Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual page 86

The Access Gateway should be an unconfigured machine. If it contains reverse proxies,
delete them before continuing.
In the Administration Console, click Devices > Access Gateways > Edit > Reverse Proxies
/ Authentication. In the Reverse Proxy List, select Name, then click Delete. Update the
Access Gateway and the Identity Server.
2 In the Administration Console, click Policies > Policies.
The policies that the Access Gateway is dependent upon must be imported first.
3 (Conditional) If you have exported policies from more than one container, create the policy
containers. Click the Containers tab; in the Container List, click New, specify the name for the
container, then click OK.
4 (Conditional) If your system already contains policies, delete them if they aren't being used.
If they are in use and you have policies with the same names as the policies you are going to
import, you need to manually reconcile the duplicate policies. See
Verifying the Configuration" on page
5 In the Policy List, click Import.
6 Browse to the location of the policy configuration file, select the file, then click OK.
7 (Conditional) If you exported multiple policy configuration files, repeat
8 Enable all new Role policies. Click Identity Servers > Edit > Roles.
9 Either select Name to enable all policies or individually select the policies, then click Enable.
10 Click OK, then click Update.
11 To import the Access Gateway configuration, click Access Gateways > [Name of Access
Gateway] > Configuration > Import.
12 Browse to the location of the configuration file, select the file, enter a password if you specified
one on export, then click OK.
13 Continue with
Cleaning Up and Verifying the Configuration
1 When the configuration import has finished, verify the configuration for your reverse proxies.
1a Click Access Gateways > Edit > [Name of Reverse Proxy].
1b Verify the listening address.
This is especially important if your Access Gateway has multiple network adapters. By
default, the IP address of eth0 is always selected as the listening address.
1c Verify the certificates assigned to the reverse proxy.
The Subject Name of the certificate should match the published DNS name of the primary
proxy service in the Proxy Service List.
1d Verify the Web Server configuration. In the Proxy Service List, click the Web Server
Addresses link. Check the following values:
86 Novell Access Manager 3.1 SP2 Access Gateway Guide
"Cleaning Up and Verifying the Configuration" on page
Web Server Host Name: If this name has a staging prefix or suffix, remove it.
IP addresses in the Web Server List: If the IP addresses in the production area are
different from the IP addresses in the staging area, modify the IP addresses to match
the production area.
86.
Step 5 in "Cleaning Up and
Step 5 and Step 6.
86.