Administering CA Configuration Automation › Configuring Users and Role-Based Security › Install the CA EEM Security Certificate and Configure the EEM Host Property

Install the CA EEM Security Certificate and Configure the EEM Host Property

A security certificate is required to display CA EEM in the context of CA Configuration Automation. The CA EEM installation program creates the required security certificate using an unqualified host name.

The CA Configuration Automation Server installation program prompts you for the EEM Server name in the CA Embedded Entitlements Manager Configuration screen. By default, the installation program populates the EEM Server Name field with the unqualified name of the local host on which you are installing CA Configuration Automation Server. The CA Configuration Automation Server stores this default name (or whatever you enter) in the Configuration page Properties table. The product displays the following error if the entry does not match the security certificate when you try to view the Access Management tab:

Content was blocked because it was not signed by a valid security certificate.

To avoid this error, install the security certificate and configure the EEM Host property to match the certificate.

Follow these steps:

1. Click the Administration link, then click the Access Management tab.

   The error message appears in the CA Configuration Automation UI. Internet Explorer displays a yellow bar with a similar Blocked Content message at the top of your browser.

2. Click the yellow bar, then select Display Blocked Content.
3. On the CA Configuration Automation login page, enter your user name and password, then click Log In.

   The Access Management tab page opens with the CA EEM UI displayed in context.

4. Right-click anywhere in the CA EEM frame and select Properties.
5. On the Properties dialog, click Certificates.

   The Certificates dialog appears.

   Important! Note the server name in the General tab Issued To field. Enter this value exactly as it appears here in the Properties table in Step 9.

6. Click Install Certificate.
7. On the Select Certificate Store dialog, select the Trusted Root Certification Authorities certificate store, then click OK.
8. Click the Configuration tab, then click the Properties link.
9. In the Properties table, change the existing Value field value to the value of the General tab Issued To field from Step 5.
10. Press Enter.

    The new value is saved and you can use CA EEM in CA Configuration Automation to manage users and user groups.