IBM WebSphere V5.0 Security - CGISecurity

Configuring Client02
Client02 requires transport layer authentication using SSL client certificates; to
accomplish this, follow the steps below:
1. The client needs to point to the sas.client.props file using the property
com.ibm.CORBA.ConfigURL=file:/c:/websphere/appclient/properties/sas.
client.props.
2. All further configuration involves setting properties within the sas.client.props
file, open it in a text editor in the /properties
directory.
3. Enable SSL for the connection, in this case, SSL will be supported but not
required: com.ibm.CSI.performTransportAssocSSLTLSSupported=true,
com.ibm.CSI.performTransportAssocSSLTLSRequired=false.
4. Disable client authentication at the message layer.
com.ibm.CSI.performClientAuthenticationRequired=false
com.ibm.CSI.performClientAuthenticationSupported=false
5. Enable client authentication at the transport layer. Here we are supporting it
and not requiring it:
com.ibm.CSI.performTLClientAuthenticationRequired=false,
com.ibm.CSI.performTLClientAuthenticationSupported=true.
6. Save the file then close it.
Configuring Server02
In the Web Console, Server02 will be configured for incoming requests to SSL
client authentication and Identity Assertion. Configuration for outgoing requests
is not relevant for this scenario. Follow the steps below to configure Server02.
Configure Server02 for incoming connections.
1. Configure Server02 for incoming connections. Start the Administrative
Console for Server02, then navigate to the Security -> Authentication
Protocol section.
2. Select CSIv2 Incoming Authentication.
a. Disable Basic authentication, by selecting Never.
b. Enable Client Certificate Authentication by selecting Supported.
c. Enable Identity Assertion.
3. Select CSIv2 Incoming Transport.
Enable SSL by selecting SSL-Supported.
114 IBM WebSphere V5.0 Security Handbook