Enabling Default Message Security Providers for Web Services

By default, message security is disabled on GlassFish Server. Default message security providers have been created, but are not active until you enable them. After the providers have been enabled, message security is enabled.

The following topics are addressed here:

• To Enable a Default Server Provider

• To Enable a Default Client Provider

To Enable a Default Server Provider

To enable message security for web services endpoints deployed in GlassFish Server, you must specify a security provider to be used by default on the server side. If you enable a default provider for message security, you also need to enable providers to be used by clients of the web services deployed in GlassFish Server.

1. Specify the default server provider by using the set(1) subcommand.

   Use the following syntax:

   asadmin set --port admin-port server-config.security-service.message-security-config.SOAP. default_provider=ServerProvider

2. To apply your changes to applications that are already running, restart GlassFish Server.

   See To Restart a Domain.

To Enable a Default Client Provider

To enable message security for web service invocations originating from deployed endpoints, you must specify a default client provider. If you enabled a default client provider for GlassFish Server, you must ensure that any services invoked from endpoints deployed in GlassFish Server are compatibly configured for message layer security.

1. Specify the default client provider by using the set(1) subcommand.

   Use the following syntax:

   asadmin set --port admin-port server-config.security-service.message-security-config.SOAP. default_client_provider=ClientProvider

2. To apply your changes to applications that are already running, restart GlassFish Server.

   See To Restart a Domain.