WAS v8.5 > Secure applicationsSecure communications
WebSphere Application Server provides several methods to secure communication between a server and a client. Note: WAS provides several methods for securing communication between a server and a client. New in this release are functions that ensure secure communication between a server and a client. These functions focus on certificate management, authentication, and ensuring trust among the application server, administrative agent, and job manager. The new functions include:
- Creating and using a certificate authority (CA) clients to enable a CA to request, query, and revoke certificates.
 - Creating and using chained personal certificates to allow a certificate to be signed with a longer life span.
 - Creating and revoking certificate authority (CA) certificates to ensure secure communication between the CA client and the CA server.
 The following topics are covered in this section:
- Secure communications using Secure Sockets Layer
 - Creating an SSL configuration
 - Creating a keystore configuration
 - Creating a certificate authority (CA) client
 - Deleting a certificate authority (CA) client
 - Viewing or Modifying a certificate authority (CA) client
 - Creating a keystore configuration for a preexisting keystore file
 - Creating a self-signed certificate
 - Creating a certificate authority request
 - Extracting a signer certificate from a personal certificate
 - Retrieving signers from a remote SSL port
 
- Adding a signer certificate to a keystore
 
- Adding a signer certificate to the default signers keystore
 - Exchanging signer certificates in a keystore
 - Configuring certificate expiration monitoring
 - Key management for cryptographic uses
 - Creating a key set configuration
 - Creating a key set group configuration
 - Configuring the web server plug-in for Secure Sockets Layer
 
Subtopics
- Key management for cryptographic uses
 - Configure the web server plug-in for Secure Sockets Layer
 - Secure communications using SSL
 - Add a signer certificate to the default signers keystore
 - Create a CA client in SSL
 - Delete a CA client in SSL
 - View or modify a CA client in SSL
 - Add a signer certificate to a keystore
 - Configure certificate expiration monitoring
 - Create a keystore configuration for a preexisting keystore file
 - Create an SSL configuration
 - Create a key set group configuration
 - Create a key set configuration
 - Create a certificate authority request
 - Create a self-signed certificate
 - Exchanging signer certificates
 - Extracting a signer certificate from a personal certificate
 - Retrieving signers from a remote SSL port