How to configure an SSL connection between the Provisioning Server and Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

This document will walk you through configuring SSL to the Provisioning Server from Identity Manager

 

 

Environment

Release: CAIDMB99000-12.6.8-Identity Manager-B to B
Component:

Resolution

Provisioning Server Certificate Location:

[Provisioning Server install dir]/data/tls/server/eta2_servercert.pem

 

====================== 
Example Configuration: 
======================

 

Navigate to java installation location:
cd Java\jdk1.7.0_75\bin

 

Execute the following:

keytool -keystore "C:\Program Files\Java\jdk1.8.0_72\jre\lib\security\cacerts" -import -file "C:\Program Files (x86)\CA\Identity Manager\Provisioning Server\data\tls\server\eta2_servercert.pem" -trustcacerts -alias CAServTrusted

Shutdown and then start your application server backup.

 

====================== 
Next Steps: 
======================

 

Connect to the CA Identity Manager Management Console > Directories.

 

Export out your provisioning directory xml.

 

Make the following changes to the "secure" and "port":

<LDAP searchroot="eTNamespaceName=CommonObjects,dc=im,dc=eta" secure="true"/>

&

<Connection host="ProvisioningServerHostName" port="20390"/>