Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 53

4 (Conditional) If your Identity Server cluster configuration contains more than one Identity
Server, configure the netHSM server to allow the other Identity Servers in the cluster to be a
client.
5 At the Identity Server, enroll the client to use the server:
5a To get the ESN and hash numbers for the enroll command, enter the following command:
Linux:
/opt/nfast/bin/anonkneti <IP_address>
Windows:
C:\nfast\bin>anonkneti <IP_address>
Replace <IP_address> with the IP address of the netHSM server.
5b To enroll the client, enter the following command:
Linux:
/opt/nfast/bin/nethsmenroll -p <IP_address> <ESN> <hash>
Windows:
C:\nfast\bin>nethsmenroll -p <IP_address> <ESN> <hash>
Replace <IP_address> with the IP address of the netHSM server. Replace <ESN> and
<hash> with the values copied from the
6 (Conditional) If the Identity Server and the Administration Console are installed on the same
machine, modify the 9000 and 9001 TCP ports:
6a In a text editor, open the
Linux:
/opt/novell/devman/share/conf
Windows:
C:\Program Files\Novell\Tomcat\webapps\roma\WEB-INF\conf
6b Change the ports from 9000 and 9001 to another value, such as 9010 and 9011.
The lines should look similar to the following:
<stringParam name="ExecutorPort" value="9010" />
<stringParam name="SchedulerPort" value="9011" />
6c Save the changes.
6d Restart Tomcat:
Linux: Enter the following command:
/etc/init.d/novell-tomcat5 restart
Windows: Enter the following commands:
net stop Tomcat5
net start Tomcat5
6e (Conditional) If other Identity Servers in the cluster contain an Administration Console,
repeat Step 6.
7 At the Identity Server, enable the netHSM client so that it uses TCP:
7a Enter the following command:
Linux:
/opt/nfast/bin/config-serverstartup -sp
Windows:
C:\nfast\bin>config-serverstartup -sp
7b To restart the nfast client:
Linux: Enter the following command:
/opt/nfast/sbin/init.d-nfast restart
Windows: Enter the following commands:
anonkneti
file located in the following directory:
sc.conf
command.
Configuring an Identity Server 53