TRITON - Web Security Help, Version 7.7 - Websense

User IdentificationActivating secure manual authenticationTRITON - Web Security Help | Web Security Solutions | Version 7.7.xRelated topics: Manual authentication, page 297 Setting authentication rules for specific machines, page 299 Secure manual authentication, page 302 Generating keys and certificates, page 303 Accepting the certificate within the client browser, page 3051. Stop Websense Filtering Service (see Stopping and starting Websense services,page 385).2. Navigate to the Websense installation directory on the Filtering Service machine(by default, C:\Program Files\Websense\bin or /opt/Websense/bin/).3. Locate eimserver.ini and make a backup copy of the file in another directory.4. Open the original INI file in a text editor.5. Find the [WebsenseServer] section, and then add the line:SSLManualAuth=on6. Below the previous line, add the following:SSLCertFileLoc=[path]Replace [path] with the full path to the SSL certificate, including the certificatefile name (for example, C:\secmanauth\server.crt).7. Also add:SSLKeyFileLoc=[path]Replace [path] with the full path to the SSL key, including the key file name (forexample, C:\secmanauth\server.key).8. Save and close eimserver.ini.9. Start Websense Filtering Service.After starting, Filtering Service listens for requests on the default secure HTTP port(15872).The preceding steps ensure secure communication between the client machine andWebsense software. To also secure communication between Websense software andthe directory service, make sure that Use SSL is selected on the Settings > DirectoryServices page. See Advanced directory settings, page 81, for details.304 Websense Web Security Solutions