Configure Administration Security

About this task

The default user registry used is the default WebSphere Application Server for z/OS file-based user registry.

Navigate to Security > Global security;
Set the Available realm definitions to be Federated repositories and click the Configure button;
Set the Primary administrative username to be websphere;
Select the Automatically generated server identity radio button;
Select Ignore case for authorization and click the OK button;
Enter the password for the default administrative user, e.g. websphere, enter the confirmation and click the OK button to confirm the changes;
Select Enable administrative security;
Select Enable application security;
Select Use Java 2 security to restrict application access to local resources and Warn if applications are granted custom permissions;
Set the Available realm definitions to be Federated repositories
Click the Apply button to confirm the changes;
Navigate to Security > Global security;
Select the Custom Properties link;
Click the New button and set the name and value as follows:
Name= com.ibm.ws.security.web.logoutOnHTTPSessionExpire

Value= true
Click the OK button to add the new property.
Navigate to Security > Global security;
From Global security Navigate to Select Web and SIP Security > Single sign-on (SSO)
Tick requires SSL
Click OK to confirm the change
Navigate to Security > Global Security
select Custom properties
Add com.ibm.ws.security.addHttpOnlyAttributeToCookies with value true
Click OK to confirm the change
Save the changes to the master configuration.