Use this page to specify the binding configuration for the response
generator or response sender.
To view this WebSphere
® Application
Server administrative console page, complete the following steps:
- Click Applications > Enterprise applications > application_name.
- Under Related items, click EJB modules or Web modules.
- Click the Uniform Resource Identifier (URI).
- Under Additional properties, click Web services: Server security bindings.
- Under Response generator (sender) binding, click Edit custom.
The security constraints or bindings are defined using the application
assembly process before the application is installed. WebSphere Application Server provides
assembly tools to assemble your application.
If the security constraints are defined in the application, you must either
define the corresponding binding information or select the Use defaults option
on this panel and use the default binding information for the server or cell
level. The default binding that is provided by WebSphere Application Server is a
sample. Do not use this sample in a production environment without modifying
the configuration. The security constraints define what is signed or encrypted
in the Web services security message. The bindings define how to enforce the
requirements.
Digital signature security constraint (integrity)
The
following table shows the required and optional binding information when the
digital signature security constraint (integrity) is defined in the deployment
descriptor.
| Information type |
Required or optional |
|---|
| Signing information |
Required |
| Key information |
Required |
| Key locators |
Optional |
| Collection certificate store |
Optional |
| Token generator |
Optional |
| Properties |
Optional |
You can use the key locators and the collection certificate store
that are defined at either the server-level or the cell-level.
Encryption constraint (confidentiality)
The following
table shows the required and optional binding information when the encryption
constraint (confidentiality) is defined in the deployment descriptor.
| Information type |
Required or optional |
|---|
| Encryption information |
Required |
| Key information |
Required |
| Key locators |
Optional |
| Collection certificate store |
Optional |
| Token generator |
Optional |
| Properties |
Optional |
You can use the key locators and the collection certificate store
that are defined at either the server-level or the cell-level.
Security token constraint
The following table shows
the required and optional binding information when the security token constraint
is defined in the deployment descriptor.
| Information type |
Required or optional |
|---|
| Token generator |
Required |
| Collection certificate store |
Optional |
| Properties |
Optional |
You can use the collection certificate store that is defined at either
the server-level or the cell-level.