iTP Secure WebServer System Administrator's Guide (iTPWebSvr 5.1+)

Integrating the WebSafe2 Internet Security
Processor (WISP)
iTP Secure WebServer System Administrator’s Guide—522659-001
5-20
Updating the WebSafe2 Interface Driver (WID)
Configuration File
Updating the WebSafe2 Interface Driver (WID) Configuration File
An optional addition has been made to the WID configuration file that specifies the SSL
version of the WISP you are using. The syntax for that addition is one of the following:
version = SSL2
for WISPs using firmware prior to version 2611.
version = SSL3
for WISPs using firmware version 2611 or later.
For an example of WID configuration file with this addition included, see The WID
Configuration File on page 7-55.
To Configure for Additional WebSafe2 Internet
Security Processors (WISPs)
If you decide to install additional WISPs, read Adding WebSafe2 Internet Security
Processors (WISPs) to Your Configuration on page 7-54 to learn how to modify the
configuration when you add more WISPs to your iTP Secure WebServer environment.
You must stop and restart the server to use the added WISPs.
To Switch From WebSafe2 to Software Encryption
If your configuration includes WISPs, and you decide to switch to software
encryption—for example, if you want to use PCT—you must do the following:
1. Generate a new key pair and obtain a new certificate for software use; the key pair
and certificate used for WebSafe2 SSL encryption cannot be used for software
encryption. For information about generating key pairs and obtaining certificates for
software encryption, see Using the Keyadmin Utility to Manage Keys and
Certificates on page 4-7.
2. Remove or rename the httpd.websafe.config file.
3. Ensure that the httpd.config file includes httpd.stl.config and that the httpd.stl.config
file has one or more AcceptSecureTransport directives that include the options you
require.
4. Restart the iTP Secure WebServer as described in Section 6, Managing the iTP
Secure WebServer Using Scripts.