WebSphere IBM HTTP Server, WebSphere Plugin and SSL Key and Cert Management

Hi all, not long now before I release my new WAS 8.5.5.x Advanced Administration Courses, due in late Q2, ealry Q3 2015.

Keep an eye out for several new focused WebSphere related courses which will cover many topics previously not covered before, and are hard to find with respect to training materials. The concepts within these new guides show how to do some of the more compex WebSphere Application Server, IBM HTTP Server and WebSphere Plugin administration techniques. All demonstrated by worked examples, including a detailed walk though of ikeyman, gskcmd and OpenSSL.

Here is a sample of one guide wich is part of the WebSphere Advanced Security course and covers the following topics in much detail.

INTRODUCTION
TOPICS COVERED
STARTING THE ADMINISTRATIVE SERVER
PERMISSIONS
STARTING AND STOPPING IBM HTTP SERVER
EXAMPLE START
EXAMPLE STOP
STARTING AND STOPPING IBM ADMINISTRATION SERVER
EXAMPLE START
EXAMPLE STOP
CREATING A WEB SERVER IN WAS ADMIN CONSOLE
TESTING A CONNECTION FROM WAS CONSOLE TO IBM ADMINISTRATION SERVER
CONFIGURING WEB SERVERS IN WAS ADMIN CONSOLE
GENERATING THE PLUGIN-CFG.XML FILE
PROPAGATING THE PLUGIN-CFG.XML FILE
CONFIGURE IBM HTTP SERVER TO LOAD THE PLUGIN MODULE
VERIFY DEFAULTAPPLICATION TARGETS
CONFIGURING SSL FOR COMMUNICATION
CREATING A SELF-SIGNED DIGITAL CERTIFICATE
ADDING SSL TO THE IHS VIRTUAL HOST CONFIGURATION
PROPAGATING KEYRING FILE FROM WAS TO WEB SERVER
CONFIGURING VIRTUAL HOSTS
AUTOMATING SELF-SIGNED CERTIFICATES
CREATING A NEW KEY DATABASE
SETTING THE DATABASE PASSWORD
REGISTERING A KEY DATABASE WITH THE SERVER
CREATING A SELF-SIGNED CERTIFICATE
MANAGING CERTIFICATE SIGNING FROM A CERTIFICATE AUTHORITY
BASIC SSL OVERVIEW
Digital Certificates
OBJECTIVE
INSTALL OPENSSL
CREATE A CSR USING IKEYMAN TOOL
Using gskcmd utility to create a a new Keyring Database to store a CSR
Verifying a Certificate Request via Command-line
Verifying a Certificate Request using ikeyman
LISTING AVAILABLE SIGNERS
CREATE A NEW CA
SIGNING THE CSR USING THE NEW CA
RECEIVE THE SIGNED CERTIFICATE INTO THE KEY DATABASE USING COMMAND-LINE
RECEIVE THE SIGNED CERTIFICATE INTO THE KEY DATABASE USING GUI
CONFIGURE IBM HTTP SERVER WITH A CERTIFICATED SIGNED BY A CA
ADDING THE CA’S CERTIFICATE TO THE KEY DATABASE
ADDING CA’S CERTIFICATE TO THE BROWSERS TRUST KEY STORE/DATABASE
CONFIGURE /ETC/HOSTS FILE
AUTOMATING WEB SERVER DEFINITIONS
UNDERSTANDING THE PLUGIN-CFG.XML FILE
APPENDIX A: ADDITIONAL INFORMATION ON OPENSSL TOOL
APPENDIX B: CREATING A KEY PAIR USING OPENSSL
GENERATE PRIVATE KEY
GENERATE PUBLIC KEY
CREATE A NEW CA USING CA.PL (CA SCRIPT)

Looking for IBM WebSphere Middleware Consultancy and Training to help with WebSphere Application Server, WMQ and IIB Architecture covering disciplines such as Product Strategy, Migration, Automation and general digital/enterprise insights? An expert in technical communications in the middleware space, and adept in almost all forms of Internet and mobile technology, Steve has time and time again proven his tenacity to improve systems around him and deliver.

Steve has worn many hats during his career such as Chief Technical Officer, Founding Member of several business ventures, Programmer, Systems Administrator, Architect, Blogger and Published Author to name a few. Due to 20 years Industry experience in Middleware, Programming, Networks and Internet Technologies, He combines systems knowledge with efficient working methods and inter personal skills required to build effective relationship with clients and colleagues alike. Exceeding typical expectations in any role undertaken, Steve is certain to become a valuable asset within any organisation He joins.

So, if you are looking for a professional to help with WAS Migration, WAS Architecture, and or WAS Automation (Shell, Jython, Java) and/or Middleware Integration, then please do contact me.