The policy store could not be initialized. Failed to create the super user account

Products

• SITEMINDER

Issue/Introduction

The installation for SiteMinder Policy Server fails with the error, "The policy store could not be initialized. Failed to create the super user account"

This is a new policy store that was not setup previously and is not an import from an existing policy store.

Cause

This issue can have multiple causes, including permissions issues accessing the policy store.

Resolution

Complete the installation wizard with "Initialize Policy Store" and "Integrate IDM" both unchecked and then follow one of the documents in the links above.

The workaround is to initialize the policy store manually, for either an LDAP Configure LDAP Directory Servers as Policy, Session, and Key Stores or ODBC DB Configure ODBC Databases as Policy, Key, Session, and Audit Stores store.

 

Optional steps if Identity Manager (IDM) Integration is required:

These steps should only be followed if you plan to implement IDM integration, Integration with Symantec Identity Manager

1. Import the Symantec Identity Manager schema into the policy store.
   
   Navigate to "siteminder_home\xps\dd" (where siteminder_home is the installation directory of SiteMinder)
   Run, "XPSDDInstall IdmSmObjects.xdd"
   
   
2. A video is available that covers this topic. Integration with Symantec Identity Manager
   
   
3. Verify that the following registry setting exists on the CA SSO Policy Server:
   
   Verify that setting "ImsInstalled=8.0; REG_SZ" exists in the following location:
   HKLM\SOFTWARE\Netegrity\SiteMinder\CurrentVersion
   
   Notes:
   --If the registry path \Netegrity\SiteMinder\CurrentVersion does not exist, create it manually.
   --If you change the registry, be sure to restart the Policy Server for the changes to take effect.
   --Before you modify the registry, perform a full system backup.