92 lines
6.7 KiB
HTML
92 lines
6.7 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
<!DOCTYPE html
|
||
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
<html lang="en-us" xml:lang="en-us">
|
||
|
<head>
|
||
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
<meta name="security" content="public" />
|
||
|
<meta name="Robots" content="index,follow" />
|
||
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
<meta name="DC.Type" content="concept" />
|
||
|
<meta name="DC.Title" content="Configure Web browser connections to iSeries Navigator tasks on the Web" />
|
||
|
<meta name="abstract" content="Ensure that iSeries Navigator Tasks on the Web is configured with the desired behavior for handling SSL or non-secure connections from browsers. Also, if you want to allow or require browser communications to run across a secure connection, you will need to configure SSL for the Administration instance of the HTTP Server." />
|
||
|
<meta name="description" content="Ensure that iSeries Navigator Tasks on the Web is configured with the desired behavior for handling SSL or non-secure connections from browsers. Also, if you want to allow or require browser communications to run across a secure connection, you will need to configure SSL for the Administration instance of the HTTP Server." />
|
||
|
<meta name="DC.Relation" scheme="URI" content="rzatgsecurity.htm" />
|
||
|
<meta name="DC.Relation" scheme="URI" content="../rzaie/rzaieconfigssladmin.htm" />
|
||
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
<meta name="DC.Format" content="XHTML" />
|
||
|
<meta name="DC.Identifier" content="rzatgsecurityweb" />
|
||
|
<meta name="DC.Language" content="en-us" />
|
||
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
<!-- US Government Users Restricted Rights -->
|
||
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
<title>Configure Web browser connections to iSeries Navigator tasks on the Web</title>
|
||
|
</head>
|
||
|
<body id="rzatgsecurityweb"><a name="rzatgsecurityweb"><!-- --></a>
|
||
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
<h1 class="topictitle1">Configure Web browser connections to iSeries Navigator tasks on the Web</h1>
|
||
|
<div><p>Ensure that iSeries™ Navigator Tasks on the Web is configured
|
||
|
with the desired behavior for handling SSL or non-secure connections from
|
||
|
browsers. Also, if you want to allow or require browser communications to
|
||
|
run across a secure connection, you will need to configure SSL for the Administration
|
||
|
instance of the HTTP Server.</p>
|
||
|
<p>If you do not use secure connections from Internet Web browsers to the iSeries Navigator
|
||
|
tasks on the Web interface, your OS/400<sup>®</sup> userID and password could be easily
|
||
|
accessed by someone else on the network. If an external network, such as the
|
||
|
Internet, can be used for browser connections to the iSeries Navigator tasks on the Web interface,
|
||
|
you should use SSL. If you want to allow secure connections from Internet
|
||
|
Web browsers to the iSeries Navigator tasks on the Web interface, you
|
||
|
need to set up SSL for the Administration instance of the HTTP Server.</p>
|
||
|
<div class="section"><h4 class="sectiontitle">Configure how iSeries Navigator tasks on the Web handles
|
||
|
HTTP SSL connections</h4><p>iSeries Navigator tasks on the Web gives
|
||
|
you the ability to require SSL connections from Internet Web browsers to the
|
||
|
HTTP Server, or gives you the option to warn users if an SSL connection is
|
||
|
not used. If your system is connected to the Internet, it is strongly recommended
|
||
|
that you use SSL. In this case, you might want to just warn users if an SSL
|
||
|
connection is not use, or require all browsers to use secure connections.
|
||
|
If you are behind a firewall, you may choose to run without SSL. In this case,
|
||
|
you can turn off the SSL warnings displayed, and SSL checking performed by
|
||
|
the iSeries Navigator
|
||
|
tasks on the Web user interface. If you want iSeries Navigator tasks on the Web to
|
||
|
do something other than warn users if SSL connections are not used by Internet
|
||
|
Web browsers, you need to modify the iSeries Navigator tasks configuration.</p>
|
||
|
<p>From
|
||
|
the iSeries Navigator
|
||
|
Tasks on the Web home page (task=home), click the<strong>iSeries Navigator Tasks Configuration
|
||
|
page</strong> link. Select the desired SSL settings on the Configuration panel,
|
||
|
then click <strong>OK</strong></p>
|
||
|
<p>Use the following values to change how SSL is
|
||
|
used:</p>
|
||
|
<dl><dt class="dlterm">warning:</dt>
|
||
|
<dd>This is the default setting. When httpSSL is set to warning, the iSeries Navigator
|
||
|
tasks on the Web interface will determine if SSL is being used during the
|
||
|
current session. If not, it will display a warning message for several seconds,
|
||
|
but it will still allow the user to connect. If SSL has been used by the browser
|
||
|
for the connection to the ADMIN server, no warning will be displayed.</dd>
|
||
|
<dt class="dlterm">required:</dt>
|
||
|
<dd>When <span class="uicontrol">httpSSL</span> is set to <span class="uicontrol">required</span>,
|
||
|
the iSeries Navigator
|
||
|
tasks on the Web interface will determine if SSL is being used during the
|
||
|
current session. If not, it will deny the user access to the application.</dd>
|
||
|
<dt class="dlterm">notrequired:</dt>
|
||
|
<dd>When <span class="uicontrol">httpSSL</span> is set to <span class="uicontrol">notrequired</span>,
|
||
|
both secure or non-secure connections to the iSeries Navigator tasks on the Web interface
|
||
|
will be accepted. The application will not check to see if SSL is being used
|
||
|
during the current session.</dd>
|
||
|
</dl>
|
||
|
</div>
|
||
|
</div>
|
||
|
<div>
|
||
|
<div class="familylinks">
|
||
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzatgsecurity.htm" title="If you are accessing the iSeries Navigator tasks on the Web interface over an external network, such as the Internet, it is recommended that you connect using a secure HTTP connection. Additionally, if the server hosting the iSeries Navigator Tasks on the Web interface resides outside of a firewall, or if you are managing a secondary system outside of a firewall, it is recommended that you also configure the IBM Toolbox for Java to establish secure socket connections for data access.">Configure security for iSeries Navigator tasks on the Web</a></div>
|
||
|
</div>
|
||
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
||
|
<div><a href="../rzaie/rzaieconfigssladmin.htm">Set up SSL for the Administration instance of the HTTP Server</a></div>
|
||
|
</div>
|
||
|
</div>
|
||
|
</body>
|
||
|
</html>
|