IBM Tivoli Federated Identity Manager, Version 6.2.2

Configuring WebSphere Application Server for SSL

This topic describes how to configure WebSphere Application Server for SSL.

About this task

Use the WebSphere® Application Server Administrative Console to configure WebSphere Application Server Secure for Secure Sockets Layer (SSL) authentication.

Procedure

  1. Create an SSL configuration entry:
    1. Click Security > SSL certificate and key management.
    2. Click SSL Configuration from the Related Items list.
    3. Click New to create an SSL configuration specifically for Common Audit Service.
    4. Specify Name as CARSSSLConfiguration.
    5. Specify Trust store name (for example, CellDefaultKeyStore).
    6. Specify Keystore name (for example, CellDefaultKeyStore).
    7. Click Get certificate aliases.
    8. Specify Default server certificate alias (for example, as default).
    9. Specify Default client certificate alias (for example, as default).
    10. Click OK.
      Note: If you are in a WebSphere Application Server Network Deployment environment, select Synchronize changes with Nodes before saving the changes.
    11. Save the changes.
  2. Configure SSL between the WebSphere Application Server and the Web service client. To do this, assign an SSL configuration to a WebSphere Application Server configuration scope that enables the port for encryption and decryption of inbound data.
    1. Click Security > SSL certificate and key management > Manage endpoint security configurations.
    2. In the inbound local topology tree, click on the cluster or server name into which Common Audit Service is being deployed.
    3. Under Specific SSL configuration for this endpoint, enable Override inherited values.
    4. Select CARSSSLConfiguration from within the SSL configuration field.
    5. Click Update certificate alias list.
    6. Specify the certificate alias in key store from the drop down list (for example, default).
    7. Click OK.
    8. Save the changes.
    9. Click Security > SSL certificate and key management.
    10. Select to dynamically update the run time when SSL configuration changes occur.
    11. Click Apply.
      Note: If you are in a WebSphere Application Server Network Deployment environment, select Synchronize changes with Nodes before saving the changes.
    12. Save the changes.


Feedback