Activating secure manual authentication

 

Related topics: Manual authentication Setting authentication rules for specific machines Secure manual authentication Generating keys and certificates Accepting the certificate within the client browser

1.	Stop Websense Filtering Service (see Stopping and starting Websense services).

2.	Navigate to the Websense installation directory on the Filtering Service machine (by default, C:\Program Files\Websense\bin or /opt/Websense/bin/).

3.	Locate eimserver.ini and make a backup copy of the file in another directory.

4.	Open the original INI file in a text editor.

5.	Find the [WebsenseServer] section, and then add the line:

SSLManualAuth=on

6.	Below the previous line, add the following:

SSLCertFileLoc=[path]

Replace [path] with the full path to the SSL certificate, including the certificate file name (for example, C:\secmanauth\server.crt).

7.

Also add:

SSLKeyFileLoc=[path]

Replace [path] with the full path to the SSL key, including the key file name (for example, C:\secmanauth\server.key).

8.	Save and close eimserver.ini.

9.	Start Websense Filtering Service.

After starting, Filtering Service listens for requests on the default secure HTTP port (15872).

The preceding steps ensure secure communication between the client machine and Websense software. To also secure communication between Websense software and the directory service, make sure that Use SSL is selected on the Settings > Directory Services page. See Advanced directory settings for details.