Configuring Security Policy Properties

This procedure enables you to configure the security policy properties of the functions provided with the UDDI server. You can set security levels for publishing, replication, discovery, inquiry, custody, subscription, and value set functions. These functions are implemented according to the UDDI v3.0 specification. For more information, see http://uddi.xml.org.

Procedure

Choose UDDI Server Configuration and select the Policy tab.
If you want to set a medium level of security on the UDDI server functions, proceed as follows:
1. Set the authentication method precedence to Auth Token Only.
2. Set Require Authentication Token to Accept.
3. Set Require Client Certificate to Accept.
This level of security means that both authentication tokens and client certificates are accepted.
If you want a high level of security on the UDDI server functions, proceed as follows:
1. Set the authentication method precedence to SSL and Auth Token.
2. Set Require Authentication Token to Require.
3. Set Require Client Certificate to Require.
4. Choose the Require SSL indicator.
This level of security means that both authentication tokens and client certificates are required for authentication.
If you want to disable a specific function, choose the corresponding indicator. For example, if you want to prohibit publishing options on your UDDI server, choose the Disable API Publishing indicator.
If you wish, you can set or edit the following security options as well:
- Authentication Token Validity
  Specifies how long, in minutes, a given authentication token is valid.
- Max Rows in Find Response
  Specifies the number of entities that are displayed when the UDDI server is searched.
- Security Require SSL
  Specifies if the communication with the UDDI server is to be via SSL.
- Specifies the URL of the security API.