Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 53 / 374

Configuring an Identity Server 53
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Enter your values for the following variables:
6 To restart Tomcat, enter the following command:
/etc/init.d/novell-tomcat5 restart
7 Continue with “Verifying the Use of the nCipher Key Pair” on page 55 .
Configuring a Windows Identity Server for the Certificate
1 At the Identity Server, log in as the Windows administrator.
2 Add the nfast JAR files to the classpath.
Because the Identity Server runs as a Tomcat service, the following steps explain how to
modify the classpath for Tomcat.
2a Run the
tomcat5w.exe
utility located in the following directory:
Windows Server 2003:
\Program Files\Novell\Tomcat\bin
Windows Server 2008:
\Program Files (x86)\Novell\Tomcat\bin
2b Click the Java tab.
2c In the Java Classpath text box add the following to the end of the path:
";C:\nfast\java\classes\jcetools.jar;C:\nfast\java\classes\jutils.jar
;C:\nfast\java\classes\keysafe.jar;C:\nfast\java\classes\kmcsp.jar;C:
\nfast\java\classes\kmjava.jar;C:\nfast\java\classes\nfjava.jar;C:\nf
ast\java\classes\rsaprivenc.jar;C:\nfast\java\classes\spp.jar"
2d Save your changes.
3 Add the netHSM certificate configuration lines to the
tomcat5.conf
file:
3a Run the
tomcat5w.exe
utility located in the following directory:
Windows Server 2003:
\Program Files\Novell\Tomcat\bin
Variable Value
<provider_class
> The name of the providerClass. For nCipher, this must be set to
com.ncipher.provider.km.nCipherKM .
<provider_name
> The name of the provider. For nCipher, this must be set to
nCipherKM .
<keystore_type>
The type of keystore. For nCipher, this must be set to
nCipher.sworld .
<keystore_name>
The name you specified when you created the keystore. In this
sample configuration, the name is
AMstore.jks .
<keystore_pwd>
When you use module-protected keys, the keystore password must
be null. For example:
com.novell.nidp.extern.signing.keystorePwd=
<key_alias> The alias you created for the key when you created the key. In this
sample configuration, the name is
od93 .
<key_pwd> When you use module-protected keys, the key password must be
null. For example:
com.novell.nidp.extern.signing.keyPwd=