IBM® Business Automation
Workflow doesn't support HTTP by
default. It is not recommended that you switch to HTTP because it makes Business Automation Workflow less secure. However, if you are upgrading from
IBM BPM V8.5 and can't immediately modify your connections to use secure HTTPS, you can re-enable
HTTP access in Business Automation Workflow temporarily.
About this task
Your environment reverts to the state of IBM Business Process
Manager V8.5.7 CF2016.12 and earlier versions of
IBM BPM V8.5 after completing these
steps.
Procedure
Follow these steps assuming the name of your deployment environment is
De1:
-
Shut down all the servers.
-
Go to the <install_root>/bin directory, and run
wsadmin
-conntype none -lang jython -profileName dmgrProfile. For Business Automation Workflow Express, use the stand-alone server's
profile.
-
If secure connections are used, Business Automation Workflow marks the cookies as secure by default. However,
if you re-enabled non-secure http:// access to Business Automation Workflow, you may have disabled the
Secure flag for Business Automation Workflow
cookies by setting the deployment-level custom property
ProcessServer.MarkCookiesSecureOnSecureConnections to
false. When reverting to secure HTTPS, you should re-enable the
Secure flag and set the property back to true.
To set the property to
true, you can use the following command (which
assumes that your deployment environment is named
De1):
AdminTask.setBPMProperty(['-de', 'De1', '-name', 'ProcessServer.MarkCookiesSecureOnSecureConnections', '-value', 'true])"
-
Enter the following commands on the wsadmin prompt (where
De1 is the name of your Business Automation Workflow deployment environment):
wsadmin> print AdminTask.configureBPMTransportSecurity( [ '-de', 'De1', '-apps', '201612', '-transportSecurity', 'allowhttp'] )
wsadmin> print AdminTask.configureBPMTransportSecurity( [ '-de', 'De1', '-apps', 'productREST', '-transportSecurity', 'allowhttp'] )
wsadmin> AdminTask.configureSingleSignon('-requiresSSL false')
wsadmin> for server in AdminUtilities.convertToList(AdminTask.listServers('-serverType APPLICATION_SERVER')):
wsadmin> for cookie in AdminUtilities.convertToList(AdminConfig.list('Cookie', server)):
Note: This line must be indented one space.
wsadmin> AdminConfig.modify(cookie, [['secure','false']])
Note: This line must be indented two spaces.
wsadmin>
Note: This line is a required empty line to end the loop. Just press Enter.
wsadmin> AdminConfig.save()
wsadmin> exit
-
Restart all the servers.
What to do next
Don't leave HTTP enabled permanently. After you change all your server communications to
use HTTPS, follow the instructions in Reverting to secure HTTPS .