Where do you configure two-way TLS for SOAP WSC?

• A. TLS context in HTTPS listener
• B. Transport tab of WSC
• C. Keystore configuration in domain properties
• D. Security policy on API

Answer: (B)

Two-way TLS is configured on the client side of the connection to the SOAP service. For a SOAP Web Service Consumer, the TLS settings that enable mutual authentication are specified in the WSC’s transport configuration. In the Transport tab of the SOAP Web Service Consumer, you select a TLS context and provide the client keystore (containing the client certificate) and the truststore (to validate the service’s certificate). This is what enables the two-way TLS handshake when the WSC calls the SOAP service.

Using the TLS context in an HTTPS listener is for inbound connections to a service you’re hosting, not for outbound calls from a WSC. Keystore configuration in domain properties is a global server setting, not per-consumer, and a security policy on an API is about gateway-level security, not the TLS setup for a SOAP WSC.