Enable hardware cryptographic devices for Web Services Security
You can enable Web Services Security by using cryptographic hardware devices for both Web service clients and Web service providers running in the WAS environment. A cryptographic token is a hardware or software device with a built-in keystore implementation. Cryptographic devices are used to manage certificates stored on the cryptographic tokens. These devices are also called smartcards. You enable hardware cryptographic devices for Web service security by either using keys that are stored in hardware devices or by using keys stored in a Java keystore file.
Overview
Web services security using cryptographic hardware devices is supported for both Web (JavaServer Pages or servlet) and Enterprise JavaBeans (EJB) Web service clients. You can enable Web Services Security by using cryptographic hardware devices for both Web service clients and Web service providers running in the WAS environment.
There are two ways to enable hardware cryptographic devices for Web service security: use keys that are stored in hardware devices or use keys stored in a Java keystore file.
Procedure
- Determine whether to use keys that are stored in hardware devices or in a Java keystore file for the individual application.
- Enable hardware cryptographic devices for Web service security by using one of the following two methods:
- Enable cryptographic operations on hardware devices. See Configure hardware cryptographic devices for Web Services Security for more details.
- Enable cryptographic keys that are stored in hardware devices. See Enabling cryptographic keys stored in hardware devices in Web Services Security
Hardware cryptographic devices for Web Services Security are not supported on the J2EE Application Client on distributed platform.
Configure hardware cryptographic devices for Web Services Security
Enabling cryptographic keys stored in hardware devices in Web Services Security
Related concepts
Hardware cryptographic device support for Web Services Security
Related tasks
Configure Web services security using JAX-RPC at the platform level