The article provides step by step guide for readers on how to configure IBM Experience Builder V8.0 with IBM Http Server v8.0 and then enable Secure Sockets Layer (SSL).
The components required to install and configure in this article are WebSphere Applications server, IBM HTTP Server, DB2 , Domino Mail Server , and IBM Tivoli Directory Server.
The environment included the following components:
•IBM WebSphere Applications Network Deployment 18.104.22.168
•IBM HTTP Server V8.0
•IBM DB2 Enterprise Server Edition Version 9.7 Fix Pack 6
•IBM Tivoli Directory Server 6.2
•IBM Domino Mail Server 8.5.1
The following table lists the specifications for the computers used in the infrastructure.
IBM WebSphere Application Server
windows 2008 EE
IBM WebSphere Applications Network Deployment 22.214.171.124;
Forms Experience Builder (FEB)
Kernel Type: 64-bit
Memory Size: 4GB
Bitness: 64 Bit
Hard Disk Size:80GB
windows 2008 EE
IBM DB2 Enterprise Server Edition Version 9.7 Fix Pack 6
Same as above
windows 2008 EE
IBM Http Server 8.0
Same as above
Windows 2008 R2
IBM Domino Mail Server 8.5.1
Processor: Intel(R) Xeon(R) CPU E5310 @ 1.6GHz (8 CPUs), ~1.7GHz
Memory: 8190MB RAM
Windows 2008 R2
IBM Tivoli Directory Server 6.2
Same as above
For how to install and configure IBM Forms Experience Builder 8.0 Standalone Environment , please refer to :
For how to install and configure IBM Forms Experience Builder 8.0 Cluster Environment , please refer to :
About IBM HTTP Server
IBM HTTP Server ( briefly called IHS ) is a full-featured web server often included with other products such as WebSphere Application Server.
It is based on Apache HTTP Server (httpd.apache.org).
To know more about IHS for WebSphere Application Server V8.0 , please refer to IBM HTTP Server Version 8 documentation
Configuring IBM HTTP Server For WAS 8.0
Note: Below steps based on a WebSphere Application Server V8.0, on which user will install IBM Forms Experience Builder V8.0
1. Download WAS80 Supplemental CD , you will see "repository.config" file located under Supplemental CD, the file will later be used as repository for package installation.
2. Launch IBM Installation Manager, select the file "repository.config" ( mentioned in step1) in "File" -> "Preferences" -> "Repositories".
3. The WAS8.0 Supplemental CD will enable user to install IHS,Web Server Plug-ins, WebSphere Customization Toolbox (WCT) and App Client for WAS , Pluggable App Client for WAS.
In our scenario, we only need to select and install below three software packages:
(3-a) IBM HTTP Server for WebSphere Application Server, Version 8.0
IBM HTTP Server for WebSphere Application Server provides advanced web server capabilities with consistent management and security in a WebSphere Application Server environment.
(3-b) Web Server Plug-ins for IBM WebSphere Application Server, Version 8.0
Web Server Plug-ins for IBM WebSphere Application Server provides an optimized connection to route requests from a web server and WebSphere Application Server.
(3-c) WebSphere Customization Toolbox, Version 8.0
WebSphere Customization Toolbox provides tools to simply and rapidly customize a WebSphere Application Server environment.
4. Specify the Installation Directories for the three software packages:
5. Set HTTP port and Windows Service information for IBM HTTP Server V8.0
6. Wait for the installation process to finish.
7. Launch WebSphere Customization Toolbox 8.0 (WCT 8.0 ) from "C:\Nitro\IBM\WebSphere\Toolbox\WCT" , either "eclipse.exe" or "wct.bat" is ok to start WCT.
8. Select and Launch "Web Server Plug-ins Configuration Tool" from WCT tool list.
9. Create Web server definition
(9-a) Select IBM HTTP Server V8 as Web Server Type
(9-b) Point to the httpd.conf file for the new installed IHS in step6
Confirm the web server port number is the same with what we set during IHS installation in step5.
(9-c) Fill in the required information for setting up IHS Administration Server. Create a user ID and set password, this would be used for IHS Administration Server authentication.
(9-d) Create a unique Web Server definition name. Here, we named it "nitrowebserver"
(9-e) Fill in the WebSphere Application Server Information
In the scenario described by this article, WAS and IHS locate on the same computer. Input the installation directory of WebSphere Application Server, "C:\Nitro\IBM\WebSphere\AppServer".
In the local scenario, the web server definition will be automatically defined in the WAS.
Restart WAS, and logon WAS admin console, from "Servers->Server Types->Web Servers" , select the Web Server we just created, "nitrowebserver", select "Generate Plug-in" and then "Propagate Plug-in".
Till now, we have finished all required steps to Configure Web Server for all applications on WAS,.
Assume you have installed IBM Forms Experience Builder on WAS, you can now access Forms server without portnumber, http://webserverhostname/forms
, this could help check whether you have configured IHS successfully.
More to mention, if web server IHS and WAS are not on the same computer, that is , remote configuration scenario for step (9-e), please input the hostname or IP of the WAS.
The Web Server plug-in Configuration tool will generate configuration script under Plugins/bin/crossPlatformScripts/YOUR_WAS_PLATFORM, such as "configurenitrowebserver.sh"
★ Copy the configuration script from Web Server computer to AppServer/bin.
★ Logon the computer which installed WAS, Enter directory AppServer/bin, execute "./configurenitrowebserver.sh -user wasuser -password waspwd",
this task will create the webserver definition into WAS.
★ Restart WAS
★ Logon WAS admin console, from "Servers->Server Types->Web Servers" , select the WebServer we just created, "nitrowebserver", select "Generate Plug-in" ,follow the message occurs on WAS Console to manually copy Plugin-cfg.xml to the Computer with WebServer installed , place the file under Plugins/config/nitrowebserver
★ Logon the computer on which installed Web Server IHS, Restart IHS.
Securing IBM HTTP Server with SSL
Follow below steps to create a Self-Signed Certificate in the CMSKeystore.
10. Logon WAS console, "Security->SSL certificate and key management", click "Manage endpoint security configuration"
11. From the local Topology, select the Web Server created in previous steps.
12. Click "Key stores and certificates",from the key stores and certificate list, select "CMSKeyStore"
13. For configuration of "CMSKeyStore" ,select "Personal certificates" from Additional Properties, proceed to create a self-signed certificate.
14. Extract the DefaultKeyStore Personal certificate and add it to the CMSKeyStore Signer certificates:
(14-a) In standalone WAS Environment, select NodeDefaultKeyStore from "Key stores and certificates" list, click "Personal Certificates";
In Cluster Environment, select CellDefaultKeyStore from "Key Store and certificates" list, click "Personal Certificates".
(14-b) Extract the KeyStore personal certificate, set the certificate file name ,in our scenario, we set "Formsvm007defaultcert",
In Standalone Environment, the certificate file will be extracted into WASProfile/etc
In Cluster Environment, the certificate file will be extracted into DMProfile/etc
(14-c) Go back to "CMSKeyStore" , select "Signer certificate" from Additional Properties list, click "Add".
(14-d) Add "Formsvm007defaultcert" extracted in step (14-b) into CMSKeyStore Signer certificate:
Set the Alias for the signer certificate;
Set the full path where you extracted the DefaultKeyStore Personal Certificate, please refer to the full path of the certificate file in step (14-b).
Save directly to the WAS master configuration.
The DefaultKeyStore Personal certificate has been extracted and added to the CMSKeyStore Signer certificates successfully.
15. Generate and Propagate the plug-in from WAS to IHS.
16. Edit the IBM HTTP Server httpd.conf file:
Add the following lines to httpd.conf
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
☆ The value of ServerName (Formsvm007.cn.ibm.com) should be the same as the value you specified for Common Name when creating the self-signed certificate.
☆ The value of SSLServerCert (Formsvm007selfsigned) should be the name of the Self Signed Certificate that you created in the CMSKeyStore.
☆ The value of KeyFile should be the Path of the CMSKeyStore where your Self Signed Certificate is contained.
17. Restart WAS and IHS.
18. Forms Experience Builder successfully configured with IHS over SSL.
Forms Experience Builder could be accessed through https, https://webserverhostname/forms
Accept the security certificate, input Username/Password for Forms Server,next, enjoy your journey with Forms V8.0 with IHS over SSL.
1. Detailed system requirements for IBM Forms Server 8.0
2. WebSphere Application Server 8.0 installation
3. IBM HTTP Server , Version 8 documentation
Lily(firstname.lastname@example.org)，IBM CDL Staff Software Engineer, is working on IBM Forms, have rich experience in software development and test.
Rose(email@example.com)，IBM CDL Staff Software Engineer, is working on IBM Forms, have rich experience in software development and test.