Force traffic to be sent over SSL

We can configure IBM Connections to force all traffic that passes between an IBM Connections server and a user's web browser to be sent over the Secure Socket Layer (SSL).

Be sure that SSL is enabled in the environment before you perform this procedure. See Configure the IBM HTTP Server for SSL in the Installing section of the Connections product documentation for more information.

1. Use the wsadmin client to access and check out the Connections configuration files.

   1. Access the Connections configuration file: execfile("connectionsConfig.py")

      If we are prompted to specify a service to connect to, type 1 to select the first node in the list. Most commands can run on any node. If the command writes or reads information to or from a file by using a local file path, we must select the node where the file is stored. This information is not used by the wsadmin client when we are making configuration changes.

   2. Check out Connections configuration files:

      LCConfigService.checkOutConfig("/tmp","cell_name")

      where:

      • /tmp is the temporary working directory to which configuration files are copied. The files are kept in this working directory while you edit them.

        • With Windows, use a forward slash for the directory. For example: "/tmp".

      • To determine: print AdminControl.getCell()

2. Enter the following command:
   LCConfigService.updateConfig("force.conf.comm.enabled", "true")

3. After making changes, check the configuration files back in and we must do so during the same wsadmin session in which you checked them out for the changes to take effect. See Applying common configuration property changes for information about how to save and apply the changes.

4. To secure session cookies:

   1. Log on to the WAS console of the server hosting the Connections applications as the administrator.

   2. Expand Servers > Server Types, and then select WebSphere application servers.

   3. Click the server hosting IBM Connections from the list of server names.

   4. Click Session Management, and then click Enable cookies.

   5. Select the Restrict cookies to HTTPS sessions check box.

   6. Click Apply, and then click OK.

5. To secure LTPA tokens:
   Security | Global security | Web and SIP security | single sign-on | Requires SSL | Apply | OK

Parent topic:
Security

Related:
Change common configuration property values
Start the wsadmin client
Apply common configuration property changes
Enable users to publish file attachments to Lotus Quickr
Configure IBM HTTP Server for SSL