Secure Cookie Attribute in WebSphere

Question

We are trying to secure our JSESSIONID in our WebSphere Full Profile I have followed the URL provided:

http://www-01.ibm.com/support/docview.wss?uid=swg21422185

Our server configuration:

Server11_was:

I have Recycled my node - servers and runtimes. However, The JSESSIONID still coming as not secure.

Am I missing something?

WebSphere version: 8.5.5.1

Answer 1

Also be sure you have the session management option to "Restrict cookies to HTTPS sessions" set. You can access this property via this admin console panel:

Servers > Server types > WebSphere application servers > server_name > Session management > Enable cookies

For more info, see this Knowledge Center article:

http://www.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/uprs_rcookie_settings.html?lang=en