IBM Tivoli Directory Server, Version 6.3

Using HTTPS for Embedded WebSphere Application Server

Embedded WebSphere Application Server has HTTPS set up on port 12101, by default. To use HTTPS, you must change your login Web address to the following:

https://hostname:12101/IDSWebApp

For non-HTTPS connections, continue to use the following Web address:

http://hostname:12100/IDSWebApp

Additionally, if you want to change the Web application server's SSL certificate, you can create new key and trust store database files for Embedded WebSphere Application Server to use. By default, the key and trust store database files are separate and are located in the <WAS_HOME>/profiles/TDSWebAdminProfile/etc/ directory . These files are named DummyServerKeyFile.jks and DummyServerTrustFile.jks respectively.

After you have created your new jks files, you can change the key and trust store database files that IBM Websphere Application Server uses by adding or modifying the following items (highlighted in bold) in the <WAS_HOME>/profiles/TDSWebAdminProfile/config/cells/DefaultNode/security.xml file to use your new file names, passwords, and file formats:

<keyStores xmi:id="KeyStore_DefaultNode_10" 
 name="DummyServerKeyFile" 
 password="{xor}CDo9Hgw=" 
 provider="IBMJCE" 
 location="${WAS_HOME}/profiles/TDSWebAdminProfile/etc/DummyServerKeyFile.jks" 
 type="JKS" 
 fileBased="true" 
 hostList="" 
 managementScope="ManagementScope_DefaultNode_1"/>
<keyStores xmi:id="KeyStore_DefaultNode_11" 
 name="DummyServerTrustFile" 
 password="{xor}CDo9Hgw=" 
 provider="IBMJCE" 
 location="${WAS_HOME}/profiles/TDSWebAdminProfile/etc/DummyServerTrustFile.jks" 
 type="JKS" 
 fileBased="true" 
 hostList="" 
 managementScope="ManagementScope_DefaultNode_1"/>

[ Top of Page | Previous Page | Next Page ]