Secure JAX-RPC Web Services - IBM WAS ND v8.0

 

+

Search Tips  |  Advanced Search

1. Learn about
   • Concepts
   • What is new
   • Enhancements
   • OASIS specifications
   • Chronology
   • Message integrity, confidentiality, and authentication
   • High-level architecture for Web Services Security
   • Security model mixture
   • Platform configuration and bindings
   • Keys
   • Key locator
   • Trust anchor
   • Trusted ID evaluator
   • Hardware cryptographic device support for Web Services Security
   • Default configuration
   • General sample bindings for JAX-WS applications
   • Default sample configurations
   • Default implementations of Web Services Security
   • XML digital signature
   • Collection certificate store
   • Certificate revocation list
   • XML encryption
   • Security token
   • LTPA and LTPA v2 tokens
   • Username token
   • XML token
   • Binary security token
   • Kerberos token
   • Kerberos message protection for web services
   • Kerberos usage overview for web services
   • Kerberos configuration models for web services
   • Kerberos clustering for web services
   • Kerberos authentication in a single or cross realm environment
   • SAML token
   • Time stamp
   • Nonce, a randomly generated token
   • Basic Security Profile compliance tips
   • Distributed nonce cache
   • Web Services Security token propagation

2. Decide which programming model, JAX-WS or JAX-RPC, works best for securing your web services applications.
   • Overview of standards and programming models for web services message-level security

3. Configure Web Services Security.
4. Specify the application-level configuration.
   • Message-level security
   • Generator signing to protect message integrity
   • Signing information for the generator binding
   • Consumer signing to protect message integrity
   • Signing information for the consumer binding
   • Key information for the generator binding
   • Key information for the consumer binding
   • Token generators to protect message authenticity
   • Koken consumers to protect message authenticity
   • Encryption to protect message confidentiality
   • Encryption to protect message confidentiality

5. Specify the server-level configuration.
   • Message-level security
   • Signing information for the generator binding
   • Signing information for the consumer binding
   • Key information for the generator binding
   • Key information for the consumer binding
   • Encryption to protect message confidentiality
   • Encryption to protect message confidentiality
   • Token generators to protect message authenticity
   • Token consumers to protect message authenticity

6. Specify the cell-level configuration.
   • Message-level security
   • Signing information for the generator binding
   • Signing information for the consumer binding
   • Key information for the generator binding
   • Key information for the consumer binding
   • Encryption to protect message confidentiality
   • Encryption to protect message confidentiality
   • Token generators to protect message authenticity
   • Token consumers to protect message authenticity

7. Specify the platform-level configuration.
   • Web Services Security at the platform level
   • Nonce
   • Nonce caching to servers in a cluster
   • Key locator for the generator binding
   • key locator for the consumer binding
   • Key locator
   • Trust anchors for the generator binding
   • Trust anchors for the consumer binding
   • Trust anchors
   • Collection certificate store for the generator binding
   • Collection certificate store for the consumer binding
   • Collection certificate
   • Trusted ID evaluators

8. Develop or migrate a JAX-RPC application.
   • Migrate to v8.0 applications
   • Migrate server-side extensions configuration
   • Migrate client-side extensions configuration
   • Migrate server-side bindings file
   • Migrate client-side bindings file
   • Develop message-level security web services
   • Develop web services clients that retrieve tokens from the JAAS Subject in an application
   • Develop web services applications that retrieve tokens from the JAAS Subject in a server application

9. Deploy the JAX-RPC application.