Configure the client for request encryption: Encrypting the message parts

Prior to completing these steps, read either of the following topics to familiarize yourself with the Security Extensions tab and the Port Binding tab in the Web services client editor within the Assembly Toolkit...

  These two tabs are used to configure the Web services security extensions and Web services security bindings, respectively.

Complete the following steps to specify which message parts to encrypt when configuring the client for request encryption...

  1. Launch the Assembly Toolkit.

  2. Open the J2EE perspective by clicking Window > Open Perspective > Other > J2EE.

  3. Select the Web services-enabled EJBs or Web module.

  4. In the Project Navigator window, locate the META-INF directory for an EJB module or the WEB-INF directory for a Web module.

  5. Right-click the webservicesclient.xml file, and click Open With > Web Services Client Editor.

  6. Click the Security Extensions tab, which is located at the bottom of the Web services client editor within the Assembly Toolkit.

  7. Expand Request Sender Configuration > Confidentiality. Confidentiality refers to encryption while integrity refers to digital signing.  Confidentiality reduces the risk of someone understanding the message flowing across the Internet. With confidentiality specifications, the message is encrypted before it is sent and decrypted when it is received at the correct target. For more information on encrypting , see XML encryption.

  8. Select the parts of the message that you want to encrypt by clicking Add. You can select one of the following parts...

    Bodycontent User data portion of the message

    Usernametoken Basic authentication information, if selected

After you specify which message parts to encrypt, you must specify which method to use to encrypt the request message. See Configuring the client for request encryption: Choosing the encryption method for more information.

 

See Also

Request sender
Securing Web services using XML encryption
Configuring the client for request encryption: Choosing the encryption method
Configuring the client security bindings using the Assembly Toolkit
Configuring the security bindings on a server acting as a client using the administrative console
Configuring key locators using the Assembly Toolkit
Configuring key locators using the administrative console