Other Configuring information - title & description will change

Configuring SSL
Secure socket layers (SSL) encrypt traffic between the client browser and the server to secure information exchanged over the network between the browser and IBM^® WebSphere^® Portal Express. You will need to configure your environment for SSL to activate this additional security feature.
Using Java 2 security with WebSphere Portal Express
Java 2 (J2SE) security provides a policy-based, fine-grain access control mechanism that increases overall system integrity by checking for permissions before allowing access to certain protected system resources. J2SE security allows you to set up individual policy files that control the privileges assigned to individual code sources. If the code does not have the required permissions and still tries to execute a protected operation, a corresponding security exception will be thrown by the Java Access Controller.
Changing passwords
IBM WebSphere Portal Express and IBM WebSphere Application Server use some user accounts from the registry (for example, the LDAP server) for various purposes. This information includes the "Security Server ID" for the WebSphere Application Server JVM, access ID for authenticated access to databases and LDAP servers, and WebSphere Application Server and WebSphere Portal Express administrative ID's. Often this means that the account passwords are stored in the WebSphere Application Server and WebSphere Portal Express bootstraps configuration files, which allows the authentication process to work.
External security managers
Use external security managers such as IBM Tivoli^® Access Manager for e-business to perform authentication and authorization for IBM WebSphere Portal Express. You can use an external security manager for authentication only or for both authentication and authorization. Using an external security manager to perform only authorization is not supported at this time.
Enabling HTTP Basic Authentication for simple clients
IBM WebSphere Portal Express provides an HTTP Basic Authentication Trust Association Interceptor that can be enabled to allow specific clients to log into the portal by using HTTP Basic Authentication instead of HTTP Form Based Authentication.

Parent topic: Configuring security