How to configure RiskMinder component at the Policy Server manually
search cancel

How to configure RiskMinder component at the Policy Server manually

book

Article ID: 36567

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

Introduction / Summary: 

The RiskMinder component at the Policy Server is configured during the Policy Server installation given that the Policy Store is already configured or is one of those servers that the Installation Wizard can setup Policy Store automatically without requiring manual steps.

However, if the Policy Store had to be configured manually, then it is not going to configure the RiskMinder component.

The following steps will guide you to configure the RiskMinder component and also show how to verify it is setup(or to check if it is not setup).

 

Instructions:

Run the "Policy Server Configuration Wizard".

DO NOT choose any features to configure. Just click "Next".

<Please see attached file for image>

 

You will be asked to enter the "Master Key".  This only accepts alphanumeric!!!

This is not Policy Store encryption Key. This is a key used by RiskMinder component.

You must keep a record of this key as you will need it in the future.

 

It asks again to set a password for the "SiteMinder" super user.

You cannot skip this part without entering a value so enter whatever password suits you. You will use that to administer the policy server.

 

If the RiskMinder Component is configured successfully, you will find the "Default_<PolicyServerMachineName>_AAS" HostConfig object.

If you do not have AdminUI installed yet you still can check from XPSExplorer.

In the following sample, the Policy Server machine name(hostname) is "TESTMC1" so you should have "Default_TESTMC1_AAS" HCO object.

<Please see attached file for image>

If you have 2 Policy Servers, then you are expected to see 2 HostConfig objects named "Default_<PolicyServerMachineName>_AAS"

If you don't have the matching number of HostConfig objects, then you will need to check the Policy Server MachineName to determine which one need to run the configuration wizard to register.

 

 

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component:

Attachments

1558722416156000036567_sktwi1f5rjvs16wfo.png get_app
1558722414039000036567_sktwi1f5rjvs16wfn.png get_app