Overview

Typical scenario for WS-Security

• Authentication
• Integrity and confidentiality

Establishing a security context

Features of WS-Security in Application Server

• Supported specifications
• Unsupported specifications

Extensions in WebSphere Application Server

Architecture and deployment model

• High-level architecture
• Configuration structure

Development of WS-Security

• RAD Step-by-Step for digital signatures, encryption, and security tokens.
• How to define WS-Security configuration
• Generating sample key stores
• Authentication
• Integrity
• Confidentiality
• Adding a security timestamp

Testing on WebSphere Application Server

• Enabling security on the server
• Enabling the TCP/IP Monitor
• Testing the application with WS-Security
• Debugging and tracing
• Typical errors

Generating WS-Security Sample Configurations

• Running the Web Service wizard with security
• Scenario to generate and modify security definitions
• Modifying generated definitions to use own key stores
• Adding authentication and timestamp

Configuring WS-Security on an Application Server

• Modifying binding configurations
• Adding a custom JAAS configuration
• Configuring certificate caching