Configure XML encryption for Version 5.x web services with an assembly tool

XML encryption is one method that WebSphere Application Server provides to secure the web services. It enables you to encrypt an XML element, the content of an XML element, or arbitrary data such as an XML document.

Subtopics

• Secure web services for Version 5.x applications using XML encryption
  XML encryption is one method that WebSphere Application Server provides to secure the web services. It enables you to encrypt an XML element, the content of an XML element, or arbitrary data such as an XML document.

• Configure the client for request encryption: Encrypting the message parts
  To configure the client for request encryption, specify which message parts to encrypt when configuring the client.

• Configure the client for request encryption: choosing the encryption method
  To configure the client for request encryption, specify which encryption method to use when configuring the client.

• Configure the server for request decryption: decrypting the message parts
  Use the WS Extensions tab and the WS Binding configurations tab to specify which parts of the request message must be decrypted by the server.

• Configure the server for request decryption: choosing the decryption method
  We can use an assembly tool and the console to configure the Web Services Security extensions and Web Services Security bindings.

• Configure the server for response encryption: encrypting the message parts
  We can specify which parts of the response message to encrypt when configuring the server for response encryption.

• Configure the server for response encryption: choosing the encryption method
  We can specify which method the server uses to encrypt the response message.

• Configure the client for response decryption: decrypting the message parts
  To configure the client for response decryption, specify which response message parts to decrypt when configuring the client. The server response encryption and client response decryption configurations must match.

• Configure the client for response decryption: choosing a decryption method
  To configure the client for response decryption, specify which decryption method to use when the client decrypts the response message. The server response encryption and client response decryption configurations must match.