IBM WebSphere V5.0 Security - CGISecurity

Note: If the Web browser has SSL and TLS disabled, it will not be able to
establish a secure link with the IHS. In the case of Internet Explorer, SSL can
be enabled.
1. From the menu bar, select Tools -> Internet Options
2. Click the Advanced tab and scroll down to the Security section
There should be an option to enable SSL 2.0, SSL 3.0 and TLS 1.0. By
default, SSL versions 2 and 3 are enabled.
10.10.3 Client-side certificate for client authentication
This section discusses how to use client side certificates with your Web server
and with your WebSphere Application Server. It will also show how to configure
your servers to support client-side certificates and use them as a base for user
authentication.
Obtaining a personal certificate
The Web client may also provide a digital certificate in order to assert an identity
during an SSL initialization. Typically, the creation of a client-side certificate
involves a CA. Alternatively, the IBM Tivoli SecureWay PKI package or a similar
product from another vendor may be used to implement a PKI solution. This
involves the overhead of managing the PKI infrastructure, as well as creating the
individual certificates for each authenticating user.
The process for requesting and installing a personal client-side certificate on
Windows is documented in this section.
For demonstration purposes, the free Personal Certificate Program offered by
Thawte Consulting was used. The process for requesting a personal certificate
will differ from CA to CA, with each providing different facilities.
From the Thawte Web site, http://www.thawte.com, select the option to receive
a free personal e-mail certificate and fill out the necessary forms. Be sure to
request an X.509v3 certificate and make certain that the e-mail address entered
is valid and can be used. The process is relatively straightforward and a
certificate will be issued within a matter a minutes of registration. We got the
certificate issued, a notification was sent by Thawte about that fact, and we went
to the Thawte Web site to pick up the certificate. At the end of the process, we
installed the certificate into the Web browser, which was Microsoft Internet
Explorer in this case.
Chapter 10. Administering WebSphere security 289