7.6 Step 6: Importing the Trusted Root Certificate

You need to import the trusted root certificate into the LDAP server’s trust database and the client’s certificate store.

7.6.1 Importing into the LDAP Server’s Trust Database

You need to import the trusted root certificate into the LDAP server’s trust database. Because the server certificate was signed by the Identity Vault’s CA, the trust database needs to be configured to trust the Identity Vault CA.

  1. In the Netscape Console, click Tasks > Certificate Setup Wizard > Next.

  2. In Select a Token, accept the default for Internal (Software).

  3. In Is the Server Certificate Already Requested and Ready to Install, select Yes.

  4. Click Next twice.

  5. In Install Certificate For dialog box, select Trusted Certificate Authority.

  6. Click Next.

  7. Select The Certificate Is Located in This File, then type the full path to the .b64 file containing the trusted root certificate.

  8. Click Next.

  9. Verify the information on the screen, then click Add.

  10. Click Done.

  11. Continue with Importing into the Client's Certificate Store.

7.6.2 Importing into the Client's Certificate Store

You need to import the trusted root certificate into a certificate store (also called a keystore) that the driver can use.

  1. Use the KeyTool class found in rt.jar.

    For example, if your public key certificate is saved as PublicKeyCert.b64 on a diskette and you want to import it into a new certificate store file named .keystore in the current directory, enter the following at the command line:

    java sun.security.tools.KeyTool -import -alias TrustedRoot -file a:\PublicKeyCert.b64

-keystore .keystore -storepass keystorepass

  2. When you are asked to trust this certificate, select Yes, then click Enter.

  3. Copy the .keystore file to any directory on the same file system that has the Identity Vault files.

  4. In iManager, select Identity Manager > Identity Manager Overview.

  5. Search for drivers.

  6. Click the LDAP Driver object, then click it again in the Identity Manager Driver Overview page.

  7. In the Keystore Path parameter, enter the complete path to the .keystore file.

  8. Continue with Step 7: Adjusting Driver Settings.