Enabling Default Message Security Providers for Web Services

By default, message security is disabled on Enterprise Server. Default message security providers have been created, but are not active until you enable them. After the providers have been enabled, message security is enabled.

The following topics are addressed here:

• To Enable a Default Server Provider

• To Enable a Default Client Provider

To Enable a Default Server Provider

To enable message security for web services endpoints deployed in Enterprise Server, you must specify a security provider to be used by default on the server side. If you enable a default provider for message security, you also need to enable providers to be used by clients of the web services deployed in Enterprise Server.

1. Specify the default server provider by using the set(1) subcommand.

   Use the following syntax:

   asadmin set --port admin-port server-config.security-service.message-security-config.SOAP. default_provider=ServerProvider

2. To apply your changes to applications that are already running, restart Enterprise Server.

   See To Restart a Domain.

To Enable a Default Client Provider

To enable message security for web service invocations originating from deployed endpoints, you must specify a default client provider. If you enabled a default client provider for Enterprise Server, you must ensure that any services invoked from endpoints deployed in Enterprise Server are compatibly configured for message layer security.

1. Specify the default client provider by using the set(1) subcommand.

   Use the following syntax:

   asadmin set --port admin-port server-config.security-service.message-security-config.SOAP. default_client_provider=ClientProvider

2. To apply your changes to applications that are already running, restart Enterprise Server.

   See To Restart a Domain.