Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 51

Windows Server 2003:
Windows Server 2008:
The keystore is found on the netHSM client in the directory specified by the
parameter when you created the keystore. See
12 Synchronize the Identity Server with the remote file system server.
Linux: Enter the following commands:
/opt/nfast/bin/rfs-sync –-update
/opt/nfast/bin/rfs-sync –-commit
Windows: Enter the following commands:
C:\nfast\bin>rfs-sync --update
C:\nfast\bin>rfs-sync --commit
13 (Conditional) If the cluster configuration contains more than one Identity Server, complete the
following steps for each cluster member:
13a Copy the keystore to the cluster member. Copy it to the following directory:
Linux:
/opt/novell/devman/jcc/certs/idp
Windows Server 2003:
Windows Server 2008:
13b Make sure the
13c Use the netHSM client to synchronize the cluster member with the remote file system
server.
Linux: Enter the following commands:
/opt/nfast/bin/rfs-sync –-update
/opt/nfast/bin/rfs-sync –-commit
Windows: Enter the following commands:
C:\nfast\bin>rfs-sync --update
C:\nfast\bin>rfs-sync --commit
14 Continue with
"Configuring the Identity Server to Use the netHSM Certificate" on page
Configuring the Identity Server to Use the netHSM Certificate
The procedure to modify the classpath names depends upon whether you have a Linux or a
Windows Identity Server:
"Configuring a Linux Identity Server for the Certificate" on page 51

 "Configuring a Windows Identity Server for the Certificate" on page 53
Configuring a Linux Identity Server for the Certificate
1 At the Identity Server, log in as
2 Add the nfast jar files to the classpath.
Because the Identity Server runs as a Tomcat service, the following steps explain how to
modify the classpath for Tomcat.
2a In an editor, open the
\Program Files\Novell\devman\jcc\certs\idp
\Program Files (x86)\Novell\devman\jcc\certs\idp
\Program Files\Novell\devman\jcc\certs\idp
\Program Files (x86)\Novell\devman\jcc\certs\idp
user has at least read rights.
novlwww
.
root
/opt/novell/tomcat5/bin/dtomcat5
Step 4.
file.
-keystore
51.
Configuring an Identity Server 51