CA Single Sign-On (SiteMinder) RSA version

book

Article ID: 17121

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) AXIOMATICS POLICY SERVER CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction



Where can I find the RSA version (which provides the RSAwithSHA1 signing algorithm) that is in use in CA Single Sign-On?

Environment

Release: ETRSWK99000-12.7-SiteMinder-Web Access Manager-SmWalker
Component:

Resolution

The RSA libraries are given in SiteMinder by the ETPKI or CAPKI installation.

 

"CA Single Sign-On uses RSA libraries through ETPKAI or CAPKI as well as directly."

https://support.ca.com/us/knowledge-base-articles.TEC1628276.html

 

Note: ETPKI has been upgraded to 5.1.0  for all components respectively.

https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/release-notes/cumulative-releases/defects-fixed-in-12-52-sp1-cr06

 

To get the version for example on Linux Policy Server 12.52SP1CR06, go to the folder :

# cd /opt/CA/siteminder/etpki-install

then read the README_FIPS.txt

# less README_FIPS.txt

 

You should see :

 

For FIPS approved cryptographic functionality, CAPKI (ETPKI r5.x) and CA-OpenSSL depend on the following RSA BSafe Crypto-C ME libraries (version 4.0.3) and signature files:

      [lib]cryptocme.[dll|so|sl]

      [lib]cryptocme.sig

      [lib]ccme_base.[dll|so|sl]       

      [lib]ccme_ecc.[dll|so|sl]        

      [lib]ccme_ecc_accel_fips.[dll|so|sl]

      [lib]ccme_error_info.[dll|so|sl]

      [lib]ccme_asym.[dll|so|sl]