Installing SecretStore on a NetWare 5.x or NetWare 6 Server

The SecretStore installation program installs two server components:

• The server version of Novell International Cryptographic Infrastructure (NICI) 1.5.7 or later.
• Novell SecretStore.

Requirements

• A NetWare 5.x or NetWare 6 server.
• Novell eDirectory or NDS^® Corporate Edition.
• Security Domain Infrastructure.

  NDS or eDirectory must have a tree key that is properly set up. If you are running eDirectory 8.5 or later, the tree key is already set up. NetWare 5.1, later NetWare versions, and Novell Certificate Server automatically set up the tree key.

  If you are running NDS or a version of eDirectory earlier than 8.5, download and install the latest Novell Certificate Server, which is available from www.novell.com\products.

• The latest support pack for your NetWare version.
• Supervisor rights to the NDS or eDirectory tree on the NetWare server.
• The server must have a read/write replica of the partition that contains the User objects for those who will use SecretStore.
• For a server to correctly extend LDAP functionality to include SecretStore, the server must hold a read/write replica of the Root partition.

Installing NICI

Novell SecretStore 3.0 requires NICI 1.5.7 or later for a tree running Novell Directory Services or Novell eDirectory on NetWare. The Novell SecureLogin CD includes two versions of Server NICI.

• NICI 1.5.7

  Install NICI 1.5.7 on NetWare servers in the trees running Novell Directory Services earlier then 85.0.1.

• NICI version 2.x on Windows servers and newer NetWare servers running eDirectory 8.6x.

  Only install NICI2.x in trees running Novell eDirectory 85.0.1 or later.

  IMPORTANT:  If you install NICI 2.0 into a tree running Novell Directory Services earlier than 85.0.1, NICI services won't be available.

1. At the NetWare server, insert the Novell SecureLogin CD.

2. Mount the Novell SecureLogin CD as a NetWare volume by entering CDROM.

3. From nwconfig.nlm, select Product Options > Install a Product Not Listed.

4. (Conditional) If paths appear, select any path, then press Enter.

   If you have a new server or haven't used nwconfig.nlm to install products not listed, no paths appear.

5. Press F3 > enter the path to the NICI files (for example, nsl_30:\nici\nici_1.57).

6. Follow the on-screen instructions to accept the license agreement and copy files.

   This step adds the following line to the autoexec.ncf file:

   Load sasdfm.xlm

7. Exit nwconfig.nlm, then shut down and restart the server.

Installing the SecretStore Service

1. Mount the Novell SecureLogin CD as a NetWare volume by entering CDROM.

2. From nwconfig.nlm, select Product Options > Install a Product Not Listed.

3. Select any path, then press Enter.

4. Press F3, then enter the path to the Novell SecretStore files (for example, secstore:\server\netware\).

   The sss.ips script file resides here.

5. Follow the on-screen instructions to accept the license agreement, copy files, and configure the server.

   This step does the following:

   • Installs the SecretStore service (sss.nlm, ssncp.nlm, ssldp.nlm, and lsss.nlm).
   • Extends the NDS or eDirectory schema to accommodate SecretStore objects.
   • Adds the following lines to the autoexec.ncf file:
     • Load nicisdi.xlm
     • Load sasdfm.xlm
     • Load ssncp.nlm

       This NLM automatically loads sss.nlm. Always place this line before the following line, if it is present:

       Load nldap.nlm

6. Exit nwconfig.nlm.

7. (Conditional) Shut down and restart the server.

   If you are installing SecretStore on a NetWare 5.1 or NetWare 6 server, you can skip this step.

Synchronizing Time

Because NDS or eDirectory replicas influence a SecretStore server's operations, make sure that the replicas are properly synchronized. For information about time synchronization, see Synchronizing Time in the Novell eDirectory 8.7 Administration Guide.