In iManager, click DirXML > Overview.
Locate the driver set containing the SOAP driver, then click the driver's icon to display the DirXML Driver Overview page.
In the DirXML Driver Overview page, click the driver's icon again, then scroll to Publisher Settings.
Enter the Subscriber settings as described in Step 8.
Click Apply, then click OK.
Create a server certificate in iManager.
Export a self-signed certificate from the certificate authority in eDirectory.
Click eDirectory Administration > Modify Object.
Select your tree's certificate authority object, then click OK.
It is usually found in the Security container and is named something like TREENAME CA.Security.
Click Certificate > Self Signed Certificate.
Click Export.
When asked if you want to export the private key with the certificate, click No.
Based on the client to be accessing the Web service, select either binary DER or Base64 format for the certificate.
If the client uses a Java-based keystore or trust store, then you can choose either format.
Click Save the Exported Certificate to a File, then save it to a known location on your computer.
Import the self-signed certificate into the client's trust store.
The steps to import the certificate vary depending on the client that connects to the Publisher channel's HTTPS listener. If the client uses a typical Java keystore, you can perform the following steps to create the keystore:
Use the keytool executable that is included with any Java JDK*.
For more information on keytool, see Keytool - Key and Certificate Management Tool.
Type the following command at a command prompt:
keytool -import -file name_of_cert_file -trustcacerts -noprompt
-keystore filename -storepass password
For example:
keytool -import -file tree_ca_root.b64 -trustcacerts -noprompt -keystore dirxml.keystore -storepass novell
Configure the Publisher to use the server certificate you created in Step 1.
In iManager, click DirXML > Overview.
Locate the driver set containing the SOAP driver, then click the driver's icon to display the DirXML Driver Overview page.
In the DirXML Driver Overview page, click the driver's icon again, then scroll to Publisher Settings.
In the KMO name setting, specify the certificate nickname you used in Step 1.
Click Apply, then click OK.