Enabling remote access to your servers

Before you can begin to manage your site, you must run a task that allows you to remotely access all target and source servers from the server where you will manage your site. There are additional steps you must perform on the server where you will manage your site if any of the servers are enabled for Secure Socket Layer (SSL).

Enabling access to servers that you will manage usually involves at least two portal systems: a source system, where you are creating new pages that you need to publish, and a target server, where the new pages will become visible to portal users. It is also possible to use one server, with two or more virtual portals, for site management. If you have two different servers, you must configure both the source system and the target system using the enable-tai task, as described below.

Note: Virtual portals do not require the enable-tai task.

A Trust Association Interceptor (TAI) is used to authorize access to the servers. Run the task enable-http-basic-auth-tai-sitemgmt, as follows, to enable the TAI:

Open a command prompt and change to the directory where WebSphere Portal Express is installed, on the corresponding operating system:
- Linux: wp_profile_root/config
- Windows: wp_profile_root\config
- i5/OS: wp_profile_root/config
Enter the following command:
- Linux: ConfigEngine.sh enable-http-basic-auth-tai-sitemgmt -DWasUserid=username -DWasPassword=password -DPortalAdminId=username -DPortalAdminPwd=password
- Windows: ConfigEngine.bat enable-http-basic-auth-tai-sitemgmt -DWasUserid=username -DWasPassword=password -DPortalAdminId=username -DPortalAdminPwd=password
- i5/OS: ConfigEngine.sh -profileName profile_root enable-http-basic-auth-tai-sitemgmt -DWasUserid=username -DWasPassword=password -DPortalAdminId=username -DPortalAdminPwd=password
  where profile_root is the name of the WebSphere Application Server profile where WebSphere Portal Express is installed; for example, wp_profile.
Note: This task uses the settings in the wp.sitem.cmd.properties file to configure the TAI. Although the TAI settings are pre-configured to work without requiring adjustment, you can change the settings before running the task if you need to configure the TAI differently. For more information, refer to Reference: Properties for the Trust Association Interceptor.

Optional: Choose the appropriate steps to perform on the server where you will manage your site to access any SSL servers:

Note: These steps are only required if your server is configured for SSL (https://) and your certificate is not from a trusted Certificate Authority; for example, self-signed certificates.

Option	Description
Linux	Perform the following steps to access SSL servers: Go to the `AppServer_root/bin` directory and open the `ikeyman.sh` file. Select Key Database File > Open. Click the Browse button. Change to the `AppServer_root/java/jre/lib/security` directory. Change Files of Type to `All Files`. Select the `cacerts` file and then click Open. Click OK. Enter the password for your cacerts file in the Password field. By default the password is `changeit`. Click Add. Enter the following information on the Add CA's Certificate from a File screen: Select one of the following Data Types: `Base64-encoded ASCII` `Binary DER data` Select the Certificate file name or click Browse to locate the file. Enter the Location of the certificate file. Click OK. Stop and restart the WebSphere Portal Express.
Windows	Perform the following steps to access SSL servers: Go to the `AppServer_root/bin` directory and open the `ikeyman.bat` file. Select Key Database File > Open. Click the Browse button. Change to the `AppServer_root/java/jre/lib/security` directory. Change Files of Type to `All Files`. Select the `cacerts` file and then click Open. Click OK. Enter the password for your cacerts file in the Password field. By default the password is `changeit`. Click Add. Enter the following information on the Add CA's Certificate from a File screen: Select one of the following Data Types: `Base64-encoded ASCII` `Binary DER data` Select the Certificate file name or click Browse to locate the file. Enter the Location of the certificate file. Click OK. Stop and restart the WebSphere Portal Express.
i5/OS	Perform the following steps to access SSL servers: Map a drive from a Windows machine, where the WebSphere Application Server plugins are installed, to the i5/OS file system. Make a backup copy of the cacerts files located in the i5/OS directory: `QIBM\ProdData\Java400\jdk14\lib\security`. Go to the `AppServer_root/bin` directory and open the `ikeyman.bat` file. Select Key Database File > Open. Click the Browse button. Change to the `AppServer_root/java/jre/lib/security` directory. Change Files of Type to `All Files`. Select the `cacerts` file and then click Open. Click OK. Enter the password for your cacerts file in the Password field. By default the password is `changeit`. Click Add. Enter the following information on the Add CA's Certificate from a File screen: Select one of the following Data Types: `Base64-encoded ASCII` `Binary DER data` Select the Certificate file name or click Browse to locate the file. Enter the Location of the certificate file. Click OK. Stop and restart the WebSphere Portal Express.