Securing WAS profiles (WebSphere application servers only)

As specifically directed by the IBM WebSphere administration documentation, you should ensure that your WebSphere installation meets these general recommendations:

  • Standalone configuration - Secure the default profile

  • Network Deployment configuration - Create a new profile and secure that profile

  • Recommended method of securing profile via WAS Integrated Solutions Console:

    • Administrative security: Enable Administrative security.

    • Application security: Enable application security.

    • Java 2 security: Disabled.

    • User account repositories: Federated repositories with the admin_user and admin_password (same as defined in soap.client.props file for profile).