If your version of WebSphere Application Server does not have the POODLE vulnerability fix, complete the following steps: 

Select Servers > Server Types > WebSphere Application Server . 1. 

For each IBM Content Navigator server, click the server name and select Java and Process 2. Management > Process definition > Java Virtual Machine. 

For generic JVM arguments, add the argument 3. -Dhttps.protocols=”TLSv1,TLSv1.1,TLSv1.2” . 

Save your changes. 4. 

Restart all instances of the IBM Content Navigator server. 5. 

For more information about the POODLE vulnerability, see Security Bulletin: Vulnerability in SSLv3 affects IBM WebSphere Application Server (CVE-2014-3566), found at: 

http://www.ibm.com/support/docview.wss?uid=swg21687173 

Creating a Box repository on IBM Content Navigator to connect to a Box application from one or more IBM Content Navigator desktops 

Note: In IBM Content Navigator FP7 and FP8, there are some minor issues with using IE 11, as described in step 7. 

To create a Box repository on IBM Content Navigator, complete the following steps: 

Open the IBM Content Navigator administration tool in the web client. 1. 

Click Repositories > New Repository, and select Box as the repository type. 2. 

Enter the repository name (any meaningful name). 3. 

Enable Authenticate with OAuth2 and specify authentication parameters for OAuth2 client_id 4. and OAuth2 client_secret , which you can get from the Box application General Information configuration page. When you enable this option, the OAuth2 client_id and OAuth2 client_secret are used to connect to Box from IBM Content Navigator. 

A single OAuth2 client_id cannot be shared among multiple IBM Content Navigator configurations. However, you may have multiple instances of IBM Content Navigator that share a common configuration database for HA or load balanced clustering by using the same client_id. 

If you disable this option, developer tokens that expire in 60 minutes can be used to log on to Box with any Box user ID by using the developer token as the password. Developer tokens are temporary tokens that you can generate on the Box application configuration page. 

Save the settings. The Connect button is enabled when you save the settings. 5. 

To test the new repository, click Connect and log on and authorize Box by using a valid Box user ID 6. and password. 

After a successful authorization, the authorization window and redirection message is removed, the 7. Connect button is removed, and the IBM Content Navigator information bar at the bottom of the window displays the date, time, and Box logged on user ID. (With IBM Content Navigator FP7 and FP8, when using IE 11 the window is not removed after successful authorization. Simply close the blank window and click the redirection link.) 

