Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Secure web services > Secure web services > Administer Web Services Security > Configure XML digital signature for v5.x web services with the administrative console
Configure nonce using Web Services Security tokens
Nonce is a randomly generated, cryptographic token used to thwart the highjacking of user name tokens, which are used with SOAP messages. Use nonce in conjunction with the BasicAuth authentication method.
The information in this article supports Version 5.x applications only that are used with WAS v6.0.x and later. The information does not apply to v6.0.x and later applications.
We can configure nonce at the application level, the server level, and cell level.
If you configure nonce on the application level and the server level, the values specified for the application level take precedence over the values specified for the server level.
Likewise, the values specified for the application level take precedence over the values specified for the server level and cell level.
We must consider the order of precedence:
- Application level
- Server level
- Cell level
Complete these high-level tasks in the order listed:
Procedure
- Configure nonce for the application level.
- Configure nonce for the server level.
- Configure nonce for the cell level.
What to do next
After completing these steps, restart the server if it has not already been restarted.
Related
Configure nonce for the server level
Configure nonce for the application level
Configure nonce for the cell level
Nonce, a randomly generated token
Secure web services for v5.x applications using XML digital signature
Related
Default bindings and security runtime properties