WebSphere Application Server security

This topic describes how to configure the WebSphere Application Server security.

1. Use the WebSphere® Application Server administrative console to configure the desired user registry. The following user registries are available for configuration:
   • Local operating system. See Configuring the operating system registry for instructions.
   • LDAP. See Configuring the LDAP registry for instructions.
   • Custom. See Configuring a custom registry for instructions.
   • Federated. See Configuring a federated registry for instructions.
2. Enable the administrative and application security option for the desired user registry that you configured, using the following steps:
   1. Click Security > Secure administration, applications, and infrastructure > Enable administrative security.
   2. Click Security > Secure administration, applications, and infrastructure > Enable application security.
   3. In Available realm definitions, select the user registry that you have configured (for example, Lightweight Directory Access Protocol (LDAP) user registry).
   4. Click Security > Secure administration, applications, and infrastructure > Set as current. This selection forces validation of any properties that are configured for the selected realm.
   5. Click Apply.
      Note: If you are in a WebSphere Application Server Network Deployment environment, select Synchronize changes with Nodes before saving the changes.
   6. Save the changes.
3. Manually add the security policy for the DB2® JDBC driver, see Configuring security policy for the JDBC provider.
4. Enable the Java™ 2 security option with the following steps:
   1. Click Security > Secure administration, applications, and infrastructure > Use Java 2 security to restrict application access to local resources.
   2. Click Security > Secure administration, applications, and infrastructure > Warn if applications are granted custom permissions.
   3. Click Security > Secure administration, applications, and infrastructure > Restrict access to resource authentication data.
5. Click Apply.
6. Save the changes.