Cryptographic hardware use with Tivoli Access Manager for e-Business: SSL acceleration for WebSEAL using the IBM 4960 on AIX

The most computationally expensive part of establishing an SSL session is decryption of the SSL session's public key sent to an SSL server. By offloading SSL operations to a dedicated hardware device, like the IBM 4960 SSL accelerator, customers can achieve greater performance throughput using fewer CPU cycles. This article outlines the detailed configuration steps to enable SSL acceleration for IBM Tivoli Access Manager for e-Business (TAMeB) WebSEAL using the IBM 4960 crypto card PKCS#11 interface on the IBM AIX platform.