WAS v8.5 > Secure applicationsSecure communications
WebSphere Application Server provides several methods to secure communication between a server and a client. Note: WAS provides several methods for securing communication between a server and a client. New in this release are functions that ensure secure communication between a server and a client. These functions focus on certificate management, authentication, and ensuring trust among the application server, administrative agent, and job manager. The new functions include:
- Creating and using a certificate authority (CA) clients to enable a CA to request, query, and revoke certificates.
- Creating and using chained personal certificates to allow a certificate to be signed with a longer life span.
- Creating and revoking certificate authority (CA) certificates to ensure secure communication between the CA client and the CA server.
The following topics are covered in this section:
- Secure communications using Secure Sockets Layer
- Creating an SSL configuration
- Creating a keystore configuration
- Creating a certificate authority (CA) client
- Deleting a certificate authority (CA) client
- Viewing or Modifying a certificate authority (CA) client
- Creating a keystore configuration for a preexisting keystore file
- Creating a self-signed certificate
- Creating a certificate authority request
- Extracting a signer certificate from a personal certificate
- Retrieving signers from a remote SSL port
- Adding a signer certificate to a keystore
- Adding a signer certificate to the default signers keystore
- Exchanging signer certificates in a keystore
- Configuring certificate expiration monitoring
- Key management for cryptographic uses
- Creating a key set configuration
- Creating a key set group configuration
- Configuring the web server plug-in for Secure Sockets Layer
Subtopics
- Key management for cryptographic uses
- Configure the web server plug-in for Secure Sockets Layer
- Secure communications using SSL
- Add a signer certificate to the default signers keystore
- Create a CA client in SSL
- Delete a CA client in SSL
- View or modify a CA client in SSL
- Add a signer certificate to a keystore
- Configure certificate expiration monitoring
- Create a keystore configuration for a preexisting keystore file
- Create an SSL configuration
- Create a key set group configuration
- Create a key set configuration
- Create a certificate authority request
- Create a self-signed certificate
- Exchanging signer certificates
- Extracting a signer certificate from a personal certificate
- Retrieving signers from a remote SSL port