Websphere Disable http to https redirection for Admin port

Due to some reason i am not able to access https page . When i browse the page getting below Error . Tried to check openssl connectivity still admin port doesn’t reflect certificate but App https port is working fine .Now thinking to access admin http port but it is redirecting to https due to Admin security enabled .

This page can’t be displayed

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.

please verify that you’re using the correct secure port number to access the WAS Admin Console: Open the serverindex.xml ${WAS_INSTALL_ROOT}/profiles/your_profile/config/cells/your_cell/nodes/your_node/* to determine the value of WC_adminhost_secure – the HTTPS port being used by the WAS Admin Console.

Found from the IBM documentation There is no way to enable Admin http port when security is enabled . If we disable security then any one can login to Admin console without credentials .It is not recommended for the time being to check configuration on Admin console or to make any changes we can go with this approach .

Disabling Admin security can be done in 2 ways. 1 way is by using wasadmin and 2nd way is by using manual security.xml file edit

1. <WAS_PROFILE_HOME>/bin/> wsadmin -conntype NONE
2. wsadmin> securityoff
3. wsadmin> exit
4. Restart the servers (running Java processes should be stopped)
Disable security manually
1.Go <WAS_PROFILE_HOME>/config/cells/CellName01/
2.Take backup of security.xml 
3.find enabled="true" in the file . Look for the first occurence and change to enabled="false"
Now restart the server and try to login to Admin with https  

Once security is disabled then we can investigate further .

Conclusion :There is no way to disable ssl for the admin console when security is enabled. The unsecure port can only be accessed when global security is disabled.

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *