Previous Topic: Provisioning Server Pre-Installation StepsNext Topic: Install and Verify the Provisioning Server


Configure the Provisioning Server Properties File

Set the parameters for the Provisioning Server installation.

You need the following information to complete the Provisioning Server parameters.

General Information:
From the CA Directory properties file:

Follow these steps:

  1. Navigate to /tmp/properties.sh.
  2. In the properties.sh file, set the following parameters.
    _Environment

    Leave as the default, CHANGE_ME_LATER.

    _SoftwareVersion

    Leave as the default, STATIC.

    _DomainSuffix

    Set this to your network domain.

    _impd_shared_secret

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_hostname

    Host name of the system where you installed the primary CA Directory instance.

    _impd_bind_pwd

    A password which the Provisioning Server uses to connect to the Provisioning Directory. Create any password.

    Make a note of this password so you can use it later during the installation process.

    _impd_ha_hosts

    For a high-availability deployment, enter the host name of the alternate CA Directory server.

    For example, Directory2 (where the primary CA Directory server is Directory1)

    Note: If you have three or more instances of CA Directory, separate the entries with commas. For example: Directory2, Directory3.

    In a single-instance deployment, leave this parameter blank.

    _impd_root_domain_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_parent_domain_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_etaadmin_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _provisioning_server_pwd

    The Provisioning Server password. Create any password. Use the same password on all Provisioning Servers.

    Make a note of this password so you can use it later during the installation process.

    _provisioning_repository_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _connector_server_pwd

    The password used to access the CA IAM Connector Server. Create any password. This must match the password for _connector_server_pwd in the properties file you will create during CA IAM Connector Server installation.

    Make a note of this password so you can use it later during the installation process.

    _provisioning_domain

    Leave as the default value.

Important! The following six parameters are required only during CA IAM Connector Server installation. If you are currently installing the Provisioning Server, leave the following six parameters blank.

_http_proxy_enabled

Addresses whether you need a proxy to connect to the internet. Set to True if you need to enable a proxy to connect to the internet, for example, if the Provisioning Server is on a protected intranet. Set to False if the Provisioning Server has direct access to the internet and no proxy is enabled.

_http_proxy_user

The Proxy User required for authentication.

_http_proxy_pwd

The password for the Proxy User.

_http_proxy_domain

The proxy domain required for authentication.

_http_proxy_port

The proxy port required for authentication.

_http_proxy_server

The proxy server required for authentication.

_install_imps

Set to True to install the Provisioning Server.

Note: This parameter allows you to install a Provisioning Server through this installer. Set this to False to prevent a Provisioning Server from installing.

Also see the _install_jcs parameter.

_impd_skip_snapshot

Leave as the default value, false. This setting allows tenant deployment to succeed.

dir_webservices_port

Port used by Web Services. Leave as the default, 9080, unless you cannot use this port in your environment. If you must change the web services port, enter a new port number.

Note: If you must change the web services port, use the same port for web services on all servers.

_dir_webservices_username

User name for Web Services. Leave as the default, dsaweb.

_dir_webservices_password

Enter the same password you entered for _dir_webservices_password in the properties file for the first CA Directory instance.

_dir_webservices_secure_port

Port used by Web Services. Leave as the default, 9443, unless you cannot use this port in your environment. If you must change the web services port, enter a new port number.

Note: If you must change the web services port, use the same port for web services on all servers.

_imps_fips_keyfile

Leave as the default, false.

_COMP_CLASS

Leave as the default, ca_cam.directory.

_COMP_NAME

Leave as the default, main.directory.

_APP_NAME

Leave as the default, directory_server.

JAVA64_LOCATION

Location of an existing 64-bit JRE if preinstalled. Set this parameter if you choose to install your JRE separately. In this case, symbolically link /opt/java64 to your JRE.

However, instead of installing a JRE separately, the system installer can do this automatically. We recommend that you download a JRE and allow the system to install it.

See the JAVA64_KIT parameter.

JAVA64_KIT

Location of a 64-bit JRE that you download to the local system or to a file share. If this parameter is set, the server kit will install this JRE automatically.

USER_JAVA64

Leave blank for installation. This parameter is intended for upgrades, not installation.

_install_jcs

Set to False to install the Provisioning Server.

Note: This parameter allows you to install either an CA IAM Connector Server through this installer. Set this to False to prevent an CA IAM Connector Server from installing.

Also see the _install_imps parameter.

_ntp_server

IP address or host name of the NTP server to use to synchronize the server time.

_remote_imps_hostname

Enter the host name of the primary Provisioning Server system.

Note: This parameter is not needed when the Provisioning Server and CA IAM Connector Server are on the same system.

  1. Back up the properties.sh file. Rename it to a logical name, for example, provisioning1properties.sh.

    Note: This file is critical for upgrades. We recommend that you back up this file. This file contains passwords, so be sure to save it in a secure location.

    Important! The original properties.sh file resides in a temp folder. If the server is shut down, the properties.sh file is discarded. Therefore, rename and back up this file before proceeding with any further installation or use of the system.