcat, if needed)

+       the connection will be established, and all applications you make

+       visible via "WebAppDeploy" directives can be accessed through Apache.

+  -->

+	<!-- Define an Apache-Connector Service -->

+	<Service name="Tomcat-Apache">

+		<Connector className="org.apache.catalina.connector.warp.WarpConnector" 

+			port="8008" minProcessors="5" maxProcessors="75" 

+			enableLookups="true" acceptCount="10" debug="0"/>

+		<!-- Replace "localhost" with what your Apache "ServerName" is set to -->

+		<Engine className="org.apache.catalina.connector.warp.WarpEngine" 

+			name="Apache" debug="0" appBase="webapps">

+			<!-- Global logger unless overridden at lower levels -->

+			<Logger className="org.apache.catalina.logger.FileLogger" 

+				prefix="apache_log." suffix=".txt" timestamp="true"/>

+			<!-- Because this Realm is here, an instance will be shared globally -->

+			<Realm className="org.apache.catalina.realm.MemoryRealm"/>

+		</Engine>

+	</Service>

+</Server>
\ No newline at end of file
diff --git a/id/server/data/deploy/tomcat/tomcat-5.0.x/server.mod_jk.xml b/id/server/data/deploy/tomcat/tomcat-5.0.x/server.mod_jk.xml
new file mode 100644
index 000000000..bbc375984
--- /dev/null
+++ b/id/server/data/deploy/tomcat/tomcat-5.0.x/server.mod_jk.xml
@@ -0,0 +1,386 @@
+<!-- Example Server Configuration File -->

+<!-- Note that component elements are nested corresponding to their

+     parent-child relationships with each other -->

+

+<!-- A "Server" is a singleton element that represents the entire JVM,

+     which may contain one or more "Service" instances.  The Server

+     listens for a shutdown command on the indicated port.

+

+     Note:  A "Server" is not itself a "Container", so you may not

+     define subcomponents such as "Valves" or "Loggers" at this level.

+ -->

+

+<Server port="8005" shutdown="SHUTDOWN" debug="0">

+

+

+  <!-- Comment these entries out to disable JMX MBeans support -->

+  <!-- You may also configure custom components (e.g. Valves/Realms) by 

+       including your own mbean-descriptor file(s), and setting the 

+       "descriptors" attribute to point to a ';' seperated list of paths

+       (in the ClassLoader sense) of files to add to the default list.

+       e.g. descriptors="/com/myfirm/mypackage/mbean-descriptor.xml"

+  -->

+  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"

+            debug="0"/>

+  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"

+            debug="0"/>

+

+  <!-- Global JNDI resources -->

+  <GlobalNamingResources>

+

+    <!-- Test entry for demonstration purposes -->

+    <Environment name="simpleValue" type="java.lang.Integer" value="30"/>

+

+    <!-- Editable user database that can also be used by

+         UserDatabaseRealm to authenticate users -->

+    <Resource name="UserDatabase" auth="Container"

+              type="org.apache.catalina.UserDatabase"

+       description="User database that can be updated and saved">

+    </Resource>

+    <ResourceParams name="UserDatabase">

+      <parameter>

+        <name>factory</name>

+        <value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>

+      </parameter>

+      <parameter>

+        <name>pathname</name>

+        <value>conf/tomcat-users.xml</value>

+      </parameter>

+    </ResourceParams>

+

+  </GlobalNamingResources>

+

+  <!-- A "Service" is a collection of one or more "Connectors" that share

+       a single "Container" (and therefore the web applications visible

+       within that Container).  Normally, that Container is an "Engine",

+       but this is not required.

+

+       Note:  A "Service" is not itself a "Container", so you may not

+       define subcomponents such as "Valves" or "Loggers" at this level.

+   -->

+

+  <!-- Define the Tomcat Stand-Alone Service -->

+  <Service name="Catalina">

+

+    <!-- A "Connector" represents an endpoint by which requests are received

+         and responses are returned.  Each Connector passes requests on to the

+         associated "Container" (normally an Engine) for processing.

+

+         By default, a non-SSL HTTP/1.1 Connector is established on port 8080.

+         You can also enable an SSL HTTP/1.1 Connector on port 8443 by

+         following the instructions below and uncommenting the second Connector

+         entry.  SSL support requires the following steps (see the SSL Config

+         HOWTO in the Tomcat 5 documentation bundle for more detailed

+         instructions):

+         * If your JDK version 1.3 or prior, download and install JSSE 1.0.2 or

+           later, and put the JAR files into "$JAVA_HOME/jre/lib/ext".

+         * Execute:

+             %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)

+             $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)

+           with a password value of "changeit" for both the certificate and

+           the keystore itself.

+

+         By default, DNS lookups are enabled when a web application calls

+         request.getRemoteHost().  This can have an adverse impact on

+         performance, so you can disable it by setting the

+         "enableLookups" attribute to "false".  When DNS lookups are disabled,

+         request.getRemoteHost() will return the String version of the

+         IP address of the remote client.

+    -->

+

+    <!-- Define a non-SSL Coyote HTTP/1.1 Connector on port 8080 -->

+    <Connector port="8080"

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false" redirectPort="8443" acceptCount="100"

+               debug="0" connectionTimeout="20000" 

+               disableUploadTimeout="true" />

+    <!-- Note : To disable connection timeouts, set connectionTimeout value

+     to 0 -->

+	

+	<!-- Note : To use gzip compression you could set the following properties :

+	

+			   compression="on" 

+			   compressionMinSize="2048" 

+			   noCompressionUserAgents="gozilla, traviata" 

+			   compressableMimeType="text/html,text/xml"

+	-->

+

+    <!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->

+    <Connector port="8443" 

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false" disableUploadTimeout="true"

+               acceptCount="100" debug="0" scheme="https" secure="true"

+               clientAuth="false" sslProtocol="TLS" />

+

+    <!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->

+    <Connector port="8009" 

+               enableLookups="false" redirectPort="8443" debug="0"

+               protocol="AJP/1.3" />

+

+    <!-- Define a Proxied HTTP/1.1 Connector on port 8082 -->

+    <!-- See proxy documentation for more information about using this. -->

+    <!--

+    <Connector port="8082" 

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false"

+               acceptCount="100" debug="0" connectionTimeout="20000"

+               proxyPort="80" disableUploadTimeout="true" />

+    -->

+

+    <!-- An Engine represents the entry point (within Catalina) that processes

+         every request.  The Engine implementation for Tomcat stand alone

+         analyzes the HTTP headers included with the request, and passes them

+         on to the appropriate Host (virtual host). -->

+

+    <!-- You should set jvmRoute to support load-balancing via JK/JK2 ie :

+    <Engine name="Standalone" defaultHost="localhost" debug="0" jvmRoute="jvm1">         

+    --> 

+         

+    <!-- Define the top level container in our container hierarchy -->

+    <Engine name="Catalina" defaultHost="localhost" debug="0">

+

+      <!-- The request dumper valve dumps useful debugging information about

+           the request headers and cookies that were received, and the response

+           headers and cookies that were sent, for all requests received by

+           this instance of Tomcat.  If you care only about requests to a

+           particular virtual host, or a particular application, nest this

+           element inside the corresponding <Host> or <Context> entry instead.

+

+           For a similar mechanism that is portable to all Servlet 2.4

+           containers, check out the "RequestDumperFilter" Filter in the

+           example application (the source for this filter may be found in

+           "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").

+

+           Request dumping is disabled by default.  Uncomment the following

+           element to enable it. -->

+      <!--

+      <Valve className="org.apache.catalina.valves.RequestDumperValve"/>

+      -->

+

+      <!-- Global logger unless overridden at lower levels -->

+      <Logger className="org.apache.catalina.logger.FileLogger"

+              prefix="catalina_log." suffix=".txt"

+              timestamp="true"/>

+

+      <!-- Because this Realm is here, an instance will be shared globally -->

+

+      <!-- This Realm uses the UserDatabase configured in the global JNDI

+           resources under the key "UserDatabase".  Any edits

+           that are performed against this UserDatabase are immediately

+           available for use by the Realm.  -->

+      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"

+                 debug="0" resourceName="UserDatabase"/>

+

+      <!-- Comment out the old realm but leave here for now in case we

+           need to go back quickly -->

+      <!--

+      <Realm className="org.apache.catalina.realm.MemoryRealm" />

+      -->

+

+      <!-- Replace the above Realm with one of the following to get a Realm

+           stored in a database and accessed via JDBC -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="org.gjt.mm.mysql.Driver"

+          connectionURL="jdbc:mysql://localhost/authority"

+         connectionName="test" connectionPassword="test"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="oracle.jdbc.driver.OracleDriver"

+          connectionURL="jdbc:oracle:thin:@ntserver:1521:ORCL"

+         connectionName="scott" connectionPassword="tiger"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="sun.jdbc.odbc.JdbcOdbcDriver"

+          connectionURL="jdbc:odbc:CATALINA"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!-- Define the default virtual host

+           Note: XML Schema validation will not work with Xerces 2.2.

+       -->

+      <Host name="localhost" debug="0" appBase="webapps"

+       unpackWARs="true" autoDeploy="true"

+       xmlValidation="false" xmlNamespaceAware="false">

+

+        <!-- Defines a cluster for this node,

+             By defining this element, means that every manager will be changed.

+             So when running a cluster, only make sure that you have webapps in there

+             that need to be clustered and remove the other ones.

+             A cluster has the following parameters:

+

+             className = the fully qualified name of the cluster class

+

+             name = a descriptive name for your cluster, can be anything

+

+             debug = the debug level, higher means more output

+

+             mcastAddr = the multicast address, has to be the same for all the nodes

+

+             mcastPort = the multicast port, has to be the same for all the nodes

+             

+             mcastBindAddr = bind the multicast socket to a specific address

+             

+             mcastTTL = the multicast TTL if you want to limit your broadcast

+             

+             mcastSoTimeout = the multicast readtimeout 

+

+             mcastFrequency = the number of milliseconds in between sending a "I'm alive" heartbeat

+

+             mcastDropTime = the number a milliseconds before a node is considered "dead" if no heartbeat is received

+

+             tcpThreadCount = the number of threads to handle incoming replication requests, optimal would be the same amount of threads as nodes 

+

+             tcpListenAddress = the listen address (bind address) for TCP cluster request on this host, 

+                                in case of multiple ethernet cards.

+                                auto means that address becomes

+                                InetAddress.getLocalHost().getHostAddress()

+

+             tcpListenPort = the tcp listen port

+

+             tcpSelectorTimeout = the timeout (ms) for the Selector.select() method in case the OS

+                                  has a wakup bug in java.nio. Set to 0 for no timeout

+

+             printToScreen = true means that managers will also print to std.out

+

+             expireSessionsOnShutdown = true means that 

+

+             useDirtyFlag = true means that we only replicate a session after setAttribute,removeAttribute has been called.

+                            false means to replicate the session after each request.

+                            false means that replication would work for the following piece of code:

+                            <%

+                            HashMap map = (HashMap)session.getAttribute("map");

+                            map.put("key","value");

+                            %>

+             replicationMode = can be either 'pooled', 'synchronous' or 'asynchronous'.

+                               * Pooled means that the replication happens using several sockets in a synchronous way. Ie, the data gets replicated, then the request return. This is the same as the 'synchronous' setting except it uses a pool of sockets, hence it is multithreaded. This is the fastest and safest configuration. To use this, also increase the nr of tcp threads that you have dealing with replication.

+                               * Synchronous means that the thread that executes the request, is also the

+                               thread the replicates the data to the other nodes, and will not return until all

+                               nodes have received the information.

+                               * Asynchronous means that there is a specific 'sender' thread for each cluster node,

+                               so the request thread will queue the replication request into a "smart" queue,

+                               and then return to the client.

+                               The "smart" queue is a queue where when a session is added to the queue, and the same session

+                               already exists in the queue from a previous request, that session will be replaced

+                               in the queue instead of replicating two requests. This almost never happens, unless there is a 

+                               large network delay.

+        -->             

+        <!--

+            When configuring for clustering, you also add in a valve to catch all the requests

+            coming in, at the end of the request, the session may or may not be replicated.

+            A session is replicated if and only if all the conditions are met:

+            1. useDirtyFlag is true or setAttribute or removeAttribute has been called AND

+            2. a session exists (has been created)

+            3. the request is not trapped by the "filter" attribute

+

+            The filter attribute is to filter out requests that could not modify the session,

+            hence we don't replicate the session after the end of this request.

+            The filter is negative, ie, anything you put in the filter, you mean to filter out,

+            ie, no replication will be done on requests that match one of the filters.

+            The filter attribute is delimited by ;, so you can't escape out ; even if you wanted to.

+

+            filter=".*\.gif;.*\.js;" means that we will not replicate the session after requests with the URI

+            ending with .gif and .js are intercepted.

+            

+            The deployer element can be used to deploy apps cluster wide.

+            Currently the deployment only deploys/undeploys to working members in the cluster

+            so no WARs are copied upons startup of a broken node.

+            The deployer watches a directory (watchDir) for WAR files when watchEnabled="true"

+            When a new war file is added the war gets deployed to the local instance,

+            and then deployed to the other instances in the cluster.

+            When a war file is deleted from the watchDir the war is undeployed locally 

+            and cluster wide

+        -->

+        

+        <!--

+        <Cluster className="org.apache.catalina.cluster.tcp.SimpleTcpCluster"

+                 managerClassName="org.apache.catalina.cluster.session.DeltaManager"

+                 expireSessionsOnShutdown="false"

+                 useDirtyFlag="true">

+

+            <Membership 

+                className="org.apache.catalina.cluster.mcast.McastService"

+                mcastAddr="228.0.0.4"

+                mcastPort="45564"

+                mcastFrequency="500"

+                mcastDropTime="3000"/>

+

+            <Receiver 

+                className="org.apache.catalina.cluster.tcp.ReplicationListener"

+                tcpListenAddress="auto"

+                tcpListenPort="4001"

+                tcpSelectorTimeout="100"

+                tcpThreadCount="6"/>

+

+            <Sender

+                className="org.apache.catalina.cluster.tcp.ReplicationTransmitter"

+                replicationMode="pooled"/>

+

+            <Valve className="org.apache.catalina.cluster.tcp.ReplicationValve"

+                   filter=".*\.gif;.*\.js;.*\.jpg;.*\.htm;.*\.html;.*\.txt;"/>

+                   

+            <Deployer className="org.apache.catalina.cluster.deploy.FarmWarDeployer"

+                      tempDir="/tmp/war-temp/"

+                      deployDir="/tmp/war-deploy/"

+                      watchDir="/tmp/war-listen/"

+                      watchEnabled="false"/>

+        </Cluster>

+        -->        

+

+

+

+        <!-- Normally, users must authenticate themselves to each web app

+             individually.  Uncomment the following entry if you would like

+             a user to be authenticated the first time they encounter a

+             resource protected by a security constraint, and then have that

+             user identity maintained across *all* web applications contained

+             in this virtual host. -->

+        <!--

+        <Valve className="org.apache.catalina.authenticator.SingleSignOn"

+                   debug="0"/>

+        -->

+

+        <!-- Access log processes all requests for this virtual host.  By

+             default, log files are created in the "logs" directory relative to

+             $CATALINA_HOME.  If you wish, you can specify a different

+             directory with the "directory" attribute.  Specify either a relative

+             (to $CATALINA_HOME) or absolute path to the desired directory.

+        -->

+        <!--

+        <Valve className="org.apache.catalina.valves.AccessLogValve"

+                 directory="logs"  prefix="localhost_access_log." suffix=".txt"

+                 pattern="common" resolveHosts="false"/>

+        -->

+

+        <!-- Logger shared by all Contexts related to this virtual host.  By

+             default (when using FileLogger), log files are created in the "logs"

+             directory relative to $CATALINA_HOME.  If you wish, you can specify

+             a different directory with the "directory" attribute.  Specify either a

+             relative (to $CATALINA_HOME) or absolute path to the desired

+             directory.-->

+        <Logger className="org.apache.catalina.logger.FileLogger"

+                 directory="logs"  prefix="localhost_log." suffix=".txt"

+            timestamp="true"/>

+

+        <!-- Tomcat Root Context --> 

+        <!-- 

+        <Context path="" docBase="../webappsProxy" debug="0"/>

+        --> 

+

+      </Host>

+

+    </Engine>

+

+  </Service>

+

+</Server>

diff --git a/id/server/data/deploy/tomcat/tomcat-5.0.x/server.xml b/id/server/data/deploy/tomcat/tomcat-5.0.x/server.xml
new file mode 100644
index 000000000..9b86b38ca
--- /dev/null
+++ b/id/server/data/deploy/tomcat/tomcat-5.0.x/server.xml
@@ -0,0 +1,388 @@
+<!-- Example Server Configuration File -->

+<!-- Note that component elements are nested corresponding to their

+     parent-child relationships with each other -->

+

+<!-- A "Server" is a singleton element that represents the entire JVM,

+     which may contain one or more "Service" instances.  The Server

+     listens for a shutdown command on the indicated port.

+

+     Note:  A "Server" is not itself a "Container", so you may not

+     define subcomponents such as "Valves" or "Loggers" at this level.

+ -->

+

+<Server port="8005" shutdown="SHUTDOWN" debug="0">

+

+

+  <!-- Comment these entries out to disable JMX MBeans support -->

+  <!-- You may also configure custom components (e.g. Valves/Realms) by 

+       including your own mbean-descriptor file(s), and setting the 

+       "descriptors" attribute to point to a ';' seperated list of paths

+       (in the ClassLoader sense) of files to add to the default list.

+       e.g. descriptors="/com/myfirm/mypackage/mbean-descriptor.xml"

+  -->

+  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"

+            debug="0"/>

+  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"

+            debug="0"/>

+

+  <!-- Global JNDI resources -->

+  <GlobalNamingResources>

+

+    <!-- Test entry for demonstration purposes -->

+    <Environment name="simpleValue" type="java.lang.Integer" value="30"/>

+

+    <!-- Editable user database that can also be used by

+         UserDatabaseRealm to authenticate users -->

+    <Resource name="UserDatabase" auth="Container"

+              type="org.apache.catalina.UserDatabase"

+       description="User database that can be updated and saved">

+    </Resource>

+    <ResourceParams name="UserDatabase">

+      <parameter>

+        <name>factory</name>

+        <value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>

+      </parameter>

+      <parameter>

+        <name>pathname</name>

+        <value>conf/tomcat-users.xml</value>

+      </parameter>

+    </ResourceParams>

+

+  </GlobalNamingResources>

+

+  <!-- A "Service" is a collection of one or more "Connectors" that share

+       a single "Container" (and therefore the web applications visible

+       within that Container).  Normally, that Container is an "Engine",

+       but this is not required.

+

+       Note:  A "Service" is not itself a "Container", so you may not

+       define subcomponents such as "Valves" or "Loggers" at this level.

+   -->

+

+  <!-- Define the Tomcat Stand-Alone Service -->

+  <Service name="Catalina">

+

+    <!-- A "Connector" represents an endpoint by which requests are received

+         and responses are returned.  Each Connector passes requests on to the

+         associated "Container" (normally an Engine) for processing.

+

+         By default, a non-SSL HTTP/1.1 Connector is established on port 8080.

+         You can also enable an SSL HTTP/1.1 Connector on port 8443 by

+         following the instructions below and uncommenting the second Connector

+         entry.  SSL support requires the following steps (see the SSL Config

+         HOWTO in the Tomcat 5 documentation bundle for more detailed

+         instructions):

+         * If your JDK version 1.3 or prior, download and install JSSE 1.0.2 or

+           later, and put the JAR files into "$JAVA_HOME/jre/lib/ext".

+         * Execute:

+             %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)

+             $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)

+           with a password value of "changeit" for both the certificate and

+           the keystore itself.

+

+         By default, DNS lookups are enabled when a web application calls

+         request.getRemoteHost().  This can have an adverse impact on

+         performance, so you can disable it by setting the

+         "enableLookups" attribute to "false".  When DNS lookups are disabled,

+         request.getRemoteHost() will return the String version of the

+         IP address of the remote client.

+    -->

+

+    <!-- Define a non-SSL Coyote HTTP/1.1 Connector on port 8080 -->

+    <Connector port="8080"

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false" redirectPort="8443" acceptCount="100"

+               debug="0" connectionTimeout="20000" 

+               disableUploadTimeout="true" />

+    <!-- Note : To disable connection timeouts, set connectionTimeout value

+     to 0 -->

+	

+	<!-- Note : To use gzip compression you could set the following properties :

+	

+			   compression="on" 

+			   compressionMinSize="2048" 

+			   noCompressionUserAgents="gozilla, traviata" 

+			   compressableMimeType="text/html,text/xml"

+	-->

+

+    <!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->

+    <Connector port="8443" 

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false" disableUploadTimeout="true"

+               acceptCount="100" debug="0" scheme="https" secure="true"

+               clientAuth="false" sslProtocol="TLS" />

+

+    <!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->

+    <!--

+    <Connector port="8009" 

+               enableLookups="false" redirectPort="8443" debug="0"

+               protocol="AJP/1.3" />

+    -->

+

+    <!-- Define a Proxied HTTP/1.1 Connector on port 8082 -->

+    <!-- See proxy documentation for more information about using this. -->

+    <!--

+    <Connector port="8082" 

+               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"

+               enableLookups="false"

+               acceptCount="100" debug="0" connectionTimeout="20000"

+               proxyPort="80" disableUploadTimeout="true" />

+    -->

+

+    <!-- An Engine represents the entry point (within Catalina) that processes

+         every request.  The Engine implementation for Tomcat stand alone

+         analyzes the HTTP headers included with the request, and passes them

+         on to the appropriate Host (virtual host). -->

+

+    <!-- You should set jvmRoute to support load-balancing via JK/JK2 ie :

+    <Engine name="Standalone" defaultHost="localhost" debug="0" jvmRoute="jvm1">         

+    --> 

+         

+    <!-- Define the top level container in our container hierarchy -->

+    <Engine name="Catalina" defaultHost="localhost" debug="0">

+

+      <!-- The request dumper valve dumps useful debugging information about

+           the request headers and cookies that were received, and the response

+           headers and cookies that were sent, for all requests received by

+           this instance of Tomcat.  If you care only about requests to a

+           particular virtual host, or a particular application, nest this

+           element inside the corresponding <Host> or <Context> entry instead.

+

+           For a similar mechanism that is portable to all Servlet 2.4

+           containers, check out the "RequestDumperFilter" Filter in the

+           example application (the source for this filter may be found in

+           "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").

+

+           Request dumping is disabled by default.  Uncomment the following

+           element to enable it. -->

+      <!--

+      <Valve className="org.apache.catalina.valves.RequestDumperValve"/>

+      -->

+

+      <!-- Global logger unless overridden at lower levels -->

+      <Logger className="org.apache.catalina.logger.FileLogger"

+              prefix="catalina_log." suffix=".txt"

+              timestamp="true"/>

+

+      <!-- Because this Realm is here, an instance will be shared globally -->

+

+      <!-- This Realm uses the UserDatabase configured in the global JNDI

+           resources under the key "UserDatabase".  Any edits

+           that are performed against this UserDatabase are immediately

+           available for use by the Realm.  -->

+      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"

+                 debug="0" resourceName="UserDatabase"/>

+

+      <!-- Comment out the old realm but leave here for now in case we

+           need to go back quickly -->

+      <!--

+      <Realm className="org.apache.catalina.realm.MemoryRealm" />

+      -->

+

+      <!-- Replace the above Realm with one of the following to get a Realm

+           stored in a database and accessed via JDBC -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="org.gjt.mm.mysql.Driver"

+          connectionURL="jdbc:mysql://localhost/authority"

+         connectionName="test" connectionPassword="test"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="oracle.jdbc.driver.OracleDriver"

+          connectionURL="jdbc:oracle:thin:@ntserver:1521:ORCL"

+         connectionName="scott" connectionPassword="tiger"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!--

+      <Realm  className="org.apache.catalina.realm.JDBCRealm" debug="99"

+             driverName="sun.jdbc.odbc.JdbcOdbcDriver"

+          connectionURL="jdbc:odbc:CATALINA"

+              userTable="users" userNameCol="user_name" userCredCol="user_pass"

+          userRoleTable="user_roles" roleNameCol="role_name" />

+      -->

+

+      <!-- Define the default virtual host

+           Note: XML Schema validation will not work with Xerces 2.2.

+       -->

+      <Host name="localhost" debug="0" appBase="webapps"

+       unpackWARs="true" autoDeploy="true"

+       xmlValidation="false" xmlNamespaceAware="false">

+

+        <!-- Defines a cluster for this node,

+             By defining this element, means that every manager will be changed.

+             So when running a cluster, only make sure that you have webapps in there

+             that need to be clustered and remove the other ones.

+             A cluster has the following parameters:

+

+             className = the fully qualified name of the cluster class

+

+             name = a descriptive name for your cluster, can be anything

+

+             debug = the debug level, higher means more output

+

+             mcastAddr = the multicast address, has to be the same for all the nodes

+

+             mcastPort = the multicast port, has to be the same for all the nodes

+             

+             mcastBindAddr = bind the multicast socket to a specific address

+             

+             mcastTTL = the multicast TTL if you want to limit your broadcast

+             

+             mcastSoTimeout = the multicast readtimeout 

+

+             mcastFrequency = the number of milliseconds in between sending a "I'm alive" heartbeat

+

+             mcastDropTime = the number a milliseconds before a node is considered "dead" if no heartbeat is received

+

+             tcpThreadCount = the number of threads to handle incoming replication requests, optimal would be the same amount of threads as nodes 

+

+             tcpListenAddress = the listen address (bind address) for TCP cluster request on this host, 

+                                in case of multiple ethernet cards.

+                                auto means that address becomes

+                                InetAddress.getLocalHost().getHostAddress()

+

+             tcpListenPort = the tcp listen port

+

+             tcpSelectorTimeout = the timeout (ms) for the Selector.select() method in case the OS

+                                  has a wakup bug in java.nio. Set to 0 for no timeout

+

+             printToScreen = true means that managers will also print to std.out

+

+             expireSessionsOnShutdown = true means that 

+

+             useDirtyFlag = true means that we only replicate a session after setAttribute,removeAttribute has been called.

+                            false means to replicate the session after each request.

+                            false means that replication would work for the following piece of code:

+                            <%

+                            HashMap map = (HashMap)session.getAttribute("map");

+                            map.put("key","value");

+                            %>

+             replicationMode = can be either 'pooled', 'synchronous' or 'asynchronous'.

+                               * Pooled means that the replication happens using several sockets in a synchronous way. Ie, the data gets replicated, then the request return. This is the same as the 'synchronous' setting except it uses a pool of sockets, hence it is multithreaded. This is the fastest and safest configuration. To use this, also increase the nr of tcp threads that you have dealing with replication.

+                               * Synchronous means that the thread that executes the request, is also the

+                               thread the replicates the data to the other nodes, and will not return until all

+                               nodes have received the information.

+                               * Asynchronous means that there is a specific 'sender' thread for each cluster node,

+                               so the request thread will queue the replication request into a "smart" queue,

+                               and then return to the client.

+                               The "smart" queue is a queue where when a session is added to the queue, and the same session

+                               already exists in the queue from a previous request, that session will be replaced

+                               in the queue instead of replicating two requests. This almost never happens, unless there is a 

+                               large network delay.

+        -->             

+        <!--

+            When configuring for clustering, you also add in a valve to catch all the requests

+            coming in, at the end of the request, the session may or may not be replicated.

+            A session is replicated if and only if all the conditions are met:

+            1. useDirtyFlag is true or setAttribute or removeAttribute has been called AND

+            2. a session exists (has been created)

+            3. the request is not trapped by the "filter" attribute

+

+            The filter attribute is to filter out requests that could not modify the session,

+            hence we don't replicate the session after the end of this request.

+            The filter is negative, ie, anything you put in the filter, you mean to filter out,

+            ie, no replication will be done on requests that match one of the filters.

+            The filter attribute is delimited by ;, so you can't escape out ; even if you wanted to.

+

+            filter=".*\.gif;.*\.js;" means that we will not replicate the session after requests with the URI

+            ending with .gif and .js are intercepted.

+            

+            The deployer element can be used to deploy apps cluster wide.

+            Currently the deployment only deploys/undeploys to working members in the cluster

+            so no WARs are copied upons startup of a broken node.

+            The deployer watches a directory (watchDir) for WAR files when watchEnabled="true"

+            When a new war file is added the war gets deployed to the local instance,

+            and then deployed to the other instances in the cluster.

+            When a war file is deleted from the watchDir the war is undeployed locally 

+            and cluster wide

+        -->

+        

+        <!--

+        <Cluster className="org.apache.catalina.cluster.tcp.SimpleTcpCluster"

+                 managerClassName="org.apache.catalina.cluster.session.DeltaManager"

+                 expireSessionsOnShutdown="false"

+                 useDirtyFlag="true">

+

+            <Membership 

+                className="org.apache.catalina.cluster.mcast.McastService"

+                mcastAddr="228.0.0.4"

+                mcastPort="45564"

+                mcastFrequency="500"

+                mcastDropTime="3000"/>

+

+            <Receiver 

+                className="org.apache.catalina.cluster.tcp.ReplicationListener"

+                tcpListenAddress="auto"

+                tcpListenPort="4001"

+                tcpSelectorTimeout="100"

+                tcpThreadCount="6"/>

+

+            <Sender

+                className="org.apache.catalina.cluster.tcp.ReplicationTransmitter"

+                replicationMode="pooled"/>

+

+            <Valve className="org.apache.catalina.cluster.tcp.ReplicationValve"

+                   filter=".*\.gif;.*\.js;.*\.jpg;.*\.htm;.*\.html;.*\.txt;"/>

+                   

+            <Deployer className="org.apache.catalina.cluster.deploy.FarmWarDeployer"

+                      tempDir="/tmp/war-temp/"

+                      deployDir="/tmp/war-deploy/"

+                      watchDir="/tmp/war-listen/"

+                      watchEnabled="false"/>

+        </Cluster>

+        -->        

+

+

+

+        <!-- Normally, users must authenticate themselves to each web app

+             individually.  Uncomment the following entry if you would like

+             a user to be authenticated the first time they encounter a

+             resource protected by a security constraint, and then have that

+             user identity maintained across *all* web applications contained

+             in this virtual host. -->

+        <!--

+        <Valve className="org.apache.catalina.authenticator.SingleSignOn"

+                   debug="0"/>

+        -->

+

+        <!-- Access log processes all requests for this virtual host.  By

+             default, log files are created in the "logs" directory relative to

+             $CATALINA_HOME.  If you wish, you can specify a different

+             directory with the "directory" attribute.  Specify either a relative

+             (to $CATALINA_HOME) or absolute path to the desired directory.

+        -->

+        <!--

+        <Valve className="org.apache.catalina.valves.AccessLogValve"

+                 directory="logs"  prefix="localhost_access_log." suffix=".txt"

+                 pattern="common" resolveHosts="false"/>

+        -->

+

+        <!-- Logger shared by all Contexts related to this virtual host.  By

+             default (when using FileLogger), log files are created in the "logs"

+             directory relative to $CATALINA_HOME.  If you wish, you can specify

+             a different directory with the "directory" attribute.  Specify either a

+             relative (to $CATALINA_HOME) or absolute path to the desired

+             directory.-->

+        <Logger className="org.apache.catalina.logger.FileLogger"

+                 directory="logs"  prefix="localhost_log." suffix=".txt"

+            timestamp="true"/>

+

+        <!-- Tomcat Root Context --> 

+        <!-- 

+        <Context path="" docBase="../webappsProxy" debug="0"/>

+        --> 

+

+      </Host>

+

+    </Engine>

+

+  </Service>

+

+</Server>

diff --git a/id/server/data/deploy/tomcat/tomcat-util-4.1.27-patched/tomcat-util.jar b/id/server/data/deploy/tomcat/tomcat-util-4.1.27-patched/tomcat-util.jar
new file mode 100644
index 000000000..62c7645b9
--- /dev/null
+++ b/id/server/data/deploy/tomcat/tomcat-util-4.1.27-patched/tomcat-util.jar
diff --git a/id/server/data/deploy/tomcat/unix/tomcat-start.sh b/id/server/data/deploy/tomcat/unix/tomcat-start.sh
new file mode 100644
index 000000000..6dc0289d5
--- /dev/null
+++ b/id/server/data/deploy/tomcat/unix/tomcat-start.sh
@@ -0,0 +1,28 @@
+#! /bin/bash

+

+export JAVA_HOME= <insert java home directory (no trailing path separator)>

+export CATALINA_HOME= <insert Tomcat 4.1.x home directory (no trailing path separator)>

+export CATALINA_BASE=$CATALINA_HOME

+

+CONFIG_OPT=-Dmoa.id.configuration=$CATALINA_BASE/conf/moa-id/SampleMOAIDConfiguration.xml

+LOGGING_OPT=-Dlog4j.configuration=file:$CATALINA_BASE/conf/moa-id/log4j.properties

+SPSS_OPT=-Dmoa.spss.server.configuration=$CATALINA_BASE/conf/moa-spss/SampleMOASPSSConfiguration.xml

+

+#TRUST_STORE_OPT=-Djavax.net.ssl.trustStore=$CATALINA_BASE/conf/moa-spss/keys/clients/trustedMOAClients-password=changeit.keystore

+#TRUST_STORE_PASS_OPT=-Djavax.net.ssl.trustStorePassword=changeit

+#TRUST_STORE_TYPE_OPT=-Djavax.net.ssl.trustStoreType=jks

+

+export CATALINA_OPTS="$CONFIG_OPT $LOGGING_OPT $SPSS_OPT $TRUST_STORE_OPT $TRUST_STORE_PASS_OPT $TRUST_STORE_TYPE_OPT"

+

+echo CATALINA_HOME: $CATALINA_HOME

+echo CATALINA_BASE: $CATALINA_BASE

+echo CATALINA_OPTS: $CATALINA_OPTS

+

+echo 

+echo Moving old log files to logs\backup

+mv logs/*.out logs/backup

+mv logs/*.txt logs/backup

+mv logs/*.log logs/backup

+

+cd $CATALINA_HOME

+./bin/startup.sh

diff --git a/id/server/data/deploy/tomcat/unix/tomcat-stop.sh b/id/server/data/deploy/tomcat/unix/tomcat-stop.sh
new file mode 100644
index 000000000..82e4ffcfe
--- /dev/null
+++ b/id/server/data/deploy/tomcat/unix/tomcat-stop.sh
@@ -0,0 +1,7 @@
+#! /bin/bash

+

+export JAVA_HOME= <insert java home directory (no trailing path separator)>

+export CATALINA_HOME= <insert Tomcat 4.1.x home directory (no trailing path separator)>

+

+cd $CATALINA_HOME

+./bin/shutdown.sh
\ No newline at end of file
diff --git a/id/server/data/deploy/tomcat/uriworkermap.properties b/id/server/data/deploy/tomcat/uriworkermap.properties
new file mode 100644
index 000000000..32b4c1f50
--- /dev/null
+++ b/id/server/data/deploy/tomcat/uriworkermap.properties
@@ -0,0 +1,9 @@
+# a sample mod_jk uriworkermap.properties file for mapping 
+# MOA-ID-AUTH and MOA-ID-PROXY web service requests to workers
+#
+# omit the mappings you don't need
+
+#/moa-id-auth/*=moaworker
+
+#forward all requests to tomcat (e.g.)
+/*=moaworker
\ No newline at end of file
diff --git a/id/server/data/deploy/tomcat/win32/startTomcat.bat b/id/server/data/deploy/tomcat/win32/startTomcat.bat
new file mode 100644
index 000000000..676e52f21
--- /dev/null
+++ b/id/server/data/deploy/tomcat/win32/startTomcat.bat
@@ -0,0 +1,26 @@
+rem ----------------------------------------------------------------------------------------------

+rem Modify these entries according to your needs

+

+rem JDK home directory (no trailing path separator)

+set JAVA_HOME=<jdk home directory>

+

+rem Tomcat home directory (no trailing path separator)

+set CATALINA_HOME=<Tomcat home directory>

+

+rem ----------------------------------------------------------------------------------------------

+

+set CONFIG_OPT_SPSS=-Dmoa.spss.server.configuration=%CATALINA_HOME%/conf/moa-spss/SampleMOASPSSConfiguration.xml

+set CONFIG_OPT_ID=-Dmoa.id.configuration=%CATALINA_HOME%/conf/moa-id/SampleMOAIDConfiguration.xml

+set LOGGING_OPT=-Dlog4j.configuration=file:%CATALINA_HOME%/conf/moa-id/log4j.properties

+

+set PARAMS_MOA=%CONFIG_OPT_SPSS% %CONFIG_OPT_ID% %LOGGING_OPT%

+

+rem set PARAM_TRUST_STORE=-Djavax.net.ssl.trustStore=truststore.jks

+rem set PARAM_TRUST_STORE_PASS=-Djavax.net.ssl.trustStorePassword=changeit

+rem set PARAM_TRUST_STORE_TYPE=-Djavax.net.ssl.trustStoreType=jks

+rem set PARAMS_SSL=%PARAM_TRUST_STORE% %PARAM_TRUST_STORE_PASS% %PARAM_TRUST_STORE_TYPE%

+

+set CATALINA_OPTS=%PARAMS_MOA% %PARAMS_SSL% 

+

+cd %CATALINA_HOME%

+bin\catalina.bat start

diff --git a/id/server/data/deploy/tomcat/win32/stopTomcat.bat b/id/server/data/deploy/tomcat/win32/stopTomcat.bat
new file mode 100644
index 000000000..46c1ba570
--- /dev/null
+++ b/id/server/data/deploy/tomcat/win32/stopTomcat.bat
@@ -0,0 +1,13 @@
+rem ----------------------------------------------------------------------------------------------

+rem Modify these entries according to your needs

+

+rem JDK home directory (no trailing path separator)

+set JAVA_HOME=<jdk home directory>

+

+rem Tomcat home directory (no trailing path separator)

+set CATALINA_HOME=<Tomcat home directory>

+

+rem ----------------------------------------------------------------------------------------------

+

+cd %CATALINA_HOME%

+bin\catalina.bat stop

diff --git a/id/server/data/deploy/tomcat/workers.properties b/id/server/data/deploy/tomcat/workers.properties
new file mode 100644
index 000000000..9350ddc77
--- /dev/null
+++ b/id/server/data/deploy/tomcat/workers.properties
@@ -0,0 +1,6 @@
+# a sample workers.properties file defining a single mod_jk worker
+
+worker.list=moaworker
+worker.moaworker.type=ajp13
+worker.moaworker.host=localhost
+worker.moaworker.port=8009