1. The glassfish default server cert is a self-signed certificate and so browsers would not trust it and will pop-up things like this :
----------------------
"unable to verify the identity of home-f0045512354 as a trusted site"
issued to: common name[cn]: home-f045512354
issued by: common name[cn]: home-f045512354 etc.
---------------------
and you would have to accept it
In step 7 when you try the invocation you specified localhost in the https URL. This is again a problem and the solution is documented here :