WAS v8.5 > Reference > SetsDefault bindings and runtime properties for Web Services Security
Use this page to configure the settings for nonce on the server level and to manage the default bindings for the signing information, encryption information, key information, token generators, token consumers, key locators, collection certificate store, trust anchors, trusted ID evaluators, algorithm mappings, and login mappings.
Displayed options and the panel title depend on your server configuration and version.
To view this dmgr console page for the server level...
- Click Servers > Server Types > WebSphere application servers > server_name.
- Under Security, click JAX-WS and JAX-RPC security runtime.
In a mixed node cell with a server using WebSphere Application Server version 6.1 or earlier, click Web services: Default bindings for Web Services Security.
Read the web services documentation before you begin defining the default bindings for Web Services Security.
Nonce is a unique cryptographic number that is embedded in a message to help stop repeat, unauthorized attacks of user name tokens.
In WAS and WAS, Express, specify values for the Nonce cache timeout, Nonce maximum age, and Nonce clock skew fields for the server level.
Nonce cache timeout
Timeout value, in seconds, for the nonce cached on the server. Nonce is a randomly generated value.
The Nonce cache timeout field is required.
If you make changes to the value for the Nonce cache timeout field, you must restart the application server for the changes to take effect.
Information Value Default 600 seconds Minimum 300 seconds
Nonce maximum age
Default time, in seconds, before the nonce timestamp expires. Nonce is a randomly generated value.
Maximum value cannot exceed the number of seconds specified in the Nonce cache timeout field for the server level.
The Nonce maximum age field is required.
Information Value Default 300 seconds Range 300 to the value specified, in seconds, in the Nonce cache timeout field.
Nonce clock skew
Default clock skew value, in seconds, to consider when the application server checks the timeliness of the message. Nonce is a randomly generated value.
Maximum value cannot exceed the number of seconds specified in the Nonce maximum age field.
The Nonce clock skew field is required.
Information Value Default 0 seconds Range 0 to the value specified, in seconds, in the Nonce maximum age field.
Enable cryptographic operations on hardware device
Enables cryptographic operations on hardware devices. Enabling this feature might improve the performance, depending on the hardware device.
Cryptographic hardware configuration name
Name of the hardware device configuration name defined in the keystore settings in the secure communications.
This value is necessary only if Hardware acceleration has been selected.
Custom properties
The linked Properties panel specifies additional properties for the security runtime configuration.
Related concepts:
Programming models for web services message-level security
Secure web services
Reference:
Login mappings page
Login mapping configuration settings