TEC Workbook - IBM

IBM Software
__6. In the list of configured rules at the bottom of the policy editor, click on the Server to Client rule
to make it the active rule in the editor.
__7. Drag an Encrypt action to the right of the sign action.
__8. Double click the encrypt action to complete its configuration.
__9. In the Configure Encrypt Action form, locate the Recipient Certificate field, then select
SoapUICryptoCert.
__10. Click the Done button.
__11. Click the Apply Policy button in the policy editor.
__12. Click the Close Window link in the upper right of the policy editor.
__13. In soapUI, click the green submit button to test your service gateway.
If you inspect the response closely, you’ll notice that the contents of the SOAP Body are completely
encrypted.
You just verified that DataPower is signing and encrypting the response. Now configure soapUI to
sign+encrypt the request, and decrypt+verify the response.
__14. In soapUI, click on the Request tab to make it the active tab.
__15. Click the Aut button to show the authorization security settings. If the soapUI log is still visible,
you may want to hide that too.
__16. For Outgoing WSS, select: SignAndEncrypt
Lab 3 - Securing XML Message Content using WS-Security Page 65