You can set security for a virtual server if that virtual server is bound to a secure listen socket.
For more information on security, see Chapter 5, J2SE-based Security for Web Container and Web Applications.