### Configuring Message Security

Some of the material in this section assumes a basic understanding of security and web services concepts. For more information, see Chapter 10, "Configuring Message Security," in Sun Java System Application Server 9.1 Administration Guide and Chapter 14, "Managing Web Services," in Sun Java System Application Server 9.1 Administration Guide.

Application Server implements message security using message security providers integrated in its SOAP processing layer. The message security providers depend on other security facilities of Application Server.

Perform these tasks to configure Application Server for message security:

- To configure Application Server facilities for use by message security providers

- To configure a JCE Provider for Java EE

- To enable providers for message security

- To configure a message security provider

- Creating a Message Security Provider

- To delete a message security configuration

- To delete a message security provider

- To enable message security for application clients

- Request and Response Policy Configurations

Then use Administration Console:

- To configure Application Server facilities for use by message security providers

- To configure a JCE Provider for Java EE

- To enable providers for message security

- To configure a message security provider

- Creating a Message Security Provider

- To delete a message security configuration

- To delete a message security provider

- To enable message security for application clients

- Request and Response Policy Configurations