System policy set settings
To create a new system policy set or to edit information about an existing custom system policy set. System policy sets, or assertions about how services are defined, are used to configure access to the trust service.
To view this admin console page, complete one of the following procedures:
- Services > Policy sets > System policy sets > policyset_name
- Services > Policy sets > System policy sets > New
Depending on the assigned security role when security is enabled, we might not have access to text entry fields or buttons to create or edit configuration data. Review the administrative roles documentation to learn more about the valid roles for the appserver.
We can edit the fields on this page only if the policy set is a custom trust policy set. We cannot edit default trust policy sets.
- Name
Name of the trust policy set.
This field displays the name of the existing custom policy set that you selected. If a new policy set is being created, this field is blank. Enter a policy set name.
Data type: String
- Description
Specifies a brief description of the new or existing custom policy set.
This field provides a brief description for the existing policy set that is displayed in the Name field. If a new policy set is being created, this field is blank. Enter a brief policy set description to help distinguish it from other policy sets. We cannot change the descriptions of the default policy sets.
Data type: String
- Policies
Collection of trust-related policies.
The Policies section displays a list of pre-configured system-level trust policies. If the system policy set is a default trust policy set, policies cannot be added, deleted, enabled, or disabled. If the system policy set is an existing custom trust policy set, we can change the policies. If creating a new custom trust policy set, we can add new policies. We can also delete, enable, or disable any policies that are added.
- Select
Specifies to select an existing policy for further actions.
Click Add to display a list of valid policies that we can add to the named trust policy set.
To manage existing system policies, select the check box for a policy and select one of the following actions:
Actions Description Delete Removes one or more policies from the named custom policy set. Enable The policy is enabled for the policy set and displays Enabled in the State column. Disable The policy is disabled for the policy set. The policy remains in the list but displays Disabled in the State column.
- Policy
Name of the policy.
This column displays one or more of these pre-configured trust policies:
- HTTP transport – for HTTP transport policies
- SSL transport – for HTTPS transport policies
- WS-Addressing – for endpoint addressing policies
- WS-Security – for secure SOAP messages policies
- State
Specifies an enabled or disabled state for each policy.
This column displays whether the policy is enabled or disabled for each of the policies that are listed in the Policy column. For example, to change the state of the policy from enabled to disabled, select the check box for the policy, and click Disable.
- Description
Displays a brief description of the policy.
We can view these descriptions only.
Related concepts
WSHTTPS default policy set
WS-Security default policy sets
Related tasks
Define a new system policy set
Set system policy sets
Related
System policy set collection
Administrative roles