ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahu_5.4.0.1/rzahustep2configurethehumanresourceshttpservertousessl.htm

84 lines
5.4 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Configure the human resources HTTP Server to use SSL" />
<meta name="DC.Relation" scheme="URI" content="rzahudcmpublicaccessscen.htm" />
<meta name="DC.Relation" scheme="URI" content="rzahustep1completeplanningworksheets2.htm" />
<meta name="DC.Relation" scheme="URI" content="rzahustep3createandoperatealocalca.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzahustep2configurethehumanresourceshttpservertousessl" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Configure the human resources HTTP Server to use SSL</title>
</head>
<body id="rzahustep2configurethehumanresourceshttpservertousessl"><a name="rzahustep2configurethehumanresourceshttpservertousessl"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Configure the human resources HTTP Server to use SSL</h1>
<div><div class="section"><p>Secure Sockets Layer (SSL) configuration for the human resources
HTTP Server (powered by Apache) on <span class="keyword">iSeries™</span> A
involves a number of tasks which vary depending on how your server is configured
currently. </p>
<p>To configure the server to use SSL, follow these steps:</p>
</div>
<ol><li><span>Start the HTTP Server Administration interface.</span></li>
<li><span>To work with a specific HTTP server, select these page tabs <span class="uicontrol">Manage
&gt; All Servers —&gt; All HTTP Servers</span> to view a list of all
configured HTTP servers.</span></li>
<li><span>Select the appropriate server from the list and click <span class="uicontrol">Manage
Details</span>. </span></li>
<li><span>In the navigation frame, select <span class="uicontrol">Security</span>.</span></li>
<li><span>Select the <span class="uicontrol">SSL with Certificate Authentication</span> tab
in the form. </span></li>
<li><span>In the <span class="uicontrol">SSL</span> field, select <samp class="codeph">Enabled</samp>.
</span></li>
<li><span>In the <span class="uicontrol">Server certificate application name</span> field,
specify an application ID by which this server instance is known. Or, you
can select one from the list. This application ID is in the form <samp class="codeph">QIBM_HTTP_SERVER_[server_name]</samp>,
for example, <samp class="codeph">QIBM_HTTP_SERVER_MYCOTEST</samp>. <span class="uicontrol">Note:</span> Remember
this application ID. You will need to select it again in the DCM. </span></li>
</ol>
<div class="section"><p>You can learn more about the overall configuration needed for your
HTTP Server when using SSL in the <a href="../rzaie/rzaiemain.htm">HTTP Server for iSeries</a> Information topic, especially
in an example called Scenario: JKL enables Secure Sockets Layer (SSL) protection
on their HTTP Server (powered by Apache). This scenario provides all the task
steps for creating a virtual host and configuring it to use SSL, including
the following tasks: </p>
<ol><li>Set up of a name-based virtual host.</li>
<li>Set up of a Listen directive for virtual host.</li>
<li>Set up of the virtual host directories.</li>
<li>Set up of password protection via basic authentication.</li>
<li>Enablement of SSL for the virtual host</li>
</ol>
<p>For additional information about configuring both current and future
versions of the HTTP Server for <span class="keyword">iSeries</span>,
see the <a href="../rzaie/rzaiemain.htm">HTTP
Server for iSeries</a> topic.</p>
<p>When
you complete the configuration for the HTTP Server to use SSL, you can use
DCM to configure the certificate support that you need for SSL and client
authentication.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahudcmpublicaccessscen.htm" title="In this scenario, you to learn how to use certificates as an authentication mechanism to protect and restrict which resources and applications that internal users can access on your internal servers.">Scenario: Use certificates for internal authentication</a></div>
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzahustep1completeplanningworksheets2.htm">Complete planning work sheets</a></div>
<div class="nextlink"><strong>Next topic:</strong> <a href="rzahustep3createandoperatealocalca.htm">Create and operate a Local CA</a></div>
</div>
</div>
</body>
</html>