Configuring SSL only for the login process

You can encrypt only the login process to IBM® WebSphere® Portal Express® and then allow subsequent requests via HTTP.

1. Verify that the following parameters exist and are correctly set for your installation in the WP ConfigService application:
   1. Log on to the WebSphere Integrated Solutions Console in a standalone environment or on the Deployment Manager WebSphere Integrated Solutions Console in a clustered environment.
   2. Navigate to Resources > Resource Environment > Resource Environment Providers.
   3. Click WP ConfigService.
   4. Click Custom Properties under the Additional Properties heading.
   5. Locate the redirect.login.ssl property and perform one of the following options:
      Note: The redirect.login.ssl parameter determines the protocol to use after login completes. If this parameter is set to true, https is used. If this parameter is set to false, http is used. This setting is not affected by the protocol used to access the main page.
      • If the property exists, click the property to modify it and change the value to true.
      • If the property does not exist, click New to create the property and enter the following information:
        • Name: redirect.login.ssl
        • Value: true
        • Type: java.lang.String
   6. Locate the host.port.https property and perform one of the following options:
      • If the property exists, click the property to modify it and change the value to alias_port_for_HTTPS.
        Note: alias_port_for_HTTPS is the port number that is used for the virtual host alias (usually 443).
      • If the property does not exist, click New to create the property and enter the following information:
        • Name: host.port.https
        • Value: 443
        • Type: java.lang.String
   7. Locate the host.port.http property and perform one of the following options:
      Note: Set the host.port.http if you are using a port other than the default 80.
      • If the property exists, click the property to modify it and change the value to alias_port_for_HTTP.
        Note: alias_port_for_HTTP is the port number that is used for the virtual host alias (usually 80).
      • If the property does not exist, click New to create the property and enter the following information:
        • Name: host.port.http
        • Value: 80
        • Type: java.lang.String
   8. Click Save to save the changes to the master configuration.
   9. Log out of the WebSphere Integrated Solutions Console.
2. Complete the following steps to only encrypt the login process to WebSphere Portal Express and allow subsequent requests via HTTP:

   The Login portlet uses the UseSecureLoginActionUrl parameter to control the generation of the login action URL. Set this parameter to true to use a secure URL for login.

   1. Navigate to Administration > Portlet Management > Portlets.
   2. Search for Title start with = "Login".
   3. Select the Configure portlet icon.
   4. Edit the UseSecureLoginActionUrl parameter and set the parameter to true.