Installation guide

Using Secure Sockets Layer (SSL) with an Agent
88 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004
❍ cert-file is the base-64 encoded root CA certificate file.
For more information on the
certutil utility, see the online help by entering
the following command:
certutil -H
3. To verify that the root CA certificate was installed properly in the certificate
database, enter the following command:
Agent_Install_Dir\bin\certutil -L -d cert-dir
You should see the root CA certificate added and listed in the output of the
command. See Table 3-3 on page 87 for an example of output after running the
certutil -L command.
4. Restart IIS.
Installing the Root CA Certificate on Microsoft IIS 6.0
You can use the certutil program to install the root CA certificate on Microsoft
IIS 6.0.
1. Check if thecertificatedatabase is createdornot. To do this,openthe Microsoft
Windows command line and change to the following directory:
Agent_Install_Dir\iis\cert
2. Create the certificate database if you have not already done so, using the
following command:
\Agent_Install_Dir\bin\certutil -N -d .
3. Install the root CA certificate.
\Agent_Install_Dir\bin\certutil -A -n cert-name -t "C,C,C" -d cert-dir -i cert-file
where:
❍ cert-name can be any name for this root CA certificate.
❍ cert-dir isthe directory where the certificate and key stores are located. The
location is:
Agent_Install_Dir\iis6\cert
❍ cert-file is the base-64 encoded root CA certificate file.
For more information on the certutil utility, see the online help by entering
the following command:
certutil -H