PowerExchange for Web Services User Guide for PowerCenter

10.5.6
- 10.5.9
- 10.5.8
- 10.5.7
- 10.5.4
- 10.5
- 10.4.0

Back Next

SSL Authentication Components

PowerExchange for Web Services ensures authentication by using the Public Key Infrastructure (PKI) standard, which includes the following components:

Authentication certificate
. A digital certificate that a certificate authority provides to verify and authenticate parties in Internet communications. A certificate authority is a trusted, independent third party that issues digital certificates. Digital certificates are attachments to electronic messages, such as SOAP messages, used for security. They use public keys to encrypt messages and send authentication information. Message recipients also use public keys to verify and authenticate the sender and decode and view messages. Recipients can use these keys to send encrypted replies.

Trust store
. A file that contains authentication certificates that the PowerCenter Integration Service uses to authenticate requests from web service providers. You can store multiple authentication certificates in the trust store. By default, the trust certificates file for PowerExchange for Web Services is named ca-bundle.crt. It contains certificates issued by major, trusted certificate authorities, such as VeriSign. You can add certificates to the ca-bundle.crt file.

Client store
. A file that contains authentication certificates that the PowerCenter Integration Service sends to web service providers for authentication. You can store multiple authentication certificates in the client store. The web service provider uses the public key contained in the certificate to send an encrypted reply to the PowerCenter Integration Service. The PowerCenter Integration Service then uses its private key to decrypt the reply and respond to the web service. This process, called an SSL handshake, enables the web service provider to authenticate communication with the PowerCenter Integration Service.

During a session with a web service provider that requires authentication, the PowerCenter Integration Service and the web service provider authenticate each other using authentication certificates before either can transmit data. When a web service provider sends an authentication certificate to the PowerCenter Integration Service, the PowerCenter Integration Service verifies that the authentication certificate exists in the trust store before it authenticates the web service provider. When the PowerCenter Integration Service authenticates to a web service provider, it sends an authentication certificate from its client store.

Rename Saved Search

Table of Contents

PowerExchange for Web Services User Guide for PowerCenter

PowerExchange for Web Services User Guide for PowerCenter

SSL Authentication Components

SSL Authentication Components