WebSphere brand IBM WebSphere Premises Server, Version 6.1.x

Security

Location Awareness Services for WebSphere® Premises Server supports HTTPS transport binding for its Web services.

If security is enabled for WebSphere Application Server, the Web services are available only through HTTPS and a secure port (usually 9443). Location Awareness Services for WebSphere Premises Server Web services are secured by HTTP Basic Authentication as well. This means that authorization occurs using the user name and password provided in the HTTP headers.

HTTPS

HTTPS is a well-known and often-used mechanism to secure HTTP Internet and intranet communications. HTTPS is based on a Secure Sockets Layer (SSL) or Transport Layer Security (TLS) that runs beneath HTTP. HTTPS encrypts the entire HTTP data packet. It also provides security features including party identification and message integrity. Mutual authentication (where the client authenticates to the server and the server authenticates to the client) is possible. If you intend to access Web services protected by HTTPS, certificate stores must be prepared on the client side.

For more information on these topics, see Using HTTP to transport Web services and Invoking outbound services over HTTPS in the WebSphere Application Server information center.


Library | Support | Terms of use

(c) Copyright IBM Corporation 2004, 2008. All rights reserved.
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.