Previous Topic: CA IAM Connector Server Pre-Installation StepsNext Topic: Install and Verify the CA IAM Connector Server

Installation Guide › Server Installation › CA IAM Connector Server › Configure the CA IAM Connector Server Properties File

Configure the CA IAM Connector Server Properties File

Set the parameters for the CA IAM Connector Server installation.

You need the following information to complete the CA IAM Connector Server parameters.

General Information:
From the CA Directory properties file:
From your Provisioning Server properties file:

Follow these steps:

  1. Navigate to /tmp/properties.sh.
  2. In the properties.sh file, set the following parameters.
    _Environment

    Leave as the default, CHANGE_ME_LATER.

    _SoftwareVersion

    Leave as the default, STATIC.

    _DomainSuffix

    Set this to your network domain.

    _impd_shared_secret

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_hostname

    Host name of the system where you installed the primary CA Directory instance.

    _impd_bind_pwd

    Enter the same password you entered for _impd_bind_pwd in the properties file for the Provisioning Servers.

    _impd_ha_hosts

    For a high-availability deployment, enter the host name of the alternate CA Directory server.

    For example, Directory2 (where the primary CA Directory server is Directory1)

    Note: If you have three or more instances of CA Directory, separate the entries with commas. For example: Directory2, Directory3.

    In a single-instance deployment, leave this parameter blank.

    _impd_root_domain_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_parent_domain_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _impd_etaadmin_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _provisioning_server_pwd

    Enter the same password you entered for _provisioning_server_pwd in the properties files for the Provisioning Servers.

    _provisioning_repository_pwd

    Enter the same password you entered for _impd_shared_secret in the properties files for CA Directory.

    _connector_server_pwd

    Enter the same password you entered for _connector_server_pwd in the properties files for the Provisioning Servers.

    _provisioning_domain

    Leave as the default value.

    Note: The following six parameters are required only if you need a proxy between the CA IAM Connector Server and the internet. Otherwise, leave them blank.

    _http_proxy_enabled

    Addresses whether you need a proxy to connect to the internet. Set to True if you need to enable a proxy to connect to the internet, for example, if the Provisioning Server is on a protected intranet. Set to False if the Provisioning Server has direct access to the internet and no proxy is enabled.

    _http_proxy_user

    The Proxy User required for authentication.

    _http_proxy_pwd

    The password for the Proxy User.

    _http_proxy_domain

    The proxy domain required for authentication.

    _http_proxy_port

    The proxy port required for authentication.

    _http_proxy_server

    The proxy server required for authentication.

    _install_imps

    Set to False to install the CA IAM Connector Server.

    Note: This parameter allows you to install a Provisioning Server through this installer. Set this to False to prevent a Provisioning Server from installing.

    Also see the _install_jcs parameter.

    _impd_skip_snapshot

    Leave as the default value, false. This setting allows tenant deployment to succeed.

    dir_webservices_port

    Port used by Web Services. Leave as the default, 9080, unless you cannot use this port in your environment. If you must change the web services port, enter a new port number.

    Note: If you must change the web services port, use the same port for web services on all servers.

    _dir_webservices_username

    User name for Web Services. Leave as the default, dsaweb.

    _dir_webservices_password

    Enter the same password you entered for _dir_webservices_password in the properties file for the first CA Directory instance.

    _dir_webservices_secure_port

    Port used by Web Services. Leave as the default, 9443, unless you cannot use this port in your environment. If you must change the web services port, enter a new port number.

    Note: If you must change the web services port, use the same port for web services on all servers.

    _imps_fips_keyfile

    Leave as the default, false.

    _COMP_CLASS

    Leave as the default, ca_cam.directory.

    _COMP_NAME

    Leave as the default, main.directory.

    _APP_NAME

    Leave as the default, directory_server.

    JAVA64_LOCATION

    Location of an existing 64-bit JRE if preinstalled. Set this parameter if you choose to install your JRE separately. In this case, symbolically link /opt/java64 to your JRE.

    However, instead of installing a JRE separately, the system installer can do this automatically. We recommend that you download a JRE and allow the system to install it.

    See the JAVA64_KIT parameter.

    JAVA64_KIT

    Location of a 64-bit JRE that you download to the local system or to a file share. If this parameter is set, the server kit will install this JRE automatically.

    USER_JAVA64

    Leave blank for installation. This parameter is intended for upgrades, not installation.

    _install_jcs

    Set to True to install the CA IAM Connector Server.

    Note: This parameter allows you to install an CA IAM Connector Server through this installer. Set this to False to prevent an CA IAM Connector Server from installing.

    Also see the _install_imps parameter.

    _ntp_server

    IP address or host name of the NTP user to use to synchronize the server time.

    _remote_imps_hostname

    Enter the host name of the primary Provisioning Server system.

    Note: This parameter is not needed when the Provisioning Server and CA IAM Connector Server are on the same system.

  3. Back up the properties.sh file. Rename it to a logical name, for example, connectorserver1properties.sh.

    Note: This file is critical for upgrades. We recommend that you back up this file. This file contains passwords, so be sure to save it in a secure location.

    Important! The original properties.sh file resides in a temp folder. If the server is shut down, the properties.sh file is discarded. Therefore, rename and back up this file before proceeding with any further installation or use of the system.