Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual page 57

Parameter
-keystore
-storepass
-storetype
-provider
6 Take the CSR created in
encoded public certificate. The CA also needs to send you the public certificate that it used to
create the certificate and the public certificates for any CAs in the chain.
7 Load the public certificate of the CA into the keystore by entering the following command:
"c:\Program Files\Java\jdk1.5.0_14\jre\bin\java" -Dprotect=module
-DignorePassphrase=true sun.security.tools.KeyTool -import -alias
publicca –file certca.cer -keystore Amstore.jks -storetype
nCipher.sworld -provider com.ncipher.provider.km.nCipherKM
Enter your values for the following parameters:
Parameter
-Dprotect=module
-DignorePassphrase=true
sun.security.tools.KeyTool
-import
-alias
-file
-keystore
-storetype
-provider
The tool prompts you for the keystore password and asks whether you want to trust the
certificate.
8 (Conditional) Repeat Step 7
9 Import the signed certificated received from the CA by entering the following command:
Description
A name for the keystore. In this sample
configuration, the name is
The password for the keystore. In this sample
configuration, the password is mypwd.
The type of keystore. For nCipher, this must be
set to
The name of the providerClass and
providerName.
Step 5 to a certificate authority. The CA needs to send you a DER-
Description
Only required if you want the keystore to be
module protected.
Only required if you want the keystore to be
module protected.
The name of the keytool command
The parameter that makes this an import
request.
A name that helps you identify that this is the
public certificate from the CA. In this sample
configuration, the name is
The name of the CA certificate file. In this
sample configuration, the name is certca.cer.
A name for the keystore. In this sample
configuration, the name is
The type of keystore. For nCipher, this must be
set to
The name of the providerClass and
providerName.
for each CA in the chain, giving each CA a unique alias.
AMstore.jks
nCipher.sworld .
publicca
AMstore.jks
.
nCipher.sworld
Configuring an Identity Server
.
.
.
57