Previous Topic: Implementing WebCenter Security

Next Topic: How You Control Access to WebCenter Menu Options


Implementing WebCenter Security Using SSL

You can use the Secure Sockets Layer (SSL) feature to implement WebCenter security. This feature lets you support encrypted conversations between the WebCenter web server and client web browsers.

Note: Using this feature is an all-or-nothing decision. Either all pages are encrypted, or none of them are.

At the start of a conversation, SSL delivers a server certificate from the server to the client. This certificate identifies the server, so that the client can be sure that the server is who it claims to be. You must obtain a certificate from a Certificate Authority, install it on the LPAR where the product is running, and identify it to the product so that WebCenter can access it and send it to the client.

You might already have a server certificate installed in your security system. If WebCenter shares the domain name that the certificate refers to, you can use that certificate.

Note: For information about implementing SSL certificates and key management on z/OS systems, see the IBM publication z/OS System SSL Programming Manual.

To implement WebCenter Security

  1. Enter /PARMS at the prompt.

    The Customizer : Parameter Groups panel appears.

  2. Enter U beside $NM WEBCENTER in the Interfaces category.

    The WebCenter Web Interface panel appears.

  3. Press F8 (Forward).

    The following panel appears:

    PROD-------------------- Customizer : Parameter Group --------------Page 2 of 2 Command ===>                                                  Function=Update                                                                                   -- WEBCENTER - WebCenter Web Interface ---------------------------------------- |                                                                             | | Use Secure Sockets Layer ........ NO        (YES or NO)                     | | Certificate Location ............ SAF       (SAF or FILE)                   | | Certificate Label................                                           | |  ________________________________________________________________           | |  ________________________________________________________________           | | Keyring Name (SAF) or Key Database Name (FILE)                              | |  __________________________________________________________________________ | |  __________________________________________________________________________ | |  __________________________________________________________________________ | |  __________________________________________________________________________ | |  __________________________________________________________________________ | |  __________________________________________________________________________ | |  ____________________________________________________________________       | |                                                                             | -------------------------------------------------------------------------------

  4. Complete the fields. For information about the fields, press F1 (Help).