Administering the Region › Implement WebCenter Security Using SSL

Implement WebCenter Security Using SSL

You can use the Secure Sockets Layer (SSL) feature to implement WebCenter security. This feature lets you support encrypted conversations between the WebCenter web server and client web browsers.

Note: Using this feature is an all-or-nothing decision. Either all pages are encrypted, or none of them are.

At the start of a conversation, SSL delivers a server certificate from the server to the client. This certificate identifies the server, so that the client can be sure that the server is who it claims to be. Take the following actions:

1. Obtain a certificate from a Certificate Authority.
2. Install it on the LPAR where the product is running.
3. Identify it to the product so that WebCenter can access it and can send it to the client.

If WebCenter shares the domain name that an existing server certificate refers to, you can use that certificate.

Note: For information about implementing SSL certificates and key management on z/OS systems, see the IBM publication z/OS System SSL Programming Manual.

To implement WebCenter Security

1. Enter /PARMS at the prompt.

   The Parameter Groups panel appears.

2. Enter U next to $NM WEBCENTER in the Interfaces category.

   The WebCenter Web Interface panel appears.

3. Press F8 (Forward).

   The following panel appears:

   PROD-------------------- Customizer : Parameter Group --------------Page 2 of 2
   Command ===>                                                  Function=Update  
                                                                                  
   -- WEBCENTER - WebCenter Web Interface ----------------------------------------
   |                                                                             |
   | Use Secure Sockets Layer ........ NO        (YES or NO)                     |
   | Certificate Location ............ SAF       (SAF or FILE)                   |
   | Certificate Label................                                           |
   |  ________________________________________________________________           |
   |  ________________________________________________________________           |
   | Keyring Name (SAF) or Key Database Name (FILE)                              |
   |  __________________________________________________________________________ |
   |  __________________________________________________________________________ |
   |  __________________________________________________________________________ |
   |  __________________________________________________________________________ |
   |  __________________________________________________________________________ |
   |  __________________________________________________________________________ |
   |  ____________________________________________________________________       |
   |                                                                             |
   -------------------------------------------------------------------------------
   

4. Specify Y in the Use Secure Sockets Layer field, complete the other fields, and then press F6 followed by F3.

   Note: For information about the fields, press F1 (Help).

   SSL support is enabled for the region.