Secure communications

The application server provides several methods to secure communication between a server and a client. Use this topic to configure SSL, keystores, certificate authorities, key sets and groups, and certificates.

Tasks

• Configure secure communications using SSL.

  Use the SSLConfigCommands, SSLConfigGroupCommands, DynamicSSLConfigSelections and SSLTransport command groups for the AdminTask object, and complete the following tasks to create and administer SSL configurations:

  • Create an SSL configuration at the node scope using scripting.
  • Automate SSL configurations using scripting.

• Create a keystore configuration.

  Use the KeyStoreCommands . and complete the following tasks to create and administer keystore configurations.

  • Update default key store passwords using scripting

• Create a certificate authority (CA) client configuration.

  A CA client object contains all of the configuration information necessary to connect to a third-party CA server. Use the CAClientCommands . and complete the following tasks to create and administer CA client objects in the configuration:

  • Configure CA clients using scripting
  • Administer CA clients using scripting

• Administer certificate configurations.

  Use the CertificateRequestCommands, PersonalCertificateCommands, and SignerCertificateCommands command groups for the AdminTask object, and complete the following tasks to administer personal certificates, CA certificates, and self-signed certificates:

  • Create self-signed certificates using scripting
  • Configure CA certificates using scripting

• Create key sets and key groups.

  Use the KeySetCommands, KeySetGroupCommands, and KeyReferenceCommands command groups for the AdminTask object to create and administer key set and group configurations.

Subtopics

• Create an SSL configuration at the node scope using scripting
  
• Automating SSL configurations using scripting
  
• Update default key store passwords using scripting
  
• Configure certificate authority client objects
  
• Administer certificate authority clients
  
• Setting a certificate authority certificate as the default certificate
  
• Create certificate authority (CA) personal certificates
  
• Revoking certificate authority personal certificates
  
• CAClientCommands
  
• Create self-signed certificates using scripting
  
• keyManagerCommands
  
• KeyStoreCommands
  
• SSLConfigCommands
  
• SSLConfigGroupCommands group for the AdminTask object
  
• TrustManagerCommands
  
• KeySetCommands
  
• KeyReferenceCommands
  
• KeySetGroupCommands
  
• DynamicSSLConfigSelections
  
• PersonalCertificateCommands
  
• WSCertExpMonitorCommands
  
• SignerCertificateCommands
  
• CertificateRequestCommands command group of the AdminTask object
  

Secure communications