Installing SecretStore on a NetWare Server

You can install SecretStore 3.3.3 on NetWare 5.x or later servers.

NetWare Requirements

• A NetWare 5.x or later server.
• Novell eDirectory.
• Security domain infrastructure.

  NDS^® or eDirectory must have a tree key that is properly set up. If you are running eDirectory 8.5 or later, the tree key is already set up. NetWare 5.1, later NetWare versions, and Novell Certificate Server^TM also automatically set up the tree key.

  If you are running NDS or a version of eDirectory earlier than 8.5 that is supported by SecretStore, download and install the latest Novell Certificate Server, which is available from www.novell.com\products.

• NICI 2.4 or later for a tree running Novell Directory Services^® later than 85.0.1.

  IMPORTANT:  If you install NICI 2.4 into a tree running Novell Directory Services earlier than 85.0.1, NICI services won't be available.

• The latest support pack for your NetWare version.
• Supervisor rights to the eDirectory tree.
• The target server must have a read/write replica of the partition that contains the User objects for those who will use SecretStore.

Installing the SecretStore Service on NetWare

Use command line options for loading sss.nlm. In the autoexec.ncf file, add the Load sss.nlm line before the Load nldap.nlm line.

1. Copy the \secstore directory to the server (for example, sys:\secstore).

2. From nwconfig.nlm, select Product Options > Install a Product Not Listed.

3. Select any path, then press Enter.

4. Press F3, then specify the path to the Novell SecretStore files (for example, secstore:\server\netware\).

   The sss.ips script file resides here.

5. Follow the on-screen instructions to accept the license agreement, copy files, and configure the server.

   This step does the following:

   • Installs the SecretStore service (sss.nlm, ssncp.nlm, ssldp.nlm, and lsss.nlm).
   • Extends the eDirectory schema to accommodate SecretStore objects.
   • Adds the following lines to the autoexec.ncf file (if they are not already there):
     • Load nicisdi.xlm
     • Load sasdfm.xlm
     • Load ssncp.nlm

       This NLM^TM automatically loads sss.nlm. Always place this line before the following line, if it is present:

       Load nldap.nlm

6. Exit nwconfig.nlm.

7. (Conditional) If you installed NICI as part of the installation, shut down and restart the server.

   If you are installing SecretStore on a NetWare 5.1 or later server, you can skip this step.

Synchronizing Replicas

Because NDS or eDirectory replicas influence a SecretStore server's operations, make sure that the replicas are properly synchronized. For information on synchronizing replicas, see the NetWare 6.5 Network Time Management Administration Guide.