Enabling Java applet support for Administration Console for Content Platform Engine on WebSphere Application Server 8

If you need to use workflow-related applets in Administration Console for Content Platform Engine with version 8 (or higher) of WebSphere® Application Server, you must disable HttpOnly session cookies. Because Administration Console for Content Platform Engine is collocated with Content Platform Engine, you must disable the cookies in the WebSphere profile that hosts Content Platform Engine. You can disable the cookies globally or just for your deployed application.

To enable Java applet support for Administration Console for Content Platform Engine on WebSphere Application Server 8:

1. Log on to the WebSphere administration console.
2. Disable HttpOnly session cookies, either globally or for just your deployed Content Platform Engine application:
   • To disable HttpOnly globally, either for single sign-on (SSO) or for secure sockets layer (SSL):
     • To disable HttpOnly for SSO:
       1. Navigate to Security > Global security > Authentication > Web and SIP security > Single sign-on (SSO)
       2. Under General Properties, clear the Set security cookies to HTTP Only to help prevent cross-site scripting attacks check box and click Apply.
     • To enable cookies and disable HttpOnly settings at the server level setting when using SSL:
       1. Navigate to Servers > Server Types > WebSphere application servers.
       2. Select the server where FileNetEngine is deployed.
       3. Click Session Management.
       4. Under General properties, select the Override session management check box and click Apply.
       5. Click the Enable cookies link under Session tracking mechanism.
       6. Clear the box Set session cookies to HTTP Only to help prevent cross-site scripting attacks check box.
   • To disable HttpOnly and enable cookies for the deployed Content Platform Engine application:
     1. Navigate to Applications > Application Types > WebSphere enterprise applications > FileNetEngine > Manage Modules > acce > Session Management.
     2. Under General properties, select the Override session management check box and click Apply.
     3. Under Session tracking mechanism, click the Enable cookies link.
     4. Under General properties, clear the Set session cookies to HTTP Only to help prevent cross-site scripting attacks check box and click Apply.
3. Save your settings and restart WebSphere Application Server.