IBM 4.6.x, User Manual

Page: 45 / 140

By default, Privacy is turned off. Check the Privacy box to enable it.
The Keystore Target System Absolute Pathname is:
v
For Windows:
<ProductDir>\connectors\security\<connectorname>.jks
v
For UNIX:
opt/IBM/WebSphereAdapters/connectors/security/<connectorname>.jks
This path and file should be on the system where you plan to start the connector,
that is, the target system.
You can use the Browse button at the right only if the target system is the one
currently running. It is greyed out unless
Privacy
is enabled and the
Target System
in the menu bar is set to Windows.
The Message Privacy Level may be set as follows for the three messages categories
(All Messages, All Administrative Messages, and All Business Object Messages):
v
“” is the default; used when no privacy levels for a message category have been
set.
v
none
Not the same as the default: use this to deliberately set a privacy level of none
for a message category.
v
integrity
v
privacy
v
integrity_plus_privacy
The Key Maintenance feature lets you generate, import and export public keys for
the server and adapter.
v
When you select Generate Keys , the Generate Keys dialog box appears with the
defaults for the keytool that will generate the keys.
v
The keystore value defaults to the value you entered in Keystore Target System
Absolute Pathname on the Security tab.
v When you select OK, the entries are validated, the key certificate is generated
and the output is sent to the Connector Configurator log window.
Before you can import a certificate into the adapter keystore, you must export it
from the server keystore. When you select Export Adapter Public Key , the Export
Adapter Public Key dialog box appears.
v
The export certificate defaults to the same value as the keystore, except that the
file extension is <filename>.cer.
When you select Import Server Public Key , the Import Server Public Key dialog
box appears.
v
The import certificate defaults to < ProductDir >\bin\ics.cer (if the file exists on
the system).
v
The import Certificate Association should be the server name. If a server is
registered, you can select it from the droplist.
The Adapter Access Control feature is enabled only when the value of
DeliveryTransport is IDL. By default, the adapter logs in with the guest identity. If
the Use guest identity box is not checked, the Adapter Identity and Adapter
Password fields are enabled.
Chapter 3. Configuring the connector
33