Securing communications using the wsadmin tool

The application server provides several methods to secure communication between a server and a client. Use this topic to configure Secure Sockets Layer (SSL), keystores, certificate authorities, key sets and groups, and certificates.

• Configure secure communications using SSL.
  Use the SSLConfigCommands, SSLConfigGroupCommands, DynamicSSLConfigSelections and SSLTransport command groups for the AdminTask object, and complete the following tasks to create and administer SSL configurations:

  • Create an SSL configuration at the node scope using scripting.
  • Automate SSL configurations using scripting.
• Create a keystore configuration.
  Use the KeyStoreCommands command group for the AdminTask object, and complete the following tasks to create and administer keystore configurations.

  • Update default key store passwords using scripting
• Create a certificate authority (CA) client configuration.
  A CA client object contains all of the configuration information necessary to connect to a third-party CA server. Use the CAClientCommands command group for the AdminTask object, and complete the following tasks to create and administer CA client objects in your configuration:

  • Configure CA clients using scripting
  • Administer CA clients using scripting
• Administer certificate configurations.
  Use the CertificateRequestCommands, PersonalCertificateCommands, and SignerCertificateCommands command groups for the AdminTask object, and complete the following tasks to administer personal certificates, CA certificates, and self-signed certificates:

  • Create self-signed certificates using scripting
  • Configure CA certificates using scripting
• Create key sets and key groups.

  Use the KeySetCommands, KeySetGroupCommands, and KeyReferenceCommands command groups for the AdminTask object to create and administer key set and group configurations.