Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 49 / 374

Configuring an Identity Server 49
n
ov
do
cx (e
n)
16
Ap
ril 20
10
6 Take the CSR created in Step 5 to a certificate authority. The CA needs to send you a DER-
encoded public certificate. The CA also needs to send you the public certificate that it used to
create the certificate and the public certificates for any CAs in the chain.
7 Load the public certificate of the CA into the keystore by entering the following command:
"c:\Program Files\Java\jdk1.5.0_14\jre\bin\java" -Dprotect=module
-DignorePassphrase=true sun.security.tools.KeyTool -import -alias
publicca –file certca.cer -keystore Amstore.jks -storetype
nCipher.sworld -provider com.ncipher.provider.km.nCipherKM
Enter your values for the following parameters:
The tool prompts you for the keystore password and asks whether you want to trust the
certificate.
-keypass The password for the key. In this sample
configuration, the password is
mypwd
.
-keystore A name for the keystore. In this sample
configuration, the name is
AMstore.jks
.
-storepass The password for the keystore. In this sample
configuration, the password is
mypwd
.
-storetype The type of keystore. For nCipher, this must be
set to
nCipher.sworld
.
-provider The name of the providerClass and
providerName.
Parameter Description
-Dprotect=module Required if you want the keystore to be module
protected.
-DignorePassphrase=true Required if you want the keystore to be module
protected.
sun.security.tools.KeyTool The name of the keytool command
-import The parameter that makes this an import
request.
-alias A name that helps you identify that this is the
public certificate from the CA. In this sample
configuration, the name is
publicca .
-file The name of the CA certificate file. In this
sample configuration, the name is
certca.cer .
-keystore A name for the keystore. In this sample
configuration, the name is
AMstore.jks .
-storetype The type of keystore. For nCipher, this must be
set to
nCipher.sworld .
-provider The name of the providerClass and
providerName.
Parameter Description