IBM WebSphere V5.0 Security - CGISecurity

15.Select Basic Settings -> Module Sequence. This presents a list of modulesloaded by the IBM HTTP Server and should include the IBM WebSphereAppServer module, which is probably at the top of the list. It is necessary toadd the IBM SSL module.16.Click Add.17.From the Select a module to add drop-down list, selectibm_ssl(IBMModuleSSL128.dll).18.Ensure that the Module dynamic link library is set tomodules/IBMModuleSSL128.dll.19.Click Apply. This will add the module to the list.20.Click Submit.21.Every operation so far has been performed at the Global level. Now a newVirtualHost will be created specifically for SSL connections. SelectConfiguration Structure -> Create Scope.22.Select VirtualHost from the first drop-down list.23.Enter a fully-qualified name or IP address in the Virtual host name text area;in our example: websrv01.itso.ibm.com.24.Enter 443 in the Virtual host port text area.25.Enter the server name in the Server name text area, in our case:websrv01.itso.ibm.com.26.For the server path, enter the path to the /htdocs directory27.Click Submit. A new VirtualHost entry should appear in the right-hand frame.28.Select Security -> Server Security.29.Ensure the scope is set to Global. If not, click Scope and select Global.30.Enable SSL by clicking Yes.31.Enter the path and name of the key store created with the ikeyman utility.32.Enter an SSL version 2 session ID timeout of 100.33.Enter an SSL version 3 session ID timeout of 1000.34.Click Submit.35.Select Security -> Host Authorization.36.Ensure the Scope is set to the VirtualHost defined previously: websrv01.37.Enable SSL by clicking Yes.38.Click Submit.39.Restart the IBM HTTP Server. This can be performed from the command lineor by clicking the Restart Server icon in the top-right corner of the284 IBM WebSphere V5.0 Security Handbook