Securing BMC Impact Integration Web Services

BMC Impact Integration Web Services supports Transport-level security, the SSL security. It does not support WS-Security based authentication. By default, Apache Tomcat 6 is configured to support both HTTP and HTTPS connections for one-way server SSL authentication. The HTTPS SSL protocol is TLS.

After installation, you can connect to the BMC Impact Integration Web Services through both HTTP and HTTPS connectors. If you want to restrict the connection to only HTTPS, you must modify the Tomcat server configuration to set the connectors.

For information about how to limit the HTTP connector, see Modifying the security configuration.

  Default keystore files

BMC Impact Integration Web Services provides a set of keystore files for HTTPS connection. The keystore files are located in the following directory:

$IIWS_HOME/Tomcat/webapps/imws/WEB-INF/

Following tables provide details about those default keystore files.