WAS v8.5 > Script the application serving environment (wsadmin) > Scripting for security > Configure security with scripting

Secure communications

The application server provides several methods to secure communication between a server and a client. Use this topic to configure Secure Sockets Layer (SSL), keystores, certificate authorities, key sets and groups, and certificates.

• Configure secure communications using SSL.

  Use the SSLConfigCommands, SSLConfigGroupCommands, DynamicSSLConfigSelections and SSLTransport s, and complete the following tasks to create and administer SSL configurations:

  • Create an SSL configuration at the node scope.
  • Automate SSL configurations.

• Create a keystore configuration.

  Use the KeyStoreCommands , and complete the following tasks to create and administer keystore configurations.

  • Update default key store passwords

• Create a certificate authority (CA) client configuration.

  A CA client object contains all of the configuration information necessary to connect to a third-party CA server. Use the CAClientCommands , and complete the following tasks to create and administer CA client objects in your configuration:

  • Configure CA clients
  • Administer CA clients

• Administer certificate configurations.

  Use the CertificateRequestCommands, PersonalCertificateCommands, and SignerCertificateCommands s, and complete the following tasks to administer personal certificates, CA certificates, and self-signed certificates:

  • Create self-signed certificates
  • Configure CA certificates

• Create key sets and key groups.

  Use the KeySetCommands, KeySetGroupCommands, and KeyReferenceCommands s for the AdminTask object to create and administer key set and group configurations.

Subtopics

• Create an SSL configuration at the node scope
• Automating SSL configurations
• Update default key store passwords
• Configure certificate authority client objects
• Administer certificate authority clients
• Set a certificate authority certificate as the default certificate
• Create certificate authority (CA) personal certificates
• Revoking certificate authority personal certificates
• CAClientCommands
• Create self-signed certificates
• keyManagerCommands
• KeyStoreCommands
• SSLConfigCommands
• SSLConfigGroupCommands group
• TrustManagerCommands
• KeySetCommands
• KeyReferenceCommands
• KeySetGroupCommands
• DynamicSSLConfigSelections
• PersonalCertificateCommands
• WSCertExpMonitorCommands
• SignerCertificateCommands
• CertificateRequestCommands
• Create an SSL configuration at the node scope
• Automating SSL configurations
• Update default key store passwords
• Configure certificate authority client objects
• Administer certificate authority clients
• Set a certificate authority certificate as the default certificate
• Create certificate authority (CA) personal certificates
• Revoking certificate authority personal certificates
• CAClientCommands
• Create self-signed certificates
• keyManagerCommands
• KeyStoreCommands
• SSLConfigCommands
• SSLConfigGroupCommands group
• TrustManagerCommands
• KeySetCommands
• KeyReferenceCommands
• KeySetGroupCommands
• DynamicSSLConfigSelections
• PersonalCertificateCommands
• WSCertExpMonitorCommands
• SignerCertificateCommands
• CertificateRequestCommands

Related

Secure communications

+

Search Tips   |   Advanced Search