Use this page to specify the trust anchor configuration. These
trust anchor certificates are used to validate the X.509 certificate that
is embedded in the SOAP message.
Use this information to configure a trust anchor. Trust anchors point to
keystores that contain trusted root or self-signed certificates. This information
enables you to specify a name for the trust anchor and the information that
is needed to access a keystore. The application binding uses this name to
reference a predefined trust anchor definition in the binding file (or the
default).
You can configure a trust anchor when you are editing a default cell or
server binding. You can also configure custom bindings for tokens and message
parts that are required by the policy set.
To view this administrative console page when you are editing a default
cell binding, complete the following actions:
- Click Services > Policy sets > Default policy set bindings.
- Click the WS-Security policy in the Policies table.
- Click the Keys and certificates link in the Main message security
policy bindings section.
- Click a name link in the Name column of the Trust anchor table.
To view this administrative console page when you are configuring custom
bindings for tokens and message parts that are required by the policy set,
complete the following actions:
- Click Applications > Enterprise applications .
- Select an application that contains Web services. The application must
contain a service provider or a service client.
- Click the Service provider policy sets and bindings link or the Service
client policy sets and bindings in the Web Services Properties section.
- Select a binding. You must have previously attached a policy set and assigned
a custom binding.
- Click the WS-Security policy in the Policies table.
- Click the Keys and certificates link in the Main message security
policy bindings section.
- Click a name link in the Name column of the Trust anchor table.
這個管理主控台畫面只適用於 Java™ API for XML Web Service (JAX-WS) Web 服務。