the third session from our team

1. Configure UDDI Services Security
Before you can publish a Web service, you must first create its provider.
This provider represents the group or organization that is responsible for
the service you are ready to publish and should be defined in
accordance with your publishing guidelines

2. • UDDI Publisher Authentication: Supports authenticated publications using UDDI Publisher
authentication, as defined in section 5.3 of the UDDI v3 Specification. All interaction with UDDI
Services that uses this style of authentication occurs under the http://<server name>/uddipublic
or https://<server name>/uddipublic virtual directory in IIS. The UDDI Services ASP.NET user
interface supports only anonymous searching with this authentication mode.
• Windows Authentication: Supports authenticated publications using Windows Integrated
Authentication. In this mode, any message passed to UDDI Services is authenticated based on the
security context of the user that is generated by Windows at login. All interaction with UDDI
Services that uses this type of authentication occurs under the http://<server name>/uddi or
https://<servername>/uddi virtual directory in IIS. The UDDI Services ASP.NET user interface
supports all functions with this authentication mode including searching, publishing, subscribing,
and coordination.
Authentication

3. To configure the authentication setting for a site, select one of the following:
• Windows Integrated and UDDI publisher authentication: Supports both Windows
Integrated Authentication and UDDI Publisher authentication for publications. This is the
default selection. Publication SOAP requests sent to http://<servername>/uddi or
https://<servername>/uddi should use Windows Integrated Authentication and
publication SOAP requests sent to http://<servername>/uddipublic or
https://<servername>/uddipublic should use UDDI Publisher Authentication.
• UDDI publisher authentication: Supports UDDI Publisher authentication only for
publications. If this option is selected, publication SOAP requests should be sent to
http://<servername>/uddipublic or https://<servername>/uddipublic.
• Windows Integrated publisher authentication: Supports Windows Integrated
Authentication only for publications. If this option is selected, publication SOAP requests
should be sent to http://<servername>/uddi or https://<servername>/uddi.

4. To select an authentication type
• Open UDDI Services Management Console.
• In the console tree, click the UDDI Services site that you want to
configure.
• On the Action menu, click Properties.
• Click the Security tab.
• Under Authenticated access, select the authentication type that you
want to use, and then click OK.

5. Encryption
• o enable or disable SSL
• Open UDDI Services Management Console.
• In the console tree, click the UDDI Services site that you want to configure.
• On the Action menu, click Properties.
• Click the Security tab.
• Under Secure Communications, select or clear the Require SSL for
publication requests to this site check box.
• Click OK.

7. Cryptography
• To change cryptography settings
• Open UDDI Services Management Console.
• In the console tree, click the UDDI Services site that you want to configure.
• On the Action menu, click Properties.
• Under Cryptography, click Change, and then modify one of the following:
• SOAP Authentication Token Expiration:
Use the up or down arrow to change the time, in minutes, after which tokens that are issued for publication will expire.
• Cryptography Key Timeout:
To reset the cryptography key that is used to encrypt SOAP authentication tokens now, click Reset Now.
To automatically reset the cryptography key after a certain number of days, select the Automatically reset cryptography
key check box, and then specify the number of days by using the up or down arrow.
• Click OK twice.