Configure key locators using the Assembly ToolkitThis task provides instructions on how to configure key locators using the Assembly Toolkit. You can configure key locators in various locations within the Assembly Toolkit. This task provides instructions on how to configure key locators at any of these locations because the concept is the same.
- Launch the Assembly Toolkit and click Windows > Open Perspective > J2EE.
- Select the Web services-enabled Enterprise JavaBean (EJB) or Web module.
- In the Package Explorer window, locate the META-INF directory for an EJB module or the WEB-INF directory for a Web module.
- Right-click the webservicesclient.xml file and click Open With > Web Services Client Editor or right-click the webservices.xml file and click Open With > Web Services Editor.
- Click the Port Binding tab in the Web Services Client Editor within the Assembly Toolkit or the Binding Configurations tab in the Web Services Editor within the Assembly Toolkit.
- Expand one of the Binding Configuration sections.
- Expand the Key Locators section.
- Click Add to create a new key locator, click Edit to edit an existing key locator, or click Remove to delete an existing key locator.
- Enter a key locator name.The name entered for the Key locator name is used to refer to the key locator from the Encryption information and Signing Information sections.
- Enter a key locator class.The key locator class is the implementation of the KeyLocator interface. When using default implementations, select a class from the menu.
- Determine whether to click Use key store.Select this option when you use the default implementations as they use key stores. If you click Use key store, complete the following steps...
- Enter a value in the key store storepass field. The key store storepass is the password used to access the key store.
- Enter a path name in the key store path field. The key store path is the location on the file system where the key store resides. Verify that the location can be found wherever you deploy the application.
- Enter a type value in the key store type field. The valid types to enter are JKS and JCEKS. JKS is used when you are not using Java Cryptography Extensions (JCE). JCEKS is used when you are using JCE. Although the JCEKS type is more secure, it might decrease performance.
- Click Add to create an entry for a key in the key store.
- Enter a value in the Alias field.
The key alias is a reference to this particular key from the Signing Information section.
- Enter a value in the Key pass field.
The key pass is the password associated with the certificate which is created using the Development Kit, Java Technology Edition keytool.exe file.
- Enter a value in the Key name field.
The key name refers to the alias of the certificate as found in the key store.
- Click Add to create a custom property.The property can be used by custom key locator implementations. For example, you can use properties with the WSIdKeyStoreMapKeyLocator default implementation. The key locator implementation has the following property names...
- id_, which maps to a credential user ID.
- mappedName_ , which maps to the key alias to use for this user name.
- default, which maps to a key alias to use when a credential does not have an associated id_ entry.
A typical set of properties for this key locator might be: id_1=user1, mappedName_1=key1, id_2=user2, mappedName_2=key2, default=key3. If user1 or user2 authenticates, then the associated key1 or key2 is used, respectively. However, if none of the user properties authenticate or the user is not user1 or user2, then key3 is used.
- Enter a name in the Name field.The name entered is the property name.
- Enter a value in the Value field.This value entered is the property value.
See AlsoKey locator
Securing Web services using XML digital signature
Configuring key locators using the administrative console
keytool - Key and Certificate Management Tool