SSL/https WEBI

[kbsiva]

Folks,
 Has any one done secuirty using certificate for WeBI? Is there a documentation some where that I can use.

Thanks
Siva

[demaya]

Hey,

I have to do the same in a few weeks and I investigated some time in this.

It seems that SSL support is realized over the websphere and on websphere ssl is already enabled:
Instead of port 9080 try port 9443 https://adressofwebi:9443/wccommonservices/

But the installed certificate is self signed so its not "the best" choice. At the moment I try to figure out how to generate an Certificate Signing Request so a PKI can generate an "good" cert.

Hope this is helpful. If someone has more information, please let me know!

Cheers

[demaya]

Ok, I did everything and have a well signed certificate installed.

In Websphere console (here 6.1):
Security => SSL certificate and key management => Key stores and certificates => NodeDefaultKeyStore => Personal certificate requests => Create a new CSR which can be sent to the CA to create a certificate

Then you get back a base64 or binary certificate which can be installed in websphere:
Security => SSL certificate and key management => Key stores and certificates => NodeDefaultKeyStore => Personal certificates => Receive certificate from CA

Et voil?: the certificate is installed and you can reach the WEBi via https over the url: https://<server>:9443/wccommonservices/ and no browser gives out a warning message that the certificate is not well signed.

Cheers

[kbsiva]

Thanks mayach,
 I will let know you how this goes.

Thanks
kbs