Configuring WebSphere Application Server

Configuring WebSphere® Application Server security to support smart cards includes configuring client authentication, configuring the LDAP registry, configuring the LDAP client certificate filter, configuring the certificate authority, configuring the certificate revocation list, and securing WebSphere Application Server.
  1. Configuring client authentication in WebSphere Application Server
    Configure WebSphere Application Server to accept client authentication for SSL connections.
  2. Configuring LDAP on WebSphere Application Server
    Configure LDAP on WebSphere Application Server to allow the appropriate lookup on the LDAP server after the client certificate is read.
  3. Configuring the LDAP client certificate filter
    Configure the LDAP client certificate filter.
  4. Configuring the certificate authority
    Configuring the certificate authority includes configuring WebSphere Application Server to support Secure Socket Layer (SSL) client authentication, and adding the signer certificate for your organization to the truststore.
  5. Configuring the certificate revocation list
    Certificate revocation lists allow WebSphere Application Server to revoke a client certificate that is sent by the web browser when the key is compromised or when access permission to the key is revoked.
  6. Securing WebSphere Application Server
    Securing WebSphere Application Server consists of securing IBM HTTP Server (IHS), which is installed with WebSphere Application Server; securing the WebSphere Application Server HTTP plug-in; and securing the WebSphere Application Server environment.
Parent topic: Configuring strong authentication with smart cards
Previous topic: Architecture of smart card authentication
Next topic: Configuring Rational ClearQuest Web