Encrypted message part settings

Use this page to define the elements of an encrypted part of a message. Encrypted parts are used to protect message confidentiality, and in this case, the encrypted parts are being defined as part of the policy set process. A message part is a named set of one or more message elements.

To view this administrative console page, complete the following actions:
  1. Click Services > Policy sets > Application policy sets > policy_set_name.
  2. Click the WS-Security policy in the Policies table.
  3. Click the Main policy link or the Bootstrap policy link.
  4. Click the Request message part protection link or the Response message part protection link in the Message Part Protection section.
  5. In the Confidentiality protection section, you can perform any of the following:
    • Click Add to add a new encrypted part.
    • Select an existing encrypted part, and click Edit.

根據啟用安全時所指派的安全角色而定,您可能會有建立或編輯配置資料之文字輸入欄位或按鈕的存取權。 請檢閱管理角色說明文件,以進一步瞭解應用程式伺服器的有效角色。

Name of part to encrypt

Specifies the name of the set of one or more message parts that you have selected to encrypt. The name you choose is a label and must be unique within the Response message part protection or Request message part protection collections for this WS-Security policy.

Elements in part

Specifies a list of the message elements that are included in the encrypted part. The Elements in part field contains a listing of message elements that are included in this encrypted part to provide message confidentiality.

Click Add to add an element to the encrypted part of the message. To remove a message element from an encrypted part of a message, first click the selection box next to the element to be removed, then click Remove. The value of the Qname namespace, or the Xpath expression, is required and can be edited at any time, while adding a new element or after the element is added.

Body
Specifies the body of the message part.
Qname for SOAP header elements only
Specifies the Qname type for a namespace value for the SOAP header element that you want to encrypt. To encrypt a SOAP header element, select Qname and provide the namespace and optionally the localname of the SOAP header element in the Value field. When specifying the Qname, if using the optional localname, a comma must be inserted between the namespace and the localname, for example namespace,localname. If the localname is omitted, all SOAP header elements with the specified namespace are encrypted. To use the Qname selection method, the SOAP header elements must be the immediate children of the SOAP header. Any Qname row in the table that has no corresponding value is removed when you click OK or Apply.
Restriction: You cannot select header elements that are sub-elements of other elements in the SOAP header using Qname. In this case, you must use an Xpath expression to select these header elements.
Xpath expression
Specifies if the displayed Xpath expression is used as the method for specifying that a specific element is included in this part. Select XPath from the Add menu list, and provide an expression in the new XPath entry that is displayed in the table. Any Xpath expression row on the table that has no corresponding value is removed when you click OK or Apply.

指出主題類型的圖示 參照主題



時間戳記圖示 前次更新: July 9, 2016 11:20
http://www14.software.ibm.com/webapp/wsbroker/redirect?version=cord&product=was-nd-mp&topic=uwbs_wsspsenpa
檔名:uwbs_wsspsenpa.html