ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzatg_5.4.0.1/rzatgsecurityweb.htm

92 lines
6.7 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Configure Web browser connections to iSeries Navigator tasks on the Web" />
<meta name="abstract" content="Ensure that iSeries Navigator Tasks on the Web is configured with the desired behavior for handling SSL or non-secure connections from browsers. Also, if you want to allow or require browser communications to run across a secure connection, you will need to configure SSL for the Administration instance of the HTTP Server." />
<meta name="description" content="Ensure that iSeries Navigator Tasks on the Web is configured with the desired behavior for handling SSL or non-secure connections from browsers. Also, if you want to allow or require browser communications to run across a secure connection, you will need to configure SSL for the Administration instance of the HTTP Server." />
<meta name="DC.Relation" scheme="URI" content="rzatgsecurity.htm" />
<meta name="DC.Relation" scheme="URI" content="../rzaie/rzaieconfigssladmin.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzatgsecurityweb" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Configure Web browser connections to iSeries Navigator tasks on the Web</title>
</head>
<body id="rzatgsecurityweb"><a name="rzatgsecurityweb"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Configure Web browser connections to iSeries Navigator tasks on the Web</h1>
<div><p>Ensure that iSeries™ Navigator Tasks on the Web is configured
with the desired behavior for handling SSL or non-secure connections from
browsers. Also, if you want to allow or require browser communications to
run across a secure connection, you will need to configure SSL for the Administration
instance of the HTTP Server.</p>
<p>If you do not use secure connections from Internet Web browsers to the iSeries Navigator
tasks on the Web interface, your OS/400<sup>®</sup> userID and password could be easily
accessed by someone else on the network. If an external network, such as the
Internet, can be used for browser connections to the iSeries Navigator tasks on the Web interface,
you should use SSL. If you want to allow secure connections from Internet
Web browsers to the iSeries Navigator tasks on the Web interface, you
need to set up SSL for the Administration instance of the HTTP Server.</p>
<div class="section"><h4 class="sectiontitle">Configure how iSeries Navigator tasks on the Web handles
HTTP SSL connections</h4><p>iSeries Navigator tasks on the Web gives
you the ability to require SSL connections from Internet Web browsers to the
HTTP Server, or gives you the option to warn users if an SSL connection is
not used. If your system is connected to the Internet, it is strongly recommended
that you use SSL. In this case, you might want to just warn users if an SSL
connection is not use, or require all browsers to use secure connections.
If you are behind a firewall, you may choose to run without SSL. In this case,
you can turn off the SSL warnings displayed, and SSL checking performed by
the iSeries Navigator
tasks on the Web user interface. If you want iSeries Navigator tasks on the Web to
do something other than warn users if SSL connections are not used by Internet
Web browsers, you need to modify the iSeries Navigator tasks configuration.</p>
<p>From
the iSeries Navigator
Tasks on the Web home page (task=home), click the<strong>iSeries Navigator Tasks Configuration
page</strong> link. Select the desired SSL settings on the Configuration panel,
then click <strong>OK</strong></p>
<p>Use the following values to change how SSL is
used:</p>
<dl><dt class="dlterm">warning:</dt>
<dd>This is the default setting. When httpSSL is set to warning, the iSeries Navigator
tasks on the Web interface will determine if SSL is being used during the
current session. If not, it will display a warning message for several seconds,
but it will still allow the user to connect. If SSL has been used by the browser
for the connection to the ADMIN server, no warning will be displayed.</dd>
<dt class="dlterm">required:</dt>
<dd>When <span class="uicontrol">httpSSL</span> is set to <span class="uicontrol">required</span>,
the iSeries Navigator
tasks on the Web interface will determine if SSL is being used during the
current session. If not, it will deny the user access to the application.</dd>
<dt class="dlterm">notrequired:</dt>
<dd>When <span class="uicontrol">httpSSL</span> is set to <span class="uicontrol">notrequired</span>,
both secure or non-secure connections to the iSeries Navigator tasks on the Web interface
will be accepted. The application will not check to see if SSL is being used
during the current session.</dd>
</dl>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzatgsecurity.htm" title="If you are accessing the iSeries Navigator tasks on the Web interface over an external network, such as the Internet, it is recommended that you connect using a secure HTTP connection. Additionally, if the server hosting the iSeries Navigator Tasks on the Web interface resides outside of a firewall, or if you are managing a secondary system outside of a firewall, it is recommended that you also configure the IBM Toolbox for Java to establish secure socket connections for data access.">Configure security for iSeries Navigator tasks on the Web</a></div>
</div>
<div class="reltasks"><strong>Related tasks</strong><br />
<div><a href="../rzaie/rzaieconfigssladmin.htm">Set up SSL for the Administration instance of the HTTP Server</a></div>
</div>
</div>
</body>
</html>