Enabling secure manual authentication

Topic 50145 / Updated: 10-Jun-2010

Applies To:

Websense Web Filter 7.5 Websense Web Security 7.5

1.	Stop Filtering Service.

Windows: Use the Windows Services dialog box to stop Websense Filtering Service.

Linux: Use the /opt/Websense/WebsenseDaemonControl script to stop Filtering Service.

2.	Navigate to the Websense bin directory on the Filtering Service machine (by default, C:\Program Files\Websense\bin or /opt/Websense/bin/).

3.	Locate eimserver.ini and make a backup copy of the file in another directory.

4.	Open the original INI file in a text editor.

5.	Find the [WebsenseServer] section, and then add the line:

SSLManualAuth=on

6.	Below the previous line, add the following:

SSLCertFileLoc=<path>

Replace <path> with the full path to the SSL certificate, including the certificate file name (for example, C:Program Files\Websense\bin\server.crt).

7.

Also add:

SSLKeyFileLoc=<path>

Replace <path> with the full path to the SSL key, including the key file name (for example, /opt/Websense/bin/server.key).

8.	Save and close eimserver.ini.

9.	Use the Windows Services dialog box or WebsenseDaemonControl script to Start Filtering Service.

After starting, Filtering Service listens for requests on the default secure HTTP port (15872).

The preceding steps ensure secure communication between the client machine and Websense software. To also secure communication between Websense software and the directory service, make sure that Use SSL is selected on the Settings > General > Directory Services page in TRITON - Web Security.