TABLE10–1 Messageprotection policy to WS-Security SOAP message security operation mapping
(Continued)
MessageProtectionPolicy ResultingWS-SecuritySOAP message protection operations
auth-recipient="before-content"
OR
auth-recipient="after-content"
Thecontent of the SOAP message Body is encrypted and
replacedwith the resulting xend:EncryptedData. The
messagecontains a wsse:Security header that contains
anxenc:EncryptedKey. The xenc:EncryptedKey
containsthe key used to encrypt the SOAP message body.
Thekey is encrypted in the public key of the recipient.
Nopolicy specied. Nosecurity operations are performed by the modules.
ConguringO ther Security Facilities
TheEnterprise Server implements message security using message security providers
integratedin its SOAP processing layer. The message security providers depend on other
securityfacilities of Enterprise Server.
1. Ifusinga version of the Java SDK prior to version 1.5.0, and using encryption technology,
congurea JCE provider.
2. ConguringaJCE provider is discussed in “Conguring a JCE Provider” on page 135.
3. Ifusinga username token, congure a user database, if necessary. When using a
username/passwordtoken, an appropriate realm must be congured and an appropriate
userdatabase must be congured for the realm.
4. Managecerticatesand private keys, if necessary.

AfterYouFinish

Oncethe facilities of the Enterprise Server are congured for use by message security providers,
thenthe providers installed with the Enterprise Server may be enabled as described in
“EnablingProviders for Message Security” on page 137.
Conguringa JCE Provider
TheJava Cryptography Extension (JCE) provider included with J2SE 1.4.x does not support
RSAencryption. Because the XML Encryption dened by WS-Security is typically based on
RSAencryption, in order to use WS-Security to encrypt SOAP messages you must download
andinstall a JCE provider that supports RSA encryption.
Note– RSA is public-key encryption technology developed by RSA Data Security, Inc. The
acronymstands for Rivest, Shamir, and Adelman, the inventors of the technology.
ConguringtheEnterprise Ser ver forMessage S ecurity
Chapter10 • Conguring Message Security 135