X.509 certificates collection
View a list of untrusted, intermediate certificate files. This collection certificate store is used for certificate path validation of incoming X.509-formatted security tokens.
To view the administrative console page for the collection certificate store on the cell level in a network deployment (ND) environment:
- Click Security > JAX-WS and JAX-RPC security runtime.
- Under Additional properties, click Collection certificate store.
- Click the name of a configured collection certificate store or create a new collection certificate store first.
- Under Additional properties, click X.509 certificates.
To view the administrative console page for the collection certificate store on the server level:
- Click Servers > Server Types > WebSphere application servers > server.
- Under Security, click security runtime.
Mixed-version environment: In a mixed node cell with a server using WebSphere Application Server version 6.1 or earlier, click Web services: Default bindings for Web Services Security.mixv
- Under Additional properties, click Collection certificate store.
- Click the name of a configured collection certificate store or create a new collection certificate store first.
- Under Additional properties, click X.509 certificates.
To view this administrative console page for an X.509 certificate on the application level:
- Click Applications > Application Types > WebSphere enterprise applications > application_name.
- Under Modules, click Manage modules > URI_name.
- Under Web Services Security Properties, we can access collection certificate stores for the following bindings:
- For the Request generator, click Web services: Client security bindings. Under Request generator (sender) binding, click Edit custom > Collection certificate store.
- For the Request consumer, click Web services: Server security bindings. Under Request consumer (receiver) binding, click Edit custom > Collection certificate store.
- For the Response generator, click Web services: Server security bindings. Under Response generator (sender) binding, click Edit custom > Collection certificate store.
- For the Response consumer, click Web services: Client security bindings. Under Response consumer (receiver) binding, click Edit custom > Collection certificate store.
- Under Additional properties, we can access the collection certificate stores for the following bindings.
- For the Response receiver binding, click Web services: Client security bindings. Under Response receiver binding, click Edit > Collection certificate store.
- For the Request receiver binding, click Web services: Server security bindings. Under Request receiver binding, click Edit > Collection certificate store.
- Click the name of a configured collection certificate store or create a new collection certificate store first.
- Under Additional properties, click X.509 certificates.
X.509 certificate path
The location of the X.509 certificate.
Configure the collection certificate store for the generator binding on the application level X.509 certificate configuration settings Collection certificate store collection Collection certificate store configuration settings