Enabling two-way SSL

You must enable two-way SSL on the IBM® HTTP Server. The IMS Server relies on the SSL certificate setup on IBM HTTP Server for its mutual SSL authentication with its clients. This procedure is required for smart card authentication.

Procedure

  1. Select Start > All Programs > IBM WebSphere > Application Server <version> > Profiles > <profile name> > Administrative console.
  2. Log on to the IBM Integrated Solutions Console.
  3. On the Integrated Solutions Console left navigation pane, select Servers > Server Types > Web Servers > Web server name.
  4. Click Configuration file.
  5. Add the lines marked bold:
    <VirtualHost *:443>
    SSLEnable
    SSLProtocolDisable SSLv2
    SSLClientAuth optional
    SSLServerCert <IHS certificate alias>
    </VirtualHost>
  6. Click OK.