WAS v8.5 > Secure applications > Secure web services > Secure web services > Administer Web Services Security > Enable cryptographic keys stored in hardware devices for Web Services Security > Enable hardware cryptographic devices for Web Services Security
Configure hardware cryptographic devices for Web Services Security
Before we can use a hardware cryptographic device, configure and enable it. You must first configure a hardware cryptographic device using the SSL certificate and key management panels in the dmgr console. The key for the cryptographic operation can be stored in an ordinary Java keystore file and need not be stored on the hardware devices.
You must first configure a hardware cryptographic device using the SSL certificate and key management panels in the dmgr console.
Fix packs that include updates to the SDK might overwrite unrestricted policy files. Back up unrestricted policy files before you apply a fix pack and reapply these files after the fix pack is applied.
For transitioning users: The unrestricted Java policy files are not required when using hardware cryptographic devices. These policy files were required in some earlier
versions of the product.trns
- In the dmgr console, click Servers > Server Types > WebSphere application servers and then select the server name.
- Under Security, select JAX-WS and JAX-RPC security runtime.
- Under Cryptographic Hardware, select Enable
cryptographic operations on hardware device and then specify the name of the hardware cryptographic device configuration name. For more information, read about configuring a hardware cryptographic keystore.
- Click OK.
Results
This procedure configures a hardware cryptographic device for all Web Services Security applications running on this application server.
Related concepts:
Hardware cryptographic device support for Web Services Security
Related
Enable cryptographic keys stored in hardware devices in Web Services Security
Configure a hardware cryptographic keystore