Installation guide

Using Secure Sockets Layer (SSL) With an Agent
Chapter 2 Policy Agents on Solaris and HP-UX 49
Installing the Root CA Certificate on the Remote
Web Server
The root CA certificate that you install on the remote web server must be the same
one that is installed on the web server that runs Sun ONE Identity Server.
To Install the Root CA Certificate on Sun ONE Web Server
See the instructions for installing a root CA certificate in the documentation that
comes with the web server. Generally, you install a root CA certificate through the
web server’s Administration console.
You can access the documentation for Sun ONE Web Server 6.0 on the Internet at
the following URL:
http://docs.sun.com/source/816-5682-10/esecurty.htm#1011961
To Install the Root CA Certificate on Apache 1.3.27
You can use the certutil program to install the root CA certificate on Apache
1.3.27.
1. In C shell, at the command line, enter the following commands (assuming
/etc/apache is the directory where the apache configuration file is located):
# cd /etc/apache/cert
# setenv LD_LIBRARY_PATH
/
Agent_Install_Dir /SUNWam/agents/apache/lib:/ Agent_Install_Dir /SUNWam/agen
ts/lib:/usr/lib/mps
2. Create the necessary certificate database if you have not already done so.
# / Agent_Install_Dir /SUNWam/agents/apache/cert/certutil -N -d .
3. Install root CA certificate.
# / Agent_Install_Dir /SUNWam/agents/apache/cert/certutil -A -n cert-name
-t "C,C,C" -d cert-dir -i cert-file
In the commands above, the variables represent the following:
❍ cert-name can be any name for this root CA certificate.
❍ cert-dir is the directory where the certificate and key stores are located.