Default bindings and security runtime properties

Use this page to specify the configuration on the cell level in a WebSphere® Application Server Network Deployment environment. In addition, use this page to define the default generator bindings, default consumer bindings, and additional properties such as key locators, the collection certificate store, trust anchors, trusted ID evaluators, algorithm mappings, and login mappings.

Displayed options and the panel title depend on your server configuration and version.

To view this administrative console page for the cell level, Click Security > JAX-WS and JAX-RPC security runtime.

To view this administrative console page for the server level, complete the following steps:
  1. Click Servers > Server Types > WebSphere application servers > > server_name > Security.
  2. Under Security, click JAX-WS and JAX-RPC security runtime.
    混合版本環境: In a mixed node cell with a server using Websphere Application Server version 6.1 or earlier, click Web services: Default bindings for Web services security.mixv

Nonce is a unique cryptographic number embedded in a message to help stop repeated, unauthorized attacks of user name tokens. In a WebSphere Application Server Network Deployment environment, you must specify values for the Nonce cache timeout, the Nonce maximum age, and the Nonce clock skew fields for the cell level.

The default binding configuration provides a central location where reusable binding information is defined. The application binding file can reference the information in the default binding configuration.

Nonce cache timeout [只限第 5 版和第 6 版]

Specifies the timeout value, in seconds, for the nonce value that is cached on the server. Nonce is a randomly generated value.

The Nonce cache timeout field is required for the cell level.

The maximum value for the Nonce maximum age field cannot exceed the number of seconds that is specified for this Nonce cache timeout field. If you make changes to the field value, you must restart WebSphere Application Server for the changes to take effect.

Default 600 seconds
Minimum 300 seconds
Nonce maximum age [只限第 5 版和第 6 版]

Specifies the time, in seconds, before the nonce time stamp expires. Nonce is a randomly generated value.

The value that is specified in this cell-level field is the maximum value that you can specify for the Nonce maximum age field for the server level.

The Nonce maximum age field is required for the cell level.

Default 300 seconds
Range 300 to the Nonce cache timeout value in seconds
Nonce clock skew [只限第 5 版和第 6 版]

Specifies the clock skew value, in seconds, to consider when WebSphere Application Server checks the timeliness of the message. Nonce is a randomly generated value.

The Nonce clock skew field is required for the cell level.

Default 0 seconds
Range 0 to the Nonce maximum age value, in seconds
Custom properties
Distribute nonce caching [只限第 6 版]

Enables distributed caching for nonce using a Data Replication Service (DRS). In previous releases of WebSphere Application Server, the nonce was cached locally. By selecting this option, the nonce is propagated to other servers in your environment. However, the nonce might be subject to a one-second delay in propagation and subject to any network congestion.




標示(線上)的鏈結表示需要存取網際網路。

Related tasks
Related reference
Signing information collection
Encryption information collection
Key information collection
Token generator collection
Key locator collection
Collection certificate store collection
Trust anchor collection
Trusted ID evaluator collection
Algorithm mapping collection


檔名: uwbs_noncecellprop.html