Configure the client for request encryption: Encrypting the message parts
To configure the client for request encryption, specify which message parts to encrypt when configuring the client.
There is an important distinction between Version 5.x and V6 and later applications. The information in this article supports V5.x applications only that are used with WebSphere Application Server V6.0.x and later. The information does not apply to V6.0.x and later applications. Prior to completing these steps, read either of the following topics to familiarize yourself with the WS Extensions tab and the WS Binding tab in the Client Deployment Descriptor Editor within an assembly tool:
- Configure the client security bindings using an assembly tool
- Configure the security bindings on a server acting as a client using the console
These two tabs are used to configure the Web services security extensions and Web services security bindings, respectively.
Overview
Complete the following steps to specify which message parts to encrypt when configuring the client for request encryption:
Procedure
- Launch an assembly tool. For more information on the assembly tools, see Assembly tools.
- Switch to the J2EE perspective. Click Window > Open Perspective > J2EE.
- Click Application Client Projects > application > appClientModule > META-INF.
- Right-click the application-client.xml file, select Open with > Deployment descriptor editor.
- Click the WS extensions tab, which is located at the bottom of Client Deployment Descriptor Editor within the assembly tool.
- Expand Request sender configuration > Confidentiality. Confidentiality refers to encryption while integrity refers to digital signing. Confidentiality reduces the risk of someone understanding the message flowing across the Internet. With confidentiality specifications, the message is encrypted before it is sent and decrypted when it is received at the correct target. For more information on encrypting , see XML encryption.
- Select the parts of the message to encrypt by clicking Add. You can select one of the following parts:
- Bodycontent
- User data portion of the message
- Usernametoken
- Basic authentication information, if selected
What to do next
After you specify which message parts to encrypt, specify which method to use to encrypt the request message. See Configure the client for request encryption: choosing the encryption method for more information.
Related concepts
Request sender
Related tasks
Configure the client for request encryption: choosing the encryption method
Configure the client security bindings using an assembly tool
Configure the security bindings on a server acting as a client using the console
Configure key locators using an assembly tool
Configure key locators using the console
Securing Web services for V5.x applications using XML encryption