Installation guide

Using Secure Sockets Layer (SSL) with an Agent
Chapter 3 Policy Agents on Microsoft Windows 89
4. To verify that the certificate is properly installed, at the command line, enter
the following:
\Agent_Install_Dir\bin\certutil -L -d cert-dir
You should see the root CA certificate added and listed in the output of the
command. See Table 3-3 on page 87 for an example of output after running the
certutil -L command.
5. Restart IIS.
Installing the Root CA Certificate on Apache 2.0.50
1. Go to the following directory: What is the directory for Apache 2.0.50? I’ve just
started it below?
\Agent_Install_Dir\apache\cert
2. Add the same root CA certificate that is installed on the web server that runs
SunONE Identity Serverintotheexisting certificate database.Atthecommand
line, enter the following command:
\Agent_Install_Dir\bin\certutil -A -n cert-name -t "C,C,C" -d cert-dir -i cert-file
where:
❍ cert-name can be any name for this root CA certificate.
❍ cert-dir isthe directory where the certificate and key stores are located. The
location is:
Agent_Install_Dir\apache\cert
❍ cert-file is the base-64 encoded root CA certificate file.
For more information on the certutil utility, see the online help by entering
the following command:
certutil -H
3. To verify that the root CA certificate was installed properly in the certificate
database, enter the following command:
Agent_Install_Dir\bin\certutil -L -d cert-dir -i cert-file
You should see the root CA certificate added and listed in the output of the
command. See Table 3-3 on page 87 for an example of output after running the
certutil -L command.
4. Restart Apache 2.0.50 Server